No.     Time        Source                Destination           Protocol Info
      1 0.000000    PcEngine_1b:7b:5c     Broadcast             ARP      Who has 192.168.20.1?  Tell 192.168.20.52

Frame 1 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: ARP (0x0806)
    Trailer: 000000000000000000000000000000000000
Address Resolution Protocol (request)

No.     Time        Source                Destination           Protocol Info
      2 0.000028    Toshiba_be:c5:f0      PcEngine_1b:7b:5c     ARP      192.168.20.1 is at 00:15:b7:be:c5:f0

Frame 2 (42 bytes on wire, 42 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: ARP (0x0806)
Address Resolution Protocol (reply)

No.     Time        Source                Destination           Protocol Info
      3 0.000994    192.168.20.52         192.168.20.1          DNS      Standard query A security.ubuntu.com

Frame 3 (79 bytes on wire, 79 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 65
    Identification: 0x1ed1 (7889)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x7255 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
User Datagram Protocol, Src Port: 54614 (54614), Dst Port: domain (53)
    Source port: 54614 (54614)
    Destination port: domain (53)
    Length: 45
    Checksum: 0x4ca9 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Domain Name System (query)
    Transaction ID: 0x98fd
    Flags: 0x0100 (Standard query)
    Questions: 1
    Answer RRs: 0
    Authority RRs: 0
    Additional RRs: 0
    Queries
        security.ubuntu.com: type A, class IN
            Name: security.ubuntu.com
            Type: A (Host address)
            Class: IN (0x0001)

No.     Time        Source                Destination           Protocol Info
      4 0.001050    Toshiba_be:c5:f0      Broadcast             ARP      Who has 192.168.20.52?  Tell 192.168.20.1

Frame 4 (42 bytes on wire, 42 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: ARP (0x0806)
Address Resolution Protocol (request)

No.     Time        Source                Destination           Protocol Info
      5 0.001994    PcEngine_1b:7b:5c     Toshiba_be:c5:f0      ARP      192.168.20.52 is at 00:0d:b9:1b:7b:5c

Frame 5 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: ARP (0x0806)
    Trailer: 000000000000000000000000000000000000
Address Resolution Protocol (reply)

No.     Time        Source                Destination           Protocol Info
      6 0.002008    192.168.20.1          192.168.20.52         ICMP     Destination unreachable (Port unreachable)

Frame 6 (107 bytes on wire, 107 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 93
    Identification: 0x3465 (13413)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: ICMP (0x01)
    Header checksum: 0x5cb5 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Internet Control Message Protocol

No.     Time        Source                Destination           Protocol Info
      7 0.003992    192.168.20.52         192.168.20.1          TCP      56338 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088083 TSER=0 WS=4

Frame 7 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x0a8d (2701)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x86a9 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56338 (56338), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56338 (56338)
    Destination port: http (80)
    [Stream index: 1]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x5941 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088083, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
      8 0.003995    192.168.20.52         192.168.20.1          DNS      Standard query A security.ubuntu.com

Frame 8 (79 bytes on wire, 79 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 65
    Identification: 0x1ed3 (7891)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x7253 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
User Datagram Protocol, Src Port: 39954 (39954), Dst Port: domain (53)
    Source port: 39954 (39954)
    Destination port: domain (53)
    Length: 45
    Checksum: 0x85ed [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Domain Name System (query)
    Transaction ID: 0x98fd
    Flags: 0x0100 (Standard query)
    Questions: 1
    Answer RRs: 0
    Authority RRs: 0
    Additional RRs: 0
    Queries
        security.ubuntu.com: type A, class IN
            Name: security.ubuntu.com
            Type: A (Host address)
            Class: IN (0x0001)

No.     Time        Source                Destination           Protocol Info
      9 0.004088    192.168.20.1          192.168.20.52         TCP      http > 56338 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201489 TSER=3088083

Frame 9 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x3466 (13414)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x1cd0 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56338 (56338), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56338 (56338)
    [Stream index: 1]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201489, TSecr 3088083
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     10 0.004115    192.168.20.1          192.168.20.52         ICMP     Destination unreachable (Port unreachable)

Frame 10 (107 bytes on wire, 107 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 93
    Identification: 0x3467 (13415)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: ICMP (0x01)
    Header checksum: 0x5cb3 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Internet Control Message Protocol

No.     Time        Source                Destination           Protocol Info
     11 0.004977    192.168.20.52         192.168.20.1          TCP      56338 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088083 TSER=55201489

Frame 11 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0a8e (2702)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x86b0 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56338 (56338), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56338 (56338)
    Destination port: http (80)
    [Stream index: 1]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x80b5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088083, TSecr 55201489
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     12 0.004980    192.168.20.52         192.168.20.1          DNS      Standard query A security.ubuntu.com

Frame 12 (79 bytes on wire, 79 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 65
    Identification: 0x1ed3 (7891)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x7253 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
User Datagram Protocol, Src Port: 33859 (33859), Dst Port: domain (53)
    Source port: 33859 (33859)
    Destination port: domain (53)
    Length: 45
    Checksum: 0xc5e9 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Domain Name System (query)
    Transaction ID: 0x70d0
    Flags: 0x0100 (Standard query)
    Questions: 1
    Answer RRs: 0
    Authority RRs: 0
    Additional RRs: 0
    Queries
        security.ubuntu.com: type A, class IN
            Name: security.ubuntu.com
            Type: A (Host address)
            Class: IN (0x0001)

No.     Time        Source                Destination           Protocol Info
     13 0.005072    192.168.20.1          192.168.20.52         ICMP     Destination unreachable (Port unreachable)

Frame 13 (107 bytes on wire, 107 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 93
    Identification: 0x3468 (13416)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: ICMP (0x01)
    Header checksum: 0x0000 [incorrect, should be 0x5cb2]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Internet Control Message Protocol

No.     Time        Source                Destination           Protocol Info
     14 0.005987    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy/Release.gpg HTTP/1.1 GET /G:/dists/hardy-updates/Release.gpg HTTP/1.1 

Frame 14 (352 bytes on wire, 352 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 338
    Identification: 0x0a8f (2703)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8591 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56338 (56338), Dst Port: http (80), Seq: 1, Ack: 1, Len: 286
    Source port: 56338 (56338)
    Destination port: http (80)
    [Stream index: 1]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 287    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x772a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088083, TSecr 55201489
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy/Release.gpg HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy/Release.gpg HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy/Release.gpg HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy/Release.gpg
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n
Hypertext Transfer Protocol
    GET /G:/dists/hardy-updates/Release.gpg HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy-updates/Release.gpg HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy-updates/Release.gpg HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy-updates/Release.gpg
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
     15 0.005989    192.168.20.52         192.168.20.1          DNS      Standard query A security.ubuntu.com

Frame 15 (79 bytes on wire, 79 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 65
    Identification: 0x1ed3 (7891)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x7253 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
User Datagram Protocol, Src Port: 45878 (45878), Dst Port: domain (53)
    Source port: 45878 (45878)
    Destination port: domain (53)
    Length: 45
    Checksum: 0x96f6 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Domain Name System (query)
    Transaction ID: 0x70d0
    Flags: 0x0100 (Standard query)
    Questions: 1
    Answer RRs: 0
    Authority RRs: 0
    Additional RRs: 0
    Queries
        security.ubuntu.com: type A, class IN
            Name: security.ubuntu.com
            Type: A (Host address)
            Class: IN (0x0001)

No.     Time        Source                Destination           Protocol Info
     16 0.026951    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 16 (272 bytes on wire, 272 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 258
    Identification: 0x3469 (13417)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c07]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56338 (56338), Seq: 1, Ack: 287, Len: 206
    Source port: http (80)
    Destination port: 56338 (56338)
    [Stream index: 1]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 207    (relative sequence number)]
    Acknowledgement number: 287    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xaa7a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201492, TSecr 3088083
    [SEQ/ACK analysis]
    TCP segment data (206 bytes)

No.     Time        Source                Destination           Protocol Info
     17 0.027985    192.168.20.52         192.168.20.1          TCP      56338 > http [ACK] Seq=287 Ack=207 Win=6912 Len=0 TSV=3088089 TSER=55201492

Frame 17 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0a90 (2704)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x86ae [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56338 (56338), Dst Port: http (80), Seq: 287, Ack: 207, Len: 0
    Source port: 56338 (56338)
    Destination port: http (80)
    [Stream index: 1]
    Sequence number: 287    (relative sequence number)
    Acknowledgement number: 207    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 6912 (scaled)
    Checksum: 0x7e7d [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088089, TSecr 55201492
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     18 0.028020    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 200 OK  (application/octet-stream)

Frame 18 (255 bytes on wire, 255 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 241
    Identification: 0x346a (13418)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c17]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56338 (56338), Seq: 207, Ack: 287, Len: 189
    Source port: http (80)
    Destination port: 56338 (56338)
    [Stream index: 1]
    Sequence number: 207    (relative sequence number)
    [Next sequence number: 396    (relative sequence number)]
    Acknowledgement number: 287    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xaa69 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201492, TSecr 3088089
    [SEQ/ACK analysis]
    TCP segment data (189 bytes)
[Reassembled TCP Segments (395 bytes): #16(206), #18(189)]
Hypertext Transfer Protocol
    HTTP/1.1 200 OK\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n]
            [Message: HTTP/1.1 200 OK\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 200
    Content-Type: application/octet-stream\r\n
    Content-Length: 189\r\n
    Accept-Ranges: bytes\r\n
    Content-Disposition: attachment; filename="Release.gpg";\r\n
    Last-Modified: Wed, 10 Mar 2010 20:23:34 GMT\r\n
    \r\n
Media Type
    Media Type: application/octet-stream (189 bytes)

No.     Time        Source                Destination           Protocol Info
     19 0.028979    192.168.20.52         192.168.20.1          TCP      56338 > http [ACK] Seq=287 Ack=396 Win=7984 Len=0 TSV=3088089 TSER=55201492

Frame 19 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0a91 (2705)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x86ad [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56338 (56338), Dst Port: http (80), Seq: 287, Ack: 396, Len: 0
    Source port: 56338 (56338)
    Destination port: http (80)
    [Stream index: 1]
    Sequence number: 287    (relative sequence number)
    Acknowledgement number: 396    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 7984 (scaled)
    Checksum: 0x7d7d [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088089, TSecr 55201492
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     20 0.039606    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 20 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x346b (13419)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c8a]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56338 (56338), Seq: 396, Ack: 287, Len: 73
    Source port: http (80)
    Destination port: 56338 (56338)
    [Stream index: 1]
    Sequence number: 396    (relative sequence number)
    [Next sequence number: 469    (relative sequence number)]
    Acknowledgement number: 287    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201493, TSecr 3088089
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
     21 0.039660    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 21 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x346c (13420)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x171e]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56338 (56338), Seq: 469, Ack: 287, Len: 1460
    Source port: http (80)
    Destination port: 56338 (56338)
    [Stream index: 1]
    Sequence number: 469    (relative sequence number)
    [Next sequence number: 1929    (relative sequence number)]
    Acknowledgement number: 287    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201493, TSecr 3088089
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 22]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
     22 0.039708    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 22 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x346e (13422)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1b42]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56338 (56338), Seq: 1929, Ack: 287, Len: 398
    Source port: http (80)
    Destination port: 56338 (56338)
    [Stream index: 1]
    Sequence number: 1929    (relative sequence number)
    [Next sequence number: 2327    (relative sequence number)]
    Acknowledgement number: 287    (relative ack number)
    Header length: 32 bytes
    Flags: 0x19 (FIN, PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201493, TSecr 3088089
    [SEQ/ACK analysis]
[Reassembled TCP Segments (1931 bytes): #20(73), #21(1460), #22(398)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:36 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
     23 0.039979    192.168.20.52         192.168.20.1          TCP      56338 > http [ACK] Seq=287 Ack=469 Win=7984 Len=0 TSV=3088092 TSER=55201493

Frame 23 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0a92 (2706)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x86ac [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56338 (56338), Dst Port: http (80), Seq: 287, Ack: 469, Len: 0
    Source port: 56338 (56338)
    Destination port: http (80)
    [Stream index: 1]
    Sequence number: 287    (relative sequence number)
    Acknowledgement number: 469    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 7984 (scaled)
    Checksum: 0x7d30 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088092, TSecr 55201493

No.     Time        Source                Destination           Protocol Info
     24 0.039980    192.168.20.52         192.168.20.1          TCP      56338 > http [ACK] Seq=287 Ack=1917 Win=10880 Len=0 TSV=3088092 TSER=55201493

Frame 24 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0a93 (2707)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x86ab [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56338 (56338), Dst Port: http (80), Seq: 287, Ack: 1917, Len: 0
    Source port: 56338 (56338)
    Destination port: http (80)
    [Stream index: 1]
    Sequence number: 287    (relative sequence number)
    Acknowledgement number: 1917    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10880 (scaled)
    Checksum: 0x76d3 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088092, TSecr 55201493

No.     Time        Source                Destination           Protocol Info
     25 0.039982    192.168.20.52         192.168.20.1          TCP      56338 > http [ACK] Seq=287 Ack=1929 Win=10880 Len=0 TSV=3088092 TSER=55201493

Frame 25 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0a94 (2708)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x86aa [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56338 (56338), Dst Port: http (80), Seq: 287, Ack: 1929, Len: 0
    Source port: 56338 (56338)
    Destination port: http (80)
    [Stream index: 1]
    Sequence number: 287    (relative sequence number)
    Acknowledgement number: 1929    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 10880 (scaled)
    Checksum: 0x76c7 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088092, TSecr 55201493

No.     Time        Source                Destination           Protocol Info
     26 0.042002    192.168.20.52         192.168.20.1          TCP      56338 > http [FIN, ACK] Seq=287 Ack=2328 Win=13776 Len=0 TSV=3088092 TSER=55201493

Frame 26 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0a95 (2709)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x86a9 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56338 (56338), Dst Port: http (80), Seq: 287, Ack: 2328, Len: 0
    Source port: 56338 (56338)
    Destination port: http (80)
    [Stream index: 1]
    Sequence number: 287    (relative sequence number)
    Acknowledgement number: 2328    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 13776 (scaled)
    Checksum: 0x7482 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088092, TSecr 55201493
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     27 0.042005    192.168.20.52         192.168.20.1          TCP      56339 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088092 TSER=0 WS=4

Frame 27 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x0010 (16)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x9126 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56339 (56339), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56339 (56339)
    Destination port: http (80)
    [Stream index: 5]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x4edf [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088092, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
     28 0.042056    192.168.20.1          192.168.20.52         TCP      http > 56338 [ACK] Seq=2328 Ack=288 Win=66560 Len=0 TSV=55201493 TSER=3088092

Frame 28 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x346f (13423)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1ccf]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56338 (56338), Seq: 2328, Ack: 288, Len: 0
    Source port: http (80)
    Destination port: 56338 (56338)
    [Stream index: 1]
    Sequence number: 2328    (relative sequence number)
    Acknowledgement number: 288    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201493, TSecr 3088092
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     29 0.042144    192.168.20.1          192.168.20.52         TCP      http > 56339 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201493 TSER=3088092

Frame 29 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x3470 (13424)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1cc6]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56339 (56339), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56339 (56339)
    [Stream index: 5]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201493, TSecr 3088092
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     30 0.042994    192.168.20.52         192.168.20.1          TCP      56339 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088092 TSER=55201493

Frame 30 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0011 (17)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x912d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56339 (56339), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56339 (56339)
    Destination port: http (80)
    [Stream index: 5]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x72c3 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088092, TSecr 55201493
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     31 0.042995    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy/Release HTTP/1.1 

Frame 31 (251 bytes on wire, 251 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 237
    Identification: 0x0012 (18)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x9073 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56339 (56339), Dst Port: http (80), Seq: 1, Ack: 1, Len: 185
    Source port: 56339 (56339)
    Destination port: http (80)
    [Stream index: 5]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 186    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x1ad2 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088092, TSecr 55201493
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy/Release HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy/Release HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy/Release HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy/Release
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    If-Modified-Since: Wed, 10 Mar 2010 20:23:13 GMT\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
     32 0.059745    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 32 (130 bytes on wire, 130 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 116
    Identification: 0x3471 (13425)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c8d]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56339 (56339), Seq: 1, Ack: 186, Len: 64
    Source port: http (80)
    Destination port: 56339 (56339)
    [Stream index: 5]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 65    (relative sequence number)]
    Acknowledgement number: 186    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ec [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201495, TSecr 3088092
    [SEQ/ACK analysis]
    TCP segment data (64 bytes)

No.     Time        Source                Destination           Protocol Info
     33 0.060326    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 304  

Frame 33 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3472 (13426)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1ccc]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56339 (56339), Seq: 65, Ack: 186, Len: 0
    Source port: http (80)
    Destination port: 56339 (56339)
    [Stream index: 5]
    Sequence number: 65    (relative sequence number)
    Acknowledgement number: 186    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201495, TSecr 3088092
[Reassembled TCP Segments (64 bytes): #32(64), #33(0)]
Hypertext Transfer Protocol
    HTTP/1.1 304 \r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 304 \r\n]
            [Message: HTTP/1.1 304 \r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 304
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
     34 0.060985    192.168.20.52         192.168.20.1          TCP      56339 > http [ACK] Seq=186 Ack=65 Win=5840 Len=0 TSV=3088097 TSER=55201495

Frame 34 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0013 (19)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x912b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56339 (56339), Dst Port: http (80), Seq: 186, Ack: 65, Len: 0
    Source port: 56339 (56339)
    Destination port: http (80)
    [Stream index: 5]
    Sequence number: 186    (relative sequence number)
    Acknowledgement number: 65    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x71c3 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088097, TSecr 55201495

No.     Time        Source                Destination           Protocol Info
     35 0.063011    192.168.20.52         192.168.20.1          TCP      56339 > http [FIN, ACK] Seq=186 Ack=66 Win=5840 Len=0 TSV=3088097 TSER=55201495

Frame 35 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0014 (20)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x912a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56339 (56339), Dst Port: http (80), Seq: 186, Ack: 66, Len: 0
    Source port: 56339 (56339)
    Destination port: http (80)
    [Stream index: 5]
    Sequence number: 186    (relative sequence number)
    Acknowledgement number: 66    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 5840 (scaled)
    Checksum: 0x71c1 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088097, TSecr 55201495
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     36 0.063013    192.168.20.52         192.168.20.1          TCP      56340 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088097 TSER=0 WS=4

Frame 36 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x7616 (30230)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1b20 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56340 (56340), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56340 (56340)
    Destination port: http (80)
    [Stream index: 6]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x048f [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088097, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
     37 0.063056    192.168.20.1          192.168.20.52         TCP      http > 56339 [ACK] Seq=66 Ack=187 Win=66560 Len=0 TSV=55201495 TSER=3088097

Frame 37 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3473 (13427)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1ccb]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56339 (56339), Seq: 66, Ack: 187, Len: 0
    Source port: http (80)
    Destination port: 56339 (56339)
    [Stream index: 5]
    Sequence number: 66    (relative sequence number)
    Acknowledgement number: 187    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201495, TSecr 3088097
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     38 0.063116    192.168.20.1          192.168.20.52         TCP      http > 56340 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201495 TSER=3088097

Frame 38 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x3474 (13428)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1cc2]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56340 (56340), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56340 (56340)
    [Stream index: 6]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201495, TSecr 3088097
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     39 0.063993    192.168.20.52         192.168.20.1          TCP      56340 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088098 TSER=55201495

Frame 39 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x7617 (30231)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1b27 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56340 (56340), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56340 (56340)
    Destination port: http (80)
    [Stream index: 6]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xe721 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088098, TSecr 55201495
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     40 0.063995    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy-updates/Release HTTP/1.1 

Frame 40 (259 bytes on wire, 259 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 245
    Identification: 0x7618 (30232)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1a65 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56340 (56340), Dst Port: http (80), Seq: 1, Ack: 1, Len: 193
    Source port: 56340 (56340)
    Destination port: http (80)
    [Stream index: 6]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 194    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xb89f [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088098, TSecr 55201495
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy-updates/Release HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy-updates/Release HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy-updates/Release HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy-updates/Release
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    If-Modified-Since: Thu, 18 Oct 2007 16:29:58 GMT\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
     41 0.079949    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 41 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x3475 (13429)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c80]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56340 (56340), Seq: 1, Ack: 194, Len: 73
    Source port: http (80)
    Destination port: 56340 (56340)
    [Stream index: 6]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 194    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201497, TSecr 3088098
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
     42 0.080299    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 42 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x3476 (13430)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1714]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56340 (56340), Seq: 74, Ack: 194, Len: 1460
    Source port: http (80)
    Destination port: 56340 (56340)
    [Stream index: 6]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 194    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201497, TSecr 3088098
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 47]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
     43 0.080989    192.168.20.52         192.168.20.1          TCP      56340 > http [ACK] Seq=194 Ack=74 Win=5840 Len=0 TSV=3088102 TSER=55201497

Frame 43 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x7619 (30233)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1b25 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56340 (56340), Dst Port: http (80), Seq: 194, Ack: 74, Len: 0
    Source port: 56340 (56340)
    Destination port: http (80)
    [Stream index: 6]
    Sequence number: 194    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xe611 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088102, TSecr 55201497

No.     Time        Source                Destination           Protocol Info
     44 0.080991    192.168.20.52         192.168.20.1          TCP      56340 > http [ACK] Seq=194 Ack=1522 Win=8736 Len=0 TSV=3088102 TSER=55201497

Frame 44 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x761a (30234)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1b24 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56340 (56340), Dst Port: http (80), Seq: 194, Ack: 1522, Len: 0
    Source port: 56340 (56340)
    Destination port: http (80)
    [Stream index: 6]
    Sequence number: 194    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xdfb4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088102, TSecr 55201497

No.     Time        Source                Destination           Protocol Info
     45 0.080993    192.168.20.52         192.168.20.1          TCP      56340 > http [ACK] Seq=194 Ack=1534 Win=8736 Len=0 TSV=3088102 TSER=55201497

Frame 45 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x761b (30235)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1b23 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56340 (56340), Dst Port: http (80), Seq: 194, Ack: 1534, Len: 0
    Source port: 56340 (56340)
    Destination port: http (80)
    [Stream index: 6]
    Sequence number: 194    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xdfa8 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088102, TSecr 55201497
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     46 0.083108    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 46 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x3478 (13432)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1b38]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56340 (56340), Seq: 1534, Ack: 194, Len: 398
    Source port: http (80)
    Destination port: 56340 (56340)
    [Stream index: 6]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 194    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201497, TSecr 3088102
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 47]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
     47 0.083194    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 47 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3479 (13433)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1cc5]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56340 (56340), Seq: 1932, Ack: 194, Len: 0
    Source port: http (80)
    Destination port: 56340 (56340)
    [Stream index: 6]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 194    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201497, TSecr 3088102
[Reassembled TCP Segments (1931 bytes): #41(73), #42(1460), #46(398), #47(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:36 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
     48 0.083981    192.168.20.52         192.168.20.1          TCP      56340 > http [ACK] Seq=194 Ack=1932 Win=11632 Len=0 TSV=3088103 TSER=55201497

Frame 48 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x761c (30236)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1b22 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56340 (56340), Dst Port: http (80), Seq: 194, Ack: 1932, Len: 0
    Source port: 56340 (56340)
    Destination port: http (80)
    [Stream index: 6]
    Sequence number: 194    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0xdd64 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088103, TSecr 55201497

No.     Time        Source                Destination           Protocol Info
     49 0.085989    192.168.20.52         192.168.20.1          TCP      56340 > http [FIN, ACK] Seq=194 Ack=1933 Win=11632 Len=0 TSV=3088103 TSER=55201497

Frame 49 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x761d (30237)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1b21 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56340 (56340), Dst Port: http (80), Seq: 194, Ack: 1933, Len: 0
    Source port: 56340 (56340)
    Destination port: http (80)
    [Stream index: 6]
    Sequence number: 194    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0xdd62 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088103, TSecr 55201497
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     50 0.085991    192.168.20.52         192.168.20.1          TCP      56341 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088103 TSER=0 WS=4

Frame 50 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x270a (9994)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x6a2c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56341 (56341), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56341 (56341)
    Destination port: http (80)
    [Stream index: 7]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x3357 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088103, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
     51 0.086031    192.168.20.1          192.168.20.52         TCP      http > 56340 [ACK] Seq=1933 Ack=195 Win=66560 Len=0 TSV=55201498 TSER=3088103

Frame 51 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x347a (13434)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1cc4]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56340 (56340), Seq: 1933, Ack: 195, Len: 0
    Source port: http (80)
    Destination port: 56340 (56340)
    [Stream index: 6]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 195    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201498, TSecr 3088103
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     52 0.086091    192.168.20.1          192.168.20.52         TCP      http > 56341 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201498 TSER=3088103

Frame 52 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x347b (13435)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1cbb]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56341 (56341), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56341 (56341)
    [Stream index: 7]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201498, TSecr 3088103
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     53 0.086993    192.168.20.52         192.168.20.1          TCP      56341 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088103 TSER=55201498

Frame 53 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x270b (9995)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x6a33 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56341 (56341), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56341 (56341)
    Destination port: http (80)
    [Stream index: 7]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x9f03 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088103, TSecr 55201498
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     54 0.086995    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy/main/binary-i386/Packages.bz2 HTTP/1.1 

Frame 54 (273 bytes on wire, 273 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 259
    Identification: 0x270c (9996)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x6963 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56341 (56341), Dst Port: http (80), Seq: 1, Ack: 1, Len: 207
    Source port: 56341 (56341)
    Destination port: http (80)
    [Stream index: 7]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 208    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x7070 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088103, TSecr 55201498
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy/main/binary-i386/Packages.bz2 HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy/main/binary-i386/Packages.bz2 HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy/main/binary-i386/Packages.bz2 HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy/main/binary-i386/Packages.bz2
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    If-Modified-Since: Wed, 10 Mar 2010 00:08:32 GMT\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
     55 0.115787    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 55 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x347c (13436)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c79]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56341 (56341), Seq: 1, Ack: 208, Len: 73
    Source port: http (80)
    Destination port: 56341 (56341)
    [Stream index: 7]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 208    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201501, TSecr 3088103
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
     56 0.116002    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 56 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x347d (13437)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x170d]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56341 (56341), Seq: 74, Ack: 208, Len: 1460
    Source port: http (80)
    Destination port: 56341 (56341)
    [Stream index: 7]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 208    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201501, TSecr 3088103
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 61]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
     57 0.116987    192.168.20.52         192.168.20.1          TCP      56341 > http [ACK] Seq=208 Ack=74 Win=5840 Len=0 TSV=3088111 TSER=55201501

Frame 57 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x270d (9997)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x6a31 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56341 (56341), Dst Port: http (80), Seq: 208, Ack: 74, Len: 0
    Source port: 56341 (56341)
    Destination port: http (80)
    [Stream index: 7]
    Sequence number: 208    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x9de0 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088111, TSecr 55201501

No.     Time        Source                Destination           Protocol Info
     58 0.116989    192.168.20.52         192.168.20.1          TCP      56341 > http [ACK] Seq=208 Ack=1522 Win=8736 Len=0 TSV=3088111 TSER=55201501

Frame 58 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x270e (9998)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x6a30 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56341 (56341), Dst Port: http (80), Seq: 208, Ack: 1522, Len: 0
    Source port: 56341 (56341)
    Destination port: http (80)
    [Stream index: 7]
    Sequence number: 208    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x9783 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088111, TSecr 55201501

No.     Time        Source                Destination           Protocol Info
     59 0.116990    192.168.20.52         192.168.20.1          TCP      56341 > http [ACK] Seq=208 Ack=1534 Win=8736 Len=0 TSV=3088111 TSER=55201501

Frame 59 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x270f (9999)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x6a2f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56341 (56341), Dst Port: http (80), Seq: 208, Ack: 1534, Len: 0
    Source port: 56341 (56341)
    Destination port: http (80)
    [Stream index: 7]
    Sequence number: 208    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x9777 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088111, TSecr 55201501
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     60 0.119239    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 60 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x347f (13439)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1b31]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56341 (56341), Seq: 1534, Ack: 208, Len: 398
    Source port: http (80)
    Destination port: 56341 (56341)
    [Stream index: 7]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 208    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201501, TSecr 3088111
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 61]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
     61 0.119298    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 61 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3480 (13440)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1cbe]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56341 (56341), Seq: 1932, Ack: 208, Len: 0
    Source port: http (80)
    Destination port: 56341 (56341)
    [Stream index: 7]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 208    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201501, TSecr 3088111
[Reassembled TCP Segments (1931 bytes): #55(73), #56(1460), #60(398), #61(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:36 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
     62 0.120020    192.168.20.52         192.168.20.1          TCP      56341 > http [ACK] Seq=208 Ack=1932 Win=11632 Len=0 TSV=3088112 TSER=55201501

Frame 62 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2710 (10000)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x6a2e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56341 (56341), Dst Port: http (80), Seq: 208, Ack: 1932, Len: 0
    Source port: 56341 (56341)
    Destination port: http (80)
    [Stream index: 7]
    Sequence number: 208    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0x9533 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088112, TSecr 55201501

No.     Time        Source                Destination           Protocol Info
     63 0.120985    192.168.20.52         192.168.20.1          TCP      56341 > http [FIN, ACK] Seq=208 Ack=1933 Win=11632 Len=0 TSV=3088112 TSER=55201501

Frame 63 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2711 (10001)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x6a2d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56341 (56341), Dst Port: http (80), Seq: 208, Ack: 1933, Len: 0
    Source port: 56341 (56341)
    Destination port: http (80)
    [Stream index: 7]
    Sequence number: 208    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0x9531 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088112, TSecr 55201501
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     64 0.120988    192.168.20.52         192.168.20.1          TCP      56342 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088112 TSER=0 WS=4

Frame 64 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x7591 (30097)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1ba5 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56342 (56342), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56342 (56342)
    Destination port: http (80)
    [Stream index: 8]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x0181 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088112, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
     65 0.121026    192.168.20.1          192.168.20.52         TCP      http > 56341 [ACK] Seq=1933 Ack=209 Win=66560 Len=0 TSV=55201501 TSER=3088112

Frame 65 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3481 (13441)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1cbd]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56341 (56341), Seq: 1933, Ack: 209, Len: 0
    Source port: http (80)
    Destination port: 56341 (56341)
    [Stream index: 7]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 209    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201501, TSecr 3088112
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     66 0.121086    192.168.20.1          192.168.20.52         TCP      http > 56342 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201501 TSER=3088112

Frame 66 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x3482 (13442)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1cb4]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56342 (56342), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56342 (56342)
    [Stream index: 8]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201501, TSecr 3088112
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     67 0.121988    192.168.20.52         192.168.20.1          TCP      56342 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088112 TSER=55201501

Frame 67 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x7592 (30098)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1bac [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56342 (56342), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56342 (56342)
    Destination port: http (80)
    [Stream index: 8]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x39b1 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088112, TSecr 55201501
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     68 0.121989    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy/restricted/binary-i386/Packages.bz2 HTTP/1.1 

Frame 68 (279 bytes on wire, 279 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 265
    Identification: 0x7593 (30099)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1ad6 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56342 (56342), Dst Port: http (80), Seq: 1, Ack: 1, Len: 213
    Source port: 56342 (56342)
    Destination port: http (80)
    [Stream index: 8]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 214    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xaade [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088112, TSecr 55201501
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy/restricted/binary-i386/Packages.bz2 HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy/restricted/binary-i386/Packages.bz2 HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy/restricted/binary-i386/Packages.bz2 HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy/restricted/binary-i386/Packages.bz2
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    If-Modified-Since: Fri, 19 Feb 2010 20:19:58 GMT\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
     69 0.149661    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 69 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x3483 (13443)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c72]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56342 (56342), Seq: 1, Ack: 214, Len: 73
    Source port: http (80)
    Destination port: 56342 (56342)
    [Stream index: 8]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 214    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201504, TSecr 3088112
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
     70 0.149916    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 70 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x3484 (13444)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1706]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56342 (56342), Seq: 74, Ack: 214, Len: 1460
    Source port: http (80)
    Destination port: 56342 (56342)
    [Stream index: 8]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 214    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201504, TSecr 3088112
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 75]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
     71 0.150997    192.168.20.52         192.168.20.1          TCP      56342 > http [ACK] Seq=214 Ack=74 Win=5840 Len=0 TSV=3088119 TSER=55201504

Frame 71 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x7594 (30100)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1baa [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56342 (56342), Dst Port: http (80), Seq: 214, Ack: 74, Len: 0
    Source port: 56342 (56342)
    Destination port: http (80)
    [Stream index: 8]
    Sequence number: 214    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x3889 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088119, TSecr 55201504

No.     Time        Source                Destination           Protocol Info
     72 0.150999    192.168.20.52         192.168.20.1          TCP      56342 > http [ACK] Seq=214 Ack=1522 Win=8736 Len=0 TSV=3088119 TSER=55201504

Frame 72 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x7595 (30101)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1ba9 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56342 (56342), Dst Port: http (80), Seq: 214, Ack: 1522, Len: 0
    Source port: 56342 (56342)
    Destination port: http (80)
    [Stream index: 8]
    Sequence number: 214    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x322c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088119, TSecr 55201504

No.     Time        Source                Destination           Protocol Info
     73 0.151000    192.168.20.52         192.168.20.1          TCP      56342 > http [ACK] Seq=214 Ack=1534 Win=8736 Len=0 TSV=3088119 TSER=55201504

Frame 73 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x7596 (30102)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1ba8 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56342 (56342), Dst Port: http (80), Seq: 214, Ack: 1534, Len: 0
    Source port: 56342 (56342)
    Destination port: http (80)
    [Stream index: 8]
    Sequence number: 214    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x3220 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088119, TSecr 55201504
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     74 0.153564    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 74 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x3486 (13446)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1b2a]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56342 (56342), Seq: 1534, Ack: 214, Len: 398
    Source port: http (80)
    Destination port: 56342 (56342)
    [Stream index: 8]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 214    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201504, TSecr 3088119
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 75]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
     75 0.153645    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 75 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3487 (13447)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1cb7]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56342 (56342), Seq: 1932, Ack: 214, Len: 0
    Source port: http (80)
    Destination port: 56342 (56342)
    [Stream index: 8]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 214    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201504, TSecr 3088119
[Reassembled TCP Segments (1931 bytes): #69(73), #70(1460), #74(398), #75(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:36 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
     76 0.153985    192.168.20.52         192.168.20.1          TCP      56342 > http [ACK] Seq=214 Ack=1932 Win=11632 Len=0 TSV=3088120 TSER=55201504

Frame 76 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x7597 (30103)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1ba7 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56342 (56342), Dst Port: http (80), Seq: 214, Ack: 1932, Len: 0
    Source port: 56342 (56342)
    Destination port: http (80)
    [Stream index: 8]
    Sequence number: 214    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0x2fdc [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088120, TSecr 55201504

No.     Time        Source                Destination           Protocol Info
     77 0.154989    192.168.20.52         192.168.20.1          TCP      56342 > http [FIN, ACK] Seq=214 Ack=1933 Win=11632 Len=0 TSV=3088120 TSER=55201504

Frame 77 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x7598 (30104)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x1ba6 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56342 (56342), Dst Port: http (80), Seq: 214, Ack: 1933, Len: 0
    Source port: 56342 (56342)
    Destination port: http (80)
    [Stream index: 8]
    Sequence number: 214    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0x2fda [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088120, TSecr 55201504
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     78 0.154991    192.168.20.52         192.168.20.1          TCP      56343 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088120 TSER=0 WS=4

Frame 78 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x6006 (24582)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3130 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56343 (56343), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56343 (56343)
    Destination port: http (80)
    [Stream index: 9]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0xee07 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088120, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
     79 0.155030    192.168.20.1          192.168.20.52         TCP      http > 56342 [ACK] Seq=1933 Ack=215 Win=66560 Len=0 TSV=55201505 TSER=3088120

Frame 79 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3488 (13448)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1cb6]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56342 (56342), Seq: 1933, Ack: 215, Len: 0
    Source port: http (80)
    Destination port: 56342 (56342)
    [Stream index: 8]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 215    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201505, TSecr 3088120
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     80 0.155101    192.168.20.1          192.168.20.52         TCP      http > 56343 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201505 TSER=3088120

Frame 80 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x3489 (13449)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1cad]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56343 (56343), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56343 (56343)
    [Stream index: 9]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201505, TSecr 3088120
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     81 0.155989    192.168.20.52         192.168.20.1          TCP      56343 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088121 TSER=55201505

Frame 81 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x6007 (24583)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3137 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56343 (56343), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56343 (56343)
    Destination port: http (80)
    [Stream index: 9]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x08fc [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088121, TSecr 55201505
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     82 0.155991    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy/extras/binary-i386/Packages.bz2 HTTP/1.1 

Frame 82 (225 bytes on wire, 225 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 211
    Identification: 0x6008 (24584)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3097 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56343 (56343), Dst Port: http (80), Seq: 1, Ack: 1, Len: 159
    Source port: 56343 (56343)
    Destination port: http (80)
    [Stream index: 9]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 160    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xefe3 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088121, TSecr 55201505
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy/extras/binary-i386/Packages.bz2 HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy/extras/binary-i386/Packages.bz2 HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy/extras/binary-i386/Packages.bz2 HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy/extras/binary-i386/Packages.bz2
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
     83 0.187649    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 83 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x348a (13450)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c6b]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56343 (56343), Seq: 1, Ack: 160, Len: 73
    Source port: http (80)
    Destination port: 56343 (56343)
    [Stream index: 9]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 160    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201508, TSecr 3088121
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
     84 0.187977    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 84 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x348b (13451)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x16ff]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56343 (56343), Seq: 74, Ack: 160, Len: 1460
    Source port: http (80)
    Destination port: 56343 (56343)
    [Stream index: 9]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 160    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201508, TSecr 3088121
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 89]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
     85 0.188991    192.168.20.52         192.168.20.1          TCP      56343 > http [ACK] Seq=160 Ack=74 Win=5840 Len=0 TSV=3088129 TSER=55201508

Frame 85 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x6009 (24585)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3135 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56343 (56343), Dst Port: http (80), Seq: 160, Ack: 74, Len: 0
    Source port: 56343 (56343)
    Destination port: http (80)
    [Stream index: 9]
    Sequence number: 160    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x0809 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088129, TSecr 55201508

No.     Time        Source                Destination           Protocol Info
     86 0.188993    192.168.20.52         192.168.20.1          TCP      56343 > http [ACK] Seq=160 Ack=1522 Win=8736 Len=0 TSV=3088129 TSER=55201508

Frame 86 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x600a (24586)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3134 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56343 (56343), Dst Port: http (80), Seq: 160, Ack: 1522, Len: 0
    Source port: 56343 (56343)
    Destination port: http (80)
    [Stream index: 9]
    Sequence number: 160    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x01ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088129, TSecr 55201508

No.     Time        Source                Destination           Protocol Info
     87 0.188994    192.168.20.52         192.168.20.1          TCP      56343 > http [ACK] Seq=160 Ack=1534 Win=8736 Len=0 TSV=3088129 TSER=55201508

Frame 87 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x600b (24587)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3133 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56343 (56343), Dst Port: http (80), Seq: 160, Ack: 1534, Len: 0
    Source port: 56343 (56343)
    Destination port: http (80)
    [Stream index: 9]
    Sequence number: 160    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x01a0 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088129, TSecr 55201508
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     88 0.192659    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 88 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x348d (13453)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1b23]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56343 (56343), Seq: 1534, Ack: 160, Len: 398
    Source port: http (80)
    Destination port: 56343 (56343)
    [Stream index: 9]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 160    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201508, TSecr 3088129
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 89]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
     89 0.192804    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 89 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x348e (13454)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1cb0]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56343 (56343), Seq: 1932, Ack: 160, Len: 0
    Source port: http (80)
    Destination port: 56343 (56343)
    [Stream index: 9]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 160    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201508, TSecr 3088129
[Reassembled TCP Segments (1931 bytes): #83(73), #84(1460), #88(398), #89(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:36 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
     90 0.192988    192.168.20.52         192.168.20.1          TCP      56343 > http [ACK] Seq=160 Ack=1932 Win=11632 Len=0 TSV=3088130 TSER=55201508

Frame 90 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x600c (24588)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3132 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56343 (56343), Dst Port: http (80), Seq: 160, Ack: 1932, Len: 0
    Source port: 56343 (56343)
    Destination port: http (80)
    [Stream index: 9]
    Sequence number: 160    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0xff5b [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088130, TSecr 55201508

No.     Time        Source                Destination           Protocol Info
     91 0.193997    192.168.20.52         192.168.20.1          TCP      56343 > http [FIN, ACK] Seq=160 Ack=1933 Win=11632 Len=0 TSV=3088130 TSER=55201508

Frame 91 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x600d (24589)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x3131 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56343 (56343), Dst Port: http (80), Seq: 160, Ack: 1933, Len: 0
    Source port: 56343 (56343)
    Destination port: http (80)
    [Stream index: 9]
    Sequence number: 160    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0xff59 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088130, TSecr 55201508
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     92 0.193999    192.168.20.52         192.168.20.1          TCP      56344 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088130 TSER=0 WS=4

Frame 92 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x0ede (3806)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8258 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56344 (56344), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56344 (56344)
    Destination port: http (80)
    [Stream index: 10]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x5b82 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088130, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
     93 0.194050    192.168.20.1          192.168.20.52         TCP      http > 56343 [ACK] Seq=1933 Ack=161 Win=66560 Len=0 TSV=55201508 TSER=3088130

Frame 93 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x348f (13455)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1caf]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56343 (56343), Seq: 1933, Ack: 161, Len: 0
    Source port: http (80)
    Destination port: 56343 (56343)
    [Stream index: 9]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 161    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201508, TSecr 3088130
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     94 0.194117    192.168.20.1          192.168.20.52         TCP      http > 56344 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201508 TSER=3088130

Frame 94 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x3490 (13456)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1ca6]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56344 (56344), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56344 (56344)
    [Stream index: 10]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201508, TSecr 3088130
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     95 0.194994    192.168.20.52         192.168.20.1          TCP      56344 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088130 TSER=55201508

Frame 95 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0edf (3807)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x825f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56344 (56344), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56344 (56344)
    Destination port: http (80)
    [Stream index: 10]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xaeae [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088130, TSecr 55201508
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
     96 0.194996    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy/main/source/Sources.bz2 HTTP/1.1 

Frame 96 (217 bytes on wire, 217 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 203
    Identification: 0x0ee0 (3808)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x81c7 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56344 (56344), Dst Port: http (80), Seq: 1, Ack: 1, Len: 151
    Source port: 56344 (56344)
    Destination port: http (80)
    [Stream index: 10]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 152    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xcfbe [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088130, TSecr 55201508
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy/main/source/Sources.bz2 HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy/main/source/Sources.bz2 HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy/main/source/Sources.bz2 HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy/main/source/Sources.bz2
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
     97 0.235161    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 97 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x3491 (13457)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c64]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56344 (56344), Seq: 1, Ack: 152, Len: 73
    Source port: http (80)
    Destination port: 56344 (56344)
    [Stream index: 10]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 152    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201513, TSecr 3088130
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
     98 0.235712    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 98 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x3492 (13458)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x16f8]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56344 (56344), Seq: 74, Ack: 152, Len: 1460
    Source port: http (80)
    Destination port: 56344 (56344)
    [Stream index: 10]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 152    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201513, TSecr 3088130
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 103]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
     99 0.235992    192.168.20.52         192.168.20.1          TCP      56344 > http [ACK] Seq=152 Ack=74 Win=5840 Len=0 TSV=3088141 TSER=55201513

Frame 99 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0ee1 (3809)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x825d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56344 (56344), Dst Port: http (80), Seq: 152, Ack: 74, Len: 0
    Source port: 56344 (56344)
    Destination port: http (80)
    [Stream index: 10]
    Sequence number: 152    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xadbe [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088141, TSecr 55201513

No.     Time        Source                Destination           Protocol Info
    100 0.236995    192.168.20.52         192.168.20.1          TCP      56344 > http [ACK] Seq=152 Ack=1522 Win=8736 Len=0 TSV=3088141 TSER=55201513

Frame 100 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0ee2 (3810)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x825c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56344 (56344), Dst Port: http (80), Seq: 152, Ack: 1522, Len: 0
    Source port: 56344 (56344)
    Destination port: http (80)
    [Stream index: 10]
    Sequence number: 152    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xa761 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088141, TSecr 55201513

No.     Time        Source                Destination           Protocol Info
    101 0.236998    192.168.20.52         192.168.20.1          TCP      56344 > http [ACK] Seq=152 Ack=1534 Win=8736 Len=0 TSV=3088141 TSER=55201513

Frame 101 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0ee3 (3811)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x825b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56344 (56344), Dst Port: http (80), Seq: 152, Ack: 1534, Len: 0
    Source port: 56344 (56344)
    Destination port: http (80)
    [Stream index: 10]
    Sequence number: 152    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xa755 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088141, TSecr 55201513
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    102 0.241986    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 102 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x3494 (13460)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1b1c]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56344 (56344), Seq: 1534, Ack: 152, Len: 398
    Source port: http (80)
    Destination port: 56344 (56344)
    [Stream index: 10]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 152    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201513, TSecr 3088141
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 103]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    103 0.242117    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 103 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3495 (13461)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1ca9]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56344 (56344), Seq: 1932, Ack: 152, Len: 0
    Source port: http (80)
    Destination port: 56344 (56344)
    [Stream index: 10]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 152    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201513, TSecr 3088141
[Reassembled TCP Segments (1931 bytes): #97(73), #98(1460), #102(398), #103(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:36 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    104 0.243043    192.168.20.52         192.168.20.1          TCP      56344 > http [ACK] Seq=152 Ack=1932 Win=11632 Len=0 TSV=3088142 TSER=55201513

Frame 104 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0ee4 (3812)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x825a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56344 (56344), Dst Port: http (80), Seq: 152, Ack: 1932, Len: 0
    Source port: 56344 (56344)
    Destination port: http (80)
    [Stream index: 10]
    Sequence number: 152    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0xa511 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088142, TSecr 55201513

No.     Time        Source                Destination           Protocol Info
    105 0.243046    192.168.20.52         192.168.20.1          TCP      56344 > http [FIN, ACK] Seq=152 Ack=1933 Win=11632 Len=0 TSV=3088142 TSER=55201513

Frame 105 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0ee5 (3813)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8259 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56344 (56344), Dst Port: http (80), Seq: 152, Ack: 1933, Len: 0
    Source port: 56344 (56344)
    Destination port: http (80)
    [Stream index: 10]
    Sequence number: 152    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0xa50f [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088142, TSecr 55201513
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    106 0.243047    192.168.20.52         192.168.20.1          TCP      56345 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088142 TSER=0 WS=4

Frame 106 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x09a3 (2467)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8793 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56345 (56345), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56345 (56345)
    Destination port: http (80)
    [Stream index: 11]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x5693 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088142, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    107 0.243111    192.168.20.1          192.168.20.52         TCP      http > 56344 [ACK] Seq=1933 Ack=153 Win=66560 Len=0 TSV=55201513 TSER=3088142

Frame 107 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3496 (13462)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1ca8]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56344 (56344), Seq: 1933, Ack: 153, Len: 0
    Source port: http (80)
    Destination port: 56344 (56344)
    [Stream index: 10]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 153    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201513, TSecr 3088142
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    108 0.243199    192.168.20.1          192.168.20.52         TCP      http > 56345 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201513 TSER=3088142

Frame 108 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x3497 (13463)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c9f]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56345 (56345), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56345 (56345)
    [Stream index: 11]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201513, TSecr 3088142
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    109 0.243996    192.168.20.52         192.168.20.1          TCP      56345 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088143 TSER=55201513

Frame 109 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x09a4 (2468)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x879a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56345 (56345), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56345 (56345)
    Destination port: http (80)
    [Stream index: 11]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xd9db [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088143, TSecr 55201513
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    110 0.243998    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy/restricted/source/Sources.bz2 HTTP/1.1 

Frame 110 (223 bytes on wire, 223 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 209
    Identification: 0x09a5 (2469)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x86fc [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56345 (56345), Dst Port: http (80), Seq: 1, Ack: 1, Len: 157
    Source port: 56345 (56345)
    Destination port: http (80)
    [Stream index: 11]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 158    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xb099 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088143, TSecr 55201513
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy/restricted/source/Sources.bz2 HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy/restricted/source/Sources.bz2 HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy/restricted/source/Sources.bz2 HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy/restricted/source/Sources.bz2
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    111 0.274440    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 111 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x3498 (13464)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c5d]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56345 (56345), Seq: 1, Ack: 158, Len: 73
    Source port: http (80)
    Destination port: 56345 (56345)
    [Stream index: 11]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 158    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201516, TSecr 3088143
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    112 0.274648    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 112 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x3499 (13465)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x16f1]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56345 (56345), Seq: 74, Ack: 158, Len: 1460
    Source port: http (80)
    Destination port: 56345 (56345)
    [Stream index: 11]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 158    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201516, TSecr 3088143
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 117]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    113 0.274994    192.168.20.52         192.168.20.1          TCP      56345 > http [ACK] Seq=158 Ack=74 Win=5840 Len=0 TSV=3088150 TSER=55201516

Frame 113 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x09a6 (2470)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8798 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56345 (56345), Dst Port: http (80), Seq: 158, Ack: 74, Len: 0
    Source port: 56345 (56345)
    Destination port: http (80)
    [Stream index: 11]
    Sequence number: 158    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xd8eb [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088150, TSecr 55201516

No.     Time        Source                Destination           Protocol Info
    114 0.276003    192.168.20.52         192.168.20.1          TCP      56345 > http [ACK] Seq=158 Ack=1522 Win=8736 Len=0 TSV=3088151 TSER=55201516

Frame 114 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x09a7 (2471)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8797 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56345 (56345), Dst Port: http (80), Seq: 158, Ack: 1522, Len: 0
    Source port: 56345 (56345)
    Destination port: http (80)
    [Stream index: 11]
    Sequence number: 158    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xd28d [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088151, TSecr 55201516

No.     Time        Source                Destination           Protocol Info
    115 0.276004    192.168.20.52         192.168.20.1          TCP      56345 > http [ACK] Seq=158 Ack=1534 Win=8736 Len=0 TSV=3088151 TSER=55201516

Frame 115 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x09a8 (2472)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8796 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56345 (56345), Dst Port: http (80), Seq: 158, Ack: 1534, Len: 0
    Source port: 56345 (56345)
    Destination port: http (80)
    [Stream index: 11]
    Sequence number: 158    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xd281 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088151, TSecr 55201516
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    116 0.278336    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 116 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x349b (13467)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1b15]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56345 (56345), Seq: 1534, Ack: 158, Len: 398
    Source port: http (80)
    Destination port: 56345 (56345)
    [Stream index: 11]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 158    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201517, TSecr 3088151
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 117]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    117 0.278440    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 117 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x349c (13468)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1ca2]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56345 (56345), Seq: 1932, Ack: 158, Len: 0
    Source port: http (80)
    Destination port: 56345 (56345)
    [Stream index: 11]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 158    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201517, TSecr 3088151
[Reassembled TCP Segments (1931 bytes): #111(73), #112(1460), #116(398), #117(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:36 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    118 0.278994    192.168.20.52         192.168.20.1          TCP      56345 > http [ACK] Seq=158 Ack=1932 Win=11632 Len=0 TSV=3088151 TSER=55201517

Frame 118 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x09a9 (2473)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8795 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56345 (56345), Dst Port: http (80), Seq: 158, Ack: 1932, Len: 0
    Source port: 56345 (56345)
    Destination port: http (80)
    [Stream index: 11]
    Sequence number: 158    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0xd03d [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088151, TSecr 55201517

No.     Time        Source                Destination           Protocol Info
    119 0.279999    192.168.20.52         192.168.20.1          TCP      56345 > http [FIN, ACK] Seq=158 Ack=1933 Win=11632 Len=0 TSV=3088151 TSER=55201517

Frame 119 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x09aa (2474)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8794 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56345 (56345), Dst Port: http (80), Seq: 158, Ack: 1933, Len: 0
    Source port: 56345 (56345)
    Destination port: http (80)
    [Stream index: 11]
    Sequence number: 158    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0xd03b [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088151, TSecr 55201517
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    120 0.280001    192.168.20.52         192.168.20.1          TCP      56346 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088152 TSER=0 WS=4

Frame 120 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x7b99 (31641)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x159d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56346 (56346), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56346 (56346)
    Destination port: http (80)
    [Stream index: 12]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x089f [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088152, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    121 0.280058    192.168.20.1          192.168.20.52         TCP      http > 56345 [ACK] Seq=1933 Ack=159 Win=66560 Len=0 TSV=55201517 TSER=3088151

Frame 121 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x349d (13469)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1ca1]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56345 (56345), Seq: 1933, Ack: 159, Len: 0
    Source port: http (80)
    Destination port: 56345 (56345)
    [Stream index: 11]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 159    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201517, TSecr 3088151
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    122 0.280136    192.168.20.1          192.168.20.52         TCP      http > 56346 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201517 TSER=3088152

Frame 122 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x349e (13470)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c98]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56346 (56346), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56346 (56346)
    [Stream index: 12]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201517, TSecr 3088152
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    123 0.281011    192.168.20.52         192.168.20.1          TCP      56346 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088152 TSER=55201517

Frame 123 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x7b9a (31642)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x15a4 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56346 (56346), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56346 (56346)
    Destination port: http (80)
    [Stream index: 12]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x630c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088152, TSecr 55201517
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    124 0.281013    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy/extras/source/Sources.bz2 HTTP/1.1 

Frame 124 (219 bytes on wire, 219 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 205
    Identification: 0x7b9b (31643)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x150a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56346 (56346), Dst Port: http (80), Seq: 1, Ack: 1, Len: 153
    Source port: 56346 (56346)
    Destination port: http (80)
    [Stream index: 12]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 154    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x1f8c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088152, TSecr 55201517
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy/extras/source/Sources.bz2 HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy/extras/source/Sources.bz2 HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy/extras/source/Sources.bz2 HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy/extras/source/Sources.bz2
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    125 0.318332    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 125 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x349f (13471)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c56]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56346 (56346), Seq: 1, Ack: 154, Len: 73
    Source port: http (80)
    Destination port: 56346 (56346)
    [Stream index: 12]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 154    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201521, TSecr 3088152
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    126 0.319000    192.168.20.52         192.168.20.1          TCP      56346 > http [ACK] Seq=154 Ack=74 Win=5840 Len=0 TSV=3088161 TSER=55201521

Frame 126 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x7b9c (31644)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x15a2 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56346 (56346), Dst Port: http (80), Seq: 154, Ack: 74, Len: 0
    Source port: 56346 (56346)
    Destination port: http (80)
    [Stream index: 12]
    Sequence number: 154    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x621d [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088161, TSecr 55201521
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    127 0.328620    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 127 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x34a0 (13472)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x16ea]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56346 (56346), Seq: 74, Ack: 154, Len: 1460
    Source port: http (80)
    Destination port: 56346 (56346)
    [Stream index: 12]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 154    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201522, TSecr 3088161
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 131]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    128 0.328995    192.168.20.52         192.168.20.1          TCP      56346 > http [ACK] Seq=154 Ack=1522 Win=8736 Len=0 TSV=3088164 TSER=55201522

Frame 128 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x7b9d (31645)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x15a1 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56346 (56346), Dst Port: http (80), Seq: 154, Ack: 1522, Len: 0
    Source port: 56346 (56346)
    Destination port: http (80)
    [Stream index: 12]
    Sequence number: 154    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x5bbc [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088164, TSecr 55201522

No.     Time        Source                Destination           Protocol Info
    129 0.328999    192.168.20.52         192.168.20.1          TCP      56346 > http [ACK] Seq=154 Ack=1534 Win=8736 Len=0 TSV=3088164 TSER=55201522

Frame 129 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x7b9e (31646)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x15a0 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56346 (56346), Dst Port: http (80), Seq: 154, Ack: 1534, Len: 0
    Source port: 56346 (56346)
    Destination port: http (80)
    [Stream index: 12]
    Sequence number: 154    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x5bb0 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088164, TSecr 55201522
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    130 0.331079    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 130 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x34a2 (13474)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1b0e]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56346 (56346), Seq: 1534, Ack: 154, Len: 398
    Source port: http (80)
    Destination port: 56346 (56346)
    [Stream index: 12]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 154    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201522, TSecr 3088164
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 131]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    131 0.331136    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 131 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34a3 (13475)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c9b]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56346 (56346), Seq: 1932, Ack: 154, Len: 0
    Source port: http (80)
    Destination port: 56346 (56346)
    [Stream index: 12]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 154    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201522, TSecr 3088164
[Reassembled TCP Segments (1931 bytes): #125(73), #127(1460), #130(398), #131(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:36 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    132 0.331997    192.168.20.52         192.168.20.1          TCP      56346 > http [ACK] Seq=154 Ack=1932 Win=11632 Len=0 TSV=3088165 TSER=55201522

Frame 132 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x7b9f (31647)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x159f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56346 (56346), Dst Port: http (80), Seq: 154, Ack: 1932, Len: 0
    Source port: 56346 (56346)
    Destination port: http (80)
    [Stream index: 12]
    Sequence number: 154    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0x596c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088165, TSecr 55201522

No.     Time        Source                Destination           Protocol Info
    133 0.331999    192.168.20.52         192.168.20.1          TCP      56346 > http [FIN, ACK] Seq=154 Ack=1933 Win=11632 Len=0 TSV=3088165 TSER=55201522

Frame 133 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x7ba0 (31648)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x159e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56346 (56346), Dst Port: http (80), Seq: 154, Ack: 1933, Len: 0
    Source port: 56346 (56346)
    Destination port: http (80)
    [Stream index: 12]
    Sequence number: 154    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0x596a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088165, TSecr 55201522
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    134 0.332000    192.168.20.52         192.168.20.1          TCP      56347 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088165 TSER=0 WS=4

Frame 134 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0xe4b6 (58550)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xac7f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56347 (56347), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56347 (56347)
    Destination port: http (80)
    [Stream index: 13]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x7177 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088165, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    135 0.332037    192.168.20.1          192.168.20.52         TCP      http > 56346 [ACK] Seq=1933 Ack=155 Win=66560 Len=0 TSV=55201522 TSER=3088165

Frame 135 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34a4 (13476)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c9a]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56346 (56346), Seq: 1933, Ack: 155, Len: 0
    Source port: http (80)
    Destination port: 56346 (56346)
    [Stream index: 12]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 155    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201522, TSecr 3088165
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    136 0.332100    192.168.20.1          192.168.20.52         TCP      http > 56347 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201522 TSER=3088165

Frame 136 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x34a5 (13477)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c91]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56347 (56347), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56347 (56347)
    [Stream index: 13]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201522, TSecr 3088165
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    137 0.332997    192.168.20.52         192.168.20.1          TCP      56347 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088165 TSER=55201522

Frame 137 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xe4b7 (58551)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xac86 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56347 (56347), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56347 (56347)
    Destination port: http (80)
    [Stream index: 13]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xfeb7 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088165, TSecr 55201522
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    138 0.332998    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy/universe/binary-i386/Packages.bz2 HTTP/1.1 

Frame 138 (227 bytes on wire, 227 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 213
    Identification: 0xe4b8 (58552)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xabe4 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56347 (56347), Dst Port: http (80), Seq: 1, Ack: 1, Len: 161
    Source port: 56347 (56347)
    Destination port: http (80)
    [Stream index: 13]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 162    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x693f [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088165, TSecr 55201522
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy/universe/binary-i386/Packages.bz2 HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy/universe/binary-i386/Packages.bz2 HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy/universe/binary-i386/Packages.bz2 HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy/universe/binary-i386/Packages.bz2
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    139 0.342532    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 139 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x34a6 (13478)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c4f]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56347 (56347), Seq: 1, Ack: 162, Len: 73
    Source port: http (80)
    Destination port: 56347 (56347)
    [Stream index: 13]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 162    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201523, TSecr 3088165
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    140 0.342727    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 140 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x34a7 (13479)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x16e3]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56347 (56347), Seq: 74, Ack: 162, Len: 1460
    Source port: http (80)
    Destination port: 56347 (56347)
    [Stream index: 13]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 162    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201523, TSecr 3088165
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 145]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    141 0.342995    192.168.20.52         192.168.20.1          TCP      56347 > http [ACK] Seq=162 Ack=74 Win=5840 Len=0 TSV=3088167 TSER=55201523

Frame 141 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xe4b9 (58553)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xac84 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56347 (56347), Dst Port: http (80), Seq: 162, Ack: 74, Len: 0
    Source port: 56347 (56347)
    Destination port: http (80)
    [Stream index: 13]
    Sequence number: 162    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xfdca [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088167, TSecr 55201523

No.     Time        Source                Destination           Protocol Info
    142 0.343999    192.168.20.52         192.168.20.1          TCP      56347 > http [ACK] Seq=162 Ack=1522 Win=8736 Len=0 TSV=3088168 TSER=55201523

Frame 142 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xe4ba (58554)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xac83 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56347 (56347), Dst Port: http (80), Seq: 162, Ack: 1522, Len: 0
    Source port: 56347 (56347)
    Destination port: http (80)
    [Stream index: 13]
    Sequence number: 162    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xf76c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088168, TSecr 55201523

No.     Time        Source                Destination           Protocol Info
    143 0.344001    192.168.20.52         192.168.20.1          TCP      56347 > http [ACK] Seq=162 Ack=1534 Win=8736 Len=0 TSV=3088168 TSER=55201523

Frame 143 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xe4bb (58555)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xac82 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56347 (56347), Dst Port: http (80), Seq: 162, Ack: 1534, Len: 0
    Source port: 56347 (56347)
    Destination port: http (80)
    [Stream index: 13]
    Sequence number: 162    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xf760 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088168, TSecr 55201523
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    144 0.347299    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 144 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x34a9 (13481)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1b07]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56347 (56347), Seq: 1534, Ack: 162, Len: 398
    Source port: http (80)
    Destination port: 56347 (56347)
    [Stream index: 13]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 162    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201524, TSecr 3088168
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 145]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    145 0.347379    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 145 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34aa (13482)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c94]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56347 (56347), Seq: 1932, Ack: 162, Len: 0
    Source port: http (80)
    Destination port: 56347 (56347)
    [Stream index: 13]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 162    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201524, TSecr 3088168
[Reassembled TCP Segments (1931 bytes): #139(73), #140(1460), #144(398), #145(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:36 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    146 0.347997    192.168.20.52         192.168.20.1          TCP      56347 > http [ACK] Seq=162 Ack=1932 Win=11632 Len=0 TSV=3088169 TSER=55201524

Frame 146 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xe4bc (58556)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xac81 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56347 (56347), Dst Port: http (80), Seq: 162, Ack: 1932, Len: 0
    Source port: 56347 (56347)
    Destination port: http (80)
    [Stream index: 13]
    Sequence number: 162    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0xf51b [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088169, TSecr 55201524

No.     Time        Source                Destination           Protocol Info
    147 0.349007    192.168.20.52         192.168.20.1          TCP      56347 > http [FIN, ACK] Seq=162 Ack=1933 Win=11632 Len=0 TSV=3088169 TSER=55201524

Frame 147 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xe4bd (58557)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xac80 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56347 (56347), Dst Port: http (80), Seq: 162, Ack: 1933, Len: 0
    Source port: 56347 (56347)
    Destination port: http (80)
    [Stream index: 13]
    Sequence number: 162    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0xf519 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088169, TSecr 55201524
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    148 0.349010    192.168.20.52         192.168.20.1          TCP      56348 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088169 TSER=0 WS=4

Frame 148 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x8665 (34405)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0ad1 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56348 (56348), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56348 (56348)
    Destination port: http (80)
    [Stream index: 14]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0xd319 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088169, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    149 0.349080    192.168.20.1          192.168.20.52         TCP      http > 56347 [ACK] Seq=1933 Ack=163 Win=66560 Len=0 TSV=55201524 TSER=3088169

Frame 149 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34ab (13483)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c93]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56347 (56347), Seq: 1933, Ack: 163, Len: 0
    Source port: http (80)
    Destination port: 56347 (56347)
    [Stream index: 13]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 163    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201524, TSecr 3088169
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    150 0.349177    192.168.20.1          192.168.20.52         TCP      http > 56348 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201524 TSER=3088169

Frame 150 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x34ac (13484)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c8a]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56348 (56348), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56348 (56348)
    [Stream index: 14]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201524, TSecr 3088169
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    151 0.349998    192.168.20.52         192.168.20.1          TCP      56348 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088169 TSER=55201524

Frame 151 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x8666 (34406)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0ad8 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56348 (56348), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56348 (56348)
    Destination port: http (80)
    [Stream index: 14]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xb168 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088169, TSecr 55201524
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    152 0.350000    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy/universe/source/Sources.bz2 HTTP/1.1 

Frame 152 (221 bytes on wire, 221 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 207
    Identification: 0x8667 (34407)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0a3c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56348 (56348), Dst Port: http (80), Seq: 1, Ack: 1, Len: 155
    Source port: 56348 (56348)
    Destination port: http (80)
    [Stream index: 14]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 156    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xf187 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088169, TSecr 55201524
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy/universe/source/Sources.bz2 HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy/universe/source/Sources.bz2 HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy/universe/source/Sources.bz2 HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy/universe/source/Sources.bz2
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    153 0.364475    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 153 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x34ad (13485)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c48]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56348 (56348), Seq: 1, Ack: 156, Len: 73
    Source port: http (80)
    Destination port: 56348 (56348)
    [Stream index: 14]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 156    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201525, TSecr 3088169
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    154 0.364709    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 154 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x34ae (13486)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x16dc]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56348 (56348), Seq: 74, Ack: 156, Len: 1460
    Source port: http (80)
    Destination port: 56348 (56348)
    [Stream index: 14]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 156    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201525, TSecr 3088169
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 159]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    155 0.364997    192.168.20.52         192.168.20.1          TCP      56348 > http [ACK] Seq=156 Ack=74 Win=5840 Len=0 TSV=3088173 TSER=55201525

Frame 155 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x8668 (34408)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0ad6 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56348 (56348), Dst Port: http (80), Seq: 156, Ack: 74, Len: 0
    Source port: 56348 (56348)
    Destination port: http (80)
    [Stream index: 14]
    Sequence number: 156    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xb07f [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088173, TSecr 55201525

No.     Time        Source                Destination           Protocol Info
    156 0.366020    192.168.20.52         192.168.20.1          TCP      56348 > http [ACK] Seq=156 Ack=1522 Win=8736 Len=0 TSV=3088173 TSER=55201525

Frame 156 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x8669 (34409)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0ad5 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56348 (56348), Dst Port: http (80), Seq: 156, Ack: 1522, Len: 0
    Source port: 56348 (56348)
    Destination port: http (80)
    [Stream index: 14]
    Sequence number: 156    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xaa22 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088173, TSecr 55201525

No.     Time        Source                Destination           Protocol Info
    157 0.366022    192.168.20.52         192.168.20.1          TCP      56348 > http [ACK] Seq=156 Ack=1534 Win=8736 Len=0 TSV=3088173 TSER=55201525

Frame 157 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x866a (34410)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0ad4 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56348 (56348), Dst Port: http (80), Seq: 156, Ack: 1534, Len: 0
    Source port: 56348 (56348)
    Destination port: http (80)
    [Stream index: 14]
    Sequence number: 156    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xaa16 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088173, TSecr 55201525
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    158 0.367329    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 158 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x34b0 (13488)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1b00]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56348 (56348), Seq: 1534, Ack: 156, Len: 398
    Source port: http (80)
    Destination port: 56348 (56348)
    [Stream index: 14]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 156    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201526, TSecr 3088173
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 159]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    159 0.367392    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 159 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34b1 (13489)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c8d]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56348 (56348), Seq: 1932, Ack: 156, Len: 0
    Source port: http (80)
    Destination port: 56348 (56348)
    [Stream index: 14]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 156    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201526, TSecr 3088173
[Reassembled TCP Segments (1931 bytes): #153(73), #154(1460), #158(398), #159(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:36 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    160 0.367997    192.168.20.52         192.168.20.1          TCP      56348 > http [ACK] Seq=156 Ack=1932 Win=11632 Len=0 TSV=3088174 TSER=55201526

Frame 160 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x866b (34411)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0ad3 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56348 (56348), Dst Port: http (80), Seq: 156, Ack: 1932, Len: 0
    Source port: 56348 (56348)
    Destination port: http (80)
    [Stream index: 14]
    Sequence number: 156    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0xa7d1 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088174, TSecr 55201526

No.     Time        Source                Destination           Protocol Info
    161 0.368996    192.168.20.52         192.168.20.1          TCP      56348 > http [FIN, ACK] Seq=156 Ack=1933 Win=11632 Len=0 TSV=3088174 TSER=55201526

Frame 161 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x866c (34412)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0ad2 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56348 (56348), Dst Port: http (80), Seq: 156, Ack: 1933, Len: 0
    Source port: 56348 (56348)
    Destination port: http (80)
    [Stream index: 14]
    Sequence number: 156    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0xa7cf [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088174, TSecr 55201526
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    162 0.368998    192.168.20.52         192.168.20.1          TCP      56349 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088174 TSER=0 WS=4

Frame 162 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x260e (9742)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x6b28 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56349 (56349), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56349 (56349)
    Destination port: http (80)
    [Stream index: 15]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x3376 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088174, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    163 0.369026    192.168.20.1          192.168.20.52         TCP      http > 56348 [ACK] Seq=1933 Ack=157 Win=66560 Len=0 TSV=55201526 TSER=3088174

Frame 163 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34b2 (13490)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c8c]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56348 (56348), Seq: 1933, Ack: 157, Len: 0
    Source port: http (80)
    Destination port: 56348 (56348)
    [Stream index: 14]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 157    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201526, TSecr 3088174
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    164 0.369084    192.168.20.1          192.168.20.52         TCP      http > 56349 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201526 TSER=3088174

Frame 164 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x34b3 (13491)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c83]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56349 (56349), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56349 (56349)
    [Stream index: 15]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201526, TSecr 3088174
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    165 0.369997    192.168.20.52         192.168.20.1          TCP      56349 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088174 TSER=55201526

Frame 165 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x260f (9743)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x6b2f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56349 (56349), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56349 (56349)
    Destination port: http (80)
    [Stream index: 15]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xfc04 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088174, TSecr 55201526
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    166 0.369999    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy/multiverse/binary-i386/Packages.bz2 HTTP/1.1 

Frame 166 (229 bytes on wire, 229 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 215
    Identification: 0x2610 (9744)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x6a8b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56349 (56349), Dst Port: http (80), Seq: 1, Ack: 1, Len: 163
    Source port: 56349 (56349)
    Destination port: http (80)
    [Stream index: 15]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 164    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x020f [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088174, TSecr 55201526
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy/multiverse/binary-i386/Packages.bz2 HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy/multiverse/binary-i386/Packages.bz2 HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy/multiverse/binary-i386/Packages.bz2 HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy/multiverse/binary-i386/Packages.bz2
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    167 0.386665    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 167 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x34b4 (13492)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c41]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56349 (56349), Seq: 1, Ack: 164, Len: 73
    Source port: http (80)
    Destination port: 56349 (56349)
    [Stream index: 15]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 164    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201528, TSecr 3088174
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    168 0.386831    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 168 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x34b5 (13493)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x16d5]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56349 (56349), Seq: 74, Ack: 164, Len: 1460
    Source port: http (80)
    Destination port: 56349 (56349)
    [Stream index: 15]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 164    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201528, TSecr 3088174
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 173]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    169 0.388004    192.168.20.52         192.168.20.1          TCP      56349 > http [ACK] Seq=164 Ack=74 Win=5840 Len=0 TSV=3088178 TSER=55201528

Frame 169 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2611 (9745)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x6b2d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56349 (56349), Dst Port: http (80), Seq: 164, Ack: 74, Len: 0
    Source port: 56349 (56349)
    Destination port: http (80)
    [Stream index: 15]
    Sequence number: 164    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xfb12 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088178, TSecr 55201528

No.     Time        Source                Destination           Protocol Info
    170 0.388007    192.168.20.52         192.168.20.1          TCP      56349 > http [ACK] Seq=164 Ack=1522 Win=8736 Len=0 TSV=3088179 TSER=55201528

Frame 170 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2612 (9746)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x6b2c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56349 (56349), Dst Port: http (80), Seq: 164, Ack: 1522, Len: 0
    Source port: 56349 (56349)
    Destination port: http (80)
    [Stream index: 15]
    Sequence number: 164    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xf4b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088179, TSecr 55201528

No.     Time        Source                Destination           Protocol Info
    171 0.388008    192.168.20.52         192.168.20.1          TCP      56349 > http [ACK] Seq=164 Ack=1534 Win=8736 Len=0 TSV=3088179 TSER=55201528

Frame 171 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2613 (9747)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x6b2b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56349 (56349), Dst Port: http (80), Seq: 164, Ack: 1534, Len: 0
    Source port: 56349 (56349)
    Destination port: http (80)
    [Stream index: 15]
    Sequence number: 164    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xf4a8 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088179, TSecr 55201528
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    172 0.389583    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 172 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x34b7 (13495)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1af9]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56349 (56349), Seq: 1534, Ack: 164, Len: 398
    Source port: http (80)
    Destination port: 56349 (56349)
    [Stream index: 15]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 164    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201528, TSecr 3088179
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 173]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    173 0.389637    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 173 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34b8 (13496)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c86]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56349 (56349), Seq: 1932, Ack: 164, Len: 0
    Source port: http (80)
    Destination port: 56349 (56349)
    [Stream index: 15]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 164    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201528, TSecr 3088179
[Reassembled TCP Segments (1931 bytes): #167(73), #168(1460), #172(398), #173(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:36 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    174 0.389997    192.168.20.52         192.168.20.1          TCP      56349 > http [ACK] Seq=164 Ack=1932 Win=11632 Len=0 TSV=3088179 TSER=55201528

Frame 174 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2614 (9748)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x6b2a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56349 (56349), Dst Port: http (80), Seq: 164, Ack: 1932, Len: 0
    Source port: 56349 (56349)
    Destination port: http (80)
    [Stream index: 15]
    Sequence number: 164    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0xf265 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088179, TSecr 55201528

No.     Time        Source                Destination           Protocol Info
    175 0.391000    192.168.20.52         192.168.20.1          TCP      56349 > http [FIN, ACK] Seq=164 Ack=1933 Win=11632 Len=0 TSV=3088179 TSER=55201528

Frame 175 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2615 (9749)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x6b29 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56349 (56349), Dst Port: http (80), Seq: 164, Ack: 1933, Len: 0
    Source port: 56349 (56349)
    Destination port: http (80)
    [Stream index: 15]
    Sequence number: 164    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0xf263 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088179, TSecr 55201528
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    176 0.391002    192.168.20.52         192.168.20.1          TCP      56350 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088179 TSER=0 WS=4

Frame 176 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x4ff9 (20473)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x413d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56350 (56350), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56350 (56350)
    Destination port: http (80)
    [Stream index: 16]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x1ba4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088179, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    177 0.391036    192.168.20.1          192.168.20.52         TCP      http > 56349 [ACK] Seq=1933 Ack=165 Win=66560 Len=0 TSV=55201528 TSER=3088179

Frame 177 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34b9 (13497)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c85]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56349 (56349), Seq: 1933, Ack: 165, Len: 0
    Source port: http (80)
    Destination port: 56349 (56349)
    [Stream index: 15]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 165    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201528, TSecr 3088179
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    178 0.391100    192.168.20.1          192.168.20.52         TCP      http > 56350 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201528 TSER=3088179

Frame 178 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x34ba (13498)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c7c]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56350 (56350), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56350 (56350)
    [Stream index: 16]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201528, TSecr 3088179
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    179 0.392000    192.168.20.52         192.168.20.1          TCP      56350 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088180 TSER=55201528

Frame 179 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x4ffa (20474)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x4144 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56350 (56350), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56350 (56350)
    Destination port: http (80)
    [Stream index: 16]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x68ce [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088180, TSecr 55201528
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    180 0.392002    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy/multiverse/source/Sources.bz2 HTTP/1.1 

Frame 180 (223 bytes on wire, 223 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 209
    Identification: 0x4ffb (20475)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x40a6 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56350 (56350), Dst Port: http (80), Seq: 1, Ack: 1, Len: 157
    Source port: 56350 (56350)
    Destination port: http (80)
    [Stream index: 16]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 158    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x4470 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088180, TSecr 55201528
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy/multiverse/source/Sources.bz2 HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy/multiverse/source/Sources.bz2 HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy/multiverse/source/Sources.bz2 HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy/multiverse/source/Sources.bz2
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    181 0.403785    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 181 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x34bb (13499)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c3a]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56350 (56350), Seq: 1, Ack: 158, Len: 73
    Source port: http (80)
    Destination port: 56350 (56350)
    [Stream index: 16]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 158    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201529, TSecr 3088180
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    182 0.405012    192.168.20.52         192.168.20.1          TCP      56350 > http [ACK] Seq=158 Ack=74 Win=5840 Len=0 TSV=3088183 TSER=55201529

Frame 182 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x4ffc (20476)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x4142 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56350 (56350), Dst Port: http (80), Seq: 158, Ack: 74, Len: 0
    Source port: 56350 (56350)
    Destination port: http (80)
    [Stream index: 16]
    Sequence number: 158    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x67e4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088183, TSecr 55201529
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    183 0.405108    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 183 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x34bc (13500)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x16ce]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56350 (56350), Seq: 74, Ack: 158, Len: 1460
    Source port: http (80)
    Destination port: 56350 (56350)
    [Stream index: 16]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 158    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201530, TSecr 3088183
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 187]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    184 0.406003    192.168.20.52         192.168.20.1          TCP      56350 > http [ACK] Seq=158 Ack=1522 Win=8736 Len=0 TSV=3088183 TSER=55201530

Frame 184 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x4ffd (20477)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x4141 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56350 (56350), Dst Port: http (80), Seq: 158, Ack: 1522, Len: 0
    Source port: 56350 (56350)
    Destination port: http (80)
    [Stream index: 16]
    Sequence number: 158    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x6186 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088183, TSecr 55201530

No.     Time        Source                Destination           Protocol Info
    185 0.406005    192.168.20.52         192.168.20.1          TCP      56350 > http [ACK] Seq=158 Ack=1534 Win=8736 Len=0 TSV=3088183 TSER=55201530

Frame 185 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x4ffe (20478)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x4140 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56350 (56350), Dst Port: http (80), Seq: 158, Ack: 1534, Len: 0
    Source port: 56350 (56350)
    Destination port: http (80)
    [Stream index: 16]
    Sequence number: 158    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x617a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088183, TSecr 55201530
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    186 0.407848    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 186 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x34be (13502)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1af2]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56350 (56350), Seq: 1534, Ack: 158, Len: 398
    Source port: http (80)
    Destination port: 56350 (56350)
    [Stream index: 16]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 158    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201530, TSecr 3088183
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 187]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    187 0.407922    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 187 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34bf (13503)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c7f]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56350 (56350), Seq: 1932, Ack: 158, Len: 0
    Source port: http (80)
    Destination port: 56350 (56350)
    [Stream index: 16]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 158    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201530, TSecr 3088183
[Reassembled TCP Segments (1931 bytes): #181(73), #183(1460), #186(398), #187(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:36 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    188 0.409003    192.168.20.52         192.168.20.1          TCP      56350 > http [ACK] Seq=158 Ack=1932 Win=11632 Len=0 TSV=3088184 TSER=55201530

Frame 188 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x4fff (20479)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x413f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56350 (56350), Dst Port: http (80), Seq: 158, Ack: 1932, Len: 0
    Source port: 56350 (56350)
    Destination port: http (80)
    [Stream index: 16]
    Sequence number: 158    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0x5f36 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088184, TSecr 55201530

No.     Time        Source                Destination           Protocol Info
    189 0.409004    192.168.20.52         192.168.20.1          TCP      56350 > http [FIN, ACK] Seq=158 Ack=1933 Win=11632 Len=0 TSV=3088184 TSER=55201530

Frame 189 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x5000 (20480)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x413e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56350 (56350), Dst Port: http (80), Seq: 158, Ack: 1933, Len: 0
    Source port: 56350 (56350)
    Destination port: http (80)
    [Stream index: 16]
    Sequence number: 158    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0x5f34 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088184, TSecr 55201530
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    190 0.409006    192.168.20.52         192.168.20.1          TCP      56351 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088184 TSER=0 WS=4

Frame 190 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0xc027 (49191)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xd10e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56351 (56351), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56351 (56351)
    Destination port: http (80)
    [Stream index: 17]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x8dde [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088184, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    191 0.409061    192.168.20.1          192.168.20.52         TCP      http > 56350 [ACK] Seq=1933 Ack=159 Win=66560 Len=0 TSV=55201530 TSER=3088184

Frame 191 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34c0 (13504)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c7e]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56350 (56350), Seq: 1933, Ack: 159, Len: 0
    Source port: http (80)
    Destination port: 56350 (56350)
    [Stream index: 16]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 159    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201530, TSecr 3088184
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    192 0.409154    192.168.20.1          192.168.20.52         TCP      http > 56351 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201530 TSER=3088184

Frame 192 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x34c1 (13505)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c75]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56351 (56351), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56351 (56351)
    [Stream index: 17]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201530, TSecr 3088184
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    193 0.410004    192.168.20.52         192.168.20.1          TCP      56351 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088184 TSER=55201530

Frame 193 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xc028 (49192)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xd115 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56351 (56351), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56351 (56351)
    Destination port: http (80)
    [Stream index: 17]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x1dca [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088184, TSecr 55201530
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    194 0.410007    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy-updates/main/binary-i386/Packages.bz2 HTTP/1.1 

Frame 194 (231 bytes on wire, 231 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 217
    Identification: 0xc029 (49193)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xd06f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56351 (56351), Dst Port: http (80), Seq: 1, Ack: 1, Len: 165
    Source port: 56351 (56351)
    Destination port: http (80)
    [Stream index: 17]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 166    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xa7d5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088184, TSecr 55201530
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy-updates/main/binary-i386/Packages.bz2 HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy-updates/main/binary-i386/Packages.bz2 HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy-updates/main/binary-i386/Packages.bz2 HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy-updates/main/binary-i386/Packages.bz2
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    195 0.425361    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 195 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x34c2 (13506)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c33]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56351 (56351), Seq: 1, Ack: 166, Len: 73
    Source port: http (80)
    Destination port: 56351 (56351)
    [Stream index: 17]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 166    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201532, TSecr 3088184
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    196 0.425589    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 196 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x34c3 (13507)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x16c7]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56351 (56351), Seq: 74, Ack: 166, Len: 1460
    Source port: http (80)
    Destination port: 56351 (56351)
    [Stream index: 17]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 166    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201532, TSecr 3088184
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 201]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    197 0.426001    192.168.20.52         192.168.20.1          TCP      56351 > http [ACK] Seq=166 Ack=74 Win=5840 Len=0 TSV=3088188 TSER=55201532

Frame 197 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xc02a (49194)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xd113 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56351 (56351), Dst Port: http (80), Seq: 166, Ack: 74, Len: 0
    Source port: 56351 (56351)
    Destination port: http (80)
    [Stream index: 17]
    Sequence number: 166    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x1cd6 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088188, TSecr 55201532

No.     Time        Source                Destination           Protocol Info
    198 0.427005    192.168.20.52         192.168.20.1          TCP      56351 > http [ACK] Seq=166 Ack=1522 Win=8736 Len=0 TSV=3088188 TSER=55201532

Frame 198 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xc02b (49195)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xd112 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56351 (56351), Dst Port: http (80), Seq: 166, Ack: 1522, Len: 0
    Source port: 56351 (56351)
    Destination port: http (80)
    [Stream index: 17]
    Sequence number: 166    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x1679 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088188, TSecr 55201532

No.     Time        Source                Destination           Protocol Info
    199 0.427007    192.168.20.52         192.168.20.1          TCP      56351 > http [ACK] Seq=166 Ack=1534 Win=8736 Len=0 TSV=3088188 TSER=55201532

Frame 199 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xc02c (49196)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xd111 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56351 (56351), Dst Port: http (80), Seq: 166, Ack: 1534, Len: 0
    Source port: 56351 (56351)
    Destination port: http (80)
    [Stream index: 17]
    Sequence number: 166    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x166d [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088188, TSecr 55201532
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    200 0.427950    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 200 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x34c5 (13509)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1aeb]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56351 (56351), Seq: 1534, Ack: 166, Len: 398
    Source port: http (80)
    Destination port: 56351 (56351)
    [Stream index: 17]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 166    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201532, TSecr 3088188
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 201]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    201 0.428141    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 201 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34c6 (13510)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c78]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56351 (56351), Seq: 1932, Ack: 166, Len: 0
    Source port: http (80)
    Destination port: 56351 (56351)
    [Stream index: 17]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 166    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201532, TSecr 3088188
[Reassembled TCP Segments (1931 bytes): #195(73), #196(1460), #200(398), #201(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:36 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    202 0.429038    192.168.20.52         192.168.20.1          TCP      56351 > http [ACK] Seq=166 Ack=1932 Win=11632 Len=0 TSV=3088189 TSER=55201532

Frame 202 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xc02d (49197)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xd110 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56351 (56351), Dst Port: http (80), Seq: 166, Ack: 1932, Len: 0
    Source port: 56351 (56351)
    Destination port: http (80)
    [Stream index: 17]
    Sequence number: 166    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0x1429 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088189, TSecr 55201532

No.     Time        Source                Destination           Protocol Info
    203 0.429040    192.168.20.52         192.168.20.1          TCP      56351 > http [FIN, ACK] Seq=166 Ack=1933 Win=11632 Len=0 TSV=3088189 TSER=55201532

Frame 203 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xc02e (49198)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xd10f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56351 (56351), Dst Port: http (80), Seq: 166, Ack: 1933, Len: 0
    Source port: 56351 (56351)
    Destination port: http (80)
    [Stream index: 17]
    Sequence number: 166    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0x1427 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088189, TSecr 55201532
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    204 0.429041    192.168.20.52         192.168.20.1          TCP      56352 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088189 TSER=0 WS=4

Frame 204 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0xf79a (63386)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x999b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56352 (56352), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56352 (56352)
    Destination port: http (80)
    [Stream index: 18]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x83cb [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088189, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    205 0.429079    192.168.20.1          192.168.20.52         TCP      http > 56351 [ACK] Seq=1933 Ack=167 Win=66560 Len=0 TSV=55201532 TSER=3088189

Frame 205 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34c7 (13511)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c77]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56351 (56351), Seq: 1933, Ack: 167, Len: 0
    Source port: http (80)
    Destination port: 56351 (56351)
    [Stream index: 17]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 167    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201532, TSecr 3088189
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    206 0.429140    192.168.20.1          192.168.20.52         TCP      http > 56352 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201532 TSER=3088189

Frame 206 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x34c8 (13512)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c6e]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56352 (56352), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56352 (56352)
    [Stream index: 18]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201532, TSecr 3088189
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    207 0.429999    192.168.20.52         192.168.20.1          TCP      56352 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088189 TSER=55201532

Frame 207 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xf79b (63387)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x99a2 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56352 (56352), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56352 (56352)
    Destination port: http (80)
    [Stream index: 18]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xb25b [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088189, TSecr 55201532
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    208 0.430000    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy-updates/restricted/binary-i386/Packages.bz2 HTTP/1.1 

Frame 208 (237 bytes on wire, 237 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 223
    Identification: 0xf79c (63388)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x98f6 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56352 (56352), Dst Port: http (80), Seq: 1, Ack: 1, Len: 171
    Source port: 56352 (56352)
    Destination port: http (80)
    [Stream index: 18]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 172    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xf214 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088189, TSecr 55201532
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy-updates/restricted/binary-i386/Packages.bz2 HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy-updates/restricted/binary-i386/Packages.bz2 HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy-updates/restricted/binary-i386/Packages.bz2 HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy-updates/restricted/binary-i386/Packages.bz2
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    209 0.438635    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 209 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x34c9 (13513)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c2c]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56352 (56352), Seq: 1, Ack: 172, Len: 73
    Source port: http (80)
    Destination port: 56352 (56352)
    [Stream index: 18]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 172    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201533, TSecr 3088189
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    210 0.438855    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 210 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x34ca (13514)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x16c0]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56352 (56352), Seq: 74, Ack: 172, Len: 1460
    Source port: http (80)
    Destination port: 56352 (56352)
    [Stream index: 18]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 172    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201533, TSecr 3088189
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 215]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    211 0.439001    192.168.20.52         192.168.20.1          TCP      56352 > http [ACK] Seq=172 Ack=74 Win=5840 Len=0 TSV=3088191 TSER=55201533

Frame 211 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xf79d (63389)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x99a0 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56352 (56352), Dst Port: http (80), Seq: 172, Ack: 74, Len: 0
    Source port: 56352 (56352)
    Destination port: http (80)
    [Stream index: 18]
    Sequence number: 172    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xb164 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088191, TSecr 55201533

No.     Time        Source                Destination           Protocol Info
    212 0.440003    192.168.20.52         192.168.20.1          TCP      56352 > http [ACK] Seq=172 Ack=1522 Win=8736 Len=0 TSV=3088192 TSER=55201533

Frame 212 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xf79e (63390)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x999f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56352 (56352), Dst Port: http (80), Seq: 172, Ack: 1522, Len: 0
    Source port: 56352 (56352)
    Destination port: http (80)
    [Stream index: 18]
    Sequence number: 172    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xab06 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088192, TSecr 55201533

No.     Time        Source                Destination           Protocol Info
    213 0.440004    192.168.20.52         192.168.20.1          TCP      56352 > http [ACK] Seq=172 Ack=1534 Win=8736 Len=0 TSV=3088192 TSER=55201533

Frame 213 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xf79f (63391)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x999e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56352 (56352), Dst Port: http (80), Seq: 172, Ack: 1534, Len: 0
    Source port: 56352 (56352)
    Destination port: http (80)
    [Stream index: 18]
    Sequence number: 172    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xaafa [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088192, TSecr 55201533
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    214 0.441390    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 214 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x34cc (13516)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1ae4]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56352 (56352), Seq: 1534, Ack: 172, Len: 398
    Source port: http (80)
    Destination port: 56352 (56352)
    [Stream index: 18]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 172    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201533, TSecr 3088192
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 215]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    215 0.441460    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 215 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34cd (13517)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c71]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56352 (56352), Seq: 1932, Ack: 172, Len: 0
    Source port: http (80)
    Destination port: 56352 (56352)
    [Stream index: 18]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 172    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201533, TSecr 3088192
[Reassembled TCP Segments (1931 bytes): #209(73), #210(1460), #214(398), #215(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:36 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    216 0.442004    192.168.20.52         192.168.20.1          TCP      56352 > http [ACK] Seq=172 Ack=1932 Win=11632 Len=0 TSV=3088192 TSER=55201533

Frame 216 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xf7a0 (63392)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x999d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56352 (56352), Dst Port: http (80), Seq: 172, Ack: 1932, Len: 0
    Source port: 56352 (56352)
    Destination port: http (80)
    [Stream index: 18]
    Sequence number: 172    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0xa8b7 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088192, TSecr 55201533

No.     Time        Source                Destination           Protocol Info
    217 0.443050    192.168.20.52         192.168.20.1          TCP      56352 > http [FIN, ACK] Seq=172 Ack=1933 Win=11632 Len=0 TSV=3088192 TSER=55201533

Frame 217 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xf7a1 (63393)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x999c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56352 (56352), Dst Port: http (80), Seq: 172, Ack: 1933, Len: 0
    Source port: 56352 (56352)
    Destination port: http (80)
    [Stream index: 18]
    Sequence number: 172    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0xa8b5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088192, TSecr 55201533
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    218 0.443053    192.168.20.52         192.168.20.1          TCP      56353 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088192 TSER=0 WS=4

Frame 218 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x3526 (13606)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x5c10 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56353 (56353), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56353 (56353)
    Destination port: http (80)
    [Stream index: 19]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x4271 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088192, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    219 0.443113    192.168.20.1          192.168.20.52         TCP      http > 56352 [ACK] Seq=1933 Ack=173 Win=66560 Len=0 TSV=55201533 TSER=3088192

Frame 219 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34ce (13518)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c70]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56352 (56352), Seq: 1933, Ack: 173, Len: 0
    Source port: http (80)
    Destination port: 56352 (56352)
    [Stream index: 18]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 173    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201533, TSecr 3088192
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    220 0.443192    192.168.20.1          192.168.20.52         TCP      http > 56353 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201533 TSER=3088192

Frame 220 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x34cf (13519)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c67]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56353 (56353), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56353 (56353)
    [Stream index: 19]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201533, TSecr 3088192
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    221 0.444002    192.168.20.52         192.168.20.1          TCP      56353 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088193 TSER=55201533

Frame 221 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3527 (13607)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x5c17 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56353 (56353), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56353 (56353)
    Destination port: http (80)
    [Stream index: 19]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x358e [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088193, TSecr 55201533
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    222 0.444003    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy-updates/extras/binary-i386/Packages.bz2 HTTP/1.1 

Frame 222 (233 bytes on wire, 233 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 219
    Identification: 0x3528 (13608)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x5b6f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56353 (56353), Dst Port: http (80), Seq: 1, Ack: 1, Len: 167
    Source port: 56353 (56353)
    Destination port: http (80)
    [Stream index: 19]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 168    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x5b09 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088193, TSecr 55201533
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy-updates/extras/binary-i386/Packages.bz2 HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy-updates/extras/binary-i386/Packages.bz2 HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy-updates/extras/binary-i386/Packages.bz2 HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy-updates/extras/binary-i386/Packages.bz2
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    223 0.453446    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 223 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x34d0 (13520)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c25]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56353 (56353), Seq: 1, Ack: 168, Len: 73
    Source port: http (80)
    Destination port: 56353 (56353)
    [Stream index: 19]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 168    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201534, TSecr 3088193
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    224 0.453693    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 224 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x34d1 (13521)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x16b9]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56353 (56353), Seq: 74, Ack: 168, Len: 1460
    Source port: http (80)
    Destination port: 56353 (56353)
    [Stream index: 19]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 168    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201534, TSecr 3088193
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 229]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    225 0.454000    192.168.20.52         192.168.20.1          TCP      56353 > http [ACK] Seq=168 Ack=74 Win=5840 Len=0 TSV=3088195 TSER=55201534

Frame 225 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3529 (13609)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x5c15 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56353 (56353), Dst Port: http (80), Seq: 168, Ack: 74, Len: 0
    Source port: 56353 (56353)
    Destination port: http (80)
    [Stream index: 19]
    Sequence number: 168    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x349b [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088195, TSecr 55201534

No.     Time        Source                Destination           Protocol Info
    226 0.455047    192.168.20.52         192.168.20.1          TCP      56353 > http [ACK] Seq=168 Ack=1522 Win=8736 Len=0 TSV=3088195 TSER=55201534

Frame 226 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x352a (13610)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x5c14 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56353 (56353), Dst Port: http (80), Seq: 168, Ack: 1522, Len: 0
    Source port: 56353 (56353)
    Destination port: http (80)
    [Stream index: 19]
    Sequence number: 168    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x2e3e [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088195, TSecr 55201534

No.     Time        Source                Destination           Protocol Info
    227 0.455049    192.168.20.52         192.168.20.1          TCP      56353 > http [ACK] Seq=168 Ack=1534 Win=8736 Len=0 TSV=3088195 TSER=55201534

Frame 227 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x352b (13611)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x5c13 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56353 (56353), Dst Port: http (80), Seq: 168, Ack: 1534, Len: 0
    Source port: 56353 (56353)
    Destination port: http (80)
    [Stream index: 19]
    Sequence number: 168    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x2e32 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088195, TSecr 55201534
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    228 0.456241    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 228 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x34d3 (13523)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1add]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56353 (56353), Seq: 1534, Ack: 168, Len: 398
    Source port: http (80)
    Destination port: 56353 (56353)
    [Stream index: 19]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 168    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201535, TSecr 3088195
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 229]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    229 0.456307    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 229 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34d4 (13524)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c6a]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56353 (56353), Seq: 1932, Ack: 168, Len: 0
    Source port: http (80)
    Destination port: 56353 (56353)
    [Stream index: 19]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 168    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201535, TSecr 3088195
[Reassembled TCP Segments (1931 bytes): #223(73), #224(1460), #228(398), #229(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:36 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    230 0.457002    192.168.20.52         192.168.20.1          TCP      56353 > http [ACK] Seq=168 Ack=1932 Win=11632 Len=0 TSV=3088196 TSER=55201535

Frame 230 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x352c (13612)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x5c12 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56353 (56353), Dst Port: http (80), Seq: 168, Ack: 1932, Len: 0
    Source port: 56353 (56353)
    Destination port: http (80)
    [Stream index: 19]
    Sequence number: 168    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0x2bed [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088196, TSecr 55201535

No.     Time        Source                Destination           Protocol Info
    231 0.457004    192.168.20.52         192.168.20.1          TCP      56353 > http [FIN, ACK] Seq=168 Ack=1933 Win=11632 Len=0 TSV=3088196 TSER=55201535

Frame 231 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x352d (13613)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x5c11 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56353 (56353), Dst Port: http (80), Seq: 168, Ack: 1933, Len: 0
    Source port: 56353 (56353)
    Destination port: http (80)
    [Stream index: 19]
    Sequence number: 168    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0x2beb [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088196, TSecr 55201535
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    232 0.457005    192.168.20.52         192.168.20.1          TCP      56354 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088196 TSER=0 WS=4

Frame 232 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0xc29d (49821)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xce98 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56354 (56354), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56354 (56354)
    Destination port: http (80)
    [Stream index: 20]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x8f22 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088196, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    233 0.457035    192.168.20.1          192.168.20.52         TCP      http > 56353 [ACK] Seq=1933 Ack=169 Win=66560 Len=0 TSV=55201535 TSER=3088196

Frame 233 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34d5 (13525)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c69]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56353 (56353), Seq: 1933, Ack: 169, Len: 0
    Source port: http (80)
    Destination port: 56353 (56353)
    [Stream index: 19]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 169    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201535, TSecr 3088196
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    234 0.457136    192.168.20.1          192.168.20.52         TCP      http > 56354 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201535 TSER=3088196

Frame 234 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x34d6 (13526)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c60]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56354 (56354), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56354 (56354)
    [Stream index: 20]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201535, TSecr 3088196
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    235 0.458074    192.168.20.52         192.168.20.1          TCP      56354 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088196 TSER=55201535

Frame 235 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xc29e (49822)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xce9f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56354 (56354), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56354 (56354)
    Destination port: http (80)
    [Stream index: 20]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xca3f [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088196, TSecr 55201535
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    236 0.458076    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy-updates/main/source/Sources.bz2 HTTP/1.1 

Frame 236 (225 bytes on wire, 225 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 211
    Identification: 0xc29f (49823)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xcdff [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56354 (56354), Dst Port: http (80), Seq: 1, Ack: 1, Len: 159
    Source port: 56354 (56354)
    Destination port: http (80)
    [Stream index: 20]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 160    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x29e3 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088196, TSecr 55201535
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy-updates/main/source/Sources.bz2 HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy-updates/main/source/Sources.bz2 HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy-updates/main/source/Sources.bz2 HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy-updates/main/source/Sources.bz2
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    237 0.467158    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 237 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x34d7 (13527)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c1e]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56354 (56354), Seq: 1, Ack: 160, Len: 73
    Source port: http (80)
    Destination port: 56354 (56354)
    [Stream index: 20]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 160    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201536, TSecr 3088196
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    238 0.467388    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 238 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x34d8 (13528)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x16b2]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56354 (56354), Seq: 74, Ack: 160, Len: 1460
    Source port: http (80)
    Destination port: 56354 (56354)
    [Stream index: 20]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 160    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201536, TSecr 3088196
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 243]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    239 0.468018    192.168.20.52         192.168.20.1          TCP      56354 > http [ACK] Seq=160 Ack=74 Win=5840 Len=0 TSV=3088199 TSER=55201536

Frame 239 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xc2a0 (49824)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xce9d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56354 (56354), Dst Port: http (80), Seq: 160, Ack: 74, Len: 0
    Source port: 56354 (56354)
    Destination port: http (80)
    [Stream index: 20]
    Sequence number: 160    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xc953 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088199, TSecr 55201536

No.     Time        Source                Destination           Protocol Info
    240 0.468020    192.168.20.52         192.168.20.1          TCP      56354 > http [ACK] Seq=160 Ack=1522 Win=8736 Len=0 TSV=3088199 TSER=55201536

Frame 240 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xc2a1 (49825)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xce9c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56354 (56354), Dst Port: http (80), Seq: 160, Ack: 1522, Len: 0
    Source port: 56354 (56354)
    Destination port: http (80)
    [Stream index: 20]
    Sequence number: 160    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xc2f6 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088199, TSecr 55201536

No.     Time        Source                Destination           Protocol Info
    241 0.468022    192.168.20.52         192.168.20.1          TCP      56354 > http [ACK] Seq=160 Ack=1534 Win=8736 Len=0 TSV=3088199 TSER=55201536

Frame 241 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xc2a2 (49826)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xce9b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56354 (56354), Dst Port: http (80), Seq: 160, Ack: 1534, Len: 0
    Source port: 56354 (56354)
    Destination port: http (80)
    [Stream index: 20]
    Sequence number: 160    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xc2ea [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088199, TSecr 55201536
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    242 0.470137    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 242 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x34da (13530)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1ad6]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56354 (56354), Seq: 1534, Ack: 160, Len: 398
    Source port: http (80)
    Destination port: 56354 (56354)
    [Stream index: 20]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 160    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201536, TSecr 3088199
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 243]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    243 0.470207    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 243 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34db (13531)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c63]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56354 (56354), Seq: 1932, Ack: 160, Len: 0
    Source port: http (80)
    Destination port: 56354 (56354)
    [Stream index: 20]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 160    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201536, TSecr 3088199
[Reassembled TCP Segments (1931 bytes): #237(73), #238(1460), #242(398), #243(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:36 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    244 0.471006    192.168.20.52         192.168.20.1          TCP      56354 > http [ACK] Seq=160 Ack=1932 Win=11632 Len=0 TSV=3088199 TSER=55201536

Frame 244 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xc2a3 (49827)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xce9a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56354 (56354), Dst Port: http (80), Seq: 160, Ack: 1932, Len: 0
    Source port: 56354 (56354)
    Destination port: http (80)
    [Stream index: 20]
    Sequence number: 160    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0xc0a7 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088199, TSecr 55201536

No.     Time        Source                Destination           Protocol Info
    245 0.471008    192.168.20.52         192.168.20.1          TCP      56354 > http [FIN, ACK] Seq=160 Ack=1933 Win=11632 Len=0 TSV=3088199 TSER=55201536

Frame 245 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xc2a4 (49828)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xce99 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56354 (56354), Dst Port: http (80), Seq: 160, Ack: 1933, Len: 0
    Source port: 56354 (56354)
    Destination port: http (80)
    [Stream index: 20]
    Sequence number: 160    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0xc0a5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088199, TSecr 55201536
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    246 0.471043    192.168.20.1          192.168.20.52         TCP      http > 56354 [ACK] Seq=1933 Ack=161 Win=66560 Len=0 TSV=55201536 TSER=3088199

Frame 246 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34dc (13532)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c62]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56354 (56354), Seq: 1933, Ack: 161, Len: 0
    Source port: http (80)
    Destination port: 56354 (56354)
    [Stream index: 20]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 161    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201536, TSecr 3088199
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    247 0.472004    192.168.20.52         192.168.20.1          TCP      56355 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088199 TSER=0 WS=4

Frame 247 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x39ad (14765)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x5789 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56355 (56355), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56355 (56355)
    Destination port: http (80)
    [Stream index: 21]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x459f [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088199, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    248 0.472065    192.168.20.1          192.168.20.52         TCP      http > 56355 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201536 TSER=3088199

Frame 248 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x34dd (13533)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c59]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56355 (56355), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56355 (56355)
    [Stream index: 21]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201536, TSecr 3088199
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    249 0.473003    192.168.20.52         192.168.20.1          TCP      56355 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088200 TSER=55201536

Frame 249 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x39ae (14766)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x5790 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56355 (56355), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56355 (56355)
    Destination port: http (80)
    [Stream index: 21]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x87d2 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088200, TSecr 55201536
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    250 0.473005    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy-updates/restricted/source/Sources.bz2 HTTP/1.1 

Frame 250 (231 bytes on wire, 231 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 217
    Identification: 0x39af (14767)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x56ea [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56355 (56355), Dst Port: http (80), Seq: 1, Ack: 1, Len: 165
    Source port: 56355 (56355)
    Destination port: http (80)
    [Stream index: 21]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 166    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x9d23 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088200, TSecr 55201536
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy-updates/restricted/source/Sources.bz2 HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy-updates/restricted/source/Sources.bz2 HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy-updates/restricted/source/Sources.bz2 HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy-updates/restricted/source/Sources.bz2
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    251 0.482480    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 251 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x34de (13534)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c17]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56355 (56355), Seq: 1, Ack: 166, Len: 73
    Source port: http (80)
    Destination port: 56355 (56355)
    [Stream index: 21]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 166    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201537, TSecr 3088200
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    252 0.482730    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 252 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x34df (13535)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x16ab]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56355 (56355), Seq: 74, Ack: 166, Len: 1460
    Source port: http (80)
    Destination port: 56355 (56355)
    [Stream index: 21]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 166    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201537, TSecr 3088200
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 257]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    253 0.483005    192.168.20.52         192.168.20.1          TCP      56355 > http [ACK] Seq=166 Ack=74 Win=5840 Len=0 TSV=3088202 TSER=55201537

Frame 253 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x39b0 (14768)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x578e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56355 (56355), Dst Port: http (80), Seq: 166, Ack: 74, Len: 0
    Source port: 56355 (56355)
    Destination port: http (80)
    [Stream index: 21]
    Sequence number: 166    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x86e1 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088202, TSecr 55201537

No.     Time        Source                Destination           Protocol Info
    254 0.484006    192.168.20.52         192.168.20.1          TCP      56355 > http [ACK] Seq=166 Ack=1522 Win=8736 Len=0 TSV=3088203 TSER=55201537

Frame 254 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x39b1 (14769)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x578d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56355 (56355), Dst Port: http (80), Seq: 166, Ack: 1522, Len: 0
    Source port: 56355 (56355)
    Destination port: http (80)
    [Stream index: 21]
    Sequence number: 166    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x8083 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088203, TSecr 55201537

No.     Time        Source                Destination           Protocol Info
    255 0.484008    192.168.20.52         192.168.20.1          TCP      56355 > http [ACK] Seq=166 Ack=1534 Win=8736 Len=0 TSV=3088203 TSER=55201537

Frame 255 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x39b2 (14770)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x578c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56355 (56355), Dst Port: http (80), Seq: 166, Ack: 1534, Len: 0
    Source port: 56355 (56355)
    Destination port: http (80)
    [Stream index: 21]
    Sequence number: 166    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x8077 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088203, TSecr 55201537
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    256 0.485600    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 256 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x34e1 (13537)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1acf]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56355 (56355), Seq: 1534, Ack: 166, Len: 398
    Source port: http (80)
    Destination port: 56355 (56355)
    [Stream index: 21]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 166    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201538, TSecr 3088203
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 257]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    257 0.485666    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 257 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34e2 (13538)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c5c]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56355 (56355), Seq: 1932, Ack: 166, Len: 0
    Source port: http (80)
    Destination port: 56355 (56355)
    [Stream index: 21]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 166    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201538, TSecr 3088203
[Reassembled TCP Segments (1931 bytes): #251(73), #252(1460), #256(398), #257(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:37 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    258 0.486023    192.168.20.52         192.168.20.1          TCP      56355 > http [ACK] Seq=166 Ack=1932 Win=11632 Len=0 TSV=3088203 TSER=55201538

Frame 258 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x39b3 (14771)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x578b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56355 (56355), Dst Port: http (80), Seq: 166, Ack: 1932, Len: 0
    Source port: 56355 (56355)
    Destination port: http (80)
    [Stream index: 21]
    Sequence number: 166    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0x7e33 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088203, TSecr 55201538

No.     Time        Source                Destination           Protocol Info
    259 0.487002    192.168.20.52         192.168.20.1          TCP      56355 > http [FIN, ACK] Seq=166 Ack=1933 Win=11632 Len=0 TSV=3088203 TSER=55201538

Frame 259 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x39b4 (14772)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x578a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56355 (56355), Dst Port: http (80), Seq: 166, Ack: 1933, Len: 0
    Source port: 56355 (56355)
    Destination port: http (80)
    [Stream index: 21]
    Sequence number: 166    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0x7e31 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088203, TSecr 55201538
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    260 0.487004    192.168.20.52         192.168.20.1          TCP      56356 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088203 TSER=0 WS=4

Frame 260 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x1ffe (8190)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x7138 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56356 (56356), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56356 (56356)
    Destination port: http (80)
    [Stream index: 22]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x6ba4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088203, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    261 0.487030    192.168.20.1          192.168.20.52         TCP      http > 56355 [ACK] Seq=1933 Ack=167 Win=66560 Len=0 TSV=55201538 TSER=3088203

Frame 261 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34e3 (13539)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c5b]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56355 (56355), Seq: 1933, Ack: 167, Len: 0
    Source port: http (80)
    Destination port: 56355 (56355)
    [Stream index: 21]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 167    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201538, TSecr 3088203
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    262 0.487086    192.168.20.1          192.168.20.52         TCP      http > 56356 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201538 TSER=3088203

Frame 262 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x34e4 (13540)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c52]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56356 (56356), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56356 (56356)
    [Stream index: 22]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201538, TSecr 3088203
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    263 0.488002    192.168.20.52         192.168.20.1          TCP      56356 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088204 TSER=55201538

Frame 263 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x1fff (8191)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x713f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56356 (56356), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56356 (56356)
    Destination port: http (80)
    [Stream index: 22]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x4bd7 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088204, TSecr 55201538
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    264 0.488004    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy-updates/extras/source/Sources.bz2 HTTP/1.1 

Frame 264 (227 bytes on wire, 227 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 213
    Identification: 0x2000 (8192)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x709d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56356 (56356), Dst Port: http (80), Seq: 1, Ack: 1, Len: 161
    Source port: 56356 (56356)
    Destination port: http (80)
    [Stream index: 22]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 162    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x46ea [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088204, TSecr 55201538
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy-updates/extras/source/Sources.bz2 HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy-updates/extras/source/Sources.bz2 HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy-updates/extras/source/Sources.bz2 HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy-updates/extras/source/Sources.bz2
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    265 0.557883    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 265 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x34e5 (13541)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c10]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56356 (56356), Seq: 1, Ack: 162, Len: 73
    Source port: http (80)
    Destination port: 56356 (56356)
    [Stream index: 22]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 162    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201545, TSecr 3088204
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    266 0.558117    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 266 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x34e6 (13542)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x16a4]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56356 (56356), Seq: 74, Ack: 162, Len: 1460
    Source port: http (80)
    Destination port: 56356 (56356)
    [Stream index: 22]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 162    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201545, TSecr 3088204
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 271]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    267 0.559011    192.168.20.52         192.168.20.1          TCP      56356 > http [ACK] Seq=162 Ack=74 Win=5840 Len=0 TSV=3088221 TSER=55201545

Frame 267 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2001 (8193)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x713d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56356 (56356), Dst Port: http (80), Seq: 162, Ack: 74, Len: 0
    Source port: 56356 (56356)
    Destination port: http (80)
    [Stream index: 22]
    Sequence number: 162    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x4ad5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088221, TSecr 55201545

No.     Time        Source                Destination           Protocol Info
    268 0.559013    192.168.20.52         192.168.20.1          TCP      56356 > http [ACK] Seq=162 Ack=1522 Win=8736 Len=0 TSV=3088221 TSER=55201545

Frame 268 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2002 (8194)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x713c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56356 (56356), Dst Port: http (80), Seq: 162, Ack: 1522, Len: 0
    Source port: 56356 (56356)
    Destination port: http (80)
    [Stream index: 22]
    Sequence number: 162    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x4478 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088221, TSecr 55201545

No.     Time        Source                Destination           Protocol Info
    269 0.559014    192.168.20.52         192.168.20.1          TCP      56356 > http [ACK] Seq=162 Ack=1534 Win=8736 Len=0 TSV=3088221 TSER=55201545

Frame 269 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2003 (8195)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x713b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56356 (56356), Dst Port: http (80), Seq: 162, Ack: 1534, Len: 0
    Source port: 56356 (56356)
    Destination port: http (80)
    [Stream index: 22]
    Sequence number: 162    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x446c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088221, TSecr 55201545
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    270 0.560803    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 270 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x34e8 (13544)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1ac8]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56356 (56356), Seq: 1534, Ack: 162, Len: 398
    Source port: http (80)
    Destination port: 56356 (56356)
    [Stream index: 22]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 162    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201545, TSecr 3088221
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 271]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    271 0.560901    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 271 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34e9 (13545)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c55]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56356 (56356), Seq: 1932, Ack: 162, Len: 0
    Source port: http (80)
    Destination port: 56356 (56356)
    [Stream index: 22]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 162    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201545, TSecr 3088221
[Reassembled TCP Segments (1931 bytes): #265(73), #266(1460), #270(398), #271(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:37 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    272 0.562010    192.168.20.52         192.168.20.1          TCP      56356 > http [ACK] Seq=162 Ack=1932 Win=11632 Len=0 TSV=3088222 TSER=55201545

Frame 272 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2004 (8196)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x713a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56356 (56356), Dst Port: http (80), Seq: 162, Ack: 1932, Len: 0
    Source port: 56356 (56356)
    Destination port: http (80)
    [Stream index: 22]
    Sequence number: 162    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0x4228 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088222, TSecr 55201545

No.     Time        Source                Destination           Protocol Info
    273 0.562013    192.168.20.52         192.168.20.1          TCP      56356 > http [FIN, ACK] Seq=162 Ack=1933 Win=11632 Len=0 TSV=3088222 TSER=55201545

Frame 273 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2005 (8197)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x7139 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56356 (56356), Dst Port: http (80), Seq: 162, Ack: 1933, Len: 0
    Source port: 56356 (56356)
    Destination port: http (80)
    [Stream index: 22]
    Sequence number: 162    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0x4226 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088222, TSecr 55201545
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    274 0.562014    192.168.20.52         192.168.20.1          TCP      56357 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088222 TSER=0 WS=4

Frame 274 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x2a24 (10788)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x6712 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56357 (56357), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56357 (56357)
    Destination port: http (80)
    [Stream index: 23]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x36c7 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088222, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    275 0.562052    192.168.20.1          192.168.20.52         TCP      http > 56356 [ACK] Seq=1933 Ack=163 Win=66560 Len=0 TSV=55201545 TSER=3088222

Frame 275 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34ea (13546)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c54]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56356 (56356), Seq: 1933, Ack: 163, Len: 0
    Source port: http (80)
    Destination port: 56356 (56356)
    [Stream index: 22]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 163    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201545, TSecr 3088222
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    276 0.562115    192.168.20.1          192.168.20.52         TCP      http > 56357 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201545 TSER=3088222

Frame 276 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x34eb (13547)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c4b]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56357 (56357), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56357 (56357)
    [Stream index: 23]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201545, TSecr 3088222
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    277 0.563011    192.168.20.52         192.168.20.1          TCP      56357 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088222 TSER=55201545

Frame 277 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2a25 (10789)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x6719 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56357 (56357), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56357 (56357)
    Destination port: http (80)
    [Stream index: 23]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x8946 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088222, TSecr 55201545
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    278 0.563013    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy-updates/universe/binary-i386/Packages.bz2 HTTP/1.1 

Frame 278 (235 bytes on wire, 235 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 221
    Identification: 0x2a26 (10790)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x666f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56357 (56357), Dst Port: http (80), Seq: 1, Ack: 1, Len: 169
    Source port: 56357 (56357)
    Destination port: http (80)
    [Stream index: 23]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 170    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x3261 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088222, TSecr 55201545
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy-updates/universe/binary-i386/Packages.bz2 HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy-updates/universe/binary-i386/Packages.bz2 HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy-updates/universe/binary-i386/Packages.bz2 HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy-updates/universe/binary-i386/Packages.bz2
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    279 0.576640    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 279 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x34ec (13548)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c09]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56357 (56357), Seq: 1, Ack: 170, Len: 73
    Source port: http (80)
    Destination port: 56357 (56357)
    [Stream index: 23]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 170    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201547, TSecr 3088222
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    280 0.576886    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 280 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x34ed (13549)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x169d]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56357 (56357), Seq: 74, Ack: 170, Len: 1460
    Source port: http (80)
    Destination port: 56357 (56357)
    [Stream index: 23]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 170    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201547, TSecr 3088222
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 285]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    281 0.577009    192.168.20.52         192.168.20.1          TCP      56357 > http [ACK] Seq=170 Ack=74 Win=5840 Len=0 TSV=3088226 TSER=55201547

Frame 281 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2a27 (10791)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x6717 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56357 (56357), Dst Port: http (80), Seq: 170, Ack: 74, Len: 0
    Source port: 56357 (56357)
    Destination port: http (80)
    [Stream index: 23]
    Sequence number: 170    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x884e [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088226, TSecr 55201547

No.     Time        Source                Destination           Protocol Info
    282 0.578011    192.168.20.52         192.168.20.1          TCP      56357 > http [ACK] Seq=170 Ack=1522 Win=8736 Len=0 TSV=3088226 TSER=55201547

Frame 282 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2a28 (10792)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x6716 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56357 (56357), Dst Port: http (80), Seq: 170, Ack: 1522, Len: 0
    Source port: 56357 (56357)
    Destination port: http (80)
    [Stream index: 23]
    Sequence number: 170    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x81f1 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088226, TSecr 55201547

No.     Time        Source                Destination           Protocol Info
    283 0.578013    192.168.20.52         192.168.20.1          TCP      56357 > http [ACK] Seq=170 Ack=1534 Win=8736 Len=0 TSV=3088226 TSER=55201547

Frame 283 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2a29 (10793)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x6715 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56357 (56357), Dst Port: http (80), Seq: 170, Ack: 1534, Len: 0
    Source port: 56357 (56357)
    Destination port: http (80)
    [Stream index: 23]
    Sequence number: 170    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x81e5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088226, TSecr 55201547
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    284 0.579763    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 284 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x34ef (13551)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1ac1]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56357 (56357), Seq: 1534, Ack: 170, Len: 398
    Source port: http (80)
    Destination port: 56357 (56357)
    [Stream index: 23]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 170    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201547, TSecr 3088226
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 285]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    285 0.579836    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 285 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34f0 (13552)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c4e]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56357 (56357), Seq: 1932, Ack: 170, Len: 0
    Source port: http (80)
    Destination port: 56357 (56357)
    [Stream index: 23]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 170    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201547, TSecr 3088226
[Reassembled TCP Segments (1931 bytes): #279(73), #280(1460), #284(398), #285(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:37 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    286 0.581025    192.168.20.52         192.168.20.1          TCP      56357 > http [ACK] Seq=170 Ack=1932 Win=11632 Len=0 TSV=3088227 TSER=55201547

Frame 286 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2a2a (10794)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x6714 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56357 (56357), Dst Port: http (80), Seq: 170, Ack: 1932, Len: 0
    Source port: 56357 (56357)
    Destination port: http (80)
    [Stream index: 23]
    Sequence number: 170    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0x7fa1 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088227, TSecr 55201547

No.     Time        Source                Destination           Protocol Info
    287 0.581027    192.168.20.52         192.168.20.1          TCP      56357 > http [FIN, ACK] Seq=170 Ack=1933 Win=11632 Len=0 TSV=3088227 TSER=55201547

Frame 287 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2a2b (10795)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x6713 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56357 (56357), Dst Port: http (80), Seq: 170, Ack: 1933, Len: 0
    Source port: 56357 (56357)
    Destination port: http (80)
    [Stream index: 23]
    Sequence number: 170    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0x7f9f [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088227, TSecr 55201547
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    288 0.581028    192.168.20.52         192.168.20.1          TCP      56358 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088227 TSER=0 WS=4

Frame 288 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0xd1a6 (53670)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xbf8f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56358 (56358), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56358 (56358)
    Destination port: http (80)
    [Stream index: 24]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x9dc7 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088227, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    289 0.581065    192.168.20.1          192.168.20.52         TCP      http > 56357 [ACK] Seq=1933 Ack=171 Win=66560 Len=0 TSV=55201547 TSER=3088227

Frame 289 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34f1 (13553)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c4d]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56357 (56357), Seq: 1933, Ack: 171, Len: 0
    Source port: http (80)
    Destination port: 56357 (56357)
    [Stream index: 23]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 171    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201547, TSecr 3088227
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    290 0.581131    192.168.20.1          192.168.20.52         TCP      http > 56358 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201547 TSER=3088227

Frame 290 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x34f2 (13554)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c44]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56358 (56358), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56358 (56358)
    [Stream index: 24]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201547, TSecr 3088227
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    291 0.582011    192.168.20.52         192.168.20.1          TCP      56358 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088227 TSER=55201547

Frame 291 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xd1a7 (53671)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xbf96 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56358 (56358), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56358 (56358)
    Destination port: http (80)
    [Stream index: 24]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x65d7 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088227, TSecr 55201547
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    292 0.582013    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy-updates/universe/source/Sources.bz2 HTTP/1.1 

Frame 292 (229 bytes on wire, 229 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 215
    Identification: 0xd1a8 (53672)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xbef2 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56358 (56358), Dst Port: http (80), Seq: 1, Ack: 1, Len: 163
    Source port: 56358 (56358)
    Destination port: http (80)
    [Stream index: 24]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 164    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xe489 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088227, TSecr 55201547
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy-updates/universe/source/Sources.bz2 HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy-updates/universe/source/Sources.bz2 HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy-updates/universe/source/Sources.bz2 HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy-updates/universe/source/Sources.bz2
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    293 0.591829    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 293 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x34f3 (13555)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c02]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56358 (56358), Seq: 1, Ack: 164, Len: 73
    Source port: http (80)
    Destination port: 56358 (56358)
    [Stream index: 24]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 164    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201548, TSecr 3088227
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    294 0.592094    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 294 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x34f4 (13556)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1696]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56358 (56358), Seq: 74, Ack: 164, Len: 1460
    Source port: http (80)
    Destination port: 56358 (56358)
    [Stream index: 24]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 164    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201548, TSecr 3088227
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 299]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    295 0.593012    192.168.20.52         192.168.20.1          TCP      56358 > http [ACK] Seq=164 Ack=74 Win=5840 Len=0 TSV=3088230 TSER=55201548

Frame 295 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xd1a9 (53673)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xbf94 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56358 (56358), Dst Port: http (80), Seq: 164, Ack: 74, Len: 0
    Source port: 56358 (56358)
    Destination port: http (80)
    [Stream index: 24]
    Sequence number: 164    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x64e7 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088230, TSecr 55201548

No.     Time        Source                Destination           Protocol Info
    296 0.593014    192.168.20.52         192.168.20.1          TCP      56358 > http [ACK] Seq=164 Ack=1522 Win=8736 Len=0 TSV=3088230 TSER=55201548

Frame 296 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xd1aa (53674)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xbf93 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56358 (56358), Dst Port: http (80), Seq: 164, Ack: 1522, Len: 0
    Source port: 56358 (56358)
    Destination port: http (80)
    [Stream index: 24]
    Sequence number: 164    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x5e8a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088230, TSecr 55201548

No.     Time        Source                Destination           Protocol Info
    297 0.593016    192.168.20.52         192.168.20.1          TCP      56358 > http [ACK] Seq=164 Ack=1534 Win=8736 Len=0 TSV=3088230 TSER=55201548

Frame 297 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xd1ab (53675)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xbf92 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56358 (56358), Dst Port: http (80), Seq: 164, Ack: 1534, Len: 0
    Source port: 56358 (56358)
    Destination port: http (80)
    [Stream index: 24]
    Sequence number: 164    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x5e7e [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088230, TSecr 55201548
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    298 0.599259    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 298 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x34f6 (13558)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1aba]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56358 (56358), Seq: 1534, Ack: 164, Len: 398
    Source port: http (80)
    Destination port: 56358 (56358)
    [Stream index: 24]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 164    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201549, TSecr 3088230
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 299]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    299 0.599358    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 299 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34f7 (13559)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c47]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56358 (56358), Seq: 1932, Ack: 164, Len: 0
    Source port: http (80)
    Destination port: 56358 (56358)
    [Stream index: 24]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 164    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201549, TSecr 3088230
[Reassembled TCP Segments (1931 bytes): #293(73), #294(1460), #298(398), #299(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:37 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    300 0.600011    192.168.20.52         192.168.20.1          TCP      56358 > http [ACK] Seq=164 Ack=1932 Win=11632 Len=0 TSV=3088232 TSER=55201549

Frame 300 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xd1ac (53676)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xbf91 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56358 (56358), Dst Port: http (80), Seq: 164, Ack: 1932, Len: 0
    Source port: 56358 (56358)
    Destination port: http (80)
    [Stream index: 24]
    Sequence number: 164    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0x5c38 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088232, TSecr 55201549

No.     Time        Source                Destination           Protocol Info
    301 0.601055    192.168.20.52         192.168.20.1          TCP      56358 > http [FIN, ACK] Seq=164 Ack=1933 Win=11632 Len=0 TSV=3088232 TSER=55201549

Frame 301 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xd1ad (53677)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xbf90 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56358 (56358), Dst Port: http (80), Seq: 164, Ack: 1933, Len: 0
    Source port: 56358 (56358)
    Destination port: http (80)
    [Stream index: 24]
    Sequence number: 164    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0x5c36 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088232, TSecr 55201549
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    302 0.601057    192.168.20.52         192.168.20.1          TCP      56359 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088232 TSER=0 WS=4

Frame 302 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0xa198 (41368)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xef9d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56359 (56359), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56359 (56359)
    Destination port: http (80)
    [Stream index: 25]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0xad2b [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088232, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    303 0.601088    192.168.20.1          192.168.20.52         TCP      http > 56358 [ACK] Seq=1933 Ack=165 Win=66560 Len=0 TSV=55201549 TSER=3088232

Frame 303 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34f8 (13560)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c46]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56358 (56358), Seq: 1933, Ack: 165, Len: 0
    Source port: http (80)
    Destination port: 56358 (56358)
    [Stream index: 24]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 165    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201549, TSecr 3088232
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    304 0.601161    192.168.20.1          192.168.20.52         TCP      http > 56359 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201549 TSER=3088232

Frame 304 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x34f9 (13561)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c3d]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56359 (56359), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56359 (56359)
    [Stream index: 25]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201549, TSecr 3088232
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    305 0.602016    192.168.20.52         192.168.20.1          TCP      56359 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088232 TSER=55201549

Frame 305 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xa199 (41369)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xefa4 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56359 (56359), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56359 (56359)
    Destination port: http (80)
    [Stream index: 25]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xc377 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088232, TSecr 55201549
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    306 0.602018    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy-updates/multiverse/binary-i386/Packages.bz2 HTTP/1.1 

Frame 306 (237 bytes on wire, 237 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 223
    Identification: 0xa19a (41370)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xeef8 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56359 (56359), Dst Port: http (80), Seq: 1, Ack: 1, Len: 171
    Source port: 56359 (56359)
    Destination port: http (80)
    [Stream index: 25]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 172    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x0815 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088232, TSecr 55201549
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy-updates/multiverse/binary-i386/Packages.bz2 HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy-updates/multiverse/binary-i386/Packages.bz2 HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy-updates/multiverse/binary-i386/Packages.bz2 HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy-updates/multiverse/binary-i386/Packages.bz2
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    307 0.616332    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 307 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x34fa (13562)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bfb]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56359 (56359), Seq: 1, Ack: 172, Len: 73
    Source port: http (80)
    Destination port: 56359 (56359)
    [Stream index: 25]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 172    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201551, TSecr 3088232
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    308 0.616599    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 308 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x34fb (13563)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x168f]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56359 (56359), Seq: 74, Ack: 172, Len: 1460
    Source port: http (80)
    Destination port: 56359 (56359)
    [Stream index: 25]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 172    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201551, TSecr 3088232
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 313]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    309 0.617011    192.168.20.52         192.168.20.1          TCP      56359 > http [ACK] Seq=172 Ack=74 Win=5840 Len=0 TSV=3088236 TSER=55201551

Frame 309 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xa19b (41371)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xefa2 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56359 (56359), Dst Port: http (80), Seq: 172, Ack: 74, Len: 0
    Source port: 56359 (56359)
    Destination port: http (80)
    [Stream index: 25]
    Sequence number: 172    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xc27d [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088236, TSecr 55201551

No.     Time        Source                Destination           Protocol Info
    310 0.618013    192.168.20.52         192.168.20.1          TCP      56359 > http [ACK] Seq=172 Ack=1522 Win=8736 Len=0 TSV=3088236 TSER=55201551

Frame 310 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xa19c (41372)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xefa1 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56359 (56359), Dst Port: http (80), Seq: 172, Ack: 1522, Len: 0
    Source port: 56359 (56359)
    Destination port: http (80)
    [Stream index: 25]
    Sequence number: 172    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xbc20 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088236, TSecr 55201551

No.     Time        Source                Destination           Protocol Info
    311 0.618015    192.168.20.52         192.168.20.1          TCP      56359 > http [ACK] Seq=172 Ack=1534 Win=8736 Len=0 TSV=3088236 TSER=55201551

Frame 311 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xa19d (41373)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xefa0 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56359 (56359), Dst Port: http (80), Seq: 172, Ack: 1534, Len: 0
    Source port: 56359 (56359)
    Destination port: http (80)
    [Stream index: 25]
    Sequence number: 172    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xbc14 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088236, TSecr 55201551
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    312 0.618924    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 312 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x34fd (13565)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1ab3]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56359 (56359), Seq: 1534, Ack: 172, Len: 398
    Source port: http (80)
    Destination port: 56359 (56359)
    [Stream index: 25]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 172    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201551, TSecr 3088236
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 313]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    313 0.618977    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 313 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34fe (13566)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c40]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56359 (56359), Seq: 1932, Ack: 172, Len: 0
    Source port: http (80)
    Destination port: 56359 (56359)
    [Stream index: 25]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 172    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201551, TSecr 3088236
[Reassembled TCP Segments (1931 bytes): #307(73), #308(1460), #312(398), #313(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:37 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    314 0.620017    192.168.20.52         192.168.20.1          TCP      56359 > http [ACK] Seq=172 Ack=1932 Win=11632 Len=0 TSV=3088237 TSER=55201551

Frame 314 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xa19e (41374)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xef9f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56359 (56359), Dst Port: http (80), Seq: 172, Ack: 1932, Len: 0
    Source port: 56359 (56359)
    Destination port: http (80)
    [Stream index: 25]
    Sequence number: 172    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0xb9d0 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088237, TSecr 55201551

No.     Time        Source                Destination           Protocol Info
    315 0.620019    192.168.20.52         192.168.20.1          TCP      56359 > http [FIN, ACK] Seq=172 Ack=1933 Win=11632 Len=0 TSV=3088237 TSER=55201551

Frame 315 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xa19f (41375)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xef9e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56359 (56359), Dst Port: http (80), Seq: 172, Ack: 1933, Len: 0
    Source port: 56359 (56359)
    Destination port: http (80)
    [Stream index: 25]
    Sequence number: 172    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0xb9ce [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088237, TSecr 55201551
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    316 0.620021    192.168.20.52         192.168.20.1          TCP      56360 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088237 TSER=0 WS=4

Frame 316 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x1151 (4433)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x7fe5 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56360 (56360), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56360 (56360)
    Destination port: http (80)
    [Stream index: 26]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x5e75 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088237, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    317 0.620055    192.168.20.1          192.168.20.52         TCP      http > 56359 [ACK] Seq=1933 Ack=173 Win=66560 Len=0 TSV=55201551 TSER=3088237

Frame 317 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x34ff (13567)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c3f]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56359 (56359), Seq: 1933, Ack: 173, Len: 0
    Source port: http (80)
    Destination port: 56359 (56359)
    [Stream index: 25]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 173    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201551, TSecr 3088237
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    318 0.620114    192.168.20.1          192.168.20.52         TCP      http > 56360 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201551 TSER=3088237

Frame 318 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x3500 (13568)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c36]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56360 (56360), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56360 (56360)
    [Stream index: 26]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201551, TSecr 3088237
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    319 0.621014    192.168.20.52         192.168.20.1          TCP      56360 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088237 TSER=55201551

Frame 319 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x1152 (4434)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x7fec [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56360 (56360), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56360 (56360)
    Destination port: http (80)
    [Stream index: 26]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x22cf [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088237, TSecr 55201551
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    320 0.621016    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy-updates/multiverse/source/Sources.bz2 HTTP/1.1 

Frame 320 (231 bytes on wire, 231 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 217
    Identification: 0x1153 (4435)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x7f46 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56360 (56360), Dst Port: http (80), Seq: 1, Ack: 1, Len: 165
    Source port: 56360 (56360)
    Destination port: http (80)
    [Stream index: 26]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 166    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x3d04 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088237, TSecr 55201551
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy-updates/multiverse/source/Sources.bz2 HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy-updates/multiverse/source/Sources.bz2 HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy-updates/multiverse/source/Sources.bz2 HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy-updates/multiverse/source/Sources.bz2
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    321 0.635124    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 321 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x3501 (13569)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bf4]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56360 (56360), Seq: 1, Ack: 166, Len: 73
    Source port: http (80)
    Destination port: 56360 (56360)
    [Stream index: 26]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 166    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201553, TSecr 3088237
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    322 0.635367    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 322 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x3502 (13570)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1688]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56360 (56360), Seq: 74, Ack: 166, Len: 1460
    Source port: http (80)
    Destination port: 56360 (56360)
    [Stream index: 26]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 166    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201553, TSecr 3088237
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 327]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    323 0.636016    192.168.20.52         192.168.20.1          TCP      56360 > http [ACK] Seq=166 Ack=74 Win=5840 Len=0 TSV=3088241 TSER=55201553

Frame 323 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x1154 (4436)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x7fea [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56360 (56360), Dst Port: http (80), Seq: 166, Ack: 74, Len: 0
    Source port: 56360 (56360)
    Destination port: http (80)
    [Stream index: 26]
    Sequence number: 166    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x21db [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088241, TSecr 55201553

No.     Time        Source                Destination           Protocol Info
    324 0.636018    192.168.20.52         192.168.20.1          TCP      56360 > http [ACK] Seq=166 Ack=1522 Win=8736 Len=0 TSV=3088241 TSER=55201553

Frame 324 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x1155 (4437)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x7fe9 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56360 (56360), Dst Port: http (80), Seq: 166, Ack: 1522, Len: 0
    Source port: 56360 (56360)
    Destination port: http (80)
    [Stream index: 26]
    Sequence number: 166    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x1b7e [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088241, TSecr 55201553

No.     Time        Source                Destination           Protocol Info
    325 0.636019    192.168.20.52         192.168.20.1          TCP      56360 > http [ACK] Seq=166 Ack=1534 Win=8736 Len=0 TSV=3088241 TSER=55201553

Frame 325 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x1156 (4438)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x7fe8 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56360 (56360), Dst Port: http (80), Seq: 166, Ack: 1534, Len: 0
    Source port: 56360 (56360)
    Destination port: http (80)
    [Stream index: 26]
    Sequence number: 166    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x1b72 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088241, TSecr 55201553
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    326 0.638005    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 326 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x3504 (13572)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1aac]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56360 (56360), Seq: 1534, Ack: 166, Len: 398
    Source port: http (80)
    Destination port: 56360 (56360)
    [Stream index: 26]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 166    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201553, TSecr 3088241
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 327]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    327 0.638200    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 327 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3505 (13573)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c39]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56360 (56360), Seq: 1932, Ack: 166, Len: 0
    Source port: http (80)
    Destination port: 56360 (56360)
    [Stream index: 26]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 166    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201553, TSecr 3088241
[Reassembled TCP Segments (1931 bytes): #321(73), #322(1460), #326(398), #327(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:37 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    328 0.639015    192.168.20.52         192.168.20.1          TCP      56360 > http [ACK] Seq=166 Ack=1932 Win=11632 Len=0 TSV=3088241 TSER=55201553

Frame 328 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x1157 (4439)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x7fe7 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56360 (56360), Dst Port: http (80), Seq: 166, Ack: 1932, Len: 0
    Source port: 56360 (56360)
    Destination port: http (80)
    [Stream index: 26]
    Sequence number: 166    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0x192f [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088241, TSecr 55201553

No.     Time        Source                Destination           Protocol Info
    329 0.639017    192.168.20.52         192.168.20.1          TCP      56360 > http [FIN, ACK] Seq=166 Ack=1933 Win=11632 Len=0 TSV=3088241 TSER=55201553

Frame 329 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x1158 (4440)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x7fe6 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56360 (56360), Dst Port: http (80), Seq: 166, Ack: 1933, Len: 0
    Source port: 56360 (56360)
    Destination port: http (80)
    [Stream index: 26]
    Sequence number: 166    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0x192d [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088241, TSecr 55201553
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    330 0.639019    192.168.20.52         192.168.20.1          TCP      56361 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088241 TSER=0 WS=4

Frame 330 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0xe156 (57686)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xafdf [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56361 (56361), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56361 (56361)
    Destination port: http (80)
    [Stream index: 27]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x6e66 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088241, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    331 0.639055    192.168.20.1          192.168.20.52         TCP      http > 56360 [ACK] Seq=1933 Ack=167 Win=66560 Len=0 TSV=55201553 TSER=3088241

Frame 331 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3506 (13574)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c38]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56360 (56360), Seq: 1933, Ack: 167, Len: 0
    Source port: http (80)
    Destination port: 56360 (56360)
    [Stream index: 26]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 167    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201553, TSecr 3088241
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    332 0.639117    192.168.20.1          192.168.20.52         TCP      http > 56361 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201553 TSER=3088241

Frame 332 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x3507 (13575)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c2f]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56361 (56361), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56361 (56361)
    [Stream index: 27]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201553, TSecr 3088241
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    333 0.640012    192.168.20.52         192.168.20.1          TCP      56361 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088242 TSER=55201553

Frame 333 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xe157 (57687)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xafe6 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56361 (56361), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56361 (56361)
    Destination port: http (80)
    [Stream index: 27]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xc1b5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088242, TSecr 55201553
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    334 0.640014    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy/main/binary-i386/Packages.gz HTTP/1.1 

Frame 334 (272 bytes on wire, 272 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 258
    Identification: 0xe158 (57688)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xaf17 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56361 (56361), Dst Port: http (80), Seq: 1, Ack: 1, Len: 206
    Source port: 56361 (56361)
    Destination port: http (80)
    [Stream index: 27]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 207    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xe300 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088242, TSecr 55201553
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy/main/binary-i386/Packages.gz HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy/main/binary-i386/Packages.gz HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy/main/binary-i386/Packages.gz HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy/main/binary-i386/Packages.gz
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    If-Modified-Since: Wed, 10 Mar 2010 00:08:32 GMT\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    335 0.650083    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 335 (130 bytes on wire, 130 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 116
    Identification: 0x3508 (13576)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bf6]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56361 (56361), Seq: 1, Ack: 207, Len: 64
    Source port: http (80)
    Destination port: 56361 (56361)
    [Stream index: 27]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 65    (relative sequence number)]
    Acknowledgement number: 207    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ec [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201554, TSecr 3088242
    [SEQ/ACK analysis]
    TCP segment data (64 bytes)

No.     Time        Source                Destination           Protocol Info
    336 0.650312    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 304  

Frame 336 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3509 (13577)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c35]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56361 (56361), Seq: 65, Ack: 207, Len: 0
    Source port: http (80)
    Destination port: 56361 (56361)
    [Stream index: 27]
    Sequence number: 65    (relative sequence number)
    Acknowledgement number: 207    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201554, TSecr 3088242
[Reassembled TCP Segments (64 bytes): #335(64), #336(0)]
Hypertext Transfer Protocol
    HTTP/1.1 304 \r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 304 \r\n]
            [Message: HTTP/1.1 304 \r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 304
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    337 0.651016    192.168.20.52         192.168.20.1          TCP      56361 > http [ACK] Seq=207 Ack=65 Win=5840 Len=0 TSV=3088244 TSER=55201554

Frame 337 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xe159 (57689)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xafe4 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56361 (56361), Dst Port: http (80), Seq: 207, Ack: 65, Len: 0
    Source port: 56361 (56361)
    Destination port: http (80)
    [Stream index: 27]
    Sequence number: 207    (relative sequence number)
    Acknowledgement number: 65    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xc0a4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088244, TSecr 55201554

No.     Time        Source                Destination           Protocol Info
    338 0.652015    192.168.20.52         192.168.20.1          TCP      56361 > http [FIN, ACK] Seq=207 Ack=66 Win=5840 Len=0 TSV=3088245 TSER=55201554

Frame 338 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xe15a (57690)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xafe3 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56361 (56361), Dst Port: http (80), Seq: 207, Ack: 66, Len: 0
    Source port: 56361 (56361)
    Destination port: http (80)
    [Stream index: 27]
    Sequence number: 207    (relative sequence number)
    Acknowledgement number: 66    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 5840 (scaled)
    Checksum: 0xc0a1 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088245, TSecr 55201554
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    339 0.652017    192.168.20.52         192.168.20.1          TCP      56362 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088245 TSER=0 WS=4

Frame 339 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x65d7 (26071)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x2b5f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56362 (56362), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56362 (56362)
    Destination port: http (80)
    [Stream index: 28]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0xf1f3 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088245, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    340 0.652053    192.168.20.1          192.168.20.52         TCP      http > 56361 [ACK] Seq=66 Ack=208 Win=66560 Len=0 TSV=55201554 TSER=3088245

Frame 340 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x350a (13578)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c34]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56361 (56361), Seq: 66, Ack: 208, Len: 0
    Source port: http (80)
    Destination port: 56361 (56361)
    [Stream index: 27]
    Sequence number: 66    (relative sequence number)
    Acknowledgement number: 208    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201554, TSecr 3088245
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    341 0.652113    192.168.20.1          192.168.20.52         TCP      http > 56362 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201554 TSER=3088245

Frame 341 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x350b (13579)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c2b]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56362 (56362), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56362 (56362)
    [Stream index: 28]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201554, TSecr 3088245
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    342 0.653014    192.168.20.52         192.168.20.1          TCP      56362 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088245 TSER=55201554

Frame 342 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x65d8 (26072)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x2b66 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56362 (56362), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56362 (56362)
    Destination port: http (80)
    [Stream index: 28]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x61b5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088245, TSecr 55201554
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    343 0.653016    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy/restricted/binary-i386/Packages.gz HTTP/1.1 

Frame 343 (278 bytes on wire, 278 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 264
    Identification: 0x65d9 (26073)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x2a91 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56362 (56362), Dst Port: http (80), Seq: 1, Ack: 1, Len: 212
    Source port: 56362 (56362)
    Destination port: http (80)
    [Stream index: 28]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 213    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x4b98 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088245, TSecr 55201554
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy/restricted/binary-i386/Packages.gz HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy/restricted/binary-i386/Packages.gz HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy/restricted/binary-i386/Packages.gz HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy/restricted/binary-i386/Packages.gz
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    If-Modified-Since: Fri, 19 Feb 2010 20:19:58 GMT\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    344 0.669978    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 344 (130 bytes on wire, 130 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 116
    Identification: 0x350c (13580)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bf2]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56362 (56362), Seq: 1, Ack: 213, Len: 64
    Source port: http (80)
    Destination port: 56362 (56362)
    [Stream index: 28]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 65    (relative sequence number)]
    Acknowledgement number: 213    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ec [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201556, TSecr 3088245
    [SEQ/ACK analysis]
    TCP segment data (64 bytes)

No.     Time        Source                Destination           Protocol Info
    345 0.670263    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 304  

Frame 345 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x350d (13581)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c31]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56362 (56362), Seq: 65, Ack: 213, Len: 0
    Source port: http (80)
    Destination port: 56362 (56362)
    [Stream index: 28]
    Sequence number: 65    (relative sequence number)
    Acknowledgement number: 213    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201556, TSecr 3088245
[Reassembled TCP Segments (64 bytes): #344(64), #345(0)]
Hypertext Transfer Protocol
    HTTP/1.1 304 \r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 304 \r\n]
            [Message: HTTP/1.1 304 \r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 304
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    346 0.671016    192.168.20.52         192.168.20.1          TCP      56362 > http [ACK] Seq=213 Ack=65 Win=5840 Len=0 TSV=3088249 TSER=55201556

Frame 346 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x65da (26074)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x2b64 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56362 (56362), Dst Port: http (80), Seq: 213, Ack: 65, Len: 0
    Source port: 56362 (56362)
    Destination port: http (80)
    [Stream index: 28]
    Sequence number: 213    (relative sequence number)
    Acknowledgement number: 65    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x609b [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088249, TSecr 55201556

No.     Time        Source                Destination           Protocol Info
    347 0.672018    192.168.20.52         192.168.20.1          TCP      56362 > http [FIN, ACK] Seq=213 Ack=66 Win=5840 Len=0 TSV=3088249 TSER=55201556

Frame 347 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x65db (26075)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x2b63 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56362 (56362), Dst Port: http (80), Seq: 213, Ack: 66, Len: 0
    Source port: 56362 (56362)
    Destination port: http (80)
    [Stream index: 28]
    Sequence number: 213    (relative sequence number)
    Acknowledgement number: 66    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 5840 (scaled)
    Checksum: 0x6099 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088249, TSecr 55201556
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    348 0.672020    192.168.20.52         192.168.20.1          TCP      56363 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088250 TSER=0 WS=4

Frame 348 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0xdb33 (56115)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xb602 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56363 (56363), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56363 (56363)
    Destination port: http (80)
    [Stream index: 29]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0xa806 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088250, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    349 0.672061    192.168.20.1          192.168.20.52         TCP      http > 56362 [ACK] Seq=66 Ack=214 Win=66560 Len=0 TSV=55201556 TSER=3088249

Frame 349 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x350e (13582)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c30]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56362 (56362), Seq: 66, Ack: 214, Len: 0
    Source port: http (80)
    Destination port: 56362 (56362)
    [Stream index: 28]
    Sequence number: 66    (relative sequence number)
    Acknowledgement number: 214    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201556, TSecr 3088249
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    350 0.672121    192.168.20.1          192.168.20.52         TCP      http > 56363 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201556 TSER=3088250

Frame 350 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x350f (13583)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c27]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56363 (56363), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56363 (56363)
    [Stream index: 29]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201556, TSecr 3088250
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    351 0.673015    192.168.20.52         192.168.20.1          TCP      56363 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088250 TSER=55201556

Frame 351 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xdb34 (56116)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xb609 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56363 (56363), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56363 (56363)
    Destination port: http (80)
    [Stream index: 29]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x8d18 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088250, TSecr 55201556
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    352 0.673017    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy/main/source/Sources.gz HTTP/1.1 

Frame 352 (216 bytes on wire, 216 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 202
    Identification: 0xdb35 (56117)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xb572 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56363 (56363), Dst Port: http (80), Seq: 1, Ack: 1, Len: 150
    Source port: 56363 (56363)
    Destination port: http (80)
    [Stream index: 29]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 151    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x5da7 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088250, TSecr 55201556
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy/main/source/Sources.gz HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy/main/source/Sources.gz HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy/main/source/Sources.gz HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy/main/source/Sources.gz
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    353 0.725584    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 353 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x3510 (13584)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1be5]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56363 (56363), Seq: 1, Ack: 151, Len: 73
    Source port: http (80)
    Destination port: 56363 (56363)
    [Stream index: 29]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 151    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201562, TSecr 3088250
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    354 0.725763    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 354 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x3511 (13585)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1679]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56363 (56363), Seq: 74, Ack: 151, Len: 1460
    Source port: http (80)
    Destination port: 56363 (56363)
    [Stream index: 29]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 151    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201562, TSecr 3088250
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 359]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    355 0.726017    192.168.20.52         192.168.20.1          TCP      56363 > http [ACK] Seq=151 Ack=74 Win=5840 Len=0 TSV=3088263 TSER=55201562

Frame 355 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xdb36 (56118)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xb607 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56363 (56363), Dst Port: http (80), Seq: 151, Ack: 74, Len: 0
    Source port: 56363 (56363)
    Destination port: http (80)
    [Stream index: 29]
    Sequence number: 151    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x8c26 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088263, TSecr 55201562

No.     Time        Source                Destination           Protocol Info
    356 0.727018    192.168.20.52         192.168.20.1          TCP      56363 > http [ACK] Seq=151 Ack=1522 Win=8736 Len=0 TSV=3088263 TSER=55201562

Frame 356 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xdb37 (56119)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xb606 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56363 (56363), Dst Port: http (80), Seq: 151, Ack: 1522, Len: 0
    Source port: 56363 (56363)
    Destination port: http (80)
    [Stream index: 29]
    Sequence number: 151    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x85c9 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088263, TSecr 55201562

No.     Time        Source                Destination           Protocol Info
    357 0.727020    192.168.20.52         192.168.20.1          TCP      56363 > http [ACK] Seq=151 Ack=1534 Win=8736 Len=0 TSV=3088263 TSER=55201562

Frame 357 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xdb38 (56120)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xb605 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56363 (56363), Dst Port: http (80), Seq: 151, Ack: 1534, Len: 0
    Source port: 56363 (56363)
    Destination port: http (80)
    [Stream index: 29]
    Sequence number: 151    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x85bd [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088263, TSecr 55201562
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    358 0.728749    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 358 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x3513 (13587)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1a9d]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56363 (56363), Seq: 1534, Ack: 151, Len: 398
    Source port: http (80)
    Destination port: 56363 (56363)
    [Stream index: 29]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 151    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201562, TSecr 3088263
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 359]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    359 0.728821    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 359 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3514 (13588)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c2a]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56363 (56363), Seq: 1932, Ack: 151, Len: 0
    Source port: http (80)
    Destination port: 56363 (56363)
    [Stream index: 29]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 151    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201562, TSecr 3088263
[Reassembled TCP Segments (1931 bytes): #353(73), #354(1460), #358(398), #359(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:37 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    360 0.730016    192.168.20.52         192.168.20.1          TCP      56363 > http [ACK] Seq=151 Ack=1932 Win=11632 Len=0 TSV=3088264 TSER=55201562

Frame 360 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xdb39 (56121)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xb604 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56363 (56363), Dst Port: http (80), Seq: 151, Ack: 1932, Len: 0
    Source port: 56363 (56363)
    Destination port: http (80)
    [Stream index: 29]
    Sequence number: 151    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0x8379 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088264, TSecr 55201562

No.     Time        Source                Destination           Protocol Info
    361 0.730018    192.168.20.52         192.168.20.1          TCP      56363 > http [FIN, ACK] Seq=151 Ack=1933 Win=11632 Len=0 TSV=3088264 TSER=55201562

Frame 361 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xdb3a (56122)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xb603 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56363 (56363), Dst Port: http (80), Seq: 151, Ack: 1933, Len: 0
    Source port: 56363 (56363)
    Destination port: http (80)
    [Stream index: 29]
    Sequence number: 151    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0x8377 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088264, TSecr 55201562
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    362 0.730020    192.168.20.52         192.168.20.1          TCP      56364 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088264 TSER=0 WS=4

Frame 362 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0xb889 (47241)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xd8ac [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56364 (56364), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56364 (56364)
    Destination port: http (80)
    [Stream index: 30]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0xc558 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088264, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    363 0.730061    192.168.20.1          192.168.20.52         TCP      http > 56363 [ACK] Seq=1933 Ack=152 Win=66560 Len=0 TSV=55201562 TSER=3088264

Frame 363 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3515 (13589)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c29]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56363 (56363), Seq: 1933, Ack: 152, Len: 0
    Source port: http (80)
    Destination port: 56363 (56363)
    [Stream index: 29]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 152    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201562, TSecr 3088264
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    364 0.730122    192.168.20.1          192.168.20.52         TCP      http > 56364 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201562 TSER=3088264

Frame 364 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x3516 (13590)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c20]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56364 (56364), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56364 (56364)
    [Stream index: 30]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201562, TSecr 3088264
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    365 0.731032    192.168.20.52         192.168.20.1          TCP      56364 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088264 TSER=55201562

Frame 365 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xb88a (47242)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xd8b3 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56364 (56364), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56364 (56364)
    Destination port: http (80)
    [Stream index: 30]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x5859 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088264, TSecr 55201562
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    366 0.731034    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy/restricted/source/Sources.gz HTTP/1.1 

Frame 366 (222 bytes on wire, 222 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 208
    Identification: 0xb88b (47243)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xd816 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56364 (56364), Dst Port: http (80), Seq: 1, Ack: 1, Len: 156
    Source port: 56364 (56364)
    Destination port: http (80)
    [Stream index: 30]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 157    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xde95 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088264, TSecr 55201562
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy/restricted/source/Sources.gz HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy/restricted/source/Sources.gz HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy/restricted/source/Sources.gz HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy/restricted/source/Sources.gz
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    367 0.747541    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 367 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x3517 (13591)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bde]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56364 (56364), Seq: 1, Ack: 157, Len: 73
    Source port: http (80)
    Destination port: 56364 (56364)
    [Stream index: 30]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 157    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201564, TSecr 3088264
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    368 0.747780    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 368 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x3518 (13592)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1672]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56364 (56364), Seq: 74, Ack: 157, Len: 1460
    Source port: http (80)
    Destination port: 56364 (56364)
    [Stream index: 30]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 157    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201564, TSecr 3088264
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 373]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    369 0.748019    192.168.20.52         192.168.20.1          TCP      56364 > http [ACK] Seq=157 Ack=74 Win=5840 Len=0 TSV=3088269 TSER=55201564

Frame 369 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xb88c (47244)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xd8b1 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56364 (56364), Dst Port: http (80), Seq: 157, Ack: 74, Len: 0
    Source port: 56364 (56364)
    Destination port: http (80)
    [Stream index: 30]
    Sequence number: 157    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x576d [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088269, TSecr 55201564

No.     Time        Source                Destination           Protocol Info
    370 0.749023    192.168.20.52         192.168.20.1          TCP      56364 > http [ACK] Seq=157 Ack=1522 Win=8736 Len=0 TSV=3088269 TSER=55201564

Frame 370 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xb88d (47245)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xd8b0 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56364 (56364), Dst Port: http (80), Seq: 157, Ack: 1522, Len: 0
    Source port: 56364 (56364)
    Destination port: http (80)
    [Stream index: 30]
    Sequence number: 157    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x5110 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088269, TSecr 55201564

No.     Time        Source                Destination           Protocol Info
    371 0.749026    192.168.20.52         192.168.20.1          TCP      56364 > http [ACK] Seq=157 Ack=1534 Win=8736 Len=0 TSV=3088269 TSER=55201564

Frame 371 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xb88e (47246)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xd8af [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56364 (56364), Dst Port: http (80), Seq: 157, Ack: 1534, Len: 0
    Source port: 56364 (56364)
    Destination port: http (80)
    [Stream index: 30]
    Sequence number: 157    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x5104 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088269, TSecr 55201564
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    372 0.752148    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 372 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x351a (13594)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1a96]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56364 (56364), Seq: 1534, Ack: 157, Len: 398
    Source port: http (80)
    Destination port: 56364 (56364)
    [Stream index: 30]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 157    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201564, TSecr 3088269
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 373]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    373 0.752544    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 373 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x351b (13595)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c23]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56364 (56364), Seq: 1932, Ack: 157, Len: 0
    Source port: http (80)
    Destination port: 56364 (56364)
    [Stream index: 30]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 157    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201564, TSecr 3088269
[Reassembled TCP Segments (1931 bytes): #367(73), #368(1460), #372(398), #373(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:37 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    374 0.753022    192.168.20.52         192.168.20.1          TCP      56364 > http [ACK] Seq=157 Ack=1932 Win=11632 Len=0 TSV=3088270 TSER=55201564

Frame 374 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xb88f (47247)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xd8ae [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56364 (56364), Dst Port: http (80), Seq: 157, Ack: 1932, Len: 0
    Source port: 56364 (56364)
    Destination port: http (80)
    [Stream index: 30]
    Sequence number: 157    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0x4ec0 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088270, TSecr 55201564

No.     Time        Source                Destination           Protocol Info
    375 0.753024    192.168.20.52         192.168.20.1          TCP      56364 > http [FIN, ACK] Seq=157 Ack=1933 Win=11632 Len=0 TSV=3088270 TSER=55201564

Frame 375 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xb890 (47248)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xd8ad [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56364 (56364), Dst Port: http (80), Seq: 157, Ack: 1933, Len: 0
    Source port: 56364 (56364)
    Destination port: http (80)
    [Stream index: 30]
    Sequence number: 157    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0x4ebe [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088270, TSecr 55201564
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    376 0.753059    192.168.20.1          192.168.20.52         TCP      http > 56364 [ACK] Seq=1933 Ack=158 Win=66560 Len=0 TSV=55201564 TSER=3088270

Frame 376 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x351c (13596)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c22]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56364 (56364), Seq: 1933, Ack: 158, Len: 0
    Source port: http (80)
    Destination port: 56364 (56364)
    [Stream index: 30]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 158    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201564, TSecr 3088270
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    377 0.754029    192.168.20.52         192.168.20.1          TCP      56365 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088270 TSER=0 WS=4

Frame 377 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x0931 (2353)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8805 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56365 (56365), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56365 (56365)
    Destination port: http (80)
    [Stream index: 31]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x5557 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088270, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    378 0.754085    192.168.20.1          192.168.20.52         TCP      http > 56365 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201564 TSER=3088270

Frame 378 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x351d (13597)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c19]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56365 (56365), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56365 (56365)
    [Stream index: 31]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201564, TSecr 3088270
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    379 0.755020    192.168.20.52         192.168.20.1          TCP      56365 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088270 TSER=55201564

Frame 379 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0932 (2354)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x880c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56365 (56365), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56365 (56365)
    Destination port: http (80)
    [Stream index: 31]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x75f7 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088270, TSecr 55201564
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    380 0.755022    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy/extras/source/Sources.gz HTTP/1.1 

Frame 380 (218 bytes on wire, 218 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 204
    Identification: 0x0933 (2355)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8773 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56365 (56365), Dst Port: http (80), Seq: 1, Ack: 1, Len: 152
    Source port: 56365 (56365)
    Destination port: http (80)
    [Stream index: 31]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 153    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xe1f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088270, TSecr 55201564
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy/extras/source/Sources.gz HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy/extras/source/Sources.gz HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy/extras/source/Sources.gz HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy/extras/source/Sources.gz
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    381 0.771990    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 381 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x351e (13598)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bd7]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56365 (56365), Seq: 1, Ack: 153, Len: 73
    Source port: http (80)
    Destination port: 56365 (56365)
    [Stream index: 31]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 153    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201566, TSecr 3088270
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    382 0.772436    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 382 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x351f (13599)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x166b]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56365 (56365), Seq: 74, Ack: 153, Len: 1460
    Source port: http (80)
    Destination port: 56365 (56365)
    [Stream index: 31]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 153    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201566, TSecr 3088270
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 387]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    383 0.773021    192.168.20.52         192.168.20.1          TCP      56365 > http [ACK] Seq=153 Ack=74 Win=5840 Len=0 TSV=3088275 TSER=55201566

Frame 383 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0934 (2356)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x880a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56365 (56365), Dst Port: http (80), Seq: 153, Ack: 74, Len: 0
    Source port: 56365 (56365)
    Destination port: http (80)
    [Stream index: 31]
    Sequence number: 153    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x750f [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088275, TSecr 55201566

No.     Time        Source                Destination           Protocol Info
    384 0.773023    192.168.20.52         192.168.20.1          TCP      56365 > http [ACK] Seq=153 Ack=1522 Win=8736 Len=0 TSV=3088275 TSER=55201566

Frame 384 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0935 (2357)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8809 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56365 (56365), Dst Port: http (80), Seq: 153, Ack: 1522, Len: 0
    Source port: 56365 (56365)
    Destination port: http (80)
    [Stream index: 31]
    Sequence number: 153    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x6eb2 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088275, TSecr 55201566

No.     Time        Source                Destination           Protocol Info
    385 0.773024    192.168.20.52         192.168.20.1          TCP      56365 > http [ACK] Seq=153 Ack=1534 Win=8736 Len=0 TSV=3088275 TSER=55201566

Frame 385 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0936 (2358)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8808 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56365 (56365), Dst Port: http (80), Seq: 153, Ack: 1534, Len: 0
    Source port: 56365 (56365)
    Destination port: http (80)
    [Stream index: 31]
    Sequence number: 153    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x6ea6 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088275, TSecr 55201566
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    386 0.779651    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 386 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x3521 (13601)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1a8f]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56365 (56365), Seq: 1534, Ack: 153, Len: 398
    Source port: http (80)
    Destination port: 56365 (56365)
    [Stream index: 31]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 153    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201567, TSecr 3088275
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 387]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    387 0.779711    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 387 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3522 (13602)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c1c]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56365 (56365), Seq: 1932, Ack: 153, Len: 0
    Source port: http (80)
    Destination port: 56365 (56365)
    [Stream index: 31]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 153    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201567, TSecr 3088275
[Reassembled TCP Segments (1931 bytes): #381(73), #382(1460), #386(398), #387(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:37 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    388 0.780022    192.168.20.52         192.168.20.1          TCP      56365 > http [ACK] Seq=153 Ack=1932 Win=11632 Len=0 TSV=3088277 TSER=55201567

Frame 388 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0937 (2359)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8807 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56365 (56365), Dst Port: http (80), Seq: 153, Ack: 1932, Len: 0
    Source port: 56365 (56365)
    Destination port: http (80)
    [Stream index: 31]
    Sequence number: 153    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0x6c60 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088277, TSecr 55201567

No.     Time        Source                Destination           Protocol Info
    389 0.781024    192.168.20.52         192.168.20.1          TCP      56365 > http [FIN, ACK] Seq=153 Ack=1933 Win=11632 Len=0 TSV=3088277 TSER=55201567

Frame 389 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0938 (2360)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8806 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56365 (56365), Dst Port: http (80), Seq: 153, Ack: 1933, Len: 0
    Source port: 56365 (56365)
    Destination port: http (80)
    [Stream index: 31]
    Sequence number: 153    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0x6c5e [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088277, TSecr 55201567
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    390 0.781026    192.168.20.52         192.168.20.1          TCP      56366 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088277 TSER=0 WS=4

Frame 390 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x645c (25692)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x2cda [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56366 (56366), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56366 (56366)
    Destination port: http (80)
    [Stream index: 32]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0xefb5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088277, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    391 0.781060    192.168.20.1          192.168.20.52         TCP      http > 56365 [ACK] Seq=1933 Ack=154 Win=66560 Len=0 TSV=55201567 TSER=3088277

Frame 391 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3523 (13603)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c1b]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56365 (56365), Seq: 1933, Ack: 154, Len: 0
    Source port: http (80)
    Destination port: 56365 (56365)
    [Stream index: 31]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 154    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201567, TSecr 3088277
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    392 0.781122    192.168.20.1          192.168.20.52         TCP      http > 56366 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201567 TSER=3088277

Frame 392 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x3524 (13604)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c12]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56366 (56366), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56366 (56366)
    [Stream index: 32]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201567, TSecr 3088277
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    393 0.782019    192.168.20.52         192.168.20.1          TCP      56366 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088277 TSER=55201567

Frame 393 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x645d (25693)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x2ce1 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56366 (56366), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56366 (56366)
    Destination port: http (80)
    [Stream index: 32]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xed96 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088277, TSecr 55201567
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    394 0.782022    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy/universe/binary-i386/Packages.gz HTTP/1.1 

Frame 394 (226 bytes on wire, 226 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 212
    Identification: 0x645e (25694)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x2c40 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56366 (56366), Dst Port: http (80), Seq: 1, Ack: 1, Len: 160
    Source port: 56366 (56366)
    Destination port: http (80)
    [Stream index: 32]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 161    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x079d [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088277, TSecr 55201567
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy/universe/binary-i386/Packages.gz HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy/universe/binary-i386/Packages.gz HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy/universe/binary-i386/Packages.gz HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy/universe/binary-i386/Packages.gz
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    395 0.791141    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 395 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x3525 (13605)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bd0]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56366 (56366), Seq: 1, Ack: 161, Len: 73
    Source port: http (80)
    Destination port: 56366 (56366)
    [Stream index: 32]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 161    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201568, TSecr 3088277
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    396 0.791313    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 396 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x3526 (13606)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1664]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56366 (56366), Seq: 74, Ack: 161, Len: 1460
    Source port: http (80)
    Destination port: 56366 (56366)
    [Stream index: 32]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 161    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201568, TSecr 3088277
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 401]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    397 0.792024    192.168.20.52         192.168.20.1          TCP      56366 > http [ACK] Seq=161 Ack=74 Win=5840 Len=0 TSV=3088280 TSER=55201568

Frame 397 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x645f (25695)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x2cdf [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56366 (56366), Dst Port: http (80), Seq: 161, Ack: 74, Len: 0
    Source port: 56366 (56366)
    Destination port: http (80)
    [Stream index: 32]
    Sequence number: 161    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xeca9 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088280, TSecr 55201568

No.     Time        Source                Destination           Protocol Info
    398 0.792026    192.168.20.52         192.168.20.1          TCP      56366 > http [ACK] Seq=161 Ack=1522 Win=8736 Len=0 TSV=3088280 TSER=55201568

Frame 398 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x6460 (25696)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x2cde [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56366 (56366), Dst Port: http (80), Seq: 161, Ack: 1522, Len: 0
    Source port: 56366 (56366)
    Destination port: http (80)
    [Stream index: 32]
    Sequence number: 161    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xe64c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088280, TSecr 55201568

No.     Time        Source                Destination           Protocol Info
    399 0.792027    192.168.20.52         192.168.20.1          TCP      56366 > http [ACK] Seq=161 Ack=1534 Win=8736 Len=0 TSV=3088280 TSER=55201568

Frame 399 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x6461 (25697)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x2cdd [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56366 (56366), Dst Port: http (80), Seq: 161, Ack: 1534, Len: 0
    Source port: 56366 (56366)
    Destination port: http (80)
    [Stream index: 32]
    Sequence number: 161    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xe640 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088280, TSecr 55201568
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    400 0.807482    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 400 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x3528 (13608)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1a88]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56366 (56366), Seq: 1534, Ack: 161, Len: 398
    Source port: http (80)
    Destination port: 56366 (56366)
    [Stream index: 32]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 161    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201570, TSecr 3088280
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 401]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    401 0.807560    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 401 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3529 (13609)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c15]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56366 (56366), Seq: 1932, Ack: 161, Len: 0
    Source port: http (80)
    Destination port: 56366 (56366)
    [Stream index: 32]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 161    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201570, TSecr 3088280
[Reassembled TCP Segments (1931 bytes): #395(73), #396(1460), #400(398), #401(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:37 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    402 0.808023    192.168.20.52         192.168.20.1          TCP      56366 > http [ACK] Seq=161 Ack=1932 Win=11632 Len=0 TSV=3088284 TSER=55201570

Frame 402 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x6462 (25698)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x2cdc [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56366 (56366), Dst Port: http (80), Seq: 161, Ack: 1932, Len: 0
    Source port: 56366 (56366)
    Destination port: http (80)
    [Stream index: 32]
    Sequence number: 161    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0xe3f7 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088284, TSecr 55201570

No.     Time        Source                Destination           Protocol Info
    403 0.809026    192.168.20.52         192.168.20.1          TCP      56366 > http [FIN, ACK] Seq=161 Ack=1933 Win=11632 Len=0 TSV=3088284 TSER=55201570

Frame 403 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x6463 (25699)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x2cdb [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56366 (56366), Dst Port: http (80), Seq: 161, Ack: 1933, Len: 0
    Source port: 56366 (56366)
    Destination port: http (80)
    [Stream index: 32]
    Sequence number: 161    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0xe3f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088284, TSecr 55201570
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    404 0.809029    192.168.20.52         192.168.20.1          TCP      56367 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088284 TSER=0 WS=4

Frame 404 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x823f (33343)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0ef7 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56367 (56367), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56367 (56367)
    Destination port: http (80)
    [Stream index: 33]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0xce2b [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088284, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    405 0.809066    192.168.20.1          192.168.20.52         TCP      http > 56366 [ACK] Seq=1933 Ack=162 Win=66560 Len=0 TSV=55201570 TSER=3088284

Frame 405 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x352a (13610)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c14]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56366 (56366), Seq: 1933, Ack: 162, Len: 0
    Source port: http (80)
    Destination port: 56366 (56366)
    [Stream index: 32]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 162    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201570, TSecr 3088284
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    406 0.809126    192.168.20.1          192.168.20.52         TCP      http > 56367 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201570 TSER=3088284

Frame 406 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x352b (13611)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c0b]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56367 (56367), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56367 (56367)
    [Stream index: 33]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201570, TSecr 3088284
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    407 0.810022    192.168.20.52         192.168.20.1          TCP      56367 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088284 TSER=55201570

Frame 407 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x8240 (33344)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0efe [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56367 (56367), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56367 (56367)
    Destination port: http (80)
    [Stream index: 33]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xc0f3 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088284, TSecr 55201570
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    408 0.810024    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy/universe/source/Sources.gz HTTP/1.1 

Frame 408 (220 bytes on wire, 220 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 206
    Identification: 0x8241 (33345)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0e63 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56367 (56367), Dst Port: http (80), Seq: 1, Ack: 1, Len: 154
    Source port: 56367 (56367)
    Destination port: http (80)
    [Stream index: 33]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 155    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xb091 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088284, TSecr 55201570
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy/universe/source/Sources.gz HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy/universe/source/Sources.gz HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy/universe/source/Sources.gz HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy/universe/source/Sources.gz
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    409 0.835000    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 409 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x352c (13612)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bc9]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56367 (56367), Seq: 1, Ack: 155, Len: 73
    Source port: http (80)
    Destination port: 56367 (56367)
    [Stream index: 33]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 155    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201573, TSecr 3088284
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    410 0.835747    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 410 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x352d (13613)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x165d]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56367 (56367), Seq: 74, Ack: 155, Len: 1460
    Source port: http (80)
    Destination port: 56367 (56367)
    [Stream index: 33]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 155    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201573, TSecr 3088284
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 415]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    411 0.836026    192.168.20.52         192.168.20.1          TCP      56367 > http [ACK] Seq=155 Ack=74 Win=5840 Len=0 TSV=3088291 TSER=55201573

Frame 411 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x8242 (33346)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0efc [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56367 (56367), Dst Port: http (80), Seq: 155, Ack: 74, Len: 0
    Source port: 56367 (56367)
    Destination port: http (80)
    [Stream index: 33]
    Sequence number: 155    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xc006 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088291, TSecr 55201573

No.     Time        Source                Destination           Protocol Info
    412 0.837022    192.168.20.52         192.168.20.1          TCP      56367 > http [ACK] Seq=155 Ack=1522 Win=8736 Len=0 TSV=3088291 TSER=55201573

Frame 412 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x8243 (33347)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0efb [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56367 (56367), Dst Port: http (80), Seq: 155, Ack: 1522, Len: 0
    Source port: 56367 (56367)
    Destination port: http (80)
    [Stream index: 33]
    Sequence number: 155    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xb9a9 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088291, TSecr 55201573

No.     Time        Source                Destination           Protocol Info
    413 0.837024    192.168.20.52         192.168.20.1          TCP      56367 > http [ACK] Seq=155 Ack=1534 Win=8736 Len=0 TSV=3088291 TSER=55201573

Frame 413 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x8244 (33348)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0efa [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56367 (56367), Dst Port: http (80), Seq: 155, Ack: 1534, Len: 0
    Source port: 56367 (56367)
    Destination port: http (80)
    [Stream index: 33]
    Sequence number: 155    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xb99d [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088291, TSecr 55201573
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    414 0.841019    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 414 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x352f (13615)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1a81]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56367 (56367), Seq: 1534, Ack: 155, Len: 398
    Source port: http (80)
    Destination port: 56367 (56367)
    [Stream index: 33]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 155    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201573, TSecr 3088291
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 415]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    415 0.841232    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 415 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3530 (13616)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c0e]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56367 (56367), Seq: 1932, Ack: 155, Len: 0
    Source port: http (80)
    Destination port: 56367 (56367)
    [Stream index: 33]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 155    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201573, TSecr 3088291
[Reassembled TCP Segments (1931 bytes): #409(73), #410(1460), #414(398), #415(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:37 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    416 0.842027    192.168.20.52         192.168.20.1          TCP      56367 > http [ACK] Seq=155 Ack=1932 Win=11632 Len=0 TSV=3088292 TSER=55201573

Frame 416 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x8245 (33349)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0ef9 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56367 (56367), Dst Port: http (80), Seq: 155, Ack: 1932, Len: 0
    Source port: 56367 (56367)
    Destination port: http (80)
    [Stream index: 33]
    Sequence number: 155    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0xb759 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088292, TSecr 55201573

No.     Time        Source                Destination           Protocol Info
    417 0.842029    192.168.20.52         192.168.20.1          TCP      56367 > http [FIN, ACK] Seq=155 Ack=1933 Win=11632 Len=0 TSV=3088292 TSER=55201573

Frame 417 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x8246 (33350)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0ef8 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56367 (56367), Dst Port: http (80), Seq: 155, Ack: 1933, Len: 0
    Source port: 56367 (56367)
    Destination port: http (80)
    [Stream index: 33]
    Sequence number: 155    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0xb757 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088292, TSecr 55201573
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    418 0.842031    192.168.20.52         192.168.20.1          TCP      56368 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088292 TSER=0 WS=4

Frame 418 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x01ec (492)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8f4a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56368 (56368), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56368 (56368)
    Destination port: http (80)
    [Stream index: 34]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x4d92 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088292, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    419 0.842071    192.168.20.1          192.168.20.52         TCP      http > 56367 [ACK] Seq=1933 Ack=156 Win=66560 Len=0 TSV=55201573 TSER=3088292

Frame 419 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3531 (13617)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c0d]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56367 (56367), Seq: 1933, Ack: 156, Len: 0
    Source port: http (80)
    Destination port: 56367 (56367)
    [Stream index: 33]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 156    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201573, TSecr 3088292
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    420 0.842134    192.168.20.1          192.168.20.52         TCP      http > 56368 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201573 TSER=3088292

Frame 420 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x3532 (13618)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c04]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56368 (56368), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56368 (56368)
    [Stream index: 34]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201573, TSecr 3088292
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    421 0.843026    192.168.20.52         192.168.20.1          TCP      56368 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088292 TSER=55201573

Frame 421 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x01ed (493)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8f51 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56368 (56368), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56368 (56368)
    Destination port: http (80)
    [Stream index: 34]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x6446 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088292, TSecr 55201573
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    422 0.843028    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy/multiverse/binary-i386/Packages.gz HTTP/1.1 

Frame 422 (228 bytes on wire, 228 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 214
    Identification: 0x01ee (494)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8eae [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56368 (56368), Dst Port: http (80), Seq: 1, Ack: 1, Len: 162
    Source port: 56368 (56368)
    Destination port: http (80)
    [Stream index: 34]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 163    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x19cf [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088292, TSecr 55201573
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy/multiverse/binary-i386/Packages.gz HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy/multiverse/binary-i386/Packages.gz HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy/multiverse/binary-i386/Packages.gz HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy/multiverse/binary-i386/Packages.gz
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    423 0.869981    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 423 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x3533 (13619)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bc2]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56368 (56368), Seq: 1, Ack: 163, Len: 73
    Source port: http (80)
    Destination port: 56368 (56368)
    [Stream index: 34]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 163    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201576, TSecr 3088292
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    424 0.871050    192.168.20.52         192.168.20.1          TCP      56368 > http [ACK] Seq=163 Ack=74 Win=5840 Len=0 TSV=3088299 TSER=55201576

Frame 424 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x01ef (495)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8f4f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56368 (56368), Dst Port: http (80), Seq: 163, Ack: 74, Len: 0
    Source port: 56368 (56368)
    Destination port: http (80)
    [Stream index: 34]
    Sequence number: 163    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x6351 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088299, TSecr 55201576
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    425 0.873583    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 425 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x3534 (13620)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1656]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56368 (56368), Seq: 74, Ack: 163, Len: 1460
    Source port: http (80)
    Destination port: 56368 (56368)
    [Stream index: 34]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 163    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201576, TSecr 3088299
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 429]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    426 0.874026    192.168.20.52         192.168.20.1          TCP      56368 > http [ACK] Seq=163 Ack=1522 Win=8736 Len=0 TSV=3088300 TSER=55201576

Frame 426 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x01f0 (496)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8f4e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56368 (56368), Dst Port: http (80), Seq: 163, Ack: 1522, Len: 0
    Source port: 56368 (56368)
    Destination port: http (80)
    [Stream index: 34]
    Sequence number: 163    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x5cf3 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088300, TSecr 55201576

No.     Time        Source                Destination           Protocol Info
    427 0.874028    192.168.20.52         192.168.20.1          TCP      56368 > http [ACK] Seq=163 Ack=1534 Win=8736 Len=0 TSV=3088300 TSER=55201576

Frame 427 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x01f1 (497)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8f4d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56368 (56368), Dst Port: http (80), Seq: 163, Ack: 1534, Len: 0
    Source port: 56368 (56368)
    Destination port: http (80)
    [Stream index: 34]
    Sequence number: 163    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x5ce7 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088300, TSecr 55201576
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    428 0.877724    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 428 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x3536 (13622)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1a7a]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56368 (56368), Seq: 1534, Ack: 163, Len: 398
    Source port: http (80)
    Destination port: 56368 (56368)
    [Stream index: 34]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 163    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201577, TSecr 3088300
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 429]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    429 0.877788    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 429 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3537 (13623)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c07]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56368 (56368), Seq: 1932, Ack: 163, Len: 0
    Source port: http (80)
    Destination port: 56368 (56368)
    [Stream index: 34]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 163    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201577, TSecr 3088300
[Reassembled TCP Segments (1931 bytes): #423(73), #425(1460), #428(398), #429(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:37 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    430 0.879031    192.168.20.52         192.168.20.1          TCP      56368 > http [ACK] Seq=163 Ack=1932 Win=11632 Len=0 TSV=3088301 TSER=55201577

Frame 430 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x01f2 (498)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8f4c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56368 (56368), Dst Port: http (80), Seq: 163, Ack: 1932, Len: 0
    Source port: 56368 (56368)
    Destination port: http (80)
    [Stream index: 34]
    Sequence number: 163    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0x5aa2 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088301, TSecr 55201577

No.     Time        Source                Destination           Protocol Info
    431 0.879033    192.168.20.52         192.168.20.1          TCP      56368 > http [FIN, ACK] Seq=163 Ack=1933 Win=11632 Len=0 TSV=3088301 TSER=55201577

Frame 431 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x01f3 (499)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8f4b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56368 (56368), Dst Port: http (80), Seq: 163, Ack: 1933, Len: 0
    Source port: 56368 (56368)
    Destination port: http (80)
    [Stream index: 34]
    Sequence number: 163    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0x5aa0 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088301, TSecr 55201577
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    432 0.879035    192.168.20.52         192.168.20.1          TCP      56369 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088301 TSER=0 WS=4

Frame 432 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0xc624 (50724)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xcb11 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56369 (56369), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56369 (56369)
    Destination port: http (80)
    [Stream index: 35]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x922b [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088301, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    433 0.879080    192.168.20.1          192.168.20.52         TCP      http > 56368 [ACK] Seq=1933 Ack=164 Win=66560 Len=0 TSV=55201577 TSER=3088301

Frame 433 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3538 (13624)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c06]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56368 (56368), Seq: 1933, Ack: 164, Len: 0
    Source port: http (80)
    Destination port: 56368 (56368)
    [Stream index: 34]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 164    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201577, TSecr 3088301
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    434 0.879141    192.168.20.1          192.168.20.52         TCP      http > 56369 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201577 TSER=3088301

Frame 434 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x3539 (13625)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bfd]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56369 (56369), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56369 (56369)
    [Stream index: 35]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201577, TSecr 3088301
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    435 0.880027    192.168.20.52         192.168.20.1          TCP      56369 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088302 TSER=55201577

Frame 435 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xc625 (50725)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xcb18 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56369 (56369), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56369 (56369)
    Destination port: http (80)
    [Stream index: 35]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xd955 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088302, TSecr 55201577
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    436 0.880029    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy/multiverse/source/Sources.gz HTTP/1.1 

Frame 436 (222 bytes on wire, 222 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 208
    Identification: 0xc626 (50726)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xca7b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56369 (56369), Dst Port: http (80), Seq: 1, Ack: 1, Len: 156
    Source port: 56369 (56369)
    Destination port: http (80)
    [Stream index: 35]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 157    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x6476 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088302, TSecr 55201577
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy/multiverse/source/Sources.gz HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy/multiverse/source/Sources.gz HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy/multiverse/source/Sources.gz HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy/multiverse/source/Sources.gz
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    437 0.902269    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 437 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x353a (13626)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bbb]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56369 (56369), Seq: 1, Ack: 157, Len: 73
    Source port: http (80)
    Destination port: 56369 (56369)
    [Stream index: 35]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 157    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201579, TSecr 3088302
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    438 0.902596    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 438 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x353b (13627)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x164f]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56369 (56369), Seq: 74, Ack: 157, Len: 1460
    Source port: http (80)
    Destination port: 56369 (56369)
    [Stream index: 35]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 157    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201579, TSecr 3088302
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 443]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    439 0.903031    192.168.20.52         192.168.20.1          TCP      56369 > http [ACK] Seq=157 Ack=74 Win=5840 Len=0 TSV=3088307 TSER=55201579

Frame 439 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xc627 (50727)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xcb16 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56369 (56369), Dst Port: http (80), Seq: 157, Ack: 74, Len: 0
    Source port: 56369 (56369)
    Destination port: http (80)
    [Stream index: 35]
    Sequence number: 157    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xd869 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088307, TSecr 55201579

No.     Time        Source                Destination           Protocol Info
    440 0.903033    192.168.20.52         192.168.20.1          TCP      56369 > http [ACK] Seq=157 Ack=1522 Win=8736 Len=0 TSV=3088307 TSER=55201579

Frame 440 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xc628 (50728)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xcb15 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56369 (56369), Dst Port: http (80), Seq: 157, Ack: 1522, Len: 0
    Source port: 56369 (56369)
    Destination port: http (80)
    [Stream index: 35]
    Sequence number: 157    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xd20c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088307, TSecr 55201579

No.     Time        Source                Destination           Protocol Info
    441 0.903035    192.168.20.52         192.168.20.1          TCP      56369 > http [ACK] Seq=157 Ack=1534 Win=8736 Len=0 TSV=3088307 TSER=55201579

Frame 441 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xc629 (50729)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xcb14 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56369 (56369), Dst Port: http (80), Seq: 157, Ack: 1534, Len: 0
    Source port: 56369 (56369)
    Destination port: http (80)
    [Stream index: 35]
    Sequence number: 157    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xd200 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088307, TSecr 55201579
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    442 0.906657    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 442 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x353d (13629)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1a73]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56369 (56369), Seq: 1534, Ack: 157, Len: 398
    Source port: http (80)
    Destination port: 56369 (56369)
    [Stream index: 35]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 157    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201580, TSecr 3088307
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 443]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    443 0.906730    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 443 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x353e (13630)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1c00]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56369 (56369), Seq: 1932, Ack: 157, Len: 0
    Source port: http (80)
    Destination port: 56369 (56369)
    [Stream index: 35]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 157    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201580, TSecr 3088307
[Reassembled TCP Segments (1931 bytes): #437(73), #438(1460), #442(398), #443(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:37 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    444 0.907027    192.168.20.52         192.168.20.1          TCP      56369 > http [ACK] Seq=157 Ack=1932 Win=11632 Len=0 TSV=3088308 TSER=55201580

Frame 444 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xc62a (50730)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xcb13 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56369 (56369), Dst Port: http (80), Seq: 157, Ack: 1932, Len: 0
    Source port: 56369 (56369)
    Destination port: http (80)
    [Stream index: 35]
    Sequence number: 157    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0xcfbb [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088308, TSecr 55201580

No.     Time        Source                Destination           Protocol Info
    445 0.908030    192.168.20.52         192.168.20.1          TCP      56369 > http [FIN, ACK] Seq=157 Ack=1933 Win=11632 Len=0 TSV=3088309 TSER=55201580

Frame 445 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xc62b (50731)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xcb12 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56369 (56369), Dst Port: http (80), Seq: 157, Ack: 1933, Len: 0
    Source port: 56369 (56369)
    Destination port: http (80)
    [Stream index: 35]
    Sequence number: 157    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0xcfb8 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088309, TSecr 55201580
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    446 0.908032    192.168.20.52         192.168.20.1          TCP      56370 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088309 TSER=0 WS=4

Frame 446 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x3cca (15562)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x546c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56370 (56370), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56370 (56370)
    Destination port: http (80)
    [Stream index: 36]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x4854 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088309, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    447 0.908069    192.168.20.1          192.168.20.52         TCP      http > 56369 [ACK] Seq=1933 Ack=158 Win=66560 Len=0 TSV=55201580 TSER=3088309

Frame 447 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x353f (13631)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bff]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56369 (56369), Seq: 1933, Ack: 158, Len: 0
    Source port: http (80)
    Destination port: 56369 (56369)
    [Stream index: 35]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 158    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201580, TSecr 3088309
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    448 0.908137    192.168.20.1          192.168.20.52         TCP      http > 56370 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201580 TSER=3088309

Frame 448 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x3540 (13632)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bf6]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56370 (56370), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56370 (56370)
    [Stream index: 36]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201580, TSecr 3088309
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    449 0.909033    192.168.20.52         192.168.20.1          TCP      56370 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088309 TSER=55201580

Frame 449 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3ccb (15563)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x5473 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56370 (56370), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56370 (56370)
    Destination port: http (80)
    [Stream index: 36]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x6200 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088309, TSecr 55201580
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    450 0.909036    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy-updates/main/binary-i386/Packages.gz HTTP/1.1 

Frame 450 (230 bytes on wire, 230 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 216
    Identification: 0x3ccc (15564)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x53ce [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56370 (56370), Dst Port: http (80), Seq: 1, Ack: 1, Len: 164
    Source port: 56370 (56370)
    Destination port: http (80)
    [Stream index: 36]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 165    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x9b8a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088309, TSecr 55201580
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy-updates/main/binary-i386/Packages.gz HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy-updates/main/binary-i386/Packages.gz HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy-updates/main/binary-i386/Packages.gz HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy-updates/main/binary-i386/Packages.gz
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    451 0.927015    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 451 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x3541 (13633)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bb4]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56370 (56370), Seq: 1, Ack: 165, Len: 73
    Source port: http (80)
    Destination port: 56370 (56370)
    [Stream index: 36]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 165    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201582, TSecr 3088309
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    452 0.927239    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 452 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x3542 (13634)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1648]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56370 (56370), Seq: 74, Ack: 165, Len: 1460
    Source port: http (80)
    Destination port: 56370 (56370)
    [Stream index: 36]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 165    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201582, TSecr 3088309
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 457]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    453 0.928031    192.168.20.52         192.168.20.1          TCP      56370 > http [ACK] Seq=165 Ack=74 Win=5840 Len=0 TSV=3088314 TSER=55201582

Frame 453 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3ccd (15565)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x5471 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56370 (56370), Dst Port: http (80), Seq: 165, Ack: 74, Len: 0
    Source port: 56370 (56370)
    Destination port: http (80)
    [Stream index: 36]
    Sequence number: 165    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x610c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088314, TSecr 55201582

No.     Time        Source                Destination           Protocol Info
    454 0.928033    192.168.20.52         192.168.20.1          TCP      56370 > http [ACK] Seq=165 Ack=1522 Win=8736 Len=0 TSV=3088314 TSER=55201582

Frame 454 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3cce (15566)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x5470 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56370 (56370), Dst Port: http (80), Seq: 165, Ack: 1522, Len: 0
    Source port: 56370 (56370)
    Destination port: http (80)
    [Stream index: 36]
    Sequence number: 165    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x5aaf [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088314, TSecr 55201582

No.     Time        Source                Destination           Protocol Info
    455 0.928034    192.168.20.52         192.168.20.1          TCP      56370 > http [ACK] Seq=165 Ack=1534 Win=8736 Len=0 TSV=3088314 TSER=55201582

Frame 455 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3ccf (15567)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x546f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56370 (56370), Dst Port: http (80), Seq: 165, Ack: 1534, Len: 0
    Source port: 56370 (56370)
    Destination port: http (80)
    [Stream index: 36]
    Sequence number: 165    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x5aa3 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088314, TSecr 55201582
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    456 0.930549    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 456 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x3544 (13636)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1a6c]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56370 (56370), Seq: 1534, Ack: 165, Len: 398
    Source port: http (80)
    Destination port: 56370 (56370)
    [Stream index: 36]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 165    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201582, TSecr 3088314
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 457]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    457 0.930607    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 457 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3545 (13637)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bf9]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56370 (56370), Seq: 1932, Ack: 165, Len: 0
    Source port: http (80)
    Destination port: 56370 (56370)
    [Stream index: 36]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 165    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201582, TSecr 3088314
[Reassembled TCP Segments (1931 bytes): #451(73), #452(1460), #456(398), #457(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:37 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    458 0.931032    192.168.20.52         192.168.20.1          TCP      56370 > http [ACK] Seq=165 Ack=1932 Win=11632 Len=0 TSV=3088314 TSER=55201582

Frame 458 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3cd0 (15568)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x546e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56370 (56370), Dst Port: http (80), Seq: 165, Ack: 1932, Len: 0
    Source port: 56370 (56370)
    Destination port: http (80)
    [Stream index: 36]
    Sequence number: 165    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0x5860 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088314, TSecr 55201582

No.     Time        Source                Destination           Protocol Info
    459 0.932031    192.168.20.52         192.168.20.1          TCP      56370 > http [FIN, ACK] Seq=165 Ack=1933 Win=11632 Len=0 TSV=3088315 TSER=55201582

Frame 459 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3cd1 (15569)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x546d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56370 (56370), Dst Port: http (80), Seq: 165, Ack: 1933, Len: 0
    Source port: 56370 (56370)
    Destination port: http (80)
    [Stream index: 36]
    Sequence number: 165    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0x585d [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088315, TSecr 55201582
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    460 0.932034    192.168.20.52         192.168.20.1          TCP      56371 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088315 TSER=0 WS=4

Frame 460 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x2c96 (11414)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x64a0 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56371 (56371), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56371 (56371)
    Destination port: http (80)
    [Stream index: 37]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x3864 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088315, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    461 0.932063    192.168.20.1          192.168.20.52         TCP      http > 56370 [ACK] Seq=1933 Ack=166 Win=66560 Len=0 TSV=55201582 TSER=3088315

Frame 461 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3546 (13638)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bf8]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56370 (56370), Seq: 1933, Ack: 166, Len: 0
    Source port: http (80)
    Destination port: 56370 (56370)
    [Stream index: 36]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 166    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201582, TSecr 3088315
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    462 0.932119    192.168.20.1          192.168.20.52         TCP      http > 56371 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201582 TSER=3088315

Frame 462 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x3547 (13639)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bef]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56371 (56371), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56371 (56371)
    [Stream index: 37]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201582, TSecr 3088315
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    463 0.933031    192.168.20.52         192.168.20.1          TCP      56371 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088315 TSER=55201582

Frame 463 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2c97 (11415)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x64a7 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56371 (56371), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56371 (56371)
    Destination port: http (80)
    [Stream index: 37]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xf1a2 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088315, TSecr 55201582
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    464 0.933033    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy-updates/restricted/binary-i386/Packages.gz HTTP/1.1 

Frame 464 (236 bytes on wire, 236 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 222
    Identification: 0x2c98 (11416)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x63fc [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56371 (56371), Dst Port: http (80), Seq: 1, Ack: 1, Len: 170
    Source port: 56371 (56371)
    Destination port: http (80)
    [Stream index: 37]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 171    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xe0da [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088315, TSecr 55201582
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy-updates/restricted/binary-i386/Packages.gz HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy-updates/restricted/binary-i386/Packages.gz HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy-updates/restricted/binary-i386/Packages.gz HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy-updates/restricted/binary-i386/Packages.gz
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    465 0.953349    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 465 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x3548 (13640)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bad]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56371 (56371), Seq: 1, Ack: 171, Len: 73
    Source port: http (80)
    Destination port: 56371 (56371)
    [Stream index: 37]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 171    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201584, TSecr 3088315
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    466 0.953855    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 466 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x3549 (13641)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1641]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56371 (56371), Seq: 74, Ack: 171, Len: 1460
    Source port: http (80)
    Destination port: 56371 (56371)
    [Stream index: 37]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 171    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201584, TSecr 3088315
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 471]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    467 0.954031    192.168.20.52         192.168.20.1          TCP      56371 > http [ACK] Seq=171 Ack=74 Win=5840 Len=0 TSV=3088320 TSER=55201584

Frame 467 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2c99 (11417)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x64a5 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56371 (56371), Dst Port: http (80), Seq: 171, Ack: 74, Len: 0
    Source port: 56371 (56371)
    Destination port: http (80)
    [Stream index: 37]
    Sequence number: 171    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xf0a8 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088320, TSecr 55201584

No.     Time        Source                Destination           Protocol Info
    468 0.955033    192.168.20.52         192.168.20.1          TCP      56371 > http [ACK] Seq=171 Ack=1522 Win=8736 Len=0 TSV=3088320 TSER=55201584

Frame 468 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2c9a (11418)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x64a4 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56371 (56371), Dst Port: http (80), Seq: 171, Ack: 1522, Len: 0
    Source port: 56371 (56371)
    Destination port: http (80)
    [Stream index: 37]
    Sequence number: 171    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xea4b [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088320, TSecr 55201584

No.     Time        Source                Destination           Protocol Info
    469 0.955035    192.168.20.52         192.168.20.1          TCP      56371 > http [ACK] Seq=171 Ack=1534 Win=8736 Len=0 TSV=3088320 TSER=55201584

Frame 469 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2c9b (11419)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x64a3 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56371 (56371), Dst Port: http (80), Seq: 171, Ack: 1534, Len: 0
    Source port: 56371 (56371)
    Destination port: http (80)
    [Stream index: 37]
    Sequence number: 171    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xea3f [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088320, TSecr 55201584
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    470 0.958785    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 470 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x354b (13643)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1a65]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56371 (56371), Seq: 1534, Ack: 171, Len: 398
    Source port: http (80)
    Destination port: 56371 (56371)
    [Stream index: 37]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 171    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201585, TSecr 3088320
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 471]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    471 0.958903    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 471 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x354c (13644)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bf2]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56371 (56371), Seq: 1932, Ack: 171, Len: 0
    Source port: http (80)
    Destination port: 56371 (56371)
    [Stream index: 37]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 171    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201585, TSecr 3088320
[Reassembled TCP Segments (1931 bytes): #465(73), #466(1460), #470(398), #471(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:37 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    472 0.960032    192.168.20.52         192.168.20.1          TCP      56371 > http [ACK] Seq=171 Ack=1932 Win=11632 Len=0 TSV=3088321 TSER=55201585

Frame 472 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2c9c (11420)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x64a2 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56371 (56371), Dst Port: http (80), Seq: 171, Ack: 1932, Len: 0
    Source port: 56371 (56371)
    Destination port: http (80)
    [Stream index: 37]
    Sequence number: 171    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0xe7fa [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088321, TSecr 55201585

No.     Time        Source                Destination           Protocol Info
    473 0.960034    192.168.20.52         192.168.20.1          TCP      56371 > http [FIN, ACK] Seq=171 Ack=1933 Win=11632 Len=0 TSV=3088322 TSER=55201585

Frame 473 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x2c9d (11421)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x64a1 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56371 (56371), Dst Port: http (80), Seq: 171, Ack: 1933, Len: 0
    Source port: 56371 (56371)
    Destination port: http (80)
    [Stream index: 37]
    Sequence number: 171    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0xe7f7 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088322, TSecr 55201585
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    474 0.960036    192.168.20.52         192.168.20.1          TCP      56372 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088322 TSER=0 WS=4

Frame 474 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0xec08 (60424)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xa52d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56372 (56372), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56372 (56372)
    Destination port: http (80)
    [Stream index: 38]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x7777 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088322, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    475 0.960115    192.168.20.1          192.168.20.52         TCP      http > 56371 [ACK] Seq=1933 Ack=172 Win=66560 Len=0 TSV=55201585 TSER=3088322

Frame 475 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x354d (13645)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bf1]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56371 (56371), Seq: 1933, Ack: 172, Len: 0
    Source port: http (80)
    Destination port: 56371 (56371)
    [Stream index: 37]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 172    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201585, TSecr 3088322
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    476 0.960179    192.168.20.1          192.168.20.52         TCP      http > 56372 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201585 TSER=3088322

Frame 476 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x354e (13646)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1be8]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56372 (56372), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56372 (56372)
    [Stream index: 38]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201585, TSecr 3088322
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    477 0.961034    192.168.20.52         192.168.20.1          TCP      56372 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088322 TSER=55201585

Frame 477 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xec09 (60425)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xa534 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56372 (56372), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56372 (56372)
    Destination port: http (80)
    [Stream index: 38]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xb89b [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088322, TSecr 55201585
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    478 0.961037    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy-updates/extras/binary-i386/Packages.gz HTTP/1.1 

Frame 478 (232 bytes on wire, 232 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 218
    Identification: 0xec0a (60426)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xa48d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56372 (56372), Dst Port: http (80), Seq: 1, Ack: 1, Len: 166
    Source port: 56372 (56372)
    Destination port: http (80)
    [Stream index: 38]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 167    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x8d95 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088322, TSecr 55201585
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy-updates/extras/binary-i386/Packages.gz HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy-updates/extras/binary-i386/Packages.gz HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy-updates/extras/binary-i386/Packages.gz HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy-updates/extras/binary-i386/Packages.gz
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    479 0.989580    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 479 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x354f (13647)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1ba6]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56372 (56372), Seq: 1, Ack: 167, Len: 73
    Source port: http (80)
    Destination port: 56372 (56372)
    [Stream index: 38]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 167    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201588, TSecr 3088322
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    480 0.989923    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 480 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x3550 (13648)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x163a]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56372 (56372), Seq: 74, Ack: 167, Len: 1460
    Source port: http (80)
    Destination port: 56372 (56372)
    [Stream index: 38]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 167    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201588, TSecr 3088322
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 485]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    481 0.990034    192.168.20.52         192.168.20.1          TCP      56372 > http [ACK] Seq=167 Ack=74 Win=5840 Len=0 TSV=3088329 TSER=55201588

Frame 481 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xec0b (60427)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xa532 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56372 (56372), Dst Port: http (80), Seq: 167, Ack: 74, Len: 0
    Source port: 56372 (56372)
    Destination port: http (80)
    [Stream index: 38]
    Sequence number: 167    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xb7a2 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088329, TSecr 55201588

No.     Time        Source                Destination           Protocol Info
    482 0.991058    192.168.20.52         192.168.20.1          TCP      56372 > http [ACK] Seq=167 Ack=1522 Win=8736 Len=0 TSV=3088329 TSER=55201588

Frame 482 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xec0c (60428)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xa531 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56372 (56372), Dst Port: http (80), Seq: 167, Ack: 1522, Len: 0
    Source port: 56372 (56372)
    Destination port: http (80)
    [Stream index: 38]
    Sequence number: 167    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xb145 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088329, TSecr 55201588

No.     Time        Source                Destination           Protocol Info
    483 0.991060    192.168.20.52         192.168.20.1          TCP      56372 > http [ACK] Seq=167 Ack=1534 Win=8736 Len=0 TSV=3088329 TSER=55201588

Frame 483 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xec0d (60429)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xa530 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56372 (56372), Dst Port: http (80), Seq: 167, Ack: 1534, Len: 0
    Source port: 56372 (56372)
    Destination port: http (80)
    [Stream index: 38]
    Sequence number: 167    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0xb139 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088329, TSecr 55201588
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    484 0.995606    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 484 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x3552 (13650)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1a5e]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56372 (56372), Seq: 1534, Ack: 167, Len: 398
    Source port: http (80)
    Destination port: 56372 (56372)
    [Stream index: 38]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 167    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201589, TSecr 3088329
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 485]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    485 0.995682    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 485 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3553 (13651)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1beb]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56372 (56372), Seq: 1932, Ack: 167, Len: 0
    Source port: http (80)
    Destination port: 56372 (56372)
    [Stream index: 38]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 167    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201589, TSecr 3088329
[Reassembled TCP Segments (1931 bytes): #479(73), #480(1460), #484(398), #485(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:37 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    486 0.996035    192.168.20.52         192.168.20.1          TCP      56372 > http [ACK] Seq=167 Ack=1932 Win=11632 Len=0 TSV=3088331 TSER=55201589

Frame 486 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xec0e (60430)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xa52f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56372 (56372), Dst Port: http (80), Seq: 167, Ack: 1932, Len: 0
    Source port: 56372 (56372)
    Destination port: http (80)
    [Stream index: 38]
    Sequence number: 167    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0xaef3 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088331, TSecr 55201589

No.     Time        Source                Destination           Protocol Info
    487 0.997034    192.168.20.52         192.168.20.1          TCP      56372 > http [FIN, ACK] Seq=167 Ack=1933 Win=11632 Len=0 TSV=3088331 TSER=55201589

Frame 487 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xec0f (60431)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xa52e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56372 (56372), Dst Port: http (80), Seq: 167, Ack: 1933, Len: 0
    Source port: 56372 (56372)
    Destination port: http (80)
    [Stream index: 38]
    Sequence number: 167    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0xaef1 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088331, TSecr 55201589
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    488 0.997036    192.168.20.52         192.168.20.1          TCP      56373 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088331 TSER=0 WS=4

Frame 488 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x82b9 (33465)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0e7d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56373 (56373), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56373 (56373)
    Destination port: http (80)
    [Stream index: 39]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0xce20 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088331, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    489 0.997066    192.168.20.1          192.168.20.52         TCP      http > 56372 [ACK] Seq=1933 Ack=168 Win=66560 Len=0 TSV=55201589 TSER=3088331

Frame 489 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3554 (13652)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bea]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56372 (56372), Seq: 1933, Ack: 168, Len: 0
    Source port: http (80)
    Destination port: 56372 (56372)
    [Stream index: 38]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 168    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201589, TSecr 3088331
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    490 0.997122    192.168.20.1          192.168.20.52         TCP      http > 56373 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201589 TSER=3088331

Frame 490 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x3555 (13653)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1be1]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56373 (56373), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56373 (56373)
    [Stream index: 39]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201589, TSecr 3088331
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    491 0.998033    192.168.20.52         192.168.20.1          TCP      56373 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088331 TSER=55201589

Frame 491 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x82ba (33466)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0e84 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56373 (56373), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56373 (56373)
    Destination port: http (80)
    [Stream index: 39]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x6d2d [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088331, TSecr 55201589
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    492 0.998035    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy-updates/main/source/Sources.gz HTTP/1.1 

Frame 492 (224 bytes on wire, 224 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 210
    Identification: 0x82bb (33467)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0de5 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56373 (56373), Dst Port: http (80), Seq: 1, Ack: 1, Len: 158
    Source port: 56373 (56373)
    Destination port: http (80)
    [Stream index: 39]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 159    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x7c4f [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088331, TSecr 55201589
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy-updates/main/source/Sources.gz HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy-updates/main/source/Sources.gz HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy-updates/main/source/Sources.gz HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy-updates/main/source/Sources.gz
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    493 1.028362    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 493 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x3556 (13654)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1b9f]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56373 (56373), Seq: 1, Ack: 159, Len: 73
    Source port: http (80)
    Destination port: 56373 (56373)
    [Stream index: 39]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 159    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201592, TSecr 3088331
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    494 1.028824    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 494 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x3557 (13655)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1633]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56373 (56373), Seq: 74, Ack: 159, Len: 1460
    Source port: http (80)
    Destination port: 56373 (56373)
    [Stream index: 39]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 159    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201592, TSecr 3088331
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 499]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    495 1.029035    192.168.20.52         192.168.20.1          TCP      56373 > http [ACK] Seq=159 Ack=74 Win=5840 Len=0 TSV=3088339 TSER=55201592

Frame 495 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x82bc (33468)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0e82 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56373 (56373), Dst Port: http (80), Seq: 159, Ack: 74, Len: 0
    Source port: 56373 (56373)
    Destination port: http (80)
    [Stream index: 39]
    Sequence number: 159    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x6c3b [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088339, TSecr 55201592

No.     Time        Source                Destination           Protocol Info
    496 1.030035    192.168.20.52         192.168.20.1          TCP      56373 > http [ACK] Seq=159 Ack=1522 Win=8736 Len=0 TSV=3088339 TSER=55201592

Frame 496 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x82bd (33469)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0e81 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56373 (56373), Dst Port: http (80), Seq: 159, Ack: 1522, Len: 0
    Source port: 56373 (56373)
    Destination port: http (80)
    [Stream index: 39]
    Sequence number: 159    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x65de [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088339, TSecr 55201592

No.     Time        Source                Destination           Protocol Info
    497 1.030037    192.168.20.52         192.168.20.1          TCP      56373 > http [ACK] Seq=159 Ack=1534 Win=8736 Len=0 TSV=3088339 TSER=55201592

Frame 497 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x82be (33470)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0e80 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56373 (56373), Dst Port: http (80), Seq: 159, Ack: 1534, Len: 0
    Source port: 56373 (56373)
    Destination port: http (80)
    [Stream index: 39]
    Sequence number: 159    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x65d2 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088339, TSecr 55201592
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    498 1.032457    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 498 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x3559 (13657)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1a57]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56373 (56373), Seq: 1534, Ack: 159, Len: 398
    Source port: http (80)
    Destination port: 56373 (56373)
    [Stream index: 39]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 159    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201592, TSecr 3088339
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 499]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    499 1.032519    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 499 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x355a (13658)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1be4]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56373 (56373), Seq: 1932, Ack: 159, Len: 0
    Source port: http (80)
    Destination port: 56373 (56373)
    [Stream index: 39]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 159    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201592, TSecr 3088339
[Reassembled TCP Segments (1931 bytes): #493(73), #494(1460), #498(398), #499(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:37 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    500 1.033035    192.168.20.52         192.168.20.1          TCP      56373 > http [ACK] Seq=159 Ack=1932 Win=11632 Len=0 TSV=3088340 TSER=55201592

Frame 500 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x82bf (33471)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0e7f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56373 (56373), Dst Port: http (80), Seq: 159, Ack: 1932, Len: 0
    Source port: 56373 (56373)
    Destination port: http (80)
    [Stream index: 39]
    Sequence number: 159    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0x638e [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088340, TSecr 55201592

No.     Time        Source                Destination           Protocol Info
    501 1.034032    192.168.20.52         192.168.20.1          TCP      56373 > http [FIN, ACK] Seq=159 Ack=1933 Win=11632 Len=0 TSV=3088340 TSER=55201592

Frame 501 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x82c0 (33472)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0e7e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56373 (56373), Dst Port: http (80), Seq: 159, Ack: 1933, Len: 0
    Source port: 56373 (56373)
    Destination port: http (80)
    [Stream index: 39]
    Sequence number: 159    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0x638c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088340, TSecr 55201592
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    502 1.034034    192.168.20.52         192.168.20.1          TCP      56374 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088340 TSER=0 WS=4

Frame 502 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x395e (14686)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x57d8 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56374 (56374), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56374 (56374)
    Destination port: http (80)
    [Stream index: 40]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x44f4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088340, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    503 1.034054    192.168.20.1          192.168.20.52         TCP      http > 56373 [ACK] Seq=1933 Ack=160 Win=66560 Len=0 TSV=55201592 TSER=3088340

Frame 503 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x355b (13659)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1be3]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56373 (56373), Seq: 1933, Ack: 160, Len: 0
    Source port: http (80)
    Destination port: 56373 (56373)
    [Stream index: 39]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 160    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201592, TSecr 3088340
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    504 1.034108    192.168.20.1          192.168.20.52         TCP      http > 56374 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201592 TSER=3088340

Frame 504 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x355c (13660)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bda]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56374 (56374), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56374 (56374)
    [Stream index: 40]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201592, TSecr 3088340
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    505 1.035033    192.168.20.52         192.168.20.1          TCP      56374 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088340 TSER=55201592

Frame 505 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x395f (14687)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x57df [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56374 (56374), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56374 (56374)
    Destination port: http (80)
    [Stream index: 40]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x8837 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088340, TSecr 55201592
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    506 1.035035    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy-updates/restricted/source/Sources.gz HTTP/1.1 

Frame 506 (230 bytes on wire, 230 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 216
    Identification: 0x3960 (14688)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x573a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56374 (56374), Dst Port: http (80), Seq: 1, Ack: 1, Len: 164
    Source port: 56374 (56374)
    Destination port: http (80)
    [Stream index: 40]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 165    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x4d07 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088340, TSecr 55201592
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy-updates/restricted/source/Sources.gz HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy-updates/restricted/source/Sources.gz HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy-updates/restricted/source/Sources.gz HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy-updates/restricted/source/Sources.gz
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    507 1.058182    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 507 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x355d (13661)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1b98]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56374 (56374), Seq: 1, Ack: 165, Len: 73
    Source port: http (80)
    Destination port: 56374 (56374)
    [Stream index: 40]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 165    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201595, TSecr 3088340
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    508 1.058423    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 508 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x355e (13662)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x162c]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56374 (56374), Seq: 74, Ack: 165, Len: 1460
    Source port: http (80)
    Destination port: 56374 (56374)
    [Stream index: 40]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 165    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201595, TSecr 3088340
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 513]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    509 1.059039    192.168.20.52         192.168.20.1          TCP      56374 > http [ACK] Seq=165 Ack=74 Win=5840 Len=0 TSV=3088346 TSER=55201595

Frame 509 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3961 (14689)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x57dd [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56374 (56374), Dst Port: http (80), Seq: 165, Ack: 74, Len: 0
    Source port: 56374 (56374)
    Destination port: http (80)
    [Stream index: 40]
    Sequence number: 165    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x8741 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088346, TSecr 55201595

No.     Time        Source                Destination           Protocol Info
    510 1.059041    192.168.20.52         192.168.20.1          TCP      56374 > http [ACK] Seq=165 Ack=1522 Win=8736 Len=0 TSV=3088346 TSER=55201595

Frame 510 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3962 (14690)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x57dc [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56374 (56374), Dst Port: http (80), Seq: 165, Ack: 1522, Len: 0
    Source port: 56374 (56374)
    Destination port: http (80)
    [Stream index: 40]
    Sequence number: 165    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x80e4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088346, TSecr 55201595

No.     Time        Source                Destination           Protocol Info
    511 1.059043    192.168.20.52         192.168.20.1          TCP      56374 > http [ACK] Seq=165 Ack=1534 Win=8736 Len=0 TSV=3088346 TSER=55201595

Frame 511 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3963 (14691)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x57db [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56374 (56374), Dst Port: http (80), Seq: 165, Ack: 1534, Len: 0
    Source port: 56374 (56374)
    Destination port: http (80)
    [Stream index: 40]
    Sequence number: 165    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x80d8 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088346, TSecr 55201595
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    512 1.061181    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 512 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x3560 (13664)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1a50]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56374 (56374), Seq: 1534, Ack: 165, Len: 398
    Source port: http (80)
    Destination port: 56374 (56374)
    [Stream index: 40]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 165    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201595, TSecr 3088346
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 513]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    513 1.061253    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 513 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3561 (13665)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bdd]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56374 (56374), Seq: 1932, Ack: 165, Len: 0
    Source port: http (80)
    Destination port: 56374 (56374)
    [Stream index: 40]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 165    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201595, TSecr 3088346
[Reassembled TCP Segments (1931 bytes): #507(73), #508(1460), #512(398), #513(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:37 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    514 1.062040    192.168.20.52         192.168.20.1          TCP      56374 > http [ACK] Seq=165 Ack=1932 Win=11632 Len=0 TSV=3088347 TSER=55201595

Frame 514 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3964 (14692)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x57da [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56374 (56374), Dst Port: http (80), Seq: 165, Ack: 1932, Len: 0
    Source port: 56374 (56374)
    Destination port: http (80)
    [Stream index: 40]
    Sequence number: 165    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0x7e94 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088347, TSecr 55201595

No.     Time        Source                Destination           Protocol Info
    515 1.062042    192.168.20.52         192.168.20.1          TCP      56374 > http [FIN, ACK] Seq=165 Ack=1933 Win=11632 Len=0 TSV=3088347 TSER=55201595

Frame 515 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3965 (14693)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x57d9 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56374 (56374), Dst Port: http (80), Seq: 165, Ack: 1933, Len: 0
    Source port: 56374 (56374)
    Destination port: http (80)
    [Stream index: 40]
    Sequence number: 165    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0x7e92 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088347, TSecr 55201595
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    516 1.062044    192.168.20.52         192.168.20.1          TCP      56375 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088347 TSER=0 WS=4

Frame 516 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0xd18d (53645)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xbfa8 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56375 (56375), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56375 (56375)
    Destination port: http (80)
    [Stream index: 41]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x9d0e [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088347, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    517 1.062078    192.168.20.1          192.168.20.52         TCP      http > 56374 [ACK] Seq=1933 Ack=166 Win=66560 Len=0 TSV=55201595 TSER=3088347

Frame 517 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3562 (13666)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bdc]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56374 (56374), Seq: 1933, Ack: 166, Len: 0
    Source port: http (80)
    Destination port: 56374 (56374)
    [Stream index: 40]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 166    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201595, TSecr 3088347
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    518 1.062141    192.168.20.1          192.168.20.52         TCP      http > 56375 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201595 TSER=3088347

Frame 518 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x3563 (13667)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bd3]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56375 (56375), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56375 (56375)
    [Stream index: 41]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201595, TSecr 3088347
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    519 1.063041    192.168.20.52         192.168.20.1          TCP      56375 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088347 TSER=55201595

Frame 519 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xd18e (53646)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xbfaf [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56375 (56375), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56375 (56375)
    Destination port: http (80)
    [Stream index: 41]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x8a4a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088347, TSecr 55201595
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    520 1.063043    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy-updates/extras/source/Sources.gz HTTP/1.1 

Frame 520 (226 bytes on wire, 226 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 212
    Identification: 0xd18f (53647)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xbf0e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56375 (56375), Dst Port: http (80), Seq: 1, Ack: 1, Len: 160
    Source port: 56375 (56375)
    Destination port: http (80)
    [Stream index: 41]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 161    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x34dc [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088347, TSecr 55201595
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy-updates/extras/source/Sources.gz HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy-updates/extras/source/Sources.gz HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy-updates/extras/source/Sources.gz HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy-updates/extras/source/Sources.gz
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    521 1.079736    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 521 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x3564 (13668)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1b91]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56375 (56375), Seq: 1, Ack: 161, Len: 73
    Source port: http (80)
    Destination port: 56375 (56375)
    [Stream index: 41]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 161    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201597, TSecr 3088347
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    522 1.079994    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 522 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x3565 (13669)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1625]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56375 (56375), Seq: 74, Ack: 161, Len: 1460
    Source port: http (80)
    Destination port: 56375 (56375)
    [Stream index: 41]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 161    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201597, TSecr 3088347
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 527]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    523 1.081046    192.168.20.52         192.168.20.1          TCP      56375 > http [ACK] Seq=161 Ack=74 Win=5840 Len=0 TSV=3088352 TSER=55201597

Frame 523 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xd190 (53648)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xbfad [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56375 (56375), Dst Port: http (80), Seq: 161, Ack: 74, Len: 0
    Source port: 56375 (56375)
    Destination port: http (80)
    [Stream index: 41]
    Sequence number: 161    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x895a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088352, TSecr 55201597

No.     Time        Source                Destination           Protocol Info
    524 1.081048    192.168.20.52         192.168.20.1          TCP      56375 > http [ACK] Seq=161 Ack=1522 Win=8736 Len=0 TSV=3088352 TSER=55201597

Frame 524 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xd191 (53649)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xbfac [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56375 (56375), Dst Port: http (80), Seq: 161, Ack: 1522, Len: 0
    Source port: 56375 (56375)
    Destination port: http (80)
    [Stream index: 41]
    Sequence number: 161    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x82fd [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088352, TSecr 55201597

No.     Time        Source                Destination           Protocol Info
    525 1.081050    192.168.20.52         192.168.20.1          TCP      56375 > http [ACK] Seq=161 Ack=1534 Win=8736 Len=0 TSV=3088352 TSER=55201597

Frame 525 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xd192 (53650)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xbfab [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56375 (56375), Dst Port: http (80), Seq: 161, Ack: 1534, Len: 0
    Source port: 56375 (56375)
    Destination port: http (80)
    [Stream index: 41]
    Sequence number: 161    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x82f1 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088352, TSecr 55201597
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    526 1.083420    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 526 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x3567 (13671)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1a49]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56375 (56375), Seq: 1534, Ack: 161, Len: 398
    Source port: http (80)
    Destination port: 56375 (56375)
    [Stream index: 41]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 161    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201597, TSecr 3088352
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 527]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    527 1.083496    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 527 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3568 (13672)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bd6]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56375 (56375), Seq: 1932, Ack: 161, Len: 0
    Source port: http (80)
    Destination port: 56375 (56375)
    [Stream index: 41]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 161    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201597, TSecr 3088352
[Reassembled TCP Segments (1931 bytes): #521(73), #522(1460), #526(398), #527(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:37 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    528 1.084038    192.168.20.52         192.168.20.1          TCP      56375 > http [ACK] Seq=161 Ack=1932 Win=11632 Len=0 TSV=3088353 TSER=55201597

Frame 528 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xd193 (53651)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xbfaa [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56375 (56375), Dst Port: http (80), Seq: 161, Ack: 1932, Len: 0
    Source port: 56375 (56375)
    Destination port: http (80)
    [Stream index: 41]
    Sequence number: 161    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0x80ad [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088353, TSecr 55201597

No.     Time        Source                Destination           Protocol Info
    529 1.085038    192.168.20.52         192.168.20.1          TCP      56375 > http [FIN, ACK] Seq=161 Ack=1933 Win=11632 Len=0 TSV=3088353 TSER=55201597

Frame 529 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xd194 (53652)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xbfa9 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56375 (56375), Dst Port: http (80), Seq: 161, Ack: 1933, Len: 0
    Source port: 56375 (56375)
    Destination port: http (80)
    [Stream index: 41]
    Sequence number: 161    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0x80ab [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088353, TSecr 55201597
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    530 1.085040    192.168.20.52         192.168.20.1          TCP      56376 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088353 TSER=0 WS=4

Frame 530 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x0488 (1160)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8cae [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56376 (56376), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56376 (56376)
    Destination port: http (80)
    [Stream index: 42]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0x506e [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088353, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    531 1.085066    192.168.20.1          192.168.20.52         TCP      http > 56375 [ACK] Seq=1933 Ack=162 Win=66560 Len=0 TSV=55201598 TSER=3088353

Frame 531 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3569 (13673)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bd5]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56375 (56375), Seq: 1933, Ack: 162, Len: 0
    Source port: http (80)
    Destination port: 56375 (56375)
    [Stream index: 41]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 162    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201598, TSecr 3088353
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    532 1.085125    192.168.20.1          192.168.20.52         TCP      http > 56376 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201598 TSER=3088353

Frame 532 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x356a (13674)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bcc]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56376 (56376), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56376 (56376)
    [Stream index: 42]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201598, TSecr 3088353
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    533 1.086041    192.168.20.52         192.168.20.1          TCP      56376 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088353 TSER=55201598

Frame 533 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x0489 (1161)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8cb5 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56376 (56376), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56376 (56376)
    Destination port: http (80)
    [Stream index: 42]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x49e4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088353, TSecr 55201598
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    534 1.086045    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy-updates/universe/binary-i386/Packages.gz HTTP/1.1 

Frame 534 (234 bytes on wire, 234 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 220
    Identification: 0x048a (1162)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8c0c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56376 (56376), Dst Port: http (80), Seq: 1, Ack: 1, Len: 168
    Source port: 56376 (56376)
    Destination port: http (80)
    [Stream index: 42]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 169    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xa27d [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088353, TSecr 55201598
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy-updates/universe/binary-i386/Packages.gz HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy-updates/universe/binary-i386/Packages.gz HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy-updates/universe/binary-i386/Packages.gz HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy-updates/universe/binary-i386/Packages.gz
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    535 1.099468    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 535 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x356b (13675)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1b8a]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56376 (56376), Seq: 1, Ack: 169, Len: 73
    Source port: http (80)
    Destination port: 56376 (56376)
    [Stream index: 42]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 169    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201599, TSecr 3088353
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    536 1.099677    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 536 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x356c (13676)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x161e]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56376 (56376), Seq: 74, Ack: 169, Len: 1460
    Source port: http (80)
    Destination port: 56376 (56376)
    [Stream index: 42]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 169    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201599, TSecr 3088353
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 541]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    537 1.100041    192.168.20.52         192.168.20.1          TCP      56376 > http [ACK] Seq=169 Ack=74 Win=5840 Len=0 TSV=3088357 TSER=55201599

Frame 537 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x048b (1163)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8cb3 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56376 (56376), Dst Port: http (80), Seq: 169, Ack: 74, Len: 0
    Source port: 56376 (56376)
    Destination port: http (80)
    [Stream index: 42]
    Sequence number: 169    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x48ee [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088357, TSecr 55201599

No.     Time        Source                Destination           Protocol Info
    538 1.101047    192.168.20.52         192.168.20.1          TCP      56376 > http [ACK] Seq=169 Ack=1522 Win=8736 Len=0 TSV=3088357 TSER=55201599

Frame 538 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x048c (1164)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8cb2 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56376 (56376), Dst Port: http (80), Seq: 169, Ack: 1522, Len: 0
    Source port: 56376 (56376)
    Destination port: http (80)
    [Stream index: 42]
    Sequence number: 169    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x4291 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088357, TSecr 55201599

No.     Time        Source                Destination           Protocol Info
    539 1.101049    192.168.20.52         192.168.20.1          TCP      56376 > http [ACK] Seq=169 Ack=1534 Win=8736 Len=0 TSV=3088357 TSER=55201599

Frame 539 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x048d (1165)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8cb1 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56376 (56376), Dst Port: http (80), Seq: 169, Ack: 1534, Len: 0
    Source port: 56376 (56376)
    Destination port: http (80)
    [Stream index: 42]
    Sequence number: 169    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x4285 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088357, TSecr 55201599
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    540 1.102378    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 540 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x356e (13678)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1a42]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56376 (56376), Seq: 1534, Ack: 169, Len: 398
    Source port: http (80)
    Destination port: 56376 (56376)
    [Stream index: 42]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 169    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201599, TSecr 3088357
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 541]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    541 1.102487    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 541 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x356f (13679)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bcf]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56376 (56376), Seq: 1932, Ack: 169, Len: 0
    Source port: http (80)
    Destination port: 56376 (56376)
    [Stream index: 42]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 169    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201599, TSecr 3088357
[Reassembled TCP Segments (1931 bytes): #535(73), #536(1460), #540(398), #541(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:37 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    542 1.103043    192.168.20.52         192.168.20.1          TCP      56376 > http [ACK] Seq=169 Ack=1932 Win=11632 Len=0 TSV=3088357 TSER=55201599

Frame 542 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x048e (1166)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8cb0 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56376 (56376), Dst Port: http (80), Seq: 169, Ack: 1932, Len: 0
    Source port: 56376 (56376)
    Destination port: http (80)
    [Stream index: 42]
    Sequence number: 169    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0x4042 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088357, TSecr 55201599

No.     Time        Source                Destination           Protocol Info
    543 1.104039    192.168.20.52         192.168.20.1          TCP      56376 > http [FIN, ACK] Seq=169 Ack=1933 Win=11632 Len=0 TSV=3088357 TSER=55201599

Frame 543 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x048f (1167)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x8caf [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56376 (56376), Dst Port: http (80), Seq: 169, Ack: 1933, Len: 0
    Source port: 56376 (56376)
    Destination port: http (80)
    [Stream index: 42]
    Sequence number: 169    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0x4040 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088357, TSecr 55201599
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    544 1.104041    192.168.20.52         192.168.20.1          TCP      56377 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088358 TSER=0 WS=4

Frame 544 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0xacb9 (44217)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xe47c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56377 (56377), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56377 (56377)
    Destination port: http (80)
    [Stream index: 43]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0xb790 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088358, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    545 1.104074    192.168.20.1          192.168.20.52         TCP      http > 56376 [ACK] Seq=1933 Ack=170 Win=66560 Len=0 TSV=55201599 TSER=3088357

Frame 545 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3570 (13680)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bce]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56376 (56376), Seq: 1933, Ack: 170, Len: 0
    Source port: http (80)
    Destination port: 56376 (56376)
    [Stream index: 42]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 170    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201599, TSecr 3088357
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    546 1.104134    192.168.20.1          192.168.20.52         TCP      http > 56377 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201599 TSER=3088358

Frame 546 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x3571 (13681)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bc5]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56377 (56377), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56377 (56377)
    [Stream index: 43]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201599, TSecr 3088358
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    547 1.105040    192.168.20.52         192.168.20.1          TCP      56377 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088358 TSER=55201599

Frame 547 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xacba (44218)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xe483 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56377 (56377), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56377 (56377)
    Destination port: http (80)
    [Stream index: 43]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x340d [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088358, TSecr 55201599
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    548 1.105042    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy-updates/universe/source/Sources.gz HTTP/1.1 

Frame 548 (228 bytes on wire, 228 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 214
    Identification: 0xacbb (44219)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xe3e0 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56377 (56377), Dst Port: http (80), Seq: 1, Ack: 1, Len: 162
    Source port: 56377 (56377)
    Destination port: http (80)
    [Stream index: 43]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 163    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x623e [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088358, TSecr 55201599
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy-updates/universe/source/Sources.gz HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy-updates/universe/source/Sources.gz HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy-updates/universe/source/Sources.gz HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy-updates/universe/source/Sources.gz
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    549 1.181446    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 549 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x3572 (13682)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1b83]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56377 (56377), Seq: 1, Ack: 163, Len: 73
    Source port: http (80)
    Destination port: 56377 (56377)
    [Stream index: 43]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 163    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201607, TSecr 3088358
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    550 1.181709    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 550 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x3573 (13683)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1617]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56377 (56377), Seq: 74, Ack: 163, Len: 1460
    Source port: http (80)
    Destination port: 56377 (56377)
    [Stream index: 43]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 163    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201607, TSecr 3088358
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 555]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    551 1.182043    192.168.20.52         192.168.20.1          TCP      56377 > http [ACK] Seq=163 Ack=74 Win=5840 Len=0 TSV=3088377 TSER=55201607

Frame 551 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xacbc (44220)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xe481 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56377 (56377), Dst Port: http (80), Seq: 163, Ack: 74, Len: 0
    Source port: 56377 (56377)
    Destination port: http (80)
    [Stream index: 43]
    Sequence number: 163    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x3307 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088377, TSecr 55201607

No.     Time        Source                Destination           Protocol Info
    552 1.183050    192.168.20.52         192.168.20.1          TCP      56377 > http [ACK] Seq=163 Ack=1522 Win=8736 Len=0 TSV=3088377 TSER=55201607

Frame 552 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xacbd (44221)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xe480 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56377 (56377), Dst Port: http (80), Seq: 163, Ack: 1522, Len: 0
    Source port: 56377 (56377)
    Destination port: http (80)
    [Stream index: 43]
    Sequence number: 163    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x2caa [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088377, TSecr 55201607

No.     Time        Source                Destination           Protocol Info
    553 1.183052    192.168.20.52         192.168.20.1          TCP      56377 > http [ACK] Seq=163 Ack=1534 Win=8736 Len=0 TSV=3088377 TSER=55201607

Frame 553 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xacbe (44222)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xe47f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56377 (56377), Dst Port: http (80), Seq: 163, Ack: 1534, Len: 0
    Source port: 56377 (56377)
    Destination port: http (80)
    [Stream index: 43]
    Sequence number: 163    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x2c9e [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088377, TSecr 55201607
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    554 1.184538    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 554 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x3575 (13685)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1a3b]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56377 (56377), Seq: 1534, Ack: 163, Len: 398
    Source port: http (80)
    Destination port: 56377 (56377)
    [Stream index: 43]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 163    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201607, TSecr 3088377
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 555]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    555 1.184599    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 555 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3576 (13686)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bc8]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56377 (56377), Seq: 1932, Ack: 163, Len: 0
    Source port: http (80)
    Destination port: 56377 (56377)
    [Stream index: 43]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 163    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201607, TSecr 3088377
[Reassembled TCP Segments (1931 bytes): #549(73), #550(1460), #554(398), #555(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:37 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    556 1.185044    192.168.20.52         192.168.20.1          TCP      56377 > http [ACK] Seq=163 Ack=1932 Win=11632 Len=0 TSV=3088378 TSER=55201607

Frame 556 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xacbf (44223)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xe47e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56377 (56377), Dst Port: http (80), Seq: 163, Ack: 1932, Len: 0
    Source port: 56377 (56377)
    Destination port: http (80)
    [Stream index: 43]
    Sequence number: 163    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0x2a5a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088378, TSecr 55201607

No.     Time        Source                Destination           Protocol Info
    557 1.186045    192.168.20.52         192.168.20.1          TCP      56377 > http [FIN, ACK] Seq=163 Ack=1933 Win=11632 Len=0 TSV=3088378 TSER=55201607

Frame 557 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0xacc0 (44224)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xe47d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56377 (56377), Dst Port: http (80), Seq: 163, Ack: 1933, Len: 0
    Source port: 56377 (56377)
    Destination port: http (80)
    [Stream index: 43]
    Sequence number: 163    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0x2a58 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088378, TSecr 55201607
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    558 1.186046    192.168.20.52         192.168.20.1          TCP      56378 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088378 TSER=0 WS=4

Frame 558 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x8cbf (36031)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0477 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56378 (56378), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56378 (56378)
    Destination port: http (80)
    [Stream index: 44]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0xd7af [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088378, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    559 1.186074    192.168.20.1          192.168.20.52         TCP      http > 56377 [ACK] Seq=1933 Ack=164 Win=66560 Len=0 TSV=55201608 TSER=3088378

Frame 559 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3577 (13687)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bc7]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56377 (56377), Seq: 1933, Ack: 164, Len: 0
    Source port: http (80)
    Destination port: 56377 (56377)
    [Stream index: 43]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 164    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201608, TSecr 3088378
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    560 1.186133    192.168.20.1          192.168.20.52         TCP      http > 56378 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201608 TSER=3088378

Frame 560 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x3578 (13688)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bbe]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56378 (56378), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56378 (56378)
    [Stream index: 44]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201608, TSecr 3088378
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    561 1.187048    192.168.20.52         192.168.20.1          TCP      56378 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088378 TSER=55201608

Frame 561 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x8cc0 (36032)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x047e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56378 (56378), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56378 (56378)
    Destination port: http (80)
    [Stream index: 44]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x0a95 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088378, TSecr 55201608
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    562 1.187050    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy-updates/multiverse/binary-i386/Packages.gz HTTP/1.1 

Frame 562 (236 bytes on wire, 236 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 222
    Identification: 0x8cc1 (36033)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x03d3 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56378 (56378), Dst Port: http (80), Seq: 1, Ack: 1, Len: 170
    Source port: 56378 (56378)
    Destination port: http (80)
    [Stream index: 44]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 171    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0xfeb0 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088378, TSecr 55201608
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy-updates/multiverse/binary-i386/Packages.gz HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy-updates/multiverse/binary-i386/Packages.gz HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy-updates/multiverse/binary-i386/Packages.gz HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy-updates/multiverse/binary-i386/Packages.gz
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    563 1.203169    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 563 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x3579 (13689)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1b7c]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56378 (56378), Seq: 1, Ack: 171, Len: 73
    Source port: http (80)
    Destination port: 56378 (56378)
    [Stream index: 44]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 171    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201609, TSecr 3088378
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    564 1.203420    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 564 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x357a (13690)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1610]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56378 (56378), Seq: 74, Ack: 171, Len: 1460
    Source port: http (80)
    Destination port: 56378 (56378)
    [Stream index: 44]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 171    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201609, TSecr 3088378
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 569]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    565 1.204047    192.168.20.52         192.168.20.1          TCP      56378 > http [ACK] Seq=171 Ack=74 Win=5840 Len=0 TSV=3088383 TSER=55201609

Frame 565 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x8cc2 (36034)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x047c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56378 (56378), Dst Port: http (80), Seq: 171, Ack: 74, Len: 0
    Source port: 56378 (56378)
    Destination port: http (80)
    [Stream index: 44]
    Sequence number: 171    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x099c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088383, TSecr 55201609

No.     Time        Source                Destination           Protocol Info
    566 1.204049    192.168.20.52         192.168.20.1          TCP      56378 > http [ACK] Seq=171 Ack=1522 Win=8736 Len=0 TSV=3088383 TSER=55201609

Frame 566 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x8cc3 (36035)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x047b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56378 (56378), Dst Port: http (80), Seq: 171, Ack: 1522, Len: 0
    Source port: 56378 (56378)
    Destination port: http (80)
    [Stream index: 44]
    Sequence number: 171    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x033f [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088383, TSecr 55201609

No.     Time        Source                Destination           Protocol Info
    567 1.204050    192.168.20.52         192.168.20.1          TCP      56378 > http [ACK] Seq=171 Ack=1534 Win=8736 Len=0 TSV=3088383 TSER=55201609

Frame 567 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x8cc4 (36036)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x047a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56378 (56378), Dst Port: http (80), Seq: 171, Ack: 1534, Len: 0
    Source port: 56378 (56378)
    Destination port: http (80)
    [Stream index: 44]
    Sequence number: 171    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x0333 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088383, TSecr 55201609
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    568 1.206185    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 568 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x357c (13692)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1a34]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56378 (56378), Seq: 1534, Ack: 171, Len: 398
    Source port: http (80)
    Destination port: 56378 (56378)
    [Stream index: 44]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 171    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201610, TSecr 3088383
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 569]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    569 1.206258    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 569 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x357d (13693)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bc1]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56378 (56378), Seq: 1932, Ack: 171, Len: 0
    Source port: http (80)
    Destination port: 56378 (56378)
    [Stream index: 44]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 171    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201610, TSecr 3088383
[Reassembled TCP Segments (1931 bytes): #563(73), #564(1460), #568(398), #569(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:37 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    570 1.207048    192.168.20.52         192.168.20.1          TCP      56378 > http [ACK] Seq=171 Ack=1932 Win=11632 Len=0 TSV=3088383 TSER=55201610

Frame 570 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x8cc5 (36037)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0479 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56378 (56378), Dst Port: http (80), Seq: 171, Ack: 1932, Len: 0
    Source port: 56378 (56378)
    Destination port: http (80)
    [Stream index: 44]
    Sequence number: 171    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0x00ef [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088383, TSecr 55201610

No.     Time        Source                Destination           Protocol Info
    571 1.207051    192.168.20.52         192.168.20.1          TCP      56378 > http [FIN, ACK] Seq=171 Ack=1933 Win=11632 Len=0 TSV=3088383 TSER=55201610

Frame 571 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x8cc6 (36038)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0x0478 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56378 (56378), Dst Port: http (80), Seq: 171, Ack: 1933, Len: 0
    Source port: 56378 (56378)
    Destination port: http (80)
    [Stream index: 44]
    Sequence number: 171    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0x00ed [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088383, TSecr 55201610
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    572 1.207052    192.168.20.52         192.168.20.1          TCP      56379 > http [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=3088383 TSER=0 WS=4

Frame 572 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x92d2 (37586)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xfe63 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56379 (56379), Dst Port: http (80), Seq: 0, Len: 0
    Source port: 56379 (56379)
    Destination port: http (80)
    [Stream index: 45]
    Sequence number: 0    (relative sequence number)
    Header length: 40 bytes
    Flags: 0x02 (SYN)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...0 .... = Acknowledgement: Not set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port http]
                [Message: Connection establish request (SYN): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 5840
    Checksum: 0xde16 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        SACK permitted
        Timestamps: TSval 3088383, TSecr 0
        NOP
        Window scale: 4 (multiply by 16)

No.     Time        Source                Destination           Protocol Info
    573 1.207094    192.168.20.1          192.168.20.52         TCP      http > 56378 [ACK] Seq=1933 Ack=172 Win=66560 Len=0 TSV=55201610 TSER=3088383

Frame 573 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x357e (13694)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bc0]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56378 (56378), Seq: 1933, Ack: 172, Len: 0
    Source port: http (80)
    Destination port: 56378 (56378)
    [Stream index: 44]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 172    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201610, TSecr 3088383
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    574 1.207162    192.168.20.1          192.168.20.52         TCP      http > 56379 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=8 TSV=55201610 TSER=3088383

Frame 574 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 60
    Identification: 0x357f (13695)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bb7]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56379 (56379), Seq: 0, Ack: 1, Len: 0
    Source port: http (80)
    Destination port: 56379 (56379)
    [Stream index: 45]
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 40 bytes
    Flags: 0x12 (SYN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port http]
                [Message: Connection establish acknowledge (SYN+ACK): server port http]
                [Severity level: Chat]
                [Group: Sequence]
        .... ...0 = Fin: Not set
    Window size: 8192
    Checksum: 0xa9b4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (20 bytes)
        Maximum segment size: 1460 bytes
        NOP
        Window scale: 8 (multiply by 256)
        SACK permitted
        Timestamps: TSval 55201610, TSecr 3088383
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    575 1.208048    192.168.20.52         192.168.20.1          TCP      56379 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=3088384 TSER=55201610

Frame 575 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x92d3 (37587)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xfe6a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56379 (56379), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0
    Source port: 56379 (56379)
    Destination port: http (80)
    [Stream index: 45]
    Sequence number: 1    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x3e16 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088384, TSecr 55201610
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    576 1.208051    192.168.20.52         192.168.20.1          HTTP     GET /G:/dists/hardy-updates/multiverse/source/Sources.gz HTTP/1.1 

Frame 576 (230 bytes on wire, 230 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 216
    Identification: 0x92d4 (37588)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xfdc5 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56379 (56379), Dst Port: http (80), Seq: 1, Ack: 1, Len: 164
    Source port: 56379 (56379)
    Destination port: http (80)
    [Stream index: 45]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 165    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x07ca [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088384, TSecr 55201610
    [SEQ/ACK analysis]
Hypertext Transfer Protocol
    GET /G:/dists/hardy-updates/multiverse/source/Sources.gz HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /G:/dists/hardy-updates/multiverse/source/Sources.gz HTTP/1.1\r\n]
            [Message: GET /G:/dists/hardy-updates/multiverse/source/Sources.gz HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /G:/dists/hardy-updates/multiverse/source/Sources.gz
        Request Version: HTTP/1.1
    Host: 192.168.20.1\r\n
    Connection: keep-alive\r\n
    User-Agent: Ubuntu APT-HTTP/1.3 (0.7.9ubuntu17.2)\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    577 1.233151    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 577 (139 bytes on wire, 139 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 125
    Identification: 0x3580 (13696)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1b75]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56379 (56379), Seq: 1, Ack: 165, Len: 73
    Source port: http (80)
    Destination port: 56379 (56379)
    [Stream index: 45]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 74    (relative sequence number)]
    Acknowledgement number: 165    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9f5 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201612, TSecr 3088384
    [SEQ/ACK analysis]
    TCP segment data (73 bytes)

No.     Time        Source                Destination           Protocol Info
    578 1.233658    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 578 (1526 bytes on wire, 1526 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1512
    Identification: 0x3581 (13697)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1609]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56379 (56379), Seq: 74, Ack: 165, Len: 1460
    Source port: http (80)
    Destination port: 56379 (56379)
    [Stream index: 45]
    Sequence number: 74    (relative sequence number)
    [Next sequence number: 1534    (relative sequence number)]
    Acknowledgement number: 165    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa98c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201612, TSecr 3088384
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 583]
    TCP segment data (1460 bytes)

No.     Time        Source                Destination           Protocol Info
    579 1.234048    192.168.20.52         192.168.20.1          TCP      56379 > http [ACK] Seq=165 Ack=74 Win=5840 Len=0 TSV=3088390 TSER=55201612

Frame 579 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x92d5 (37589)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xfe68 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56379 (56379), Dst Port: http (80), Seq: 165, Ack: 74, Len: 0
    Source port: 56379 (56379)
    Destination port: http (80)
    [Stream index: 45]
    Sequence number: 165    (relative sequence number)
    Acknowledgement number: 74    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 5840 (scaled)
    Checksum: 0x3d21 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088390, TSecr 55201612

No.     Time        Source                Destination           Protocol Info
    580 1.234050    192.168.20.52         192.168.20.1          TCP      56379 > http [ACK] Seq=165 Ack=1522 Win=8736 Len=0 TSV=3088390 TSER=55201612

Frame 580 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x92d6 (37590)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xfe67 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56379 (56379), Dst Port: http (80), Seq: 165, Ack: 1522, Len: 0
    Source port: 56379 (56379)
    Destination port: http (80)
    [Stream index: 45]
    Sequence number: 165    (relative sequence number)
    Acknowledgement number: 1522    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x36c4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088390, TSecr 55201612

No.     Time        Source                Destination           Protocol Info
    581 1.234052    192.168.20.52         192.168.20.1          TCP      56379 > http [ACK] Seq=165 Ack=1534 Win=8736 Len=0 TSV=3088390 TSER=55201612

Frame 581 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x92d7 (37591)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xfe66 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56379 (56379), Dst Port: http (80), Seq: 165, Ack: 1534, Len: 0
    Source port: 56379 (56379)
    Destination port: http (80)
    [Stream index: 45]
    Sequence number: 165    (relative sequence number)
    Acknowledgement number: 1534    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8736 (scaled)
    Checksum: 0x36b8 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088390, TSecr 55201612
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    582 1.236386    192.168.20.1          192.168.20.52         TCP      [TCP segment of a reassembled PDU]

Frame 582 (464 bytes on wire, 464 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 450
    Identification: 0x3583 (13699)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1a2d]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56379 (56379), Seq: 1534, Ack: 165, Len: 398
    Source port: http (80)
    Destination port: 56379 (56379)
    [Stream index: 45]
    Sequence number: 1534    (relative sequence number)
    [Next sequence number: 1932    (relative sequence number)]
    Acknowledgement number: 165    (relative ack number)
    Header length: 32 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xab3a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201613, TSecr 3088390
    [SEQ/ACK analysis]
    [Reassembled PDU in frame: 583]
    TCP segment data (398 bytes)

No.     Time        Source                Destination           Protocol Info
    583 1.236467    192.168.20.1          192.168.20.52         HTTP     HTTP/1.1 404 Not Found  (text/html)

Frame 583 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x3584 (13700)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bba]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56379 (56379), Seq: 1932, Ack: 165, Len: 0
    Source port: http (80)
    Destination port: 56379 (56379)
    [Stream index: 45]
    Sequence number: 1932    (relative sequence number)
    Acknowledgement number: 165    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55201613, TSecr 3088390
[Reassembled TCP Segments (1931 bytes): #577(73), #578(1460), #582(398), #583(0)]
Hypertext Transfer Protocol
    HTTP/1.1 404 Not Found\r\n
        [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n]
            [Message: HTTP/1.1 404 Not Found\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Version: HTTP/1.1
        Response Code: 404
    Content-Type: text/html\r\n
    Accept-Ranges: bytes\r\n
    \r\n
Line-based text data: text/html
    <html>\r\n
      <head>\r\n
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />\r\n
        <style>\r\n
        body, th { font-family:tahoma, verdana, arial, helvetica, sans; font-weight:normal; font-size:9pt; }\r\n
    body { margin:0; background-color:#DDF; padding:10px; }\r\n
    p { margin:0 }\r\n
    a { text-decoration:none;  background-color:Transparent; color:#05F; }\r\n
    a:visited { color:#55F; }\r\n
    a:hover { background-color:#EEF; }\r\n
    img { border-style:none }\r\n
    td { font-size:10pt; background:#FFF; border:1px solid #BBF }\r\n
    td img { vertical-align:top }\r\n
    th, th a, th a:visited { color:#555; font-size:13pt; font-weight:bold; padding-bottom:0; }\r\n
    #foldercomment { font-size:10pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; border-bottom:3px solid #DDD; margin-top:2px; }\r\n
    #tools { text-align:right; font-size: 8pt; }\r\n
    #folder, .big { font-size:14pt; font-weight:bold;  }\r\n
    #folderlabel, #folderstats, #footer { font-size: 8pt; }\r\n
    #body {\r\n
      border-bottom: 4px solid #BBF;\r\n
         border-top: 4px solid #BBF;\r\n
        border-left: 1px dotted #BBF;\r\n
       border-right: 1px dotted #BBF;\r\n
      background:#F3F3FF;\r\n
      padding:15px;\r\n
      margin:15px;\r\n
    }\r\n
    .comment { font-size:7pt; color:#888; background:#EEE; padding:3px; border:1px solid #DDD; margin-top:2px; }\r\n
    .button { float:right; padding:5px; padding-top:7px; margin:15px; border:2px solid black; background:white; font-size:8pt; font-weight:bold; }\r\n
    .button img { vertical-align:text-bottom; }\r\n
    .flag { font-weight:bold; font-size:8pt; background:white; color:red; text-align:center; border:1px solid red; }\r\n
    \r\n
    \r\n
        </style>\r\n
      </head>\r\n
    <body>\r\n
    <h1>404 -  Not found</h1>\r\n
    <a href="/">go to root</a>\r\n
    \r\n
    \r\n
    <hr>\r\n
    <div style="font-family:tahoma, verdana, arial, helvetica, sans; font-size:8pt;">\r\n
    <a href="http://www.rejetto.com/hfs/">HttpFileServer 2.2f</a>\r\n
    <br />3/10/2010 4:30:37 PM\r\n
    </div>\r\n
    </body>\r\n
    </html>\r\n
    \r\n

No.     Time        Source                Destination           Protocol Info
    584 1.237048    192.168.20.52         192.168.20.1          TCP      56379 > http [ACK] Seq=165 Ack=1932 Win=11632 Len=0 TSV=3088391 TSER=55201613

Frame 584 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x92d8 (37592)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xfe65 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56379 (56379), Dst Port: http (80), Seq: 165, Ack: 1932, Len: 0
    Source port: 56379 (56379)
    Destination port: http (80)
    [Stream index: 45]
    Sequence number: 165    (relative sequence number)
    Acknowledgement number: 1932    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0x3473 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088391, TSecr 55201613

No.     Time        Source                Destination           Protocol Info
    585 1.276056    192.168.20.52         192.168.20.1          TCP      56379 > http [ACK] Seq=165 Ack=1933 Win=11632 Len=0 TSV=3088401 TSER=55201613

Frame 585 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x92d9 (37593)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xfe64 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56379 (56379), Dst Port: http (80), Seq: 165, Ack: 1933, Len: 0
    Source port: 56379 (56379)
    Destination port: http (80)
    [Stream index: 45]
    Sequence number: 165    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 11632 (scaled)
    Checksum: 0x3468 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3088401, TSecr 55201613
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    586 1.816683    192.168.20.1          192.168.20.52         NBNS     Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>

Frame 586 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3585 (13701)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x0000 [incorrect, should be 0x5b94]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xa9d1 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    587 1.818099    192.168.20.52         192.168.20.1          ICMP     Destination unreachable (Port unreachable)

Frame 587 (120 bytes on wire, 120 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00)
        1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 106
    Identification: 0x0365 (869)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: ICMP (0x01)
    Header checksum: 0xcce8 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Internet Control Message Protocol

No.     Time        Source                Destination           Protocol Info
    588 3.316315    192.168.20.1          192.168.20.52         NBNS     Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>

Frame 588 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3586 (13702)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x0000 [incorrect, should be 0x1b93]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xa9d1 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    589 3.317240    192.168.20.52         192.168.20.1          ICMP     Destination unreachable (Port unreachable)

Frame 589 (120 bytes on wire, 120 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00)
        1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 106
    Identification: 0x0366 (870)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: ICMP (0x01)
    Header checksum: 0xcce7 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Internet Control Message Protocol

No.     Time        Source                Destination           Protocol Info
    590 4.816478    192.168.20.1          192.168.20.52         NBNS     Name query NBSTAT *<00><00><00><00><00><00><00><00><00><00><00><00><00><00><00>

Frame 590 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3587 (13703)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x0000 [incorrect, should be 0x1b92]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xa9d1 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    591 4.817267    192.168.20.52         192.168.20.1          ICMP     Destination unreachable (Port unreachable)

Frame 591 (120 bytes on wire, 120 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00)
        1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 106
    Identification: 0x0367 (871)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: ICMP (0x01)
    Header checksum: 0xcce6 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Internet Control Message Protocol

No.     Time        Source                Destination           Protocol Info
    592 5.004340    192.168.20.52         192.168.20.1          DNS      Standard query A security.ubuntu.com

Frame 592 (79 bytes on wire, 79 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 65
    Identification: 0x23b5 (9141)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x6d71 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
User Datagram Protocol, Src Port: 44600 (44600), Dst Port: domain (53)
    Source port: 44600 (44600)
    Destination port: domain (53)
    Length: 45
    Checksum: 0xc20a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Domain Name System (query)
    Transaction ID: 0x4aba
    Flags: 0x0100 (Standard query)
    Questions: 1
    Answer RRs: 0
    Authority RRs: 0
    Additional RRs: 0
    Queries
        security.ubuntu.com: type A, class IN
            Name: security.ubuntu.com
            Type: A (Host address)
            Class: IN (0x0001)

No.     Time        Source                Destination           Protocol Info
    593 5.004393    192.168.20.1          192.168.20.52         ICMP     Destination unreachable (Port unreachable)

Frame 593 (107 bytes on wire, 107 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 93
    Identification: 0x3588 (13704)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: ICMP (0x01)
    Header checksum: 0x0000 [incorrect, should be 0x5b92]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Internet Control Message Protocol

No.     Time        Source                Destination           Protocol Info
    594 5.005333    192.168.20.52         192.168.20.1          DNS      Standard query A security.ubuntu.com

Frame 594 (79 bytes on wire, 79 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 65
    Identification: 0x23b5 (9141)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x6d71 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
User Datagram Protocol, Src Port: 60133 (60133), Dst Port: domain (53)
    Source port: 60133 (60133)
    Destination port: domain (53)
    Length: 45
    Checksum: 0x855d [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Domain Name System (query)
    Transaction ID: 0x4aba
    Flags: 0x0100 (Standard query)
    Questions: 1
    Answer RRs: 0
    Authority RRs: 0
    Additional RRs: 0
    Queries
        security.ubuntu.com: type A, class IN
            Name: security.ubuntu.com
            Type: A (Host address)
            Class: IN (0x0001)

No.     Time        Source                Destination           Protocol Info
    595 10.004571   192.168.20.52         192.168.20.1          DNS      Standard query A security.ubuntu.com

Frame 595 (79 bytes on wire, 79 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 65
    Identification: 0x2897 (10391)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x688f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
User Datagram Protocol, Src Port: 56486 (56486), Dst Port: domain (53)
    Source port: 56486 (56486)
    Destination port: domain (53)
    Length: 45
    Checksum: 0x0ab9 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Domain Name System (query)
    Transaction ID: 0xd39d
    Flags: 0x0100 (Standard query)
    Questions: 1
    Answer RRs: 0
    Authority RRs: 0
    Additional RRs: 0
    Queries
        security.ubuntu.com: type A, class IN
            Name: security.ubuntu.com
            Type: A (Host address)
            Class: IN (0x0001)

No.     Time        Source                Destination           Protocol Info
    596 10.004628   192.168.20.1          192.168.20.52         ICMP     Destination unreachable (Port unreachable)

Frame 596 (107 bytes on wire, 107 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 93
    Identification: 0x3589 (13705)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: ICMP (0x01)
    Header checksum: 0x0000 [incorrect, should be 0x5b91]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Internet Control Message Protocol

No.     Time        Source                Destination           Protocol Info
    597 10.005565   192.168.20.52         192.168.20.1          DNS      Standard query A security.ubuntu.com

Frame 597 (79 bytes on wire, 79 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 65
    Identification: 0x2897 (10391)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x688f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
User Datagram Protocol, Src Port: 38870 (38870), Dst Port: domain (53)
    Source port: 38870 (38870)
    Destination port: domain (53)
    Length: 45
    Checksum: 0x4f89 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Domain Name System (query)
    Transaction ID: 0xd39d
    Flags: 0x0100 (Standard query)
    Questions: 1
    Answer RRs: 0
    Authority RRs: 0
    Additional RRs: 0
    Queries
        security.ubuntu.com: type A, class IN
            Name: security.ubuntu.com
            Type: A (Host address)
            Class: IN (0x0001)

No.     Time        Source                Destination           Protocol Info
    598 15.006859   192.168.20.52         192.168.20.1          TCP      56379 > http [FIN, ACK] Seq=165 Ack=1933 Win=11632 Len=0 TSV=3091833 TSER=55201613

Frame 598 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c), Dst: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Destination: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Source: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.52 (192.168.20.52), Dst: 192.168.20.1 (192.168.20.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x92da (37594)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: TCP (0x06)
    Header checksum: 0xfe63 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.52 (192.168.20.52)
    Destination: 192.168.20.1 (192.168.20.1)
Transmission Control Protocol, Src Port: 56379 (56379), Dst Port: http (80), Seq: 165, Ack: 1933, Len: 0
    Source port: 56379 (56379)
    Destination port: http (80)
    [Stream index: 45]
    Sequence number: 165    (relative sequence number)
    Acknowledgement number: 1933    (relative ack number)
    Header length: 32 bytes
    Flags: 0x11 (FIN, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...1 = Fin: Set
            [Expert Info (Chat/Sequence): Connection finish (FIN)]
                [Message: Connection finish (FIN)]
                [Severity level: Chat]
                [Group: Sequence]
    Window size: 11632 (scaled)
    Checksum: 0x26ff [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 3091833, TSecr 55201613

No.     Time        Source                Destination           Protocol Info
    599 15.006906   192.168.20.1          192.168.20.52         TCP      http > 56379 [ACK] Seq=1933 Ack=166 Win=66560 Len=0 TSV=55202990 TSER=3091833

Frame 599 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Destination: PcEngine_1b:7b:5c (00:0d:b9:1b:7b:5c)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.52 (192.168.20.52)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 52
    Identification: 0x358a (13706)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x0000 [incorrect, should be 0x1bb4]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.52 (192.168.20.52)
Transmission Control Protocol, Src Port: http (80), Dst Port: 56379 (56379), Seq: 1933, Ack: 166, Len: 0
    Source port: http (80)
    Destination port: 56379 (56379)
    [Stream index: 45]
    Sequence number: 1933    (relative sequence number)
    Acknowledgement number: 166    (relative ack number)
    Header length: 32 bytes
    Flags: 0x10 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 66560 (scaled)
    Checksum: 0xa9ac [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    Options: (12 bytes)
        NOP
        NOP
        Timestamps: TSval 55202990, TSecr 3091833
    [SEQ/ACK analysis]

No.     Time        Source                Destination           Protocol Info
    600 62.357171   192.168.20.1          192.168.20.255        BROWSER  Domain/Workgroup Announcement WORKGROUP, NT Workstation, Domain Enum

Frame 600 (245 bytes on wire, 245 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 231
    Identification: 0x358b (13707)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a2a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138)
    Source port: netbios-dgm (138)
    Destination port: netbios-dgm (138)
    Length: 211
    Checksum: 0xab35 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Datagram Service
SMB (Server Message Block Protocol)
SMB MailSlot Protocol
Microsoft Windows Browser Protocol

No.     Time        Source                Destination           Protocol Info
    601 125.168948  fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 601 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    602 126.168557  fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 602 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    603 128.168647  fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 603 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    604 132.168841  fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 604 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    605 140.169503  fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 605 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    606 156.170236  fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 606 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    607 188.171035  fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 607 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    608 299.105420  192.168.20.1          192.168.20.255        BROWSER  Local Master Announcement M9, Workstation, Server, NT Workstation, Potential Browser, Master Browser

Frame 608 (245 bytes on wire, 245 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 231
    Identification: 0x3598 (13720)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a1d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138)
    Source port: netbios-dgm (138)
    Destination port: netbios-dgm (138)
    Length: 211
    Checksum: 0xab35 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Datagram Service
SMB (Server Message Block Protocol)
SMB MailSlot Protocol
Microsoft Windows Browser Protocol

No.     Time        Source                Destination           Protocol Info
    609 552.219532  fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 609 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    610 553.218827  fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 610 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    611 555.218977  fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 611 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    612 559.219153  fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 612 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    613 567.219749  fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 613 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    614 583.220701  fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 614 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    615 615.221523  fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 615 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    616 962.357723  192.168.20.1          192.168.20.255        BROWSER  Domain/Workgroup Announcement WORKGROUP, NT Workstation, Domain Enum

Frame 616 (245 bytes on wire, 245 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 231
    Identification: 0x35b5 (13749)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a00 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138)
    Source port: netbios-dgm (138)
    Destination port: netbios-dgm (138)
    Length: 211
    Checksum: 0xab35 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Datagram Service
SMB (Server Message Block Protocol)
SMB MailSlot Protocol
Microsoft Windows Browser Protocol

No.     Time        Source                Destination           Protocol Info
    617 979.240266  fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 617 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    618 980.240261  fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 618 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    619 982.240473  fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 619 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    620 986.240700  fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 620 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    621 994.241181  fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 621 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    622 1010.242022 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 622 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    623 1016.686087 192.168.20.1          192.168.20.255        BROWSER  Local Master Announcement M9, Workstation, Server, NT Workstation, Potential Browser, Master Browser

Frame 623 (245 bytes on wire, 245 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 231
    Identification: 0x35ba (13754)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59fb [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138)
    Source port: netbios-dgm (138)
    Destination port: netbios-dgm (138)
    Length: 211
    Checksum: 0xab35 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Datagram Service
SMB (Server Message Block Protocol)
SMB MailSlot Protocol
Microsoft Windows Browser Protocol

No.     Time        Source                Destination           Protocol Info
    624 1042.242917 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 624 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    625 1406.262741 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 625 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    626 1407.262772 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 626 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    627 1409.262863 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 627 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    628 1413.263181 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 628 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    629 1421.263754 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 629 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    630 1437.264593 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 630 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    631 1469.265374 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 631 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    632 1735.701965 192.168.20.1          192.168.20.255        BROWSER  Local Master Announcement M9, Workstation, Server, NT Workstation, Potential Browser, Master Browser

Frame 632 (245 bytes on wire, 245 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 231
    Identification: 0x35db (13787)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59da [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138)
    Source port: netbios-dgm (138)
    Destination port: netbios-dgm (138)
    Length: 211
    Checksum: 0xab35 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Datagram Service
SMB (Server Message Block Protocol)
SMB MailSlot Protocol
Microsoft Windows Browser Protocol

No.     Time        Source                Destination           Protocol Info
    633 1833.283854 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 633 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    634 1834.283258 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 634 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    635 1836.283289 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 635 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    636 1840.283565 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 636 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    637 1848.284124 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 637 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    638 1862.358360 192.168.20.1          192.168.20.255        BROWSER  Domain/Workgroup Announcement WORKGROUP, NT Workstation, Domain Enum

Frame 638 (245 bytes on wire, 245 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 231
    Identification: 0x35e0 (13792)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59d5 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138)
    Source port: netbios-dgm (138)
    Destination port: netbios-dgm (138)
    Length: 211
    Checksum: 0xab35 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Datagram Service
SMB (Server Message Block Protocol)
SMB MailSlot Protocol
Microsoft Windows Browser Protocol

No.     Time        Source                Destination           Protocol Info
    639 1864.284992 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 639 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    640 1896.285851 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 640 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    641 2260.325247 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 641 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    642 2261.324582 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 642 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    643 2263.324800 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 643 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    644 2267.324973 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 644 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    645 2275.325521 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 645 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    646 2291.326444 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 646 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    647 2323.327236 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 647 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    648 2457.181188 192.168.20.1          192.168.20.255        BROWSER  Local Master Announcement M9, Workstation, Server, NT Workstation, Potential Browser, Master Browser

Frame 648 (245 bytes on wire, 245 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 231
    Identification: 0x35fd (13821)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59b8 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138)
    Source port: netbios-dgm (138)
    Destination port: netbios-dgm (138)
    Length: 211
    Checksum: 0xab35 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Datagram Service
SMB (Server Message Block Protocol)
SMB MailSlot Protocol
Microsoft Windows Browser Protocol

No.     Time        Source                Destination           Protocol Info
    649 2457.509465 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 649 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x35fe (13822)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a50 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    650 2458.258921 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 650 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x35ff (13823)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a4f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    651 2459.008916 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 651 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3600 (13824)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a4e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    652 2466.182948 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 652 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3601 (13825)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a4d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    653 2466.932624 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 653 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3602 (13826)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a4c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    654 2467.682662 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 654 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3603 (13827)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a4b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    655 2468.433546 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 655 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3604 (13828)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a4a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    656 2469.183442 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 656 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3605 (13829)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a49 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    657 2469.933512 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 657 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3606 (13830)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a48 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    658 2470.684634 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 658 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3607 (13831)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a47 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    659 2471.434564 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 659 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3608 (13832)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a46 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    660 2472.184627 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 660 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3609 (13833)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a45 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    661 2479.221609 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 661 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x360a (13834)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a44 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    662 2479.971234 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 662 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x360b (13835)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a43 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    663 2480.721310 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 663 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x360c (13836)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a42 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    664 2481.518868 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 664 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x360d (13837)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a41 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    665 2482.268248 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 665 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x360e (13838)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a40 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    666 2483.018568 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 666 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x360f (13839)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a3f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    667 2483.769420 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 667 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3610 (13840)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a3e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    668 2484.519290 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 668 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3611 (13841)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a3d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    669 2485.269363 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 669 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3612 (13842)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a3c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    670 2486.020534 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 670 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3613 (13843)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a3b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    671 2486.770423 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 671 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3614 (13844)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a3a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    672 2487.520524 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 672 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3615 (13845)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a39 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    673 2488.271776 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 673 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3616 (13846)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a38 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    674 2489.021636 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 674 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3617 (13847)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a37 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    675 2489.721880 192.168.20.1          192.168.20.255        NBNS     Name query NB M9<1c>

Frame 675 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3618 (13848)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a36 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    676 2489.771921 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 676 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3619 (13849)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a35 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    677 2490.471745 192.168.20.1          192.168.20.255        NBNS     Name query NB M9<1c>

Frame 677 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x361a (13850)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a34 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    678 2490.523824 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 678 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x361b (13851)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a33 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    679 2491.221823 192.168.20.1          192.168.20.255        NBNS     Name query NB M9<1c>

Frame 679 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x361c (13852)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a32 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    680 2491.274520 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 680 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x361d (13853)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a31 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    681 2492.023771 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 681 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x361e (13854)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a30 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    682 2492.775943 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 682 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x361f (13855)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a2f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    683 2493.525828 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 683 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3620 (13856)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a2e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    684 2494.275881 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 684 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3621 (13857)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a2d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    685 2495.027237 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 685 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3622 (13858)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a2c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    686 2495.777216 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 686 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3623 (13859)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a2b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    687 2496.527369 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 687 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3624 (13860)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a2a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    688 2503.389708 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 688 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3625 (13861)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a29 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    689 2504.139661 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 689 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3626 (13862)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a28 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    690 2504.889541 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 690 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3627 (13863)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a27 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    691 2505.640809 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 691 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3628 (13864)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a26 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    692 2506.390846 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 692 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3629 (13865)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a25 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    693 2507.140842 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 693 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x362a (13866)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a24 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    694 2507.891856 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 694 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x362b (13867)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a23 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    695 2508.641704 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 695 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x362c (13868)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a22 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    696 2509.391761 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 696 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x362d (13869)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a21 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    697 2510.142754 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 697 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x362e (13870)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a20 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    698 2510.892000 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 698 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x362f (13871)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a1f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    699 2511.642106 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 699 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3630 (13872)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a1e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    700 2514.335593 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 700 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3631 (13873)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a1d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    701 2515.085516 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 701 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3632 (13874)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a1c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    702 2515.835445 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 702 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3633 (13875)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a1b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    703 2516.586452 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 703 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3634 (13876)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a1a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    704 2517.336516 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 704 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3635 (13877)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a19 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    705 2518.086351 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 705 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x363a (13882)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a14 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    706 2533.322811 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 706 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x363b (13883)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a13 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    707 2534.072370 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 707 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x363c (13884)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a12 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    708 2534.822305 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 708 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x363d (13885)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a11 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    709 2535.573155 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 709 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x363e (13886)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a10 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    710 2536.322338 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 710 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x363f (13887)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a0f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    711 2537.072344 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 711 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3640 (13888)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a0e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    712 2546.311135 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 712 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x364d (13901)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a01 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    713 2547.061189 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 713 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x364e (13902)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5a00 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    714 2547.810994 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 714 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x364f (13903)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59ff [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    715 2548.562249 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 715 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3650 (13904)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59fe [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    716 2549.312003 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 716 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3651 (13905)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59fd [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    717 2550.062097 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 717 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3652 (13906)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59fc [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    718 2555.319181 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 718 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3653 (13907)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59fb [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    719 2556.068584 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 719 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3654 (13908)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59fa [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    720 2556.818612 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 720 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3655 (13909)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59f9 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    721 2559.303530 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 721 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3656 (13910)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59f8 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    722 2560.052941 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 722 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3657 (13911)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59f7 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    723 2560.802791 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 723 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3658 (13912)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59f6 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    724 2571.309217 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 724 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3659 (13913)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59f5 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    725 2572.058556 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 725 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x365a (13914)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59f4 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    726 2572.808405 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 726 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x365b (13915)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59f3 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    727 2573.560402 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 727 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x365c (13916)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59f2 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    728 2574.309601 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 728 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x365d (13917)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59f1 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    729 2575.059610 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 729 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x365e (13918)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59f0 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    730 2582.328456 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 730 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x365f (13919)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59ef [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    731 2583.077978 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 731 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3660 (13920)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59ee [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    732 2583.828331 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 732 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3661 (13921)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59ed [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    733 2584.579239 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 733 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3662 (13922)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59ec [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    734 2585.329254 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 734 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3663 (13923)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59eb [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    735 2586.079474 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 735 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3664 (13924)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59ea [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    736 2603.324187 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 736 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3665 (13925)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59e9 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    737 2604.074148 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 737 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3666 (13926)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59e8 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    738 2604.824212 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 738 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3667 (13927)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59e7 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    739 2605.575517 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 739 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3668 (13928)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59e6 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    740 2606.325297 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 740 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3669 (13929)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59e5 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    741 2607.075386 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 741 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x366a (13930)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59e4 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    742 2617.311011 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 742 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x366f (13935)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59df [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    743 2618.061029 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 743 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3670 (13936)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59de [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    744 2618.597228 192.168.20.1          192.168.20.255        NBNS     Name query NB M9<1c>

Frame 744 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3671 (13937)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59dd [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    745 2618.811162 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 745 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3672 (13938)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59dc [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    746 2619.347089 192.168.20.1          192.168.20.255        NBNS     Name query NB M9<1c>

Frame 746 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3673 (13939)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59db [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    747 2620.097187 192.168.20.1          192.168.20.255        NBNS     Name query NB M9<1c>

Frame 747 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3674 (13940)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59da [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    748 2625.089590 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 748 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3675 (13941)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59d9 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    749 2625.839697 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 749 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3676 (13942)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59d8 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    750 2626.589787 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 750 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3677 (13943)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59d7 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    751 2628.318528 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 751 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3678 (13944)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59d6 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    752 2629.068653 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 752 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3679 (13945)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59d5 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    753 2629.819492 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 753 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x367a (13946)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59d4 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    754 2630.569872 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 754 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x367b (13947)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59d3 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    755 2631.319774 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 755 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x367c (13948)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59d2 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    756 2632.069858 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 756 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x367d (13949)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59d1 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    757 2636.309734 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 757 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x367e (13950)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59d0 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    758 2637.059398 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 758 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x367f (13951)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59cf [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    759 2637.809432 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 759 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3680 (13952)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59ce [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    760 2640.313087 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 760 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3681 (13953)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59cd [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    761 2641.062537 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 761 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3682 (13954)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59cc [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    762 2641.812634 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 762 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3683 (13955)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59cb [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    763 2644.314406 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 763 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3684 (13956)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59ca [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    764 2645.063765 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 764 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3685 (13957)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59c9 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    765 2645.813606 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 765 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3686 (13958)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59c8 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    766 2646.565720 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 766 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3687 (13959)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59c7 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    767 2647.315650 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 767 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3688 (13960)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59c6 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    768 2648.066267 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 768 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3689 (13961)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x59c5 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    769 2687.351458 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 769 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    770 2688.351077 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 770 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    771 2690.351835 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 771 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    772 2694.351401 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 772 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    773 2702.352099 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 773 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    774 2718.353065 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 774 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    775 2725.299976 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 775 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x372f (14127)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x591f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    776 2726.049317 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 776 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3736 (14134)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5918 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    777 2726.799397 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 777 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3737 (14135)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5917 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    778 2727.551196 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 778 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3738 (14136)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5916 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    779 2728.300492 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 779 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3739 (14137)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5915 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    780 2729.050567 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 780 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x373a (14138)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5914 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    781 2750.353807 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 781 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    782 2762.358832 192.168.20.1          192.168.20.255        BROWSER  Domain/Workgroup Announcement WORKGROUP, NT Workstation, Domain Enum

Frame 782 (245 bytes on wire, 245 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 231
    Identification: 0x3773 (14195)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5842 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138)
    Source port: netbios-dgm (138)
    Destination port: netbios-dgm (138)
    Length: 211
    Checksum: 0xab35 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Datagram Service
SMB (Server Message Block Protocol)
SMB MailSlot Protocol
Microsoft Windows Browser Protocol

No.     Time        Source                Destination           Protocol Info
    783 2783.313338 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 783 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x37b8 (14264)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5896 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    784 2784.062714 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 784 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x37b9 (14265)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5895 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    785 2784.812813 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 785 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x37ba (14266)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5894 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    786 2785.564715 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 786 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x37bb (14267)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5893 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    787 2786.314653 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 787 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x37bc (14268)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5892 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    788 2787.064704 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 788 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x37bd (14269)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5891 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    789 2793.312271 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 789 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x37c2 (14274)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x588c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    790 2794.062342 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 790 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x37c3 (14275)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x588b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    791 2794.812403 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 791 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x37c4 (14276)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x588a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    792 2795.563414 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 792 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x37c6 (14278)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5888 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    793 2796.313356 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 793 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x37c7 (14279)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5887 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    794 2797.063558 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 794 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x37c8 (14280)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5886 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    795 2797.814540 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 795 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x37c9 (14281)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5885 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    796 2798.564552 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 796 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x37ca (14282)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5884 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    797 2799.314526 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 797 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x37cb (14283)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5883 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    798 2801.330295 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 798 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x37ef (14319)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x585f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    799 2802.079819 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 799 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x37f0 (14320)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x585e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    800 2802.829582 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 800 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x37f1 (14321)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x585d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    801 2835.051645 192.168.20.1          192.168.20.255        NBNS     Name query NB M9<1c>

Frame 801 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x381f (14367)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x582f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    802 2835.801483 192.168.20.1          192.168.20.255        NBNS     Name query NB M9<1c>

Frame 802 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3820 (14368)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x582e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    803 2836.551554 192.168.20.1          192.168.20.255        NBNS     Name query NB M9<1c>

Frame 803 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3821 (14369)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x582d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    804 2879.507626 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 804 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3826 (14374)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5828 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    805 2880.257236 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 805 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3827 (14375)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5827 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    806 2881.007367 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 806 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3828 (14376)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5826 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    807 2881.489264 192.168.20.1          192.168.20.255        NBNS     Name query NB M9<1c>

Frame 807 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3829 (14377)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5825 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    808 2881.765675 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 808 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x382a (14378)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5824 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    809 2882.239143 192.168.20.1          192.168.20.255        NBNS     Name query NB M9<1c>

Frame 809 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x382b (14379)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5823 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    810 2882.515436 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 810 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x382c (14380)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5822 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    811 2882.989157 192.168.20.1          192.168.20.255        NBNS     Name query NB M9<1c>

Frame 811 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x382d (14381)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5821 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    812 2883.265504 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 812 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x382e (14382)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5820 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    813 2884.016486 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 813 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x382f (14383)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x581f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    814 2884.766472 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 814 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3830 (14384)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x581e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    815 2885.516592 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 815 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3831 (14385)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x581d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    816 2886.267491 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 816 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3832 (14386)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x581c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    817 2887.017370 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 817 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3833 (14387)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x581b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    818 2887.767475 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 818 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3834 (14388)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x581a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    819 2888.518336 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 819 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3835 (14389)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5819 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    820 2889.267707 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 820 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3836 (14390)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5818 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    821 2890.017797 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 821 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3837 (14391)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5817 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    822 2890.769402 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 822 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3838 (14392)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5816 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    823 2891.518808 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 823 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3839 (14393)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5815 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    824 2892.268720 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 824 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x383a (14394)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5814 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    825 2975.444666 192.168.20.1          192.168.20.255        NBNS     Name query NB M9<1c>

Frame 825 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x383f (14399)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x580f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    826 2976.194520 192.168.20.1          192.168.20.255        NBNS     Name query NB M9<1c>

Frame 826 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3840 (14400)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x580e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    827 2976.944566 192.168.20.1          192.168.20.255        NBNS     Name query NB M9<1c>

Frame 827 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3841 (14401)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x580d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    828 3114.435202 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 828 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    829 3115.434546 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 829 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    830 3117.434765 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 830 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    831 3121.434988 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 831 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    832 3129.435320 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 832 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    833 3145.436395 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 833 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    834 3174.792385 192.168.20.1          192.168.20.255        BROWSER  Local Master Announcement M9, Workstation, Server, NT Workstation, Potential Browser, Master Browser

Frame 834 (245 bytes on wire, 245 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 231
    Identification: 0x384a (14410)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x576b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138)
    Source port: netbios-dgm (138)
    Destination port: netbios-dgm (138)
    Length: 211
    Checksum: 0xab35 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Datagram Service
SMB (Server Message Block Protocol)
SMB MailSlot Protocol
Microsoft Windows Browser Protocol

No.     Time        Source                Destination           Protocol Info
    835 3177.437191 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 835 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    836 3295.590992 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 836 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x384f (14415)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57ff [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    837 3296.341180 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 837 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3850 (14416)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57fe [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    838 3297.091143 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 838 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3851 (14417)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57fd [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    839 3297.842095 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 839 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3852 (14418)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57fc [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    840 3298.592213 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 840 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3853 (14419)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57fb [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    841 3299.342163 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 841 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3854 (14420)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57fa [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    842 3300.093906 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 842 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3855 (14421)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57f9 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    843 3300.843103 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 843 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3856 (14422)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57f8 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    844 3301.593211 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 844 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3857 (14423)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57f7 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    845 3308.491561 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 845 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3858 (14424)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57f6 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    846 3309.241613 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 846 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3859 (14425)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57f5 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    847 3309.991697 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 847 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x385a (14426)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57f4 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    848 3310.742692 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 848 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x385b (14427)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57f3 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    849 3311.492697 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 849 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x385c (14428)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57f2 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    850 3312.242705 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 850 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x385d (14429)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57f1 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    851 3319.340418 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 851 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x385e (14430)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57f0 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    852 3320.090518 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 852 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x385f (14431)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57ef [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    853 3320.840468 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 853 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3860 (14432)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57ee [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    854 3321.591405 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 854 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3861 (14433)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57ed [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    855 3322.341417 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 855 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3862 (14434)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57ec [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    856 3323.091489 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 856 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3863 (14435)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57eb [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    857 3323.842410 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 857 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3864 (14436)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57ea [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    858 3324.592414 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 858 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3865 (14437)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57e9 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    859 3325.342577 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 859 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3866 (14438)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57e8 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    860 3326.093581 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 860 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3867 (14439)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57e7 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    861 3326.843614 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 861 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3868 (14440)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57e6 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    862 3327.593661 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 862 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x386d (14445)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57e1 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    863 3328.345442 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 863 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x386e (14446)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57e0 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    864 3329.094779 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 864 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x386f (14447)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57df [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    865 3329.845060 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 865 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3870 (14448)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57de [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    866 3337.042281 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 866 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3871 (14449)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57dd [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    867 3337.792301 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 867 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3872 (14450)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57dc [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    868 3338.542606 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 868 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3873 (14451)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57db [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    869 3339.293427 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 869 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3874 (14452)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57da [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    870 3340.043540 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 870 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3875 (14453)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57d9 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    871 3340.793501 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 871 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3876 (14454)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57d8 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    872 3341.544707 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 872 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3877 (14455)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57d7 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    873 3342.294441 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 873 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3878 (14456)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57d6 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    874 3343.044602 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 874 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3879 (14457)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57d5 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    875 3343.795475 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 875 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x387a (14458)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57d4 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    876 3344.544751 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 876 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x387b (14459)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57d3 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    877 3345.294849 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 877 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x387c (14460)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57d2 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    878 3346.046676 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 878 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x387d (14461)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57d1 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    879 3346.796694 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 879 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x387e (14462)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57d0 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    880 3347.546805 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 880 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x387f (14463)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57cf [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    881 3348.297839 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 881 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3880 (14464)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57ce [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    882 3349.047897 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 882 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3881 (14465)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57cd [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    883 3349.797842 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 883 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3882 (14466)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57cc [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    884 3350.548946 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 884 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3883 (14467)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57cb [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    885 3351.298965 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 885 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3884 (14468)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57ca [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    886 3352.049114 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 886 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3885 (14469)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57c9 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    887 3368.592806 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 887 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3886 (14470)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57c8 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    888 3369.342126 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 888 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3887 (14471)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57c7 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    889 3370.092193 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 889 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3888 (14472)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57c6 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    890 3371.151966 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 890 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3889 (14473)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57c5 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    891 3371.901333 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 891 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x388a (14474)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57c4 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    892 3372.651390 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 892 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x388b (14475)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57c3 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    893 3378.492435 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 893 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x388c (14476)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57c2 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    894 3379.242038 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 894 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x388d (14477)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57c1 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    895 3379.991744 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 895 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x388e (14478)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57c0 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    896 3387.641055 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 896 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x388f (14479)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57bf [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    897 3388.391188 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 897 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3890 (14480)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57be [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    898 3389.141235 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 898 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3891 (14481)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57bd [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    899 3389.891983 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 899 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3892 (14482)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57bc [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    900 3390.641348 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 900 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3893 (14483)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57bb [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    901 3391.391631 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 901 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3894 (14484)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57ba [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    902 3414.739624 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 902 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3895 (14485)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57b9 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    903 3415.489672 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 903 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3896 (14486)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57b8 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    904 3416.240367 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 904 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3897 (14487)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57b7 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    905 3416.990830 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 905 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x3898 (14488)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57b6 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    906 3417.740781 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 906 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x389d (14493)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57b1 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    907 3418.490858 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 907 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x389e (14494)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57b0 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    908 3419.241998 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 908 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x389f (14495)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57af [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    909 3419.992699 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 909 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38a0 (14496)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57ae [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    910 3420.742013 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 910 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38a1 (14497)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57ad [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    911 3426.592932 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 911 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38a2 (14498)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57ac [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    912 3427.342504 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 912 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38a3 (14499)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57ab [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    913 3428.092649 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 913 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38a4 (14500)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57aa [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    914 3435.606641 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 914 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38a5 (14501)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57a9 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    915 3436.355930 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 915 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38a6 (14502)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57a8 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    916 3437.105958 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 916 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38a7 (14503)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57a7 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    917 3438.537628 192.168.20.1          192.168.20.255        NBNS     Name query NB W<00>

Frame 917 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38a8 (14504)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57a6 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    918 3439.287033 192.168.20.1          192.168.20.255        NBNS     Name query NB W<00>

Frame 918 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38a9 (14505)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57a5 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    919 3440.037289 192.168.20.1          192.168.20.255        NBNS     Name query NB W<00>

Frame 919 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38aa (14506)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57a4 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    920 3448.604365 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 920 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38ab (14507)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57a3 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    921 3449.353950 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 921 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38ac (14508)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57a2 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    922 3450.103720 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 922 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38ad (14509)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57a1 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    923 3450.854781 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 923 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38ae (14510)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x57a0 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    924 3451.604728 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 924 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38af (14511)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x579f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    925 3452.354796 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 925 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38b0 (14512)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x579e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    926 3453.105707 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 926 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38b1 (14513)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x579d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    927 3453.854849 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 927 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38b2 (14514)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x579c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    928 3454.604883 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 928 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38b3 (14515)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x579b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    929 3457.586440 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 929 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38b4 (14516)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x579a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    930 3458.336410 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 930 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38b5 (14517)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5799 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    931 3459.086459 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 931 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38b6 (14518)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5798 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    932 3459.892052 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 932 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38b7 (14519)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5797 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    933 3460.641510 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 933 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38b8 (14520)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5796 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    934 3461.391466 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 934 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38b9 (14521)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5795 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    935 3467.283609 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 935 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38ba (14522)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5794 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    936 3468.032905 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 936 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38bb (14523)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5793 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    937 3468.782793 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 937 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38bc (14524)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5792 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    938 3469.534733 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 938 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38bd (14525)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5791 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    939 3470.284886 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 939 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38be (14526)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5790 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    940 3471.034907 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 940 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38bf (14527)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x578f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    941 3471.785722 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 941 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38c0 (14528)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x578e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    942 3472.534961 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 942 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38c1 (14529)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x578d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    943 3473.285063 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 943 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38c2 (14530)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x578c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    944 3489.602412 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 944 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38c3 (14531)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x578b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    945 3490.352214 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 945 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38c4 (14532)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x578a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    946 3491.102333 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 946 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38c5 (14533)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5789 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    947 3498.595309 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 947 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38c6 (14534)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5788 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    948 3499.344591 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 948 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38c7 (14535)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5787 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    949 3500.094514 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 949 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38c8 (14536)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5786 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    950 3541.460359 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 950 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    951 3541.604009 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 951 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38cd (14541)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5781 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    952 3542.354318 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 952 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38ce (14542)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5780 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    953 3542.460209 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 953 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    954 3543.104187 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 954 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38cf (14543)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x577f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    955 3544.460148 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 955 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    956 3548.460387 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 956 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    957 3556.461002 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 957 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    958 3571.597474 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 958 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38d0 (14544)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x577e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    959 3572.346947 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 959 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38d1 (14545)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x577d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    960 3572.461850 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 960 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    961 3573.096867 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 961 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38d2 (14546)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x577c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    962 3579.589992 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 962 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38d3 (14547)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x577b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    963 3580.339139 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 963 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38d4 (14548)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x577a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    964 3581.089147 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 964 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38d5 (14549)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5779 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    965 3604.462658 fe80::b17c:f1a0:f39a:87ac ff02::1:2             DHCPv6   Solicit

Frame 965 (144 bytes on wire, 144 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Destination: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
    Source port: dhcpv6-client (546)
    Destination port: dhcpv6-server (547)
    Length: 90
    Checksum: 0x1c57 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
DHCPv6

No.     Time        Source                Destination           Protocol Info
    966 3610.597683 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 966 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38da (14554)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5774 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    967 3611.347195 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 967 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38db (14555)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5773 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    968 3612.097091 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 968 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38dc (14556)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5772 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    969 3612.849115 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 969 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38dd (14557)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5771 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    970 3613.599018 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 970 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38de (14558)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5770 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    971 3614.349031 192.168.20.1          192.168.20.255        NBNS     Name query NB BT2.TORRENTS.RU<00>

Frame 971 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38df (14559)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x576f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    972 3626.966851 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 972 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38e0 (14560)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x576e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    973 3627.716843 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 973 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38e1 (14561)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x576d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    974 3628.466841 192.168.20.1          192.168.20.255        NBNS     Name query NB BT.TORRENTS.RU<00>

Frame 974 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38e2 (14562)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x576c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    975 3629.604719 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 975 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38e3 (14563)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x576b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    976 3630.354165 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 976 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38e4 (14564)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x576a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    977 3631.104155 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 977 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38e5 (14565)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5769 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    978 3635.571411 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 978 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38e6 (14566)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5768 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    979 3636.321504 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 979 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38e7 (14567)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5767 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    980 3637.071719 192.168.20.1          192.168.20.255        NBNS     Name query NB BT4.TORRENTS.RU<00>

Frame 980 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38e8 (14568)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5766 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    981 3662.359276 192.168.20.1          192.168.20.255        BROWSER  Domain/Workgroup Announcement WORKGROUP, NT Workstation, Domain Enum

Frame 981 (245 bytes on wire, 245 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 231
    Identification: 0x38e9 (14569)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x56cc [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138)
    Source port: netbios-dgm (138)
    Destination port: netbios-dgm (138)
    Length: 211
    Checksum: 0xab35 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Datagram Service
SMB (Server Message Block Protocol)
SMB MailSlot Protocol
Microsoft Windows Browser Protocol

No.     Time        Source                Destination           Protocol Info
    982 3694.574491 192.168.20.1          192.168.20.255        NBNS     Name query NB M9<1c>

Frame 982 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38ee (14574)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5760 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    983 3695.323767 192.168.20.1          192.168.20.255        NBNS     Name query NB M9<1c>

Frame 983 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38ef (14575)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x575f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    984 3696.073817 192.168.20.1          192.168.20.255        NBNS     Name query NB M9<1c>

Frame 984 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38f0 (14576)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x575e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    985 3702.592161 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 985 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38f1 (14577)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x575d [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    986 3703.342185 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 986 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38f2 (14578)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x575c [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    987 3704.092158 192.168.20.1          192.168.20.255        NBNS     Name query NB BT3.TORRENTS.RU<00>

Frame 987 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38f3 (14579)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x575b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    988 3708.568692 192.168.20.1          192.168.20.255        NBNS     Name query NB M9<1c>

Frame 988 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38f4 (14580)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x575a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    989 3709.318488 192.168.20.1          192.168.20.255        NBNS     Name query NB M9<1c>

Frame 989 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38f5 (14581)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5759 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service

No.     Time        Source                Destination           Protocol Info
    990 3710.068552 192.168.20.1          192.168.20.255        NBNS     Name query NB M9<1c>

Frame 990 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
    Source: Toshiba_be:c5:f0 (00:15:b7:be:c5:f0)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.20.1 (192.168.20.1), Dst: 192.168.20.255 (192.168.20.255)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 78
    Identification: 0x38f6 (14582)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x5758 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.20.1 (192.168.20.1)
    Destination: 192.168.20.255 (192.168.20.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
    Source port: netbios-ns (137)
    Destination port: netbios-ns (137)
    Length: 58
    Checksum: 0xaa9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
NetBIOS Name Service
