Expanded Ethereal Packet Dump, from my session discovering the JSON-RPC calls via http

Part 1

No. Time Source Destination Protocol Info
3 0.004357 192.168.103.48 192.168.103.148 HTTP GET /scooby/ HTTP/1.1

Frame 3 (624 bytes on wire, 624 bytes captured)
Arrival Time: May 30, 2006 10:54:29.592105000
Time delta from previous packet: 0.004357000 seconds
Time since reference or first frame: 0.004357000 seconds
Frame Number: 3
Packet Length: 624 bytes
Capture Length: 624 bytes
Protocols in frame: eth:ip:tcp:http
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 610
Identification: 0xe1b5 (57781)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x06cb [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62511 (62511), Dst Port: http-alt (8080), Seq: 0, Ack: 0, Len: 558
Source port: 62511 (62511)
Destination port: http-alt (8080)
Sequence number: 0 (relative sequence number)
Next sequence number: 558 (relative sequence number)
Acknowledgement number: 0 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x0d9c [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613852998, tsecr 621131736
Hypertext Transfer Protocol
GET /scooby/ HTTP/1.1\r\n
Request Method: GET
Request URI: /scooby/
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Referer: http://192.168.103.148:8080/\r\n
Cookie: JSESSIONID=DEF8CF5145311405B4486ED9AE944D7E; username=adam; inputTimestamp=1149011616054\r\n
\r\n

No. Time Source Destination Protocol Info
5 0.009783 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 302 Moved Temporarily

Frame 5 (239 bytes on wire, 239 bytes captured)
Arrival Time: May 30, 2006 10:54:29.597531000
Time delta from previous packet: 0.005426000 seconds
Time since reference or first frame: 0.009783000 seconds
Frame Number: 5
Packet Length: 239 bytes
Capture Length: 239 bytes
Protocols in frame: eth:ip:tcp:http
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 225
Identification: 0xbdf6 (48630)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2c0b [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62511 (62511), Seq: 0, Ack: 558, Len: 173
Source port: http-alt (8080)
Destination port: 62511 (62511)
Sequence number: 0 (relative sequence number)
Next sequence number: 173 (relative sequence number)
Acknowledgement number: 558 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x9aae [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621131822, tsecr 1613852998
Hypertext Transfer Protocol
HTTP/1.1 302 Moved Temporarily\r\n
Request Version: HTTP/1.1
Response Code: 302
Server: Apache-Coyote/1.1\r\n
Location: http://192.168.103.148:8080/scooby/main.page\r\n
Content-Length: 0\r\n
Date: Tue, 30 May 2006 17:53:50 GMT\r\n
\r\n

No. Time Source Destination Protocol Info
7 0.010656 192.168.103.48 192.168.103.148 HTTP GET /scooby/main.page HTTP/1.1

Frame 7 (633 bytes on wire, 633 bytes captured)
Arrival Time: May 30, 2006 10:54:29.598404000
Time delta from previous packet: 0.000873000 seconds
Time since reference or first frame: 0.010656000 seconds
Frame Number: 7
Packet Length: 633 bytes
Capture Length: 633 bytes
Protocols in frame: eth:ip:tcp:http
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 619
Identification: 0xe1b7 (57783)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x06c0 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62517 (62517), Dst Port: http-alt (8080), Seq: 0, Ack: 0, Len: 567
Source port: 62517 (62517)
Destination port: http-alt (8080)
Sequence number: 0 (relative sequence number)
Next sequence number: 567 (relative sequence number)
Acknowledgement number: 0 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x2afc [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613852998, tsecr 621131731
Hypertext Transfer Protocol
GET /scooby/main.page HTTP/1.1\r\n
Request Method: GET
Request URI: /scooby/main.page
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Referer: http://192.168.103.148:8080/\r\n
Cookie: JSESSIONID=DEF8CF5145311405B4486ED9AE944D7E; username=adam; inputTimestamp=1149011616054\r\n
\r\n

No. Time Source Destination Protocol Info
12 0.031451 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (text/html)

Frame 12 (252 bytes on wire, 252 bytes captured)
Arrival Time: May 30, 2006 10:54:29.619199000
Time delta from previous packet: 0.020795000 seconds
Time since reference or first frame: 0.031451000 seconds
Frame Number: 12
Packet Length: 252 bytes
Capture Length: 252 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 238
Identification: 0xbdfa (48634)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2bfa [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62517 (62517), Seq: 2896, Ack: 567, Len: 186
Source port: http-alt (8080)
Destination port: 62517 (62517)
Sequence number: 2896 (relative sequence number)
Next sequence number: 3082 (relative sequence number)
Acknowledgement number: 567 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x826d [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621131822, tsecr 1613852998
TCP segment data (186 bytes)
Reassembled TCP Segments (3082 bytes): #9(1448), #10(1448), #12(186)
Frame: 9, payload: 0-1447 (1448 bytes)
Frame: 10, payload: 1448-2895 (1448 bytes)
Frame: 12, payload: 2896-3081 (186 bytes)
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
Content-Type: text/html;charset=ISO-8859-1\r\n
Content-Language: en-US\r\n
Content-Length: 2908\r\n
Date: Tue, 30 May 2006 17:53:50 GMT\r\n
\r\n
Line-based text data: text/html

<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>Welcome to Scooby</title>
<script type="text/javascript" src="js/lib/dojo-event_and_io/dojo.js"></script>
<script type="text/javascript">
dojo.require('dojo.widget.*');
</script>
<script type="text/javascript" src="i18n.js"></script>
<script type="text/javascript" src="js/scooby/util/log.js"></script>
<script type="text/javascript" src="js/scooby/util/ajax.js"></script>
<script type="text/javascript" src="js/scooby/util/date.js"></script>
<script type="text/javascript" src="js/scooby/util/hash.js"></script>
<script type="text/javascript" src="js/scooby/util/debug.js"></script>
<script type="text/javascript" src="js/scooby/util/validate.js"></script>
<script type="text/javascript" src="js/scooby/util/cookie.js"></script>
<script type="text/javascript" src="js/scooby/util/text.js"></script>
<script type="text/javascript" src="js/scooby/util/popup.js"></script>
<script type="text/javascript" src="js/scooby/model/scoobydate.js"></script>
<script type="text/javascript" src="js/scooby/model/model.js"></script>
<script type="text/javascript" src="js/scooby/ui/ui.conf.js"></script>
<script type="text/javascript" src="js/scooby/ui/block.js"></script>
<script type="text/javascript" src="js/scooby/ui/dialog.js"></script>
<script type="text/javascript" src="js/scooby/ui/cal_main.js"></script>
<script type="text/javascript" src="js/scooby/ui/draggable.js"></script>
<script type="text/javascript" src="js/scooby/ui/resize_area.js"></script>
<script type="text/javascript" src="js/scooby/ui/cal_form.js"></script>
<script type="text/javascript" src="js/scooby/ui/event/handlers.js"></script>
<script type="text/javascript" src="js/scooby/ui/styler.js"></script>
<script type="text/javascript" src="js/scooby/ui/contentcontainer.js"></script>
<script type="text/javascript" src="js/scooby/ui/button.js"></script>
<script type="text/javascript" src="js/scooby/ui/widget/Layout.js"></script>
<script type="text/javascript" src="js/scooby/facade/pref.js"></script>
<script type="text/javascript" src="js/scooby/service/service_stub.js"></script>
<script type="text/javascript" src="js/scooby/service/json_service_impl.js"></script>
<script type="text/javascript" src="js/scooby/legacy/cal_event.js"></script>
<script type="text/javascript" src="js/scooby/legacy/async.js"></script>
<script type="text/javascript" src="js/lib/jsonrpc-java-js/jsonrpc.js"></script>
<script type="text/javascript">
// FIXME: Need to get timeout value from server
var TIMEOUT_MIN = 30;
function init() {
Cal.init();
}
</script>
<script type="text/javascript" src="js/scooby/ui/event/listeners.js"></script>
<script type="text/javascript" src="js/scooby/ui/global.css.js"></script>
</head>
<body id="body"></body>
</html>

No. Time Source Destination Protocol Info
14 0.313841 192.168.103.48 192.168.103.148 HTTP GET /scooby/i18n.js HTTP/1.1

Frame 14 (551 bytes on wire, 551 bytes captured)
Arrival Time: May 30, 2006 10:54:29.901589000
Time delta from previous packet: 0.282390000 seconds
Time since reference or first frame: 0.313841000 seconds
Frame Number: 14
Packet Length: 551 bytes
Capture Length: 551 bytes
Protocols in frame: eth:ip:tcp:http
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 537
Identification: 0xe1ba (57786)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x070f [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62511 (62511), Dst Port: http-alt (8080), Seq: 558, Ack: 173, Len: 485
Source port: 62511 (62511)
Destination port: http-alt (8080)
Sequence number: 558 (relative sequence number)
Next sequence number: 1043 (relative sequence number)
Acknowledgement number: 173 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xc00e [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613852999, tsecr 621131822
Hypertext Transfer Protocol
GET /scooby/i18n.js HTTP/1.1\r\n
Request Method: GET
Request URI: /scooby/i18n.js
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: /*\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Referer: http://192.168.103.148:8080/scooby/main.page\r\n
Cookie: JSESSIONID=DEF8CF5145311405B4486ED9AE944D7E; username=adam; inputTimestamp=1149011616054\r\n
\r\n

No. Time Source Destination Protocol Info
19 0.351840 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (text/html)

Frame 19 (1015 bytes on wire, 1015 bytes captured)
Arrival Time: May 30, 2006 10:54:29.939588000
Time delta from previous packet: 0.037999000 seconds
Time since reference or first frame: 0.351840000 seconds
Frame Number: 19
Packet Length: 1015 bytes
Capture Length: 1015 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1001
Identification: 0xbdfe (48638)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x28fb [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62511 (62511), Seq: 3069, Ack: 1043, Len: 949
Source port: http-alt (8080)
Destination port: 62511 (62511)
Sequence number: 3069 (relative sequence number)
Next sequence number: 4018 (relative sequence number)
Acknowledgement number: 1043 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x63fe [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621131823, tsecr 1613852999
TCP segment data (949 bytes)
Reassembled TCP Segments (3845 bytes): #16(1448), #17(1448), #19(949)
Frame: 16, payload: 0-1447 (1448 bytes)
Frame: 17, payload: 1448-2895 (1448 bytes)
Frame: 19, payload: 2896-3844 (949 bytes)
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
Content-Type: text/html;charset=ISO-8859-1\r\n
Content-Language: en-US\r\n
Content-Length: 3671\r\n
Date: Tue, 30 May 2006 17:53:50 GMT\r\n
\r\n
Line-based text data: text/html

var localText = [];
function getText(str) {
return localText[str];
}

localText["App.Button.Save"] = "Save";
localText["App.August"] = "August";
localText["Main.LogOut"] = "Log Out";
localText["App.Sat"] = "Sat";
localText["App.Nov"] = "Nov";
localText["App.Tue"] = "Tue";
localText["App.October"] = "October";
localText["App.Button.Cancel"] = "Cancel";
localText["Main.DetailForm.Title"] = "Title";
localText["App.Friday"] = "Friday";
localText["App.Jun"] = "Jun";
localText["Login.Error.NoLoginWithRootAccount"] = "You cannot log in to Scooby with the Cosmo root user account.";
localText["App.Saturday"] = "Saturday";
localText["App.Wed"] = "Wed";
localText["App.Thu"] = "Thu";
localText["App.Sun"] = "Sun";
localText["App.July"] = "July";
localText["App.Jul"] = "Jul";
localText["App.Oct"] = "Oct";
localText["App.February"] = "February";
localText["Main.Error.EventNewSaveFailed"] = "Could not save this new event.";
localText["App.November"] = "November";
localText["App.Wednesday"] = "Wednesday";
localText["Login.Error.AuthFailed"] = "Could not verify the entered username and password. Please try again.";
localText["Main.Processing"] = "Processing ...";
localText["Login.Prompt"] = "Enter a username and password, and click the Submit button.";
localText["Main.Error.LoadEventsFailed"] = "Could not load events.";
localText["App.January"] = "January";
localText["App.PM"] = "PM";
localText["App.Fri"] = "Fri";
localText["App.Dec"] = "Dec";
localText["Main.Preferences"] = "Preferences";
localText["Login.Username"] = "Username:";
localText["Main.About"] = "About Scooby";
localText["App.Jan"] = "Jan";
localText["Login.About"] = "About Scooby Web Calendar ...";
localText["Main.Error.EventRemoveFailed"] = "Could not remove this event.";
localText["App.September"] = "September";
localText["App.Feb"] = "Feb";
localText["App.May"] = "May";
localText["App.Thursday"] = "Thursday";
localText["Main.Error.EventTimezoneMismatch"] = "Calendar event Start and End have mismatched timezones.";
localText["Main.Welcome"] = "Welcome,";
localText["Main.DetailForm.At"] = "at";
localText["App.June"] = "June";
localText["No"] = "No";
localText["Main.DetailForm.Ends"] = "Ends";
localText["Login.Password"] = "Password:";
localText["App.Welcome"] = "Welcome to Scooby";
localText["App.Button.OK"] = "OK";
localText["App.Sep"] = "Sep";
localText["App.December"] = "December";
localText["Login.Error.RequiredFields"] = "Both Username and Password are required fields.";
localText["App.Monday"] = "Monday";
localText["App.March"] = "March";
localText["App.Mon"] = "Mon";
localText["Main.Prompt.EventRemoveConfirm"] = "Remove this event?";
localText["App.Tuesday"] = "Tuesday";
localText["Main.DetailForm.Description"] = "Description";
localText["App.Sunday"] = "Sunday";
localText["Main.NewEvent"] = "New Event";
localText["Yes"] = "Yes";
localText["App.Aug"] = "Aug";
localText["Main.Error.InitCalCreateFailed"] = "Could not create calendar for new user.";
localText["App.Button.Submit"] = "Submit";
localText["App.Mar"] = "Mar";
localText["Main.DetailForm.Starts"] = "Starts";
localText["Main.Error.EventEditSaveFailed"] = "Could not save the changes to this event.";
localText["App.April"] = "April";
localText["App.Button.Remove"] = "Remove";
localText["App.Apr"] = "Apr";
localText["App.AM"] = "AM";

No. Time Source Destination Protocol Info
21 0.536254 192.168.103.48 192.168.103.148 HTTP POST /scooby/JSON-RPC HTTP/1.1 (text/plain)

Frame 21 (738 bytes on wire, 738 bytes captured)
Arrival Time: May 30, 2006 10:54:30.124002000
Time delta from previous packet: 0.184414000 seconds
Time since reference or first frame: 0.536254000 seconds
Frame Number: 21
Packet Length: 738 bytes
Capture Length: 738 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 724
Identification: 0xe1bd (57789)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x0651 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62517 (62517), Dst Port: http-alt (8080), Seq: 567, Ack: 3082, Len: 672
Source port: 62517 (62517)
Destination port: http-alt (8080)
Sequence number: 567 (relative sequence number)
Next sequence number: 1239 (relative sequence number)
Acknowledgement number: 3082 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x37ea [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613852999, tsecr 621131822
Hypertext Transfer Protocol
POST /scooby/JSON-RPC HTTP/1.1\r\n
Request Method: POST
Request URI: /scooby/JSON-RPC
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Content-Type: text/plain\r\n
Content-Length: 55\r\n
Cookie: JSESSIONID=DEF8CF5145311405B4486ED9AE944D7E; username=adam; inputTimestamp=1149011616054\r\n
Pragma: no-cache\r\n
Cache-Control: no-cache\r\n
\r\n
Line-based text data: text/plain
{"id": 1, "method": "system.listMethods", "params": []}

No. Time Source Destination Protocol Info
23 0.547074 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (text/plain)

Frame 23 (568 bytes on wire, 568 bytes captured)
Arrival Time: May 30, 2006 10:54:30.134822000
Time delta from previous packet: 0.010820000 seconds
Time since reference or first frame: 0.547074000 seconds
Frame Number: 23
Packet Length: 568 bytes
Capture Length: 568 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 554
Identification: 0xbe00 (48640)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2ab8 [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62517 (62517), Seq: 3082, Ack: 1239, Len: 502
Source port: http-alt (8080)
Destination port: 62517 (62517)
Sequence number: 3082 (relative sequence number)
Next sequence number: 3584 (relative sequence number)
Acknowledgement number: 1239 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xa4b3 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621131823, tsecr 1613852999
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
Content-Type: text/plain;charset=utf-8\r\n
Content-Length: 358\r\n
Date: Tue, 30 May 2006 17:53:50 GMT\r\n
\r\n
Line-based text data: text/plain
{"result":["scoobyService.saveEvent","scoobyService.createCalendar","scoobyService.moveEvent","scoobyService.getTestString","scoobyService.getEvent","scoobyService.setPreference","scoobyService.getPreference","scoobyService.removeEvent","s

No. Time Source Destination Protocol Info
25 2.042072 192.168.103.48 192.168.103.148 HTTP POST /scooby/JSON-RPC HTTP/1.1 (text/plain)

Frame 25 (746 bytes on wire, 746 bytes captured)
Arrival Time: May 30, 2006 10:54:31.629820000
Time delta from previous packet: 1.494998000 seconds
Time since reference or first frame: 2.042072000 seconds
Frame Number: 25
Packet Length: 746 bytes
Capture Length: 746 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 732
Identification: 0xe23e (57918)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x05c8 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62511 (62511), Dst Port: http-alt (8080), Seq: 1043, Ack: 4018, Len: 680
Source port: 62511 (62511)
Destination port: http-alt (8080)
Sequence number: 1043 (relative sequence number)
Next sequence number: 1723 (relative sequence number)
Acknowledgement number: 4018 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xb0ea [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613853002, tsecr 621131823
Hypertext Transfer Protocol
POST /scooby/JSON-RPC HTTP/1.1\r\n
Request Method: POST
Request URI: /scooby/JSON-RPC
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Content-Type: text/plain\r\n
Content-Length: 63\r\n
Cookie: JSESSIONID=DEF8CF5145311405B4486ED9AE944D7E; username=adam; inputTimestamp=1149011670235\r\n
Pragma: no-cache\r\n
Cache-Control: no-cache\r\n
\r\n
Line-based text data: text/plain
{"id": 2, "method": "scoobyService.getCalendars", "params": []}

No. Time Source Destination Protocol Info
26 4.042679 192.168.103.48 192.168.103.148 HTTP [TCP Retransmission] POST /scooby/JSON-RPC HTTP/1.1 (text/plain)

Frame 26 (746 bytes on wire, 746 bytes captured)
Arrival Time: May 30, 2006 10:54:33.630427000
Time delta from previous packet: 2.000607000 seconds
Time since reference or first frame: 4.042679000 seconds
Frame Number: 26
Packet Length: 746 bytes
Capture Length: 746 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: Bad TCP
Coloring Rule String: tcp.analysis.flags
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 732
Identification: 0xe23f (57919)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x05c7 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62511 (62511), Dst Port: http-alt (8080), Seq: 1043, Ack: 4018, Len: 680
Source port: 62511 (62511)
Destination port: http-alt (8080)
Sequence number: 1043 (relative sequence number)
Next sequence number: 1723 (relative sequence number)
Acknowledgement number: 4018 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xb0e6 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613853006, tsecr 621131823
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) retransmission
The RTO for this segment was: 2.000607000 seconds
RTO based on delta from frame: 25
Hypertext Transfer Protocol
POST /scooby/JSON-RPC HTTP/1.1\r\n
Request Method: POST
Request URI: /scooby/JSON-RPC
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Content-Type: text/plain\r\n
Content-Length: 63\r\n
Cookie: JSESSIONID=DEF8CF5145311405B4486ED9AE944D7E; username=adam; inputTimestamp=1149011670235\r\n
Pragma: no-cache\r\n
Cache-Control: no-cache\r\n
\r\n
Line-based text data: text/plain
{"id": 2, "method": "scoobyService.getCalendars", "params": []}

No. Time Source Destination Protocol Info
28 4.177199 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (text/plain)

Frame 28 (316 bytes on wire, 316 bytes captured)
Arrival Time: May 30, 2006 10:54:33.764947000
Time delta from previous packet: 0.134520000 seconds
Time since reference or first frame: 4.177199000 seconds
Frame Number: 28
Packet Length: 316 bytes
Capture Length: 316 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 302
Identification: 0xbe08 (48648)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2bac [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62511 (62511), Seq: 4018, Ack: 1723, Len: 250
Source port: http-alt (8080)
Destination port: 62511 (62511)
Sequence number: 4018 (relative sequence number)
Next sequence number: 4268 (relative sequence number)
Acknowledgement number: 1723 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xd42a [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621131830, tsecr 1613853006
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
Content-Type: text/plain;charset=utf-8\r\n
Content-Length: 106\r\n
Date: Tue, 30 May 2006 17:53:54 GMT\r\n
\r\n
Line-based text data: text/plain
{"result":[{"javaClass":"org.osaf.scooby.model.CalendarMetadata","path":"Scooby","name":"Scooby"}],"id":2}

No. Time Source Destination Protocol Info
30 4.193923 192.168.103.48 192.168.103.148 HTTP POST /scooby/JSON-RPC HTTP/1.1 (text/plain)

Frame 30 (781 bytes on wire, 781 bytes captured)
Arrival Time: May 30, 2006 10:54:33.781671000
Time delta from previous packet: 0.016724000 seconds
Time since reference or first frame: 4.193923000 seconds
Frame Number: 30
Packet Length: 781 bytes
Capture Length: 781 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 767
Identification: 0xe241 (57921)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x05a2 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62517 (62517), Dst Port: http-alt (8080), Seq: 1239, Ack: 3584, Len: 715
Source port: 62517 (62517)
Destination port: http-alt (8080)
Sequence number: 1239 (relative sequence number)
Next sequence number: 1954 (relative sequence number)
Acknowledgement number: 3584 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x29ba [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613853007, tsecr 621131823
Hypertext Transfer Protocol
POST /scooby/JSON-RPC HTTP/1.1\r\n
Request Method: POST
Request URI: /scooby/JSON-RPC
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Content-Type: text/plain\r\n
Content-Length: 98\r\n
Cookie: JSESSIONID=DEF8CF5145311405B4486ED9AE944D7E; username=adam; inputTimestamp=1149011670235\r\n
Pragma: no-cache\r\n
Cache-Control: no-cache\r\n
\r\n
Line-based text data: text/plain
{"id": 3, "method": "scoobyService.getEvents", "params": ["Scooby", 1148713200000, 1149490799000]}

No. Time Source Destination Protocol Info
31 4.405745 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (text/plain)

Frame 31 (1358 bytes on wire, 1358 bytes captured)
Arrival Time: May 30, 2006 10:54:33.993493000
Time delta from previous packet: 0.211822000 seconds
Time since reference or first frame: 4.405745000 seconds
Frame Number: 31
Packet Length: 1358 bytes
Capture Length: 1358 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1344
Identification: 0xbe10 (48656)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2792 [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62517 (62517), Seq: 3584, Ack: 1954, Len: 1292
Source port: http-alt (8080)
Destination port: 62517 (62517)
Sequence number: 3584 (relative sequence number)
Next sequence number: 4876 (relative sequence number)
Acknowledgement number: 1954 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xf47d [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621131831, tsecr 1613853007
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
Content-Type: text/plain;charset=utf-8\r\n
Content-Length: 1147\r\n
Date: Tue, 30 May 2006 17:53:54 GMT\r\n
\r\n
Line-based text data: text/plain
{"result":[{"pointInTime":false,"javaClass":"org.osaf.scooby.model.Event","anyTime":false,"start":{"month":5,"utc":false,"javaClass":"org.osaf.scooby.model.ScoobyDate","year":2006,"seconds":0,"timezone":null,"date":1,"hours":10,"minutes":4

No. Time Source Destination Protocol Info
49 128.468243 192.168.103.48 192.168.103.148 HTTP POST /scooby/JSON-RPC HTTP/1.1 (text/plain)

Frame 49 (1365 bytes on wire, 1365 bytes captured)
Arrival Time: May 30, 2006 10:56:38.055991000
Time delta from previous packet: 124.062498000 seconds
Time since reference or first frame: 128.468243000 seconds
Frame Number: 49
Packet Length: 1365 bytes
Capture Length: 1365 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1351
Identification: 0xe886 (59526)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xfd14 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62538 (62538), Dst Port: http-alt (8080), Seq: 1, Ack: 1, Len: 1299
Source port: 62538 (62538)
Destination port: http-alt (8080)
Sequence number: 1 (relative sequence number)
Next sequence number: 1300 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xa3fa [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613853255, tsecr 621132079
Hypertext Transfer Protocol
POST /scooby/JSON-RPC HTTP/1.1\r\n
Request Method: POST
Request URI: /scooby/JSON-RPC
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Content-Type: text/plain\r\n
Content-Length: 681\r\n
Cookie: JSESSIONID=DEF8CF5145311405B4486ED9AE944D7E; username=adam; inputTimestamp=1149011670235\r\n
Pragma: no-cache\r\n
Cache-Control: no-cache\r\n
\r\n
Line-based text data: text/plain
{"id": 4, "method": "scoobyService.saveEvent", "params": ["Scooby", {"id": "171d9c85-bde8-49b8-a4b0-9390279ae6a1", "title": "New Event", "description": "", "start": {"year": 2006, "month": 4, "date": 28, "hours": 10, "minutes": 15, "second

No. Time Source Destination Protocol Info
50 129.578509 192.168.103.48 192.168.103.148 HTTP [TCP Retransmission] POST /scooby/JSON-RPC HTTP/1.1 (text/plain)

Frame 50 (1365 bytes on wire, 1365 bytes captured)
Arrival Time: May 30, 2006 10:56:39.166257000
Time delta from previous packet: 1.110266000 seconds
Time since reference or first frame: 129.578509000 seconds
Frame Number: 50
Packet Length: 1365 bytes
Capture Length: 1365 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: Bad TCP
Coloring Rule String: tcp.analysis.flags
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1351
Identification: 0xe887 (59527)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xfd13 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62538 (62538), Dst Port: http-alt (8080), Seq: 1, Ack: 1, Len: 1299
Source port: 62538 (62538)
Destination port: http-alt (8080)
Sequence number: 1 (relative sequence number)
Next sequence number: 1300 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xa3f8 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613853257, tsecr 621132079
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) retransmission
The RTO for this segment was: 1.110266000 seconds
RTO based on delta from frame: 49
Hypertext Transfer Protocol
POST /scooby/JSON-RPC HTTP/1.1\r\n
Request Method: POST
Request URI: /scooby/JSON-RPC
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Content-Type: text/plain\r\n
Content-Length: 681\r\n
Cookie: JSESSIONID=DEF8CF5145311405B4486ED9AE944D7E; username=adam; inputTimestamp=1149011670235\r\n
Pragma: no-cache\r\n
Cache-Control: no-cache\r\n
\r\n
Line-based text data: text/plain
{"id": 4, "method": "scoobyService.saveEvent", "params": ["Scooby", {"id": "171d9c85-bde8-49b8-a4b0-9390279ae6a1", "title": "New Event", "description": "", "start": {"year": 2006, "month": 4, "date": 28, "hours": 10, "minutes": 15, "second

No. Time Source Destination Protocol Info
51 132.268682 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (text/plain)

Frame 51 (265 bytes on wire, 265 bytes captured)
Arrival Time: May 30, 2006 10:56:41.856430000
Time delta from previous packet: 2.690173000 seconds
Time since reference or first frame: 132.268682000 seconds
Frame Number: 51
Packet Length: 265 bytes
Capture Length: 265 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 251
Identification: 0xbed7 (48855)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2b10 [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62538 (62538), Seq: 1, Ack: 1300, Len: 199
Source port: http-alt (8080)
Destination port: 62538 (62538)
Sequence number: 1 (relative sequence number)
Next sequence number: 200 (relative sequence number)
Acknowledgement number: 1300 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xe9ea [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621132086, tsecr 1613853255
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
Content-Type: text/plain;charset=utf-8\r\n
Content-Length: 56\r\n
Date: Tue, 30 May 2006 17:55:59 GMT\r\n
\r\n
Line-based text data: text/plain
{"result":"171d9c85-bde8-49b8-a4b0-9390279ae6a1","id":4}

No. Time Source Destination Protocol Info
52 136.269539 192.168.103.148 192.168.103.48 HTTP [TCP Retransmission] HTTP/1.1 200 OK (text/plain)

Frame 52 (265 bytes on wire, 265 bytes captured)
Arrival Time: May 30, 2006 10:56:45.857287000
Time delta from previous packet: 4.000857000 seconds
Time since reference or first frame: 136.269539000 seconds
Frame Number: 52
Packet Length: 265 bytes
Capture Length: 265 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: Bad TCP
Coloring Rule String: tcp.analysis.flags
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 251
Identification: 0xbed8 (48856)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2b0f [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62538 (62538), Seq: 1, Ack: 1300, Len: 199
Source port: http-alt (8080)
Destination port: 62538 (62538)
Sequence number: 1 (relative sequence number)
Next sequence number: 200 (relative sequence number)
Acknowledgement number: 1300 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xe9e2 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621132094, tsecr 1613853255
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) retransmission
The RTO for this segment was: 4.000857000 seconds
RTO based on delta from frame: 51
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
Content-Type: text/plain;charset=utf-8\r\n
Content-Length: 56\r\n
Date: Tue, 30 May 2006 17:55:59 GMT\r\n
\r\n
Line-based text data: text/plain
{"result":"171d9c85-bde8-49b8-a4b0-9390279ae6a1","id":4}

No. Time Source Destination Protocol Info
78 707.786341 192.168.103.48 192.168.103.148 HTTP POST /scooby/JSON-RPC HTTP/1.1 (text/plain)

Frame 78 (1238 bytes on wire, 1238 bytes captured)
Arrival Time: May 30, 2006 11:06:17.374089000
Time delta from previous packet: 571.516802000 seconds
Time since reference or first frame: 707.786341000 seconds
Frame Number: 78
Packet Length: 1238 bytes
Capture Length: 1238 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1224
Identification: 0xfa59 (64089)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xebc0 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62585 (62585), Dst Port: http-alt (8080), Seq: 1, Ack: 1, Len: 1172
Source port: 62585 (62585)
Destination port: http-alt (8080)
Sequence number: 1 (relative sequence number)
Next sequence number: 1173 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x45bd [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613854414, tsecr 621133237
Hypertext Transfer Protocol
POST /scooby/JSON-RPC HTTP/1.1\r\n
Request Method: POST
Request URI: /scooby/JSON-RPC
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Content-Type: text/plain\r\n
Content-Length: 554\r\n
Cookie: JSESSIONID=DEF8CF5145311405B4486ED9AE944D7E; username=adam; inputTimestamp=1149011670235\r\n
Pragma: no-cache\r\n
Cache-Control: no-cache\r\n
\r\n
Line-based text data: text/plain
{"id": 5, "method": "scoobyService.saveEvent", "params": ["Scooby", {"id": null, "title": "New Event", "description": null, "start": {"year": 2006, "month": 4, "date": 30, "hours": "15", "minutes": "00", "seconds": 0, "timezone": null, "ut

No. Time Source Destination Protocol Info
80 708.113714 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (text/plain)

Frame 80 (265 bytes on wire, 265 bytes captured)
Arrival Time: May 30, 2006 11:06:17.701462000
Time delta from previous packet: 0.327373000 seconds
Time since reference or first frame: 708.113714000 seconds
Frame Number: 80
Packet Length: 265 bytes
Capture Length: 265 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 251
Identification: 0xc080 (49280)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2967 [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62585 (62585), Seq: 1, Ack: 1173, Len: 199
Source port: http-alt (8080)
Destination port: 62585 (62585)
Sequence number: 1 (relative sequence number)
Next sequence number: 200 (relative sequence number)
Acknowledgement number: 1173 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xd105 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621133238, tsecr 1613854414
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
Content-Type: text/plain;charset=utf-8\r\n
Content-Length: 56\r\n
Date: Tue, 30 May 2006 18:05:38 GMT\r\n
\r\n
Line-based text data: text/plain
{"result":"d79763b3-7668-4dab-94e8-a0a93c72af1e","id":5}

No. Time Source Destination Protocol Info
134 1427.451282 192.168.103.48 192.168.103.148 HTTP GET /scooby/templates/default/images/button_center_sm.gif HTTP/1.1

Frame 134 (605 bytes on wire, 605 bytes captured)
Arrival Time: May 30, 2006 11:18:17.039030000
Time delta from previous packet: 719.337568000 seconds
Time since reference or first frame: 1427.451282000 seconds
Frame Number: 134
Packet Length: 605 bytes
Capture Length: 605 bytes
Protocols in frame: eth:ip:tcp:http
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 591
Identification: 0x09a0 (2464)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xdef3 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62623 (62623), Dst Port: http-alt (8080), Seq: 1, Ack: 1, Len: 539
Source port: 62623 (62623)
Destination port: http-alt (8080)
Sequence number: 1 (relative sequence number)
Next sequence number: 540 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x94a8 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613855853, tsecr 621134677
Hypertext Transfer Protocol
GET /scooby/templates/default/images/button_center_sm.gif HTTP/1.1\r\n
Request Method: GET
Request URI: /scooby/templates/default/images/button_center_sm.gif
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Referer: http://192.168.103.148:8080/scooby/main.page\r\n
Cookie: JSESSIONID=DEF8CF5145311405B4486ED9AE944D7E; username=adam; inputTimestamp=1149011670235\r\n
\r\n

No. Time Source Destination Protocol Info
137 1427.455841 192.168.103.48 192.168.103.148 HTTP GET /scooby/templates/default/images/button_left_sm.gif HTTP/1.1

Frame 137 (603 bytes on wire, 603 bytes captured)
Arrival Time: May 30, 2006 11:18:17.043589000
Time delta from previous packet: 0.004559000 seconds
Time since reference or first frame: 1427.455841000 seconds
Frame Number: 137
Packet Length: 603 bytes
Capture Length: 603 bytes
Protocols in frame: eth:ip:tcp:http
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 589
Identification: 0x09a2 (2466)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xdef3 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62622 (62622), Dst Port: http-alt (8080), Seq: 1, Ack: 1, Len: 537
Source port: 62622 (62622)
Destination port: http-alt (8080)
Sequence number: 1 (relative sequence number)
Next sequence number: 538 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x8044 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613855853, tsecr 621134677
Hypertext Transfer Protocol
GET /scooby/templates/default/images/button_left_sm.gif HTTP/1.1\r\n
Request Method: GET
Request URI: /scooby/templates/default/images/button_left_sm.gif
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Referer: http://192.168.103.148:8080/scooby/main.page\r\n
Cookie: JSESSIONID=DEF8CF5145311405B4486ED9AE944D7E; username=adam; inputTimestamp=1149011670235\r\n
\r\n

No. Time Source Destination Protocol Info
141 1430.962122 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (GIF89a)

Frame 141 (1241 bytes on wire, 1241 bytes captured)
Arrival Time: May 30, 2006 11:18:20.549870000
Time delta from previous packet: 3.506281000 seconds
Time since reference or first frame: 1430.962122000 seconds
Frame Number: 141
Packet Length: 1241 bytes
Capture Length: 1241 bytes
Protocols in frame: eth:ip:tcp:http:image-gif
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1227
Identification: 0xc216 (49686)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2401 [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62622 (62622), Seq: 1, Ack: 538, Len: 1175
Source port: http-alt (8080)
Destination port: 62622 (62622)
Sequence number: 1 (relative sequence number)
Next sequence number: 1176 (relative sequence number)
Acknowledgement number: 538 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xa80c [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621134683, tsecr 1613855853
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
ETag: W/"971-1146515966000"\r\n
Last-Modified: Mon, 01 May 2006 20:39:26 GMT\r\n
Content-Type: image/gif\r\n
Content-Length: 971\r\n
Date: Tue, 30 May 2006 18:17:38 GMT\r\n
\r\n
Compuserve GIF, Version: GIF89a
Version: GIF89a
Screen width: 9
Screen height: 18
Global settings: (Global color table present) (7 bits per color) (8 bits per pixel)
1... .... = Global color map is present: True (1)
.111 .... = Bits per color minus 1: 7
.... 0... = Global color map is ordered: False (0)
.... .111 = Image bits per pixel minus 1: 7
Background color index: 0
Global color map: C2C2C2DEDEDED7DAEAF1F3FFD8DEEEE1E8F9E5EDFFDDE5F5...
Extension: Graphics Control
Extension label: Graphics Control (0xf9)
Data block (length = 4)
Data block (length = 0)
Image
Image left position: 0
Image top position: 0
Image width: 9
Image height: 18
Local settings: (1 bit per color) (1 bit per pixel)
0... .... = Local color map is present: False (0)
.000 .... = Bits per color minus 1: 0
.... 0... = Local color map is ordered: False (0)
.... .000 = Image bits per pixel minus 1: 0
LZW minimum code size: 8
Data block (length = 168)
Data block (length = 0)
Trailer (End of the GIF stream)

No. Time Source Destination Protocol Info
142 1430.975932 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (GIF89a)

Frame 142 (1233 bytes on wire, 1233 bytes captured)
Arrival Time: May 30, 2006 11:18:20.563680000
Time delta from previous packet: 0.013810000 seconds
Time since reference or first frame: 1430.975932000 seconds
Frame Number: 142
Packet Length: 1233 bytes
Capture Length: 1233 bytes
Protocols in frame: eth:ip:tcp:http:image-gif
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1219
Identification: 0xc217 (49687)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2408 [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62623 (62623), Seq: 1, Ack: 540, Len: 1167
Source port: http-alt (8080)
Destination port: 62623 (62623)
Sequence number: 1 (relative sequence number)
Next sequence number: 1168 (relative sequence number)
Acknowledgement number: 540 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xcce0 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621134683, tsecr 1613855853
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
ETag: W/"963-1146515966000"\r\n
Last-Modified: Mon, 01 May 2006 20:39:26 GMT\r\n
Content-Type: image/gif\r\n
Content-Length: 963\r\n
Date: Tue, 30 May 2006 18:17:38 GMT\r\n
\r\n
Compuserve GIF, Version: GIF89a
Version: GIF89a
Screen width: 13
Screen height: 18
Global settings: (Global color table present) (7 bits per color) (8 bits per pixel)
1... .... = Global color map is present: True (1)
.111 .... = Bits per color minus 1: 7
.... 0... = Global color map is ordered: False (0)
.... .111 = Image bits per pixel minus 1: 7
Background color index: 0
Global color map: C2C2C2DEDEDED7DAEAF1F3FFD8DEEEE1E8F9E5EDFFDDE5F5...
Extension: Graphics Control
Extension label: Graphics Control (0xf9)
Data block (length = 4)
Data block (length = 0)
Image
Image left position: 0
Image top position: 0
Image width: 13
Image height: 18
Local settings: (1 bit per color) (1 bit per pixel)
0... .... = Local color map is present: False (0)
.000 .... = Bits per color minus 1: 0
.... 0... = Local color map is ordered: False (0)
.... .000 = Image bits per pixel minus 1: 0
LZW minimum code size: 8
Data block (length = 160)
Data block (length = 0)
Trailer (End of the GIF stream)

No. Time Source Destination Protocol Info
148 1433.962075 192.168.103.48 192.168.103.148 HTTP GET /scooby/templates/default/images/button_right_sm.gif HTTP/1.1

Frame 148 (604 bytes on wire, 604 bytes captured)
Arrival Time: May 30, 2006 11:18:23.549823000
Time delta from previous packet: 2.986143000 seconds
Time since reference or first frame: 1433.962075000 seconds
Frame Number: 148
Packet Length: 604 bytes
Capture Length: 604 bytes
Protocols in frame: eth:ip:tcp:http
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 590
Identification: 0x0ab4 (2740)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xdde0 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62622 (62622), Dst Port: http-alt (8080), Seq: 538, Ack: 1176, Len: 538
Source port: 62622 (62622)
Destination port: http-alt (8080)
Sequence number: 538 (relative sequence number)
Next sequence number: 1076 (relative sequence number)
Acknowledgement number: 1176 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xcdb9 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613855865, tsecr 621134683
Hypertext Transfer Protocol
GET /scooby/templates/default/images/button_right_sm.gif HTTP/1.1\r\n
Request Method: GET
Request URI: /scooby/templates/default/images/button_right_sm.gif
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Referer: http://192.168.103.148:8080/scooby/main.page\r\n
Cookie: JSESSIONID=DEF8CF5145311405B4486ED9AE944D7E; username=adam; inputTimestamp=1149011670235\r\n
\r\n

No. Time Source Destination Protocol Info
150 1433.981947 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (GIF89a)

Frame 150 (1241 bytes on wire, 1241 bytes captured)
Arrival Time: May 30, 2006 11:18:23.569695000
Time delta from previous packet: 0.019872000 seconds
Time since reference or first frame: 1433.981947000 seconds
Frame Number: 150
Packet Length: 1241 bytes
Capture Length: 1241 bytes
Protocols in frame: eth:ip:tcp:http:image-gif
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1227
Identification: 0xc219 (49689)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x23fe [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62622 (62622), Seq: 1176, Ack: 1076, Len: 1175
Source port: http-alt (8080)
Destination port: 62622 (62622)
Sequence number: 1176 (relative sequence number)
Next sequence number: 2351 (relative sequence number)
Acknowledgement number: 1076 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x9cec [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621134690, tsecr 1613855865
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
ETag: W/"971-1146515966000"\r\n
Last-Modified: Mon, 01 May 2006 20:39:26 GMT\r\n
Content-Type: image/gif\r\n
Content-Length: 971\r\n
Date: Tue, 30 May 2006 18:17:44 GMT\r\n
\r\n
Compuserve GIF, Version: GIF89a
Version: GIF89a
Screen width: 9
Screen height: 18
Global settings: (Global color table present) (7 bits per color) (8 bits per pixel)
1... .... = Global color map is present: True (1)
.111 .... = Bits per color minus 1: 7
.... 0... = Global color map is ordered: False (0)
.... .111 = Image bits per pixel minus 1: 7
Background color index: 0
Global color map: C2C2C2DEDEDED7DAEAF1F3FFD8DEEEE1E8F9E5EDFFDDE5F5...
Extension: Graphics Control
Extension label: Graphics Control (0xf9)
Data block (length = 4)
Data block (length = 0)
Image
Image left position: 0
Image top position: 0
Image width: 9
Image height: 18
Local settings: (1 bit per color) (1 bit per pixel)
0... .... = Local color map is present: False (0)
.000 .... = Bits per color minus 1: 0
.... 0... = Local color map is ordered: False (0)
.... .000 = Image bits per pixel minus 1: 0
LZW minimum code size: 8
Data block (length = 168)
Data block (length = 0)
Trailer (End of the GIF stream)

No. Time Source Destination Protocol Info
156 1480.609148 192.168.103.48 192.168.103.148 HTTP GET /scooby/templates/default/images/button_right_lit_sm.gif HTTP/1.1

Frame 156 (608 bytes on wire, 608 bytes captured)
Arrival Time: May 30, 2006 11:19:10.196896000
Time delta from previous packet: 46.627201000 seconds
Time since reference or first frame: 1480.609148000 seconds
Frame Number: 156
Packet Length: 608 bytes
Capture Length: 608 bytes
Protocols in frame: eth:ip:tcp:http
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 594
Identification: 0x0f07 (3847)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xd989 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62622 (62622), Dst Port: http-alt (8080), Seq: 1076, Ack: 2351, Len: 542
Source port: 62622 (62622)
Destination port: http-alt (8080)
Sequence number: 1076 (relative sequence number)
Next sequence number: 1618 (relative sequence number)
Acknowledgement number: 2351 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xe5d6 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613855959, tsecr 621134690
Hypertext Transfer Protocol
GET /scooby/templates/default/images/button_right_lit_sm.gif HTTP/1.1\r\n
Request Method: GET
Request URI: /scooby/templates/default/images/button_right_lit_sm.gif
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Referer: http://192.168.103.148:8080/scooby/main.page\r\n
Cookie: JSESSIONID=DEF8CF5145311405B4486ED9AE944D7E; username=adam; inputTimestamp=1149011670235\r\n
\r\n

No. Time Source Destination Protocol Info
157 1483.442006 192.168.103.48 192.168.103.148 HTTP GET /scooby/templates/default/images/button_left_lit_sm.gif HTTP/1.1

Frame 157 (607 bytes on wire, 607 bytes captured)
Arrival Time: May 30, 2006 11:19:13.029754000
Time delta from previous packet: 2.832858000 seconds
Time since reference or first frame: 1483.442006000 seconds
Frame Number: 157
Packet Length: 607 bytes
Capture Length: 607 bytes
Protocols in frame: eth:ip:tcp:http
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 593
Identification: 0x0f0a (3850)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xd987 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62623 (62623), Dst Port: http-alt (8080), Seq: 540, Ack: 1168, Len: 541
Source port: 62623 (62623)
Destination port: http-alt (8080)
Sequence number: 540 (relative sequence number)
Next sequence number: 1081 (relative sequence number)
Acknowledgement number: 1168 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x2919 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613855964, tsecr 621134683
Hypertext Transfer Protocol
GET /scooby/templates/default/images/button_left_lit_sm.gif HTTP/1.1\r\n
Request Method: GET
Request URI: /scooby/templates/default/images/button_left_lit_sm.gif
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Referer: http://192.168.103.148:8080/scooby/main.page\r\n
Cookie: JSESSIONID=DEF8CF5145311405B4486ED9AE944D7E; username=adam; inputTimestamp=1149011670235\r\n
\r\n

No. Time Source Destination Protocol Info
158 1483.442066 192.168.103.48 192.168.103.148 HTTP [TCP Retransmission] GET /scooby/templates/default/images/button_right_lit_sm.gif HTTP/1.1

Frame 158 (608 bytes on wire, 608 bytes captured)
Arrival Time: May 30, 2006 11:19:13.029814000
Time delta from previous packet: 0.000060000 seconds
Time since reference or first frame: 1483.442066000 seconds
Frame Number: 158
Packet Length: 608 bytes
Capture Length: 608 bytes
Protocols in frame: eth:ip:tcp:http
Coloring Rule Name: Bad TCP
Coloring Rule String: tcp.analysis.flags
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 594
Identification: 0x0f0b (3851)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xd985 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62622 (62622), Dst Port: http-alt (8080), Seq: 1076, Ack: 2351, Len: 542
Source port: 62622 (62622)
Destination port: http-alt (8080)
Sequence number: 1076 (relative sequence number)
Next sequence number: 1618 (relative sequence number)
Acknowledgement number: 2351 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xe5d1 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613855964, tsecr 621134690
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) retransmission
The RTO for this segment was: 2.832918000 seconds
RTO based on delta from frame: 156
Hypertext Transfer Protocol
GET /scooby/templates/default/images/button_right_lit_sm.gif HTTP/1.1\r\n
Request Method: GET
Request URI: /scooby/templates/default/images/button_right_lit_sm.gif
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Referer: http://192.168.103.148:8080/scooby/main.page\r\n
Cookie: JSESSIONID=DEF8CF5145311405B4486ED9AE944D7E; username=adam; inputTimestamp=1149011670235\r\n
\r\n

No. Time Source Destination Protocol Info
161 1483.506636 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (GIF89a)

Frame 161 (1229 bytes on wire, 1229 bytes captured)
Arrival Time: May 30, 2006 11:19:13.094384000
Time delta from previous packet: 0.064570000 seconds
Time since reference or first frame: 1483.506636000 seconds
Frame Number: 161
Packet Length: 1229 bytes
Capture Length: 1229 bytes
Protocols in frame: eth:ip:tcp:http:image-gif
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1215
Identification: 0xc221 (49697)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2402 [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62623 (62623), Seq: 1168, Ack: 1081, Len: 1163
Source port: http-alt (8080)
Destination port: 62623 (62623)
Sequence number: 1168 (relative sequence number)
Next sequence number: 2331 (relative sequence number)
Acknowledgement number: 1081 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xf6c5 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621134789, tsecr 1613855964
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
ETag: W/"959-1146515966000"\r\n
Last-Modified: Mon, 01 May 2006 20:39:26 GMT\r\n
Content-Type: image/gif\r\n
Content-Length: 959\r\n
Date: Tue, 30 May 2006 18:18:34 GMT\r\n
\r\n
Compuserve GIF, Version: GIF89a
Version: GIF89a
Screen width: 9
Screen height: 18
Global settings: (Global color table present) (7 bits per color) (8 bits per pixel)
1... .... = Global color map is present: True (1)
.111 .... = Bits per color minus 1: 7
.... 0... = Global color map is ordered: False (0)
.... .111 = Image bits per pixel minus 1: 7
Background color index: 0
Global color map: C2C2C2F8F8FFFDFDFFF9F9FFFBFBFFF6F6FFDEDEDEF7F7FF...
Extension: Graphics Control
Extension label: Graphics Control (0xf9)
Data block (length = 4)
Data block (length = 0)
Image
Image left position: 0
Image top position: 0
Image width: 9
Image height: 18
Local settings: (1 bit per color) (1 bit per pixel)
0... .... = Local color map is present: False (0)
.000 .... = Bits per color minus 1: 0
.... 0... = Local color map is ordered: False (0)
.... .000 = Image bits per pixel minus 1: 0
LZW minimum code size: 8
Data block (length = 156)
Data block (length = 0)
Trailer (End of the GIF stream)

No. Time Source Destination Protocol Info
163 1483.507601 192.168.103.48 192.168.103.148 HTTP GET /scooby/templates/default/images/button_center_lit_sm.gif HTTP/1.1

Frame 163 (609 bytes on wire, 609 bytes captured)
Arrival Time: May 30, 2006 11:19:13.095349000
Time delta from previous packet: 0.000965000 seconds
Time since reference or first frame: 1483.507601000 seconds
Frame Number: 163
Packet Length: 609 bytes
Capture Length: 609 bytes
Protocols in frame: eth:ip:tcp:http
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 595
Identification: 0x0f0d (3853)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xd982 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62623 (62623), Dst Port: http-alt (8080), Seq: 1081, Ack: 2331, Len: 543
Source port: 62623 (62623)
Destination port: http-alt (8080)
Sequence number: 1081 (relative sequence number)
Next sequence number: 1624 (relative sequence number)
Acknowledgement number: 2331 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xbd91 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613855965, tsecr 621134789
Hypertext Transfer Protocol
GET /scooby/templates/default/images/button_center_lit_sm.gif HTTP/1.1\r\n
Request Method: GET
Request URI: /scooby/templates/default/images/button_center_lit_sm.gif
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Referer: http://192.168.103.148:8080/scooby/main.page\r\n
Cookie: JSESSIONID=DEF8CF5145311405B4486ED9AE944D7E; username=adam; inputTimestamp=1149011670235\r\n
\r\n

No. Time Source Destination Protocol Info
164 1486.442871 192.168.103.48 192.168.103.148 HTTP [TCP Retransmission] GET /scooby/templates/default/images/button_center_lit_sm.gif HTTP/1.1

Frame 164 (609 bytes on wire, 609 bytes captured)
Arrival Time: May 30, 2006 11:19:16.030619000
Time delta from previous packet: 2.935270000 seconds
Time since reference or first frame: 1486.442871000 seconds
Frame Number: 164
Packet Length: 609 bytes
Capture Length: 609 bytes
Protocols in frame: eth:ip:tcp:http
Coloring Rule Name: Bad TCP
Coloring Rule String: tcp.analysis.flags
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 595
Identification: 0x0f14 (3860)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xd97b [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62623 (62623), Dst Port: http-alt (8080), Seq: 1081, Ack: 2331, Len: 543
Source port: 62623 (62623)
Destination port: http-alt (8080)
Sequence number: 1081 (relative sequence number)
Next sequence number: 1624 (relative sequence number)
Acknowledgement number: 2331 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xbd8c [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613855970, tsecr 621134789
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) retransmission
The RTO for this segment was: 2.935270000 seconds
RTO based on delta from frame: 163
Hypertext Transfer Protocol
GET /scooby/templates/default/images/button_center_lit_sm.gif HTTP/1.1\r\n
Request Method: GET
Request URI: /scooby/templates/default/images/button_center_lit_sm.gif
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Referer: http://192.168.103.148:8080/scooby/main.page\r\n
Cookie: JSESSIONID=DEF8CF5145311405B4486ED9AE944D7E; username=adam; inputTimestamp=1149011670235\r\n
\r\n

No. Time Source Destination Protocol Info
166 1490.950570 192.168.103.148 192.168.103.48 HTTP [TCP Retransmission] HTTP/1.1 200 OK (GIF89a)

Frame 166 (1211 bytes on wire, 1211 bytes captured)
Arrival Time: May 30, 2006 11:19:20.538318000
Time delta from previous packet: 4.507699000 seconds
Time since reference or first frame: 1490.950570000 seconds
Frame Number: 166
Packet Length: 1211 bytes
Capture Length: 1211 bytes
Protocols in frame: eth:ip:tcp:http:image-gif
Coloring Rule Name: Bad TCP
Coloring Rule String: tcp.analysis.flags
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1197
Identification: 0xc22c (49708)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2409 [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62623 (62623), Seq: 2331, Ack: 1624, Len: 1145
Source port: http-alt (8080)
Destination port: 62623 (62623)
Sequence number: 2331 (relative sequence number)
Next sequence number: 3476 (relative sequence number)
Acknowledgement number: 1624 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xeb43 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621134803, tsecr 1613855970
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) retransmission
The RTO for this segment was: 4.502151000 seconds
RTO based on delta from frame: 165
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
ETag: W/"941-1146515966000"\r\n
Last-Modified: Mon, 01 May 2006 20:39:26 GMT\r\n
Content-Type: image/gif\r\n
Content-Length: 941\r\n
Date: Tue, 30 May 2006 18:18:34 GMT\r\n
\r\n
Compuserve GIF, Version: GIF89a
Version: GIF89a
Screen width: 13
Screen height: 18
Global settings: (Global color table present) (7 bits per color) (8 bits per pixel)
1... .... = Global color map is present: True (1)
.111 .... = Bits per color minus 1: 7
.... 0... = Global color map is ordered: False (0)
.... .111 = Image bits per pixel minus 1: 7
Background color index: 0
Global color map: C2C2C2F8F8FFFDFDFFF9F9FFFBFBFFF6F6FFDEDEDEF7F7FF...
Extension: Graphics Control
Extension label: Graphics Control (0xf9)
Data block (length = 4)
Data block (length = 0)
Image
Image left position: 0
Image top position: 0
Image width: 13
Image height: 18
Local settings: (1 bit per color) (1 bit per pixel)
0... .... = Local color map is present: False (0)
.000 .... = Bits per color minus 1: 0
.... 0... = Local color map is ordered: False (0)
.... .000 = Image bits per pixel minus 1: 0
LZW minimum code size: 8
Data block (length = 138)
Data block (length = 0)
Trailer (End of the GIF stream)

No. Time Source Destination Protocol Info
169 1490.996567 192.168.103.48 192.168.103.148 HTTP POST /scooby/JSON-RPC HTTP/1.1 (text/plain)

Frame 169 (1286 bytes on wire, 1286 bytes captured)
Arrival Time: May 30, 2006 11:19:20.584315000
Time delta from previous packet: 0.045997000 seconds
Time since reference or first frame: 1490.996567000 seconds
Frame Number: 169
Packet Length: 1286 bytes
Capture Length: 1286 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1272
Identification: 0x0f22 (3874)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xd6c8 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62623 (62623), Dst Port: http-alt (8080), Seq: 1624, Ack: 3476, Len: 1220
Source port: 62623 (62623)
Destination port: http-alt (8080)
Sequence number: 1624 (relative sequence number)
Next sequence number: 2844 (relative sequence number)
Acknowledgement number: 3476 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xd9da [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613855980, tsecr 621134803
Hypertext Transfer Protocol
POST /scooby/JSON-RPC HTTP/1.1\r\n
Request Method: POST
Request URI: /scooby/JSON-RPC
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Content-Type: text/plain\r\n
Content-Length: 602\r\n
Cookie: JSESSIONID=DEF8CF5145311405B4486ED9AE944D7E; username=adam; inputTimestamp=1149011670235\r\n
Pragma: no-cache\r\n
Cache-Control: no-cache\r\n
\r\n
Line-based text data: text/plain
{"id": 7, "method": "scoobyService.saveEvent", "params": ["Scooby", {"id": "d79763b3-7668-4dab-94e8-a0a93c72af1e", "title": "Test Event", "description": "Test Description", "start": {"year": 2006, "month": 4, "date": 30, "hours": 0, "minut

No. Time Source Destination Protocol Info
172 1493.943559 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (text/plain)

Frame 172 (265 bytes on wire, 265 bytes captured)
Arrival Time: May 30, 2006 11:19:23.531307000
Time delta from previous packet: 2.946992000 seconds
Time since reference or first frame: 1493.943559000 seconds
Frame Number: 172
Packet Length: 265 bytes
Capture Length: 265 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 251
Identification: 0xc248 (49736)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x279f [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62623 (62623), Seq: 3476, Ack: 2844, Len: 199
Source port: http-alt (8080)
Destination port: 62623 (62623)
Sequence number: 3476 (relative sequence number)
Next sequence number: 3675 (relative sequence number)
Acknowledgement number: 2844 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x7f0b [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621134809, tsecr 1613855980
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
Content-Type: text/plain;charset=utf-8\r\n
Content-Length: 56\r\n
Date: Tue, 30 May 2006 18:18:43 GMT\r\n
\r\n
Line-based text data: text/plain
{"result":"d79763b3-7668-4dab-94e8-a0a93c72af1e","id":7}

No. Time Source Destination Protocol Info
176 1508.453677 192.168.103.148 192.168.103.48 HTTP [TCP Retransmission] HTTP/1.1 200 OK (GIF89a)

Frame 176 (1240 bytes on wire, 1240 bytes captured)
Arrival Time: May 30, 2006 11:19:38.041425000
Time delta from previous packet: 14.510118000 seconds
Time since reference or first frame: 1508.453677000 seconds
Frame Number: 176
Packet Length: 1240 bytes
Capture Length: 1240 bytes
Protocols in frame: eth:ip:tcp:http:image-gif
Coloring Rule Name: Bad TCP
Coloring Rule String: tcp.analysis.flags
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1226
Identification: 0xc24a (49738)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x23ce [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62622 (62622), Seq: 2351, Ack: 1618, Len: 1174
Source port: http-alt (8080)
Destination port: 62622 (62622)
Sequence number: 2351 (relative sequence number)
Next sequence number: 3525 (relative sequence number)
Acknowledgement number: 1618 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xc833 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621134838, tsecr 1613855964
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) retransmission
The RTO for this segment was: 24.959405000 seconds
RTO based on delta from frame: 160
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
ETag: W/"970-1146515966000"\r\n
Last-Modified: Mon, 01 May 2006 20:39:26 GMT\r\n
Content-Type: image/gif\r\n
Content-Length: 970\r\n
Date: Tue, 30 May 2006 18:18:31 GMT\r\n
\r\n
Compuserve GIF, Version: GIF89a
Version: GIF89a
Screen width: 9
Screen height: 18
Global settings: (Global color table present) (7 bits per color) (8 bits per pixel)
1... .... = Global color map is present: True (1)
.111 .... = Bits per color minus 1: 7
.... 0... = Global color map is ordered: False (0)
.... .111 = Image bits per pixel minus 1: 7
Background color index: 0
Global color map: C2C2C2F8F8FFFDFDFFF9F9FFFBFBFFF6F6FFDEDEDEF7F7FF...
Extension: Graphics Control
Extension label: Graphics Control (0xf9)
Data block (length = 4)
Data block (length = 0)
Image
Image left position: 0
Image top position: 0
Image width: 9
Image height: 18
Local settings: (1 bit per color) (1 bit per pixel)
0... .... = Local color map is present: False (0)
.000 .... = Bits per color minus 1: 0
.... 0... = Local color map is ordered: False (0)
.... .000 = Image bits per pixel minus 1: 0
LZW minimum code size: 8
Data block (length = 167)
Data block (length = 0)
Trailer (End of the GIF stream)

No. Time Source Destination Protocol Info
180 1512.498951 192.168.103.48 192.168.103.148 HTTP [TCP Retransmission] POST /scooby/JSON-RPC HTTP/1.1 (text/plain)

Frame 180 (1274 bytes on wire, 1274 bytes captured)
Arrival Time: May 30, 2006 11:19:42.086699000
Time delta from previous packet: 4.045274000 seconds
Time since reference or first frame: 1512.498951000 seconds
Frame Number: 180
Packet Length: 1274 bytes
Capture Length: 1274 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: Bad TCP
Coloring Rule String: tcp.analysis.flags
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1260
Identification: 0x1072 (4210)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xd584 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62605 (62605), Dst Port: http-alt (8080), Seq: 1, Ack: 2, Len: 1220
Source port: 62605 (62605)
Destination port: http-alt (8080)
Sequence number: 1 (relative sequence number)
Next sequence number: 1221 (relative sequence number)
Acknowledgement number: 2 (relative ack number)
Header length: 20 bytes
Flags: 0x0019 (FIN, PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...1 = Fin: Set
Window size: 65535
Checksum: 0x7900 [correct]
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) retransmission
The RTO for this segment was: 87.857653000 seconds
RTO based on delta from frame: 127
Hypertext Transfer Protocol
POST /scooby/JSON-RPC HTTP/1.1\r\n
Request Method: POST
Request URI: /scooby/JSON-RPC
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Content-Type: text/plain\r\n
Content-Length: 602\r\n
Cookie: JSESSIONID=DEF8CF5145311405B4486ED9AE944D7E; username=adam; inputTimestamp=1149011670235\r\n
Pragma: no-cache\r\n
Cache-Control: no-cache\r\n
\r\n
Line-based text data: text/plain
{"id": 6, "method": "scoobyService.saveEvent", "params": ["Scooby", {"id": "d79763b3-7668-4dab-94e8-a0a93c72af1e", "title": "Test Event", "description": "Test Description", "start": {"year": 2006, "month": 4, "date": 30, "hours": 0, "minut

No. Time Source Destination Protocol Info
182 1540.458046 192.168.103.148 192.168.103.48 HTTP [TCP Retransmission] HTTP/1.1 200 OK (GIF89a)

Frame 182 (1240 bytes on wire, 1240 bytes captured)
Arrival Time: May 30, 2006 11:20:10.045794000
Time delta from previous packet: 27.959095000 seconds
Time since reference or first frame: 1540.458046000 seconds
Frame Number: 182
Packet Length: 1240 bytes
Capture Length: 1240 bytes
Protocols in frame: eth:ip:tcp:http:image-gif
Coloring Rule Name: Bad TCP
Coloring Rule String: tcp.analysis.flags
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1226
Identification: 0xc298 (49816)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2380 [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62622 (62622), Seq: 2351, Ack: 1618, Len: 1174
Source port: http-alt (8080)
Destination port: 62622 (62622)
Sequence number: 2351 (relative sequence number)
Next sequence number: 3525 (relative sequence number)
Acknowledgement number: 1618 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xc7f3 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621134902, tsecr 1613855964
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) retransmission
The RTO for this segment was: 56.963774000 seconds
RTO based on delta from frame: 160
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
ETag: W/"970-1146515966000"\r\n
Last-Modified: Mon, 01 May 2006 20:39:26 GMT\r\n
Content-Type: image/gif\r\n
Content-Length: 970\r\n
Date: Tue, 30 May 2006 18:18:31 GMT\r\n
\r\n
Compuserve GIF, Version: GIF89a
Version: GIF89a
Screen width: 9
Screen height: 18
Global settings: (Global color table present) (7 bits per color) (8 bits per pixel)
1... .... = Global color map is present: True (1)
.111 .... = Bits per color minus 1: 7
.... 0... = Global color map is ordered: False (0)
.... .111 = Image bits per pixel minus 1: 7
Background color index: 0
Global color map: C2C2C2F8F8FFFDFDFFF9F9FFFBFBFFF6F6FFDEDEDEF7F7FF...
Extension: Graphics Control
Extension label: Graphics Control (0xf9)
Data block (length = 4)
Data block (length = 0)
Image
Image left position: 0
Image top position: 0
Image width: 9
Image height: 18
Local settings: (1 bit per color) (1 bit per pixel)
0... .... = Local color map is present: False (0)
.000 .... = Bits per color minus 1: 0
.... 0... = Local color map is ordered: False (0)
.... .000 = Image bits per pixel minus 1: 0
LZW minimum code size: 8
Data block (length = 167)
Data block (length = 0)
Trailer (End of the GIF stream)

No. Time Source Destination Protocol Info
194 1604.455383 192.168.103.148 192.168.103.48 HTTP [TCP Retransmission] HTTP/1.1 200 OK (GIF89a)

Frame 194 (1240 bytes on wire, 1240 bytes captured)
Arrival Time: May 30, 2006 11:21:14.043131000
Time delta from previous packet: 63.997337000 seconds
Time since reference or first frame: 1604.455383000 seconds
Frame Number: 194
Packet Length: 1240 bytes
Capture Length: 1240 bytes
Protocols in frame: eth:ip:tcp:http:image-gif
Coloring Rule Name: Bad TCP
Coloring Rule String: tcp.analysis.flags
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1226
Identification: 0xc2ae (49838)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x236a [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62622 (62622), Seq: 2351, Ack: 1618, Len: 1174
Source port: http-alt (8080)
Destination port: 62622 (62622)
Sequence number: 2351 (relative sequence number)
Next sequence number: 3525 (relative sequence number)
Acknowledgement number: 1618 (relative ack number)
Header length: 32 bytes
Flags: 0x0019 (FIN, PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...1 = Fin: Set
Window size: 65535
Checksum: 0xc772 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621135030, tsecr 1613855964
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) retransmission
The RTO for this segment was: 120.961111000 seconds
RTO based on delta from frame: 160
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
ETag: W/"970-1146515966000"\r\n
Last-Modified: Mon, 01 May 2006 20:39:26 GMT\r\n
Content-Type: image/gif\r\n
Content-Length: 970\r\n
Date: Tue, 30 May 2006 18:18:31 GMT\r\n
\r\n
Compuserve GIF, Version: GIF89a
Version: GIF89a
Screen width: 9
Screen height: 18
Global settings: (Global color table present) (7 bits per color) (8 bits per pixel)
1... .... = Global color map is present: True (1)
.111 .... = Bits per color minus 1: 7
.... 0... = Global color map is ordered: False (0)
.... .111 = Image bits per pixel minus 1: 7
Background color index: 0
Global color map: C2C2C2F8F8FFFDFDFFF9F9FFFBFBFFF6F6FFDEDEDEF7F7FF...
Extension: Graphics Control
Extension label: Graphics Control (0xf9)
Data block (length = 4)
Data block (length = 0)
Image
Image left position: 0
Image top position: 0
Image width: 9
Image height: 18
Local settings: (1 bit per color) (1 bit per pixel)
0... .... = Local color map is present: False (0)
.000 .... = Bits per color minus 1: 0
.... 0... = Local color map is ordered: False (0)
.... .000 = Image bits per pixel minus 1: 0
LZW minimum code size: 8
Data block (length = 167)
Data block (length = 0)
Trailer (End of the GIF stream)

No. Time Source Destination Protocol Info
210 2080.017805 192.168.103.48 192.168.103.148 HTTP GET /scooby/redirect_login.html HTTP/1.1

Frame 210 (659 bytes on wire, 659 bytes captured)
Arrival Time: May 30, 2006 11:29:09.605553000
Time delta from previous packet: 475.562422000 seconds
Time since reference or first frame: 2080.017805000 seconds
Frame Number: 210
Packet Length: 659 bytes
Capture Length: 659 bytes
Protocols in frame: eth:ip:tcp:http
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 645
Identification: 0x1bbf (7103)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xcc9e [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62653 (62653), Dst Port: http-alt (8080), Seq: 1, Ack: 1, Len: 593
Source port: 62653 (62653)
Destination port: http-alt (8080)
Sequence number: 1 (relative sequence number)
Next sequence number: 594 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x12f4 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613857157, tsecr 621135981
Hypertext Transfer Protocol
GET /scooby/redirect_login.html HTTP/1.1\r\n
Request Method: GET
Request URI: /scooby/redirect_login.html
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Referer: http://192.168.103.148:8080/scooby/main.page\r\n
Cookie: JSESSIONID=DEF8CF5145311405B4486ED9AE944D7E; username=adam; inputTimestamp=1149011670235\r\n
\r\n

No. Time Source Destination Protocol Info
212 2080.159219 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (text/html)

Frame 212 (775 bytes on wire, 775 bytes captured)
Arrival Time: May 30, 2006 11:29:09.746967000
Time delta from previous packet: 0.141414000 seconds
Time since reference or first frame: 2080.159219000 seconds
Frame Number: 212
Packet Length: 775 bytes
Capture Length: 775 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 761
Identification: 0xc394 (50068)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2455 [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62653 (62653), Seq: 1, Ack: 594, Len: 709
Source port: http-alt (8080)
Destination port: 62653 (62653)
Sequence number: 1 (relative sequence number)
Next sequence number: 710 (relative sequence number)
Acknowledgement number: 594 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x3629 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621135982, tsecr 1613857157
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
ETag: W/"505-1147832736000"\r\n
Last-Modified: Wed, 17 May 2006 02:25:36 GMT\r\n
Content-Type: text/html\r\n
Content-Length: 505\r\n
Date: Tue, 30 May 2006 18:28:30 GMT\r\n
\r\n
Line-based text data: text/html
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title></title>
<script type="text/javascript" src="js/scooby/util/cookie.js"></script>
<script type="text/javascript">
function init() {
Cookie.destroy('JSESSIONID', '/scooby');
Cookie.destroy('inputTimestamp');
location = '/scooby/login.page';
}

window.onload = init;
</script>
</head>
<body></body>
</html>

No. Time Source Destination Protocol Info
214 2080.267446 192.168.103.48 192.168.103.148 HTTP GET /scooby/login.page HTTP/1.1

Frame 214 (585 bytes on wire, 585 bytes captured)
Arrival Time: May 30, 2006 11:29:09.855194000
Time delta from previous packet: 0.108227000 seconds
Time since reference or first frame: 2080.267446000 seconds
Frame Number: 214
Packet Length: 585 bytes
Capture Length: 585 bytes
Protocols in frame: eth:ip:tcp:http
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 571
Identification: 0x1bc1 (7105)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xcce6 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62653 (62653), Dst Port: http-alt (8080), Seq: 594, Ack: 710, Len: 519
Source port: 62653 (62653)
Destination port: http-alt (8080)
Sequence number: 594 (relative sequence number)
Next sequence number: 1113 (relative sequence number)
Acknowledgement number: 710 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x9a2e [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613857158, tsecr 621135982
Hypertext Transfer Protocol
GET /scooby/login.page HTTP/1.1\r\n
Request Method: GET
Request URI: /scooby/login.page
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Referer: http://192.168.103.148:8080/scooby/redirect_login.html\r\n
Cookie: username=adam\r\n
\r\n

No. Time Source Destination Protocol Info
217 2080.281271 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (text/html)

Frame 217 (1444 bytes on wire, 1444 bytes captured)
Arrival Time: May 30, 2006 11:29:09.869019000
Time delta from previous packet: 0.013825000 seconds
Time since reference or first frame: 2080.281271000 seconds
Frame Number: 217
Packet Length: 1444 bytes
Capture Length: 1444 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1430
Identification: 0xc397 (50071)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x21b5 [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62653 (62653), Seq: 2158, Ack: 1113, Len: 1378
Source port: http-alt (8080)
Destination port: 62653 (62653)
Sequence number: 2158 (relative sequence number)
Next sequence number: 3536 (relative sequence number)
Acknowledgement number: 1113 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x6de4 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621135982, tsecr 1613857158
TCP segment data (1378 bytes)
Reassembled TCP Segments (2826 bytes): #216(1448), #217(1378)
Frame: 216, payload: 0-1447 (1448 bytes)
Frame: 217, payload: 1448-2825 (1378 bytes)
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
Set-Cookie: JSESSIONID=61DA50AD3AC5614B0D2DD30A6D7BB267; Path=/scooby\r\n
Content-Type: text/html;charset=ISO-8859-1\r\n
Content-Language: en-US\r\n
Content-Length: 2581\r\n
Date: Tue, 30 May 2006 18:28:30 GMT\r\n
\r\n
Line-based text data: text/html

<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>Welcome to Scooby</title>
<script type="text/javascript" src="i18n.js"></script>
<script type="text/javascript" src="js/scooby/ui/ui.conf.js"></script>
<script type="text/javascript" src="js/scooby/ui/button.js"></script>
<script type="text/javascript" src="js/scooby/ui/login.js"></script>
<script type="text/javascript" src="js/scooby/ui/styler.js"></script>
<script type="text/javascript" src="js/scooby/util/ajax.js"></script>
<script type="text/javascript" src="js/scooby/util/cookie.js"></script>
<script type="text/javascript" src="js/scooby/util/log.js"></script>
<script type="text/javascript" src="js/scooby/util/popup.js"></script>

<script type="text/javascript">
var AUTH_PROC = 'j_acegi_security_check';
</script>
<script type="text/javascript" src="js/scooby/ui/global.css.js"></script>
</head>
<body>
<div>
<div style="margin:auto; width:280px; text-align:left; padding-top:24px;">
<div id="logoDiv" style="padding-bottom:12px;"></div>
<div id="promptDiv" class="promptText" style="height:46px;">
Enter a username and password, and click the Submit button.
</div>
<div class="baseWidget">
<div style="padding:12px;">
<form id="loginForm" name="loginForm" method="post"
action="j_acegi_security_check" onsubmit="return false;">
<table>
<tr>
<td class="formTitleHoriz">
Username:&nbsp;
</td>
<td style="padding-bottom:4px;">
<input class="inputText" type="text" name="j_username"/>
</td>
</tr>
<tr>
<td class="formTitleHoriz">
Password:&nbsp;
</td>
<td><input class="inputText" type="password"
name="j_password" onfocus="Login.loginFocus=true;"
onblur="Login.loginFocus=false;"/></td>
</tr>
</table>
<div id="submitButtonDiv"
style="margin-top:16px; float:right;">
</div>
<div style="clear:both;"></div>
</form>
</div>
</div>
<div style="padding-top:36px; text-align:center;">
<a href="javascript:Popup.open('about.html', 380, 280);">
About Scooby Web Calendar ...
</a>
</div>
</div>
</div>
</body>
</html>

No. Time Source Destination Protocol Info
219 2080.293827 192.168.103.48 192.168.103.148 HTTP GET /scooby/i18n.js HTTP/1.1

Frame 219 (522 bytes on wire, 522 bytes captured)
Arrival Time: May 30, 2006 11:29:09.881575000
Time delta from previous packet: 0.012556000 seconds
Time since reference or first frame: 2080.293827000 seconds
Frame Number: 219
Packet Length: 522 bytes
Capture Length: 522 bytes
Protocols in frame: eth:ip:tcp:http
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 508
Identification: 0x1bc3 (7107)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xcd23 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62653 (62653), Dst Port: http-alt (8080), Seq: 1113, Ack: 3536, Len: 456
Source port: 62653 (62653)
Destination port: http-alt (8080)
Sequence number: 1113 (relative sequence number)
Next sequence number: 1569 (relative sequence number)
Acknowledgement number: 3536 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xdc24 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613857158, tsecr 621135982
Hypertext Transfer Protocol
GET /scooby/i18n.js HTTP/1.1\r\n
Request Method: GET
Request URI: /scooby/i18n.js
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: /*\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Referer: http://192.168.103.148:8080/scooby/login.page\r\n
Cookie: JSESSIONID=61DA50AD3AC5614B0D2DD30A6D7BB267; username=adam\r\n
\r\n

No. Time Source Destination Protocol Info
224 2080.313334 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (text/html)

Frame 224 (1015 bytes on wire, 1015 bytes captured)
Arrival Time: May 30, 2006 11:29:09.901082000
Time delta from previous packet: 0.019507000 seconds
Time since reference or first frame: 2080.313334000 seconds
Frame Number: 224
Packet Length: 1015 bytes
Capture Length: 1015 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1001
Identification: 0xc39b (50075)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x235e [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62653 (62653), Seq: 6432, Ack: 1569, Len: 949
Source port: http-alt (8080)
Destination port: 62653 (62653)
Sequence number: 6432 (relative sequence number)
Next sequence number: 7381 (relative sequence number)
Acknowledgement number: 1569 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x459f [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621135982, tsecr 1613857158
TCP segment data (949 bytes)
Reassembled TCP Segments (3845 bytes): #221(1448), #222(1448), #224(949)
Frame: 221, payload: 0-1447 (1448 bytes)
Frame: 222, payload: 1448-2895 (1448 bytes)
Frame: 224, payload: 2896-3844 (949 bytes)
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
Content-Type: text/html;charset=ISO-8859-1\r\n
Content-Language: en-US\r\n
Content-Length: 3671\r\n
Date: Tue, 30 May 2006 18:28:30 GMT\r\n
\r\n
Line-based text data: text/html

var localText = [];
function getText(str) {
return localText[str];
}

localText["App.Button.Save"] = "Save";
localText["App.August"] = "August";
localText["Main.LogOut"] = "Log Out";
localText["App.Sat"] = "Sat";
localText["App.Nov"] = "Nov";
localText["App.Tue"] = "Tue";
localText["App.October"] = "October";
localText["App.Button.Cancel"] = "Cancel";
localText["Main.DetailForm.Title"] = "Title";
localText["App.Friday"] = "Friday";
localText["App.Jun"] = "Jun";
localText["Login.Error.NoLoginWithRootAccount"] = "You cannot log in to Scooby with the Cosmo root user account.";
localText["App.Saturday"] = "Saturday";
localText["App.Wed"] = "Wed";
localText["App.Thu"] = "Thu";
localText["App.Sun"] = "Sun";
localText["App.July"] = "July";
localText["App.Jul"] = "Jul";
localText["App.Oct"] = "Oct";
localText["App.February"] = "February";
localText["Main.Error.EventNewSaveFailed"] = "Could not save this new event.";
localText["App.November"] = "November";
localText["App.Wednesday"] = "Wednesday";
localText["Login.Error.AuthFailed"] = "Could not verify the entered username and password. Please try again.";
localText["Main.Processing"] = "Processing ...";
localText["Login.Prompt"] = "Enter a username and password, and click the Submit button.";
localText["Main.Error.LoadEventsFailed"] = "Could not load events.";
localText["App.January"] = "January";
localText["App.PM"] = "PM";
localText["App.Fri"] = "Fri";
localText["App.Dec"] = "Dec";
localText["Main.Preferences"] = "Preferences";
localText["Login.Username"] = "Username:";
localText["Main.About"] = "About Scooby";
localText["App.Jan"] = "Jan";
localText["Login.About"] = "About Scooby Web Calendar ...";
localText["Main.Error.EventRemoveFailed"] = "Could not remove this event.";
localText["App.September"] = "September";
localText["App.Feb"] = "Feb";
localText["App.May"] = "May";
localText["App.Thursday"] = "Thursday";
localText["Main.Error.EventTimezoneMismatch"] = "Calendar event Start and End have mismatched timezones.";
localText["Main.Welcome"] = "Welcome,";
localText["Main.DetailForm.At"] = "at";
localText["App.June"] = "June";
localText["No"] = "No";
localText["Main.DetailForm.Ends"] = "Ends";
localText["Login.Password"] = "Password:";
localText["App.Welcome"] = "Welcome to Scooby";
localText["App.Button.OK"] = "OK";
localText["App.Sep"] = "Sep";
localText["App.December"] = "December";
localText["Login.Error.RequiredFields"] = "Both Username and Password are required fields.";
localText["App.Monday"] = "Monday";
localText["App.March"] = "March";
localText["App.Mon"] = "Mon";
localText["Main.Prompt.EventRemoveConfirm"] = "Remove this event?";
localText["App.Tuesday"] = "Tuesday";
localText["Main.DetailForm.Description"] = "Description";
localText["App.Sunday"] = "Sunday";
localText["Main.NewEvent"] = "New Event";
localText["Yes"] = "Yes";
localText["App.Aug"] = "Aug";
localText["Main.Error.InitCalCreateFailed"] = "Could not create calendar for new user.";
localText["App.Button.Submit"] = "Submit";
localText["App.Mar"] = "Mar";
localText["Main.DetailForm.Starts"] = "Starts";
localText["Main.Error.EventEditSaveFailed"] = "Could not save the changes to this event.";
localText["App.April"] = "April";
localText["App.Button.Remove"] = "Remove";
localText["App.Apr"] = "Apr";
localText["App.AM"] = "AM";

No. Time Source Destination Protocol Info
228 2085.431525 192.168.103.48 192.168.103.148 HTTP POST /scooby/j_acegi_security_check HTTP/1.1 (application/x-www-form-urlencoded)

Frame 228 (724 bytes on wire, 724 bytes captured)
Arrival Time: May 30, 2006 11:29:15.019273000
Time delta from previous packet: 5.118191000 seconds
Time since reference or first frame: 2085.431525000 seconds
Frame Number: 228
Packet Length: 724 bytes
Capture Length: 724 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 710
Identification: 0x1bfb (7163)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xcc21 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62653 (62653), Dst Port: http-alt (8080), Seq: 1569, Ack: 7381, Len: 658
Source port: 62653 (62653)
Destination port: http-alt (8080)
Sequence number: 1569 (relative sequence number)
Next sequence number: 2227 (relative sequence number)
Acknowledgement number: 7381 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xabbf [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613857168, tsecr 621135982
Hypertext Transfer Protocol
POST /scooby/j_acegi_security_check HTTP/1.1\r\n
Request Method: POST
Request URI: /scooby/j_acegi_security_check
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Content-Type: application/x-www-form-urlencoded\r\n
Content-Length: 34\r\n
Cookie: JSESSIONID=61DA50AD3AC5614B0D2DD30A6D7BB267; username=adam\r\n
Pragma: no-cache\r\n
Cache-Control: no-cache\r\n
\r\n
Line-based text data: application/x-www-form-urlencoded
j_username=adam&j_password=s7hp0xC

No. Time Source Destination Protocol Info
230 2085.442965 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 302 Moved Temporarily

Frame 230 (239 bytes on wire, 239 bytes captured)
Arrival Time: May 30, 2006 11:29:15.030713000
Time delta from previous packet: 0.011440000 seconds
Time since reference or first frame: 2085.442965000 seconds
Frame Number: 230
Packet Length: 239 bytes
Capture Length: 239 bytes
Protocols in frame: eth:ip:tcp:http
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 225
Identification: 0xc39e (50078)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2663 [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62653 (62653), Seq: 7381, Ack: 2227, Len: 173
Source port: http-alt (8080)
Destination port: 62653 (62653)
Sequence number: 7381 (relative sequence number)
Next sequence number: 7554 (relative sequence number)
Acknowledgement number: 2227 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x640d [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621135992, tsecr 1613857168
Hypertext Transfer Protocol
HTTP/1.1 302 Moved Temporarily\r\n
Request Version: HTTP/1.1
Response Code: 302
Server: Apache-Coyote/1.1\r\n
Location: http://192.168.103.148:8080/scooby/main.page\r\n
Content-Length: 0\r\n
Date: Tue, 30 May 2006 18:28:36 GMT\r\n
\r\n

No. Time Source Destination Protocol Info
232 2085.443598 192.168.103.48 192.168.103.148 HTTP GET /scooby/main.page HTTP/1.1

Frame 232 (607 bytes on wire, 607 bytes captured)
Arrival Time: May 30, 2006 11:29:15.031346000
Time delta from previous packet: 0.000633000 seconds
Time since reference or first frame: 2085.443598000 seconds
Frame Number: 232
Packet Length: 607 bytes
Capture Length: 607 bytes
Protocols in frame: eth:ip:tcp:http
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 593
Identification: 0x1bfd (7165)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xcc94 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62653 (62653), Dst Port: http-alt (8080), Seq: 2227, Ack: 7554, Len: 541
Source port: 62653 (62653)
Destination port: http-alt (8080)
Sequence number: 2227 (relative sequence number)
Next sequence number: 2768 (relative sequence number)
Acknowledgement number: 7554 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xac61 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613857168, tsecr 621135992
Hypertext Transfer Protocol
GET /scooby/main.page HTTP/1.1\r\n
Request Method: GET
Request URI: /scooby/main.page
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Cookie: JSESSIONID=61DA50AD3AC5614B0D2DD30A6D7BB267; username=adam\r\n
Pragma: no-cache\r\n
Cache-Control: no-cache\r\n
\r\n

No. Time Source Destination Protocol Info
237 2085.456348 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (text/html)

Frame 237 (252 bytes on wire, 252 bytes captured)
Arrival Time: May 30, 2006 11:29:15.044096000
Time delta from previous packet: 0.012750000 seconds
Time since reference or first frame: 2085.456348000 seconds
Frame Number: 237
Packet Length: 252 bytes
Capture Length: 252 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 238
Identification: 0xc3a2 (50082)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2652 [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62653 (62653), Seq: 10450, Ack: 2768, Len: 186
Source port: http-alt (8080)
Destination port: 62653 (62653)
Sequence number: 10450 (relative sequence number)
Next sequence number: 10636 (relative sequence number)
Acknowledgement number: 2768 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x8dd8 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621135992, tsecr 1613857168
TCP segment data (186 bytes)
Reassembled TCP Segments (3082 bytes): #234(1448), #235(1448), #237(186)
Frame: 234, payload: 0-1447 (1448 bytes)
Frame: 235, payload: 1448-2895 (1448 bytes)
Frame: 237, payload: 2896-3081 (186 bytes)
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
Content-Type: text/html;charset=ISO-8859-1\r\n
Content-Language: en-US\r\n
Content-Length: 2908\r\n
Date: Tue, 30 May 2006 18:28:36 GMT\r\n
\r\n
Line-based text data: text/html

<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>Welcome to Scooby</title>
<script type="text/javascript" src="js/lib/dojo-event_and_io/dojo.js"></script>
<script type="text/javascript">
dojo.require('dojo.widget.*');
</script>
<script type="text/javascript" src="i18n.js"></script>
<script type="text/javascript" src="js/scooby/util/log.js"></script>
<script type="text/javascript" src="js/scooby/util/ajax.js"></script>
<script type="text/javascript" src="js/scooby/util/date.js"></script>
<script type="text/javascript" src="js/scooby/util/hash.js"></script>
<script type="text/javascript" src="js/scooby/util/debug.js"></script>
<script type="text/javascript" src="js/scooby/util/validate.js"></script>
<script type="text/javascript" src="js/scooby/util/cookie.js"></script>
<script type="text/javascript" src="js/scooby/util/text.js"></script>
<script type="text/javascript" src="js/scooby/util/popup.js"></script>
<script type="text/javascript" src="js/scooby/model/scoobydate.js"></script>
<script type="text/javascript" src="js/scooby/model/model.js"></script>
<script type="text/javascript" src="js/scooby/ui/ui.conf.js"></script>
<script type="text/javascript" src="js/scooby/ui/block.js"></script>
<script type="text/javascript" src="js/scooby/ui/dialog.js"></script>
<script type="text/javascript" src="js/scooby/ui/cal_main.js"></script>
<script type="text/javascript" src="js/scooby/ui/draggable.js"></script>
<script type="text/javascript" src="js/scooby/ui/resize_area.js"></script>
<script type="text/javascript" src="js/scooby/ui/cal_form.js"></script>
<script type="text/javascript" src="js/scooby/ui/event/handlers.js"></script>
<script type="text/javascript" src="js/scooby/ui/styler.js"></script>
<script type="text/javascript" src="js/scooby/ui/contentcontainer.js"></script>
<script type="text/javascript" src="js/scooby/ui/button.js"></script>
<script type="text/javascript" src="js/scooby/ui/widget/Layout.js"></script>
<script type="text/javascript" src="js/scooby/facade/pref.js"></script>
<script type="text/javascript" src="js/scooby/service/service_stub.js"></script>
<script type="text/javascript" src="js/scooby/service/json_service_impl.js"></script>
<script type="text/javascript" src="js/scooby/legacy/cal_event.js"></script>
<script type="text/javascript" src="js/scooby/legacy/async.js"></script>
<script type="text/javascript" src="js/lib/jsonrpc-java-js/jsonrpc.js"></script>
<script type="text/javascript">
// FIXME: Need to get timeout value from server
var TIMEOUT_MIN = 30;
function init() {
Cal.init();
}
</script>
<script type="text/javascript" src="js/scooby/ui/event/listeners.js"></script>
<script type="text/javascript" src="js/scooby/ui/global.css.js"></script>
</head>
<body id="body"></body>
</html>

No. Time Source Destination Protocol Info
239 2085.477372 192.168.103.48 192.168.103.148 HTTP GET /scooby/main.page HTTP/1.1

Frame 239 (620 bytes on wire, 620 bytes captured)
Arrival Time: May 30, 2006 11:29:15.065120000
Time delta from previous packet: 0.021024000 seconds
Time since reference or first frame: 2085.477372000 seconds
Frame Number: 239
Packet Length: 620 bytes
Capture Length: 620 bytes
Protocols in frame: eth:ip:tcp:http
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 606
Identification: 0x1c00 (7168)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xcc84 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62653 (62653), Dst Port: http-alt (8080), Seq: 2768, Ack: 10636, Len: 554
Source port: 62653 (62653)
Destination port: http-alt (8080)
Sequence number: 2768 (relative sequence number)
Next sequence number: 3322 (relative sequence number)
Acknowledgement number: 10636 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x4a32 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613857168, tsecr 621135992
Hypertext Transfer Protocol
GET /scooby/main.page HTTP/1.1\r\n
Request Method: GET
Request URI: /scooby/main.page
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Referer: http://192.168.103.148:8080/scooby/login.page\r\n
Cookie: JSESSIONID=61DA50AD3AC5614B0D2DD30A6D7BB267; username=adam\r\n
\r\n

No. Time Source Destination Protocol Info
244 2085.489807 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (text/html)

Frame 244 (252 bytes on wire, 252 bytes captured)
Arrival Time: May 30, 2006 11:29:15.077555000
Time delta from previous packet: 0.012435000 seconds
Time since reference or first frame: 2085.489807000 seconds
Frame Number: 244
Packet Length: 252 bytes
Capture Length: 252 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 238
Identification: 0xc3a6 (50086)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x264e [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62653 (62653), Seq: 13532, Ack: 3322, Len: 186
Source port: http-alt (8080)
Destination port: 62653 (62653)
Sequence number: 13532 (relative sequence number)
Next sequence number: 13718 (relative sequence number)
Acknowledgement number: 3322 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x7fa4 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621135992, tsecr 1613857168
TCP segment data (186 bytes)
Reassembled TCP Segments (3082 bytes): #241(1448), #242(1448), #244(186)
Frame: 241, payload: 0-1447 (1448 bytes)
Frame: 242, payload: 1448-2895 (1448 bytes)
Frame: 244, payload: 2896-3081 (186 bytes)
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
Content-Type: text/html;charset=ISO-8859-1\r\n
Content-Language: en-US\r\n
Content-Length: 2908\r\n
Date: Tue, 30 May 2006 18:28:36 GMT\r\n
\r\n
Line-based text data: text/html

<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>Welcome to Scooby</title>
<script type="text/javascript" src="js/lib/dojo-event_and_io/dojo.js"></script>
<script type="text/javascript">
dojo.require('dojo.widget.*');
</script>
<script type="text/javascript" src="i18n.js"></script>
<script type="text/javascript" src="js/scooby/util/log.js"></script>
<script type="text/javascript" src="js/scooby/util/ajax.js"></script>
<script type="text/javascript" src="js/scooby/util/date.js"></script>
<script type="text/javascript" src="js/scooby/util/hash.js"></script>
<script type="text/javascript" src="js/scooby/util/debug.js"></script>
<script type="text/javascript" src="js/scooby/util/validate.js"></script>
<script type="text/javascript" src="js/scooby/util/cookie.js"></script>
<script type="text/javascript" src="js/scooby/util/text.js"></script>
<script type="text/javascript" src="js/scooby/util/popup.js"></script>
<script type="text/javascript" src="js/scooby/model/scoobydate.js"></script>
<script type="text/javascript" src="js/scooby/model/model.js"></script>
<script type="text/javascript" src="js/scooby/ui/ui.conf.js"></script>
<script type="text/javascript" src="js/scooby/ui/block.js"></script>
<script type="text/javascript" src="js/scooby/ui/dialog.js"></script>
<script type="text/javascript" src="js/scooby/ui/cal_main.js"></script>
<script type="text/javascript" src="js/scooby/ui/draggable.js"></script>
<script type="text/javascript" src="js/scooby/ui/resize_area.js"></script>
<script type="text/javascript" src="js/scooby/ui/cal_form.js"></script>
<script type="text/javascript" src="js/scooby/ui/event/handlers.js"></script>
<script type="text/javascript" src="js/scooby/ui/styler.js"></script>
<script type="text/javascript" src="js/scooby/ui/contentcontainer.js"></script>
<script type="text/javascript" src="js/scooby/ui/button.js"></script>
<script type="text/javascript" src="js/scooby/ui/widget/Layout.js"></script>
<script type="text/javascript" src="js/scooby/facade/pref.js"></script>
<script type="text/javascript" src="js/scooby/service/service_stub.js"></script>
<script type="text/javascript" src="js/scooby/service/json_service_impl.js"></script>
<script type="text/javascript" src="js/scooby/legacy/cal_event.js"></script>
<script type="text/javascript" src="js/scooby/legacy/async.js"></script>
<script type="text/javascript" src="js/lib/jsonrpc-java-js/jsonrpc.js"></script>
<script type="text/javascript">
// FIXME: Need to get timeout value from server
var TIMEOUT_MIN = 30;
function init() {
Cal.init();
}
</script>
<script type="text/javascript" src="js/scooby/ui/event/listeners.js"></script>
<script type="text/javascript" src="js/scooby/ui/global.css.js"></script>
</head>
<body id="body"></body>
</html>

No. Time Source Destination Protocol Info
246 2085.844775 192.168.103.48 192.168.103.148 HTTP GET /scooby/i18n.js HTTP/1.1

Frame 246 (521 bytes on wire, 521 bytes captured)
Arrival Time: May 30, 2006 11:29:15.432523000
Time delta from previous packet: 0.354968000 seconds
Time since reference or first frame: 2085.844775000 seconds
Frame Number: 246
Packet Length: 521 bytes
Capture Length: 521 bytes
Protocols in frame: eth:ip:tcp:http
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 507
Identification: 0x1c03 (7171)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xcce4 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62653 (62653), Dst Port: http-alt (8080), Seq: 3322, Ack: 13718, Len: 455
Source port: 62653 (62653)
Destination port: http-alt (8080)
Sequence number: 3322 (relative sequence number)
Next sequence number: 3777 (relative sequence number)
Acknowledgement number: 13718 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xecdc [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613857169, tsecr 621135992
Hypertext Transfer Protocol
GET /scooby/i18n.js HTTP/1.1\r\n
Request Method: GET
Request URI: /scooby/i18n.js
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: /*\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Referer: http://192.168.103.148:8080/scooby/main.page\r\n
Cookie: JSESSIONID=61DA50AD3AC5614B0D2DD30A6D7BB267; username=adam\r\n
\r\n

No. Time Source Destination Protocol Info
247 2087.108476 192.168.103.48 192.168.103.148 HTTP [TCP Retransmission] GET /scooby/i18n.js HTTP/1.1

Frame 247 (521 bytes on wire, 521 bytes captured)
Arrival Time: May 30, 2006 11:29:16.696224000
Time delta from previous packet: 1.263701000 seconds
Time since reference or first frame: 2087.108476000 seconds
Frame Number: 247
Packet Length: 521 bytes
Capture Length: 521 bytes
Protocols in frame: eth:ip:tcp:http
Coloring Rule Name: Bad TCP
Coloring Rule String: tcp.analysis.flags
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 507
Identification: 0x1c04 (7172)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xcce3 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62653 (62653), Dst Port: http-alt (8080), Seq: 3322, Ack: 13718, Len: 455
Source port: 62653 (62653)
Destination port: http-alt (8080)
Sequence number: 3322 (relative sequence number)
Next sequence number: 3777 (relative sequence number)
Acknowledgement number: 13718 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xecda [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613857171, tsecr 621135992
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) retransmission
The RTO for this segment was: 1.263701000 seconds
RTO based on delta from frame: 246
Hypertext Transfer Protocol
GET /scooby/i18n.js HTTP/1.1\r\n
Request Method: GET
Request URI: /scooby/i18n.js
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: /*\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Referer: http://192.168.103.148:8080/scooby/main.page\r\n
Cookie: JSESSIONID=61DA50AD3AC5614B0D2DD30A6D7BB267; username=adam\r\n
\r\n

No. Time Source Destination Protocol Info
250 2090.140948 192.168.103.48 192.168.103.148 HTTP [TCP Out-Of-Order] GET /scooby/i18n.js HTTP/1.1

Frame 250 (521 bytes on wire, 521 bytes captured)
Arrival Time: May 30, 2006 11:29:19.728696000
Time delta from previous packet: 3.032472000 seconds
Time since reference or first frame: 2090.140948000 seconds
Frame Number: 250
Packet Length: 521 bytes
Capture Length: 521 bytes
Protocols in frame: eth:ip:tcp:http
Coloring Rule Name: Bad TCP
Coloring Rule String: tcp.analysis.flags
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 507
Identification: 0x1c08 (7176)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xccdf [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62653 (62653), Dst Port: http-alt (8080), Seq: 3322, Ack: 13718, Len: 455
Source port: 62653 (62653)
Destination port: http-alt (8080)
Sequence number: 3322 (relative sequence number)
Next sequence number: 3777 (relative sequence number)
Acknowledgement number: 13718 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xecd4 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613857177, tsecr 621135992
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) out-of-order segment
Hypertext Transfer Protocol
GET /scooby/i18n.js HTTP/1.1\r\n
Request Method: GET
Request URI: /scooby/i18n.js
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: /*\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Referer: http://192.168.103.148:8080/scooby/main.page\r\n
Cookie: JSESSIONID=61DA50AD3AC5614B0D2DD30A6D7BB267; username=adam\r\n
\r\n

No. Time Source Destination Protocol Info
255 2090.216310 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (text/html)

Frame 255 (1015 bytes on wire, 1015 bytes captured)
Arrival Time: May 30, 2006 11:29:19.804058000
Time delta from previous packet: 0.075362000 seconds
Time since reference or first frame: 2090.216310000 seconds
Frame Number: 255
Packet Length: 1015 bytes
Capture Length: 1015 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1001
Identification: 0xc3ab (50091)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x234e [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62653 (62653), Seq: 16614, Ack: 3777, Len: 949
Source port: http-alt (8080)
Destination port: 62653 (62653)
Sequence number: 16614 (relative sequence number)
Next sequence number: 17563 (relative sequence number)
Acknowledgement number: 3777 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x1512 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621136002, tsecr 1613857177
TCP segment data (949 bytes)
Reassembled TCP Segments (3845 bytes): #252(1448), #253(1448), #255(949)
Frame: 252, payload: 0-1447 (1448 bytes)
Frame: 253, payload: 1448-2895 (1448 bytes)
Frame: 255, payload: 2896-3844 (949 bytes)
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
Content-Type: text/html;charset=ISO-8859-1\r\n
Content-Language: en-US\r\n
Content-Length: 3671\r\n
Date: Tue, 30 May 2006 18:28:41 GMT\r\n
\r\n
Line-based text data: text/html

var localText = [];
function getText(str) {
return localText[str];
}

localText["App.Button.Save"] = "Save";
localText["App.August"] = "August";
localText["Main.LogOut"] = "Log Out";
localText["App.Sat"] = "Sat";
localText["App.Nov"] = "Nov";
localText["App.Tue"] = "Tue";
localText["App.October"] = "October";
localText["App.Button.Cancel"] = "Cancel";
localText["Main.DetailForm.Title"] = "Title";
localText["App.Friday"] = "Friday";
localText["App.Jun"] = "Jun";
localText["Login.Error.NoLoginWithRootAccount"] = "You cannot log in to Scooby with the Cosmo root user account.";
localText["App.Saturday"] = "Saturday";
localText["App.Wed"] = "Wed";
localText["App.Thu"] = "Thu";
localText["App.Sun"] = "Sun";
localText["App.July"] = "July";
localText["App.Jul"] = "Jul";
localText["App.Oct"] = "Oct";
localText["App.February"] = "February";
localText["Main.Error.EventNewSaveFailed"] = "Could not save this new event.";
localText["App.November"] = "November";
localText["App.Wednesday"] = "Wednesday";
localText["Login.Error.AuthFailed"] = "Could not verify the entered username and password. Please try again.";
localText["Main.Processing"] = "Processing ...";
localText["Login.Prompt"] = "Enter a username and password, and click the Submit button.";
localText["Main.Error.LoadEventsFailed"] = "Could not load events.";
localText["App.January"] = "January";
localText["App.PM"] = "PM";
localText["App.Fri"] = "Fri";
localText["App.Dec"] = "Dec";
localText["Main.Preferences"] = "Preferences";
localText["Login.Username"] = "Username:";
localText["Main.About"] = "About Scooby";
localText["App.Jan"] = "Jan";
localText["Login.About"] = "About Scooby Web Calendar ...";
localText["Main.Error.EventRemoveFailed"] = "Could not remove this event.";
localText["App.September"] = "September";
localText["App.Feb"] = "Feb";
localText["App.May"] = "May";
localText["App.Thursday"] = "Thursday";
localText["Main.Error.EventTimezoneMismatch"] = "Calendar event Start and End have mismatched timezones.";
localText["Main.Welcome"] = "Welcome,";
localText["Main.DetailForm.At"] = "at";
localText["App.June"] = "June";
localText["No"] = "No";
localText["Main.DetailForm.Ends"] = "Ends";
localText["Login.Password"] = "Password:";
localText["App.Welcome"] = "Welcome to Scooby";
localText["App.Button.OK"] = "OK";
localText["App.Sep"] = "Sep";
localText["App.December"] = "December";
localText["Login.Error.RequiredFields"] = "Both Username and Password are required fields.";
localText["App.Monday"] = "Monday";
localText["App.March"] = "March";
localText["App.Mon"] = "Mon";
localText["Main.Prompt.EventRemoveConfirm"] = "Remove this event?";
localText["App.Tuesday"] = "Tuesday";
localText["Main.DetailForm.Description"] = "Description";
localText["App.Sunday"] = "Sunday";
localText["Main.NewEvent"] = "New Event";
localText["Yes"] = "Yes";
localText["App.Aug"] = "Aug";
localText["Main.Error.InitCalCreateFailed"] = "Could not create calendar for new user.";
localText["App.Button.Submit"] = "Submit";
localText["App.Mar"] = "Mar";
localText["Main.DetailForm.Starts"] = "Starts";
localText["Main.Error.EventEditSaveFailed"] = "Could not save the changes to this event.";
localText["App.April"] = "April";
localText["App.Button.Remove"] = "Remove";
localText["App.Apr"] = "Apr";
localText["App.AM"] = "AM";

No. Time Source Destination Protocol Info
257 2090.369337 192.168.103.48 192.168.103.148 HTTP POST /scooby/JSON-RPC HTTP/1.1 (text/plain)

Frame 257 (708 bytes on wire, 708 bytes captured)
Arrival Time: May 30, 2006 11:29:19.957085000
Time delta from previous packet: 0.153027000 seconds
Time since reference or first frame: 2090.369337000 seconds
Frame Number: 257
Packet Length: 708 bytes
Capture Length: 708 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 694
Identification: 0x1c0c (7180)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xcc20 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62653 (62653), Dst Port: http-alt (8080), Seq: 3777, Ack: 17563, Len: 642
Source port: 62653 (62653)
Destination port: http-alt (8080)
Sequence number: 3777 (relative sequence number)
Next sequence number: 4419 (relative sequence number)
Acknowledgement number: 17563 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xcddb [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613857178, tsecr 621136002
Hypertext Transfer Protocol
POST /scooby/JSON-RPC HTTP/1.1\r\n
Request Method: POST
Request URI: /scooby/JSON-RPC
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Content-Type: text/plain\r\n
Content-Length: 55\r\n
Cookie: JSESSIONID=61DA50AD3AC5614B0D2DD30A6D7BB267; username=adam\r\n
Pragma: no-cache\r\n
Cache-Control: no-cache\r\n
\r\n
Line-based text data: text/plain
{"id": 1, "method": "system.listMethods", "params": []}

No. Time Source Destination Protocol Info
259 2090.421319 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (text/plain)

Frame 259 (568 bytes on wire, 568 bytes captured)
Arrival Time: May 30, 2006 11:29:20.009067000
Time delta from previous packet: 0.051982000 seconds
Time since reference or first frame: 2090.421319000 seconds
Frame Number: 259
Packet Length: 568 bytes
Capture Length: 568 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 554
Identification: 0xc3ad (50093)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x250b [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62653 (62653), Seq: 17563, Ack: 4419, Len: 502
Source port: http-alt (8080)
Destination port: 62653 (62653)
Sequence number: 17563 (relative sequence number)
Next sequence number: 18065 (relative sequence number)
Acknowledgement number: 4419 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x8d2b [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621136002, tsecr 1613857178
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
Content-Type: text/plain;charset=utf-8\r\n
Content-Length: 358\r\n
Date: Tue, 30 May 2006 18:28:41 GMT\r\n
\r\n
Line-based text data: text/plain
{"result":["scoobyService.saveEvent","scoobyService.createCalendar","scoobyService.moveEvent","scoobyService.getTestString","scoobyService.getEvent","scoobyService.setPreference","scoobyService.getPreference","scoobyService.removeEvent","s

No. Time Source Destination Protocol Info
261 2090.513771 192.168.103.48 192.168.103.148 HTTP POST /scooby/JSON-RPC HTTP/1.1 (text/plain)

Frame 261 (746 bytes on wire, 746 bytes captured)
Arrival Time: May 30, 2006 11:29:20.101519000
Time delta from previous packet: 0.092452000 seconds
Time since reference or first frame: 2090.513771000 seconds
Frame Number: 261
Packet Length: 746 bytes
Capture Length: 746 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 732
Identification: 0x1c1b (7195)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xcbeb [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62653 (62653), Dst Port: http-alt (8080), Seq: 4419, Ack: 18065, Len: 680
Source port: 62653 (62653)
Destination port: http-alt (8080)
Sequence number: 4419 (relative sequence number)
Next sequence number: 5099 (relative sequence number)
Acknowledgement number: 18065 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x54a1 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613857178, tsecr 621136002
Hypertext Transfer Protocol
POST /scooby/JSON-RPC HTTP/1.1\r\n
Request Method: POST
Request URI: /scooby/JSON-RPC
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Content-Type: text/plain\r\n
Content-Length: 63\r\n
Cookie: JSESSIONID=61DA50AD3AC5614B0D2DD30A6D7BB267; username=adam; inputTimestamp=1149013760100\r\n
Pragma: no-cache\r\n
Cache-Control: no-cache\r\n
\r\n
Line-based text data: text/plain
{"id": 2, "method": "scoobyService.getCalendars", "params": []}

No. Time Source Destination Protocol Info
263 2094.025986 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (text/plain)

Frame 263 (316 bytes on wire, 316 bytes captured)
Arrival Time: May 30, 2006 11:29:23.613734000
Time delta from previous packet: 3.512215000 seconds
Time since reference or first frame: 2094.025986000 seconds
Frame Number: 263
Packet Length: 316 bytes
Capture Length: 316 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 302
Identification: 0xc3b9 (50105)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x25fb [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62653 (62653), Seq: 18065, Ack: 5099, Len: 250
Source port: http-alt (8080)
Destination port: 62653 (62653)
Sequence number: 18065 (relative sequence number)
Next sequence number: 18315 (relative sequence number)
Acknowledgement number: 5099 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x7cd1 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621136009, tsecr 1613857178
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
Content-Type: text/plain;charset=utf-8\r\n
Content-Length: 106\r\n
Date: Tue, 30 May 2006 18:28:41 GMT\r\n
\r\n
Line-based text data: text/plain
{"result":[{"javaClass":"org.osaf.scooby.model.CalendarMetadata","path":"Scooby","name":"Scooby"}],"id":2}

No. Time Source Destination Protocol Info
266 2098.028148 192.168.103.148 192.168.103.48 HTTP [TCP Retransmission] HTTP/1.1 200 OK (text/plain)

Frame 266 (316 bytes on wire, 316 bytes captured)
Arrival Time: May 30, 2006 11:29:27.615896000
Time delta from previous packet: 4.002162000 seconds
Time since reference or first frame: 2098.028148000 seconds
Frame Number: 266
Packet Length: 316 bytes
Capture Length: 316 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: Bad TCP
Coloring Rule String: tcp.analysis.flags
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 302
Identification: 0xc3ba (50106)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x25fa [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62653 (62653), Seq: 18065, Ack: 5099, Len: 250
Source port: http-alt (8080)
Destination port: 62653 (62653)
Sequence number: 18065 (relative sequence number)
Next sequence number: 18315 (relative sequence number)
Acknowledgement number: 5099 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x7cc9 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621136017, tsecr 1613857178
SEQ/ACK analysis
TCP Analysis Flags
This frame is a (suspected) retransmission
The RTO for this segment was: 4.002162000 seconds
RTO based on delta from frame: 263
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
Content-Type: text/plain;charset=utf-8\r\n
Content-Length: 106\r\n
Date: Tue, 30 May 2006 18:28:41 GMT\r\n
\r\n
Line-based text data: text/plain
{"result":[{"javaClass":"org.osaf.scooby.model.CalendarMetadata","path":"Scooby","name":"Scooby"}],"id":2}

No. Time Source Destination Protocol Info
269 2098.122761 192.168.103.48 192.168.103.148 HTTP POST /scooby/JSON-RPC HTTP/1.1 (text/plain)

Frame 269 (781 bytes on wire, 781 bytes captured)
Arrival Time: May 30, 2006 11:29:27.710509000
Time delta from previous packet: 0.094613000 seconds
Time since reference or first frame: 2098.122761000 seconds
Frame Number: 269
Packet Length: 781 bytes
Capture Length: 781 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 767
Identification: 0x1c5c (7260)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xcb87 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62653 (62653), Dst Port: http-alt (8080), Seq: 5099, Ack: 18315, Len: 715
Source port: 62653 (62653)
Destination port: http-alt (8080)
Sequence number: 5099 (relative sequence number)
Next sequence number: 5814 (relative sequence number)
Acknowledgement number: 18315 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x0992 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613857193, tsecr 621136017
Hypertext Transfer Protocol
POST /scooby/JSON-RPC HTTP/1.1\r\n
Request Method: POST
Request URI: /scooby/JSON-RPC
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Content-Type: text/plain\r\n
Content-Length: 98\r\n
Cookie: JSESSIONID=61DA50AD3AC5614B0D2DD30A6D7BB267; username=adam; inputTimestamp=1149013760100\r\n
Pragma: no-cache\r\n
Cache-Control: no-cache\r\n
\r\n
Line-based text data: text/plain
{"id": 3, "method": "scoobyService.getEvents", "params": ["Scooby", 1148713200000, 1149490799000]}

No. Time Source Destination Protocol Info
272 2098.505615 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (text/plain)

Frame 272 (485 bytes on wire, 485 bytes captured)
Arrival Time: May 30, 2006 11:29:28.093363000
Time delta from previous packet: 0.382854000 seconds
Time since reference or first frame: 2098.505615000 seconds
Frame Number: 272
Packet Length: 485 bytes
Capture Length: 485 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 471
Identification: 0xc3c3 (50115)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2548 [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62653 (62653), Seq: 19763, Ack: 5814, Len: 419
Source port: http-alt (8080)
Destination port: 62653 (62653)
Sequence number: 19763 (relative sequence number)
Next sequence number: 20182 (relative sequence number)
Acknowledgement number: 5814 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xaed3 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621136018, tsecr 1613857193
TCP segment data (419 bytes)
Reassembled TCP Segments (1867 bytes): #271(1448), #272(419)
Frame: 271, payload: 0-1447 (1448 bytes)
Frame: 272, payload: 1448-1866 (419 bytes)
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
Content-Type: text/plain;charset=utf-8\r\n
Content-Length: 1722\r\n
Date: Tue, 30 May 2006 18:28:49 GMT\r\n
\r\n
Line-based text data: text/plain
{"result":[{"pointInTime":false,"javaClass":"org.osaf.scooby.model.Event","anyTime":false,"start":{"month":5,"utc":false,"javaClass":"org.osaf.scooby.model.ScoobyDate","year":2006,"seconds":0,"timezone":null,"date":1,"hours":10,"minutes":4

No. Time Source Destination Protocol Info
276 2116.556327 192.168.103.48 192.168.103.148 HTTP POST /scooby/JSON-RPC HTTP/1.1 (text/plain)

Frame 276 (1363 bytes on wire, 1363 bytes captured)
Arrival Time: May 30, 2006 11:29:46.144075000
Time delta from previous packet: 18.050712000 seconds
Time since reference or first frame: 2116.556327000 seconds
Frame Number: 276
Packet Length: 1363 bytes
Capture Length: 1363 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1349
Identification: 0x1dae (7598)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xc7ef [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62653 (62653), Dst Port: http-alt (8080), Seq: 5814, Ack: 20182, Len: 1297
Source port: 62653 (62653)
Destination port: http-alt (8080)
Sequence number: 5814 (relative sequence number)
Next sequence number: 7111 (relative sequence number)
Acknowledgement number: 20182 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x3d45 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613857230, tsecr 621136018
Hypertext Transfer Protocol
POST /scooby/JSON-RPC HTTP/1.1\r\n
Request Method: POST
Request URI: /scooby/JSON-RPC
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Content-Type: text/plain\r\n
Content-Length: 679\r\n
Cookie: JSESSIONID=61DA50AD3AC5614B0D2DD30A6D7BB267; username=adam; inputTimestamp=1149013760100\r\n
Pragma: no-cache\r\n
Cache-Control: no-cache\r\n
\r\n
Line-based text data: text/plain
{"id": 4, "method": "scoobyService.saveEvent", "params": ["Scooby", {"id": "171d9c85-bde8-49b8-a4b0-9390279ae6a1", "title": "New Event", "description": "", "start": {"year": 2006, "month": 5, "date": 1, "hours": 10, "minutes": 45, "seconds

No. Time Source Destination Protocol Info
278 2120.035755 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (text/plain)

Frame 278 (265 bytes on wire, 265 bytes captured)
Arrival Time: May 30, 2006 11:29:49.623503000
Time delta from previous packet: 3.479428000 seconds
Time since reference or first frame: 2120.035755000 seconds
Frame Number: 278
Packet Length: 265 bytes
Capture Length: 265 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 251
Identification: 0xc3e3 (50147)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2604 [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62653 (62653), Seq: 20182, Ack: 7111, Len: 199
Source port: http-alt (8080)
Destination port: 62653 (62653)
Sequence number: 20182 (relative sequence number)
Next sequence number: 20381 (relative sequence number)
Acknowledgement number: 7111 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x85a0 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621136061, tsecr 1613857230
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
Content-Type: text/plain;charset=utf-8\r\n
Content-Length: 56\r\n
Date: Tue, 30 May 2006 18:29:07 GMT\r\n
\r\n
Line-based text data: text/plain
{"result":"171d9c85-bde8-49b8-a4b0-9390279ae6a1","id":4}

No. Time Source Destination Protocol Info
285 2162.838872 192.168.103.48 192.168.103.148 HTTP POST /scooby/JSON-RPC HTTP/1.1 (text/plain)

Frame 285 (781 bytes on wire, 781 bytes captured)
Arrival Time: May 30, 2006 11:30:32.426620000
Time delta from previous packet: 42.803117000 seconds
Time since reference or first frame: 2162.838872000 seconds
Frame Number: 285
Packet Length: 781 bytes
Capture Length: 781 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 767
Identification: 0x1f0b (7947)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xc8d8 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62653 (62653), Dst Port: http-alt (8080), Seq: 7111, Ack: 20381, Len: 715
Source port: 62653 (62653)
Destination port: http-alt (8080)
Sequence number: 7111 (relative sequence number)
Next sequence number: 7826 (relative sequence number)
Acknowledgement number: 20381 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xf5ff [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613857323, tsecr 621136061
Hypertext Transfer Protocol
POST /scooby/JSON-RPC HTTP/1.1\r\n
Request Method: POST
Request URI: /scooby/JSON-RPC
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Content-Type: text/plain\r\n
Content-Length: 98\r\n
Cookie: JSESSIONID=61DA50AD3AC5614B0D2DD30A6D7BB267; username=adam; inputTimestamp=1149013760100\r\n
Pragma: no-cache\r\n
Cache-Control: no-cache\r\n
\r\n
Line-based text data: text/plain
{"id": 5, "method": "scoobyService.getEvents", "params": ["Scooby", 1149318000000, 1150095599000]}

No. Time Source Destination Protocol Info
287 2163.015036 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (text/plain)

Frame 287 (229 bytes on wire, 229 bytes captured)
Arrival Time: May 30, 2006 11:30:32.602784000
Time delta from previous packet: 0.176164000 seconds
Time since reference or first frame: 2163.015036000 seconds
Frame Number: 287
Packet Length: 229 bytes
Capture Length: 229 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 215
Identification: 0xc440 (50240)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x25cb [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62653 (62653), Seq: 20381, Ack: 7826, Len: 163
Source port: http-alt (8080)
Destination port: 62653 (62653)
Sequence number: 20381 (relative sequence number)
Next sequence number: 20544 (relative sequence number)
Acknowledgement number: 7826 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0xb834 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621136147, tsecr 1613857323
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
Content-Type: text/plain;charset=utf-8\r\n
Content-Length: 20\r\n
Date: Tue, 30 May 2006 18:29:53 GMT\r\n
\r\n
Line-based text data: text/plain
{"result":[],"id":5}

No. Time Source Destination Protocol Info
304 2250.223448 192.168.103.48 192.168.103.148 HTTP POST /scooby/JSON-RPC HTTP/1.1 (text/plain)

Frame 304 (781 bytes on wire, 781 bytes captured)
Arrival Time: May 30, 2006 11:31:59.811196000
Time delta from previous packet: 87.208412000 seconds
Time since reference or first frame: 2250.223448000 seconds
Frame Number: 304
Packet Length: 781 bytes
Capture Length: 781 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 767
Identification: 0x21f2 (8690)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xc5f1 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62668 (62668), Dst Port: http-alt (8080), Seq: 1, Ack: 1, Len: 715
Source port: 62668 (62668)
Destination port: http-alt (8080)
Sequence number: 1 (relative sequence number)
Next sequence number: 716 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x657d [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613857498, tsecr 621136322
Hypertext Transfer Protocol
POST /scooby/JSON-RPC HTTP/1.1\r\n
Request Method: POST
Request URI: /scooby/JSON-RPC
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Content-Type: text/plain\r\n
Content-Length: 98\r\n
Cookie: JSESSIONID=61DA50AD3AC5614B0D2DD30A6D7BB267; username=adam; inputTimestamp=1149013760100\r\n
Pragma: no-cache\r\n
Cache-Control: no-cache\r\n
\r\n
Line-based text data: text/plain
{"id": 6, "method": "scoobyService.getEvents", "params": ["Scooby", 1148713200000, 1149490799000]}

No. Time Source Destination Protocol Info
307 2250.401046 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (text/plain)

Frame 307 (483 bytes on wire, 483 bytes captured)
Arrival Time: May 30, 2006 11:31:59.988794000
Time delta from previous packet: 0.177598000 seconds
Time since reference or first frame: 2250.401046000 seconds
Frame Number: 307
Packet Length: 483 bytes
Capture Length: 483 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 469
Identification: 0xc468 (50280)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x24a5 [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62668 (62668), Seq: 1449, Ack: 716, Len: 417
Source port: http-alt (8080)
Destination port: 62668 (62668)
Sequence number: 1449 (relative sequence number)
Next sequence number: 1866 (relative sequence number)
Acknowledgement number: 716 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x7fe1 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621136322, tsecr 1613857498
TCP segment data (417 bytes)
Reassembled TCP Segments (1865 bytes): #306(1448), #307(417)
Frame: 306, payload: 0-1447 (1448 bytes)
Frame: 307, payload: 1448-1864 (417 bytes)
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
Content-Type: text/plain;charset=utf-8\r\n
Content-Length: 1720\r\n
Date: Tue, 30 May 2006 18:31:21 GMT\r\n
\r\n
Line-based text data: text/plain
{"result":[{"pointInTime":false,"javaClass":"org.osaf.scooby.model.Event","anyTime":false,"start":{"month":5,"utc":false,"javaClass":"org.osaf.scooby.model.ScoobyDate","year":2006,"seconds":0,"timezone":null,"date":1,"hours":10,"minutes":4

No. Time Source Destination Protocol Info
311 2257.044313 192.168.103.48 192.168.103.148 HTTP POST /scooby/JSON-RPC HTTP/1.1 (text/plain)

Frame 311 (794 bytes on wire, 794 bytes captured)
Arrival Time: May 30, 2006 11:32:06.632061000
Time delta from previous packet: 6.643267000 seconds
Time since reference or first frame: 2257.044313000 seconds
Frame Number: 311
Packet Length: 794 bytes
Capture Length: 794 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 780
Identification: 0x238a (9098)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xc44c [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62668 (62668), Dst Port: http-alt (8080), Seq: 716, Ack: 1866, Len: 728
Source port: 62668 (62668)
Destination port: http-alt (8080)
Sequence number: 716 (relative sequence number)
Next sequence number: 1444 (relative sequence number)
Acknowledgement number: 1866 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x4e42 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613857511, tsecr 621136322
Hypertext Transfer Protocol
POST /scooby/JSON-RPC HTTP/1.1\r\n
Request Method: POST
Request URI: /scooby/JSON-RPC
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Content-Type: text/plain\r\n
Content-Length: 110\r\n
Cookie: JSESSIONID=61DA50AD3AC5614B0D2DD30A6D7BB267; username=adam; inputTimestamp=1149013760100\r\n
Pragma: no-cache\r\n
Cache-Control: no-cache\r\n
\r\n
Line-based text data: text/plain
{"id": 7, "method": "scoobyService.removeEvent", "params": ["Scooby", "171d9c85-bde8-49b8-a4b0-9390279ae6a1"]}

No. Time Source Destination Protocol Info
313 2259.051218 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (text/plain)

Frame 313 (231 bytes on wire, 231 bytes captured)
Arrival Time: May 30, 2006 11:32:08.638966000
Time delta from previous packet: 2.006905000 seconds
Time since reference or first frame: 2259.051218000 seconds
Frame Number: 313
Packet Length: 231 bytes
Capture Length: 231 bytes
Protocols in frame: eth:ip:tcp:http:data-text-lines
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 217
Identification: 0xc477 (50295)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x2592 [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62668 (62668), Seq: 1866, Ack: 1444, Len: 165
Source port: http-alt (8080)
Destination port: 62668 (62668)
Sequence number: 1866 (relative sequence number)
Next sequence number: 2031 (relative sequence number)
Acknowledgement number: 1444 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x9358 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621136339, tsecr 1613857511
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
Content-Type: text/plain;charset=utf-8\r\n
Content-Length: 22\r\n
Date: Tue, 30 May 2006 18:31:28 GMT\r\n
\r\n
Line-based text data: text/plain
{"result":null,"id":7}

No. Time Source Destination Protocol Info
315 2259.078909 192.168.103.48 192.168.103.148 HTTP GET /scooby/templates/default/images/button_left_dim.gif HTTP/1.1

Frame 315 (604 bytes on wire, 604 bytes captured)
Arrival Time: May 30, 2006 11:32:08.666657000
Time delta from previous packet: 0.027691000 seconds
Time since reference or first frame: 2259.078909000 seconds
Frame Number: 315
Packet Length: 604 bytes
Capture Length: 604 bytes
Protocols in frame: eth:ip:tcp:http
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 590
Identification: 0x23bf (9151)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xc4d5 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62668 (62668), Dst Port: http-alt (8080), Seq: 1444, Ack: 2031, Len: 538
Source port: 62668 (62668)
Destination port: http-alt (8080)
Sequence number: 1444 (relative sequence number)
Next sequence number: 1982 (relative sequence number)
Acknowledgement number: 2031 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x6710 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613857515, tsecr 621136339
Hypertext Transfer Protocol
GET /scooby/templates/default/images/button_left_dim.gif HTTP/1.1\r\n
Request Method: GET
Request URI: /scooby/templates/default/images/button_left_dim.gif
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Referer: http://192.168.103.148:8080/scooby/main.page\r\n
Cookie: JSESSIONID=61DA50AD3AC5614B0D2DD30A6D7BB267; username=adam; inputTimestamp=1149013760100\r\n
\r\n

No. Time Source Destination Protocol Info
319 2259.151686 192.168.103.48 192.168.103.148 HTTP GET /scooby/templates/default/images/button_center_dim.gif HTTP/1.1

Frame 319 (606 bytes on wire, 606 bytes captured)
Arrival Time: May 30, 2006 11:32:08.739434000
Time delta from previous packet: 0.072777000 seconds
Time since reference or first frame: 2259.151686000 seconds
Frame Number: 319
Packet Length: 606 bytes
Capture Length: 606 bytes
Protocols in frame: eth:ip:tcp:http
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 592
Identification: 0x23c2 (9154)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xc4d0 [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62673 (62673), Dst Port: http-alt (8080), Seq: 1, Ack: 1, Len: 540
Source port: 62673 (62673)
Destination port: http-alt (8080)
Sequence number: 1 (relative sequence number)
Next sequence number: 541 (relative sequence number)
Acknowledgement number: 1 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x8a66 [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613857515, tsecr 621136340
Hypertext Transfer Protocol
GET /scooby/templates/default/images/button_center_dim.gif HTTP/1.1\r\n
Request Method: GET
Request URI: /scooby/templates/default/images/button_center_dim.gif
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Referer: http://192.168.103.148:8080/scooby/main.page\r\n
Cookie: JSESSIONID=61DA50AD3AC5614B0D2DD30A6D7BB267; username=adam; inputTimestamp=1149013760100\r\n
\r\n

No. Time Source Destination Protocol Info
320 2259.186087 192.168.103.148 192.168.103.48 HTTP HTTP/1.1 200 OK (GIF89a)

Frame 320 (1291 bytes on wire, 1291 bytes captured)
Arrival Time: May 30, 2006 11:32:08.773835000
Time delta from previous packet: 0.034401000 seconds
Time since reference or first frame: 2259.186087000 seconds
Frame Number: 320
Packet Length: 1291 bytes
Capture Length: 1291 bytes
Protocols in frame: eth:ip:tcp:http:image-gif
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_26:a0:23 (00:11:24:26:a0:23), Dst: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Destination: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.148 (192.168.103.148), Dst: 192.168.103.48 (192.168.103.48)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1277
Identification: 0xc47a (50298)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0x216b [correct]
Good: True
Bad : False
Source: 192.168.103.148 (192.168.103.148)
Destination: 192.168.103.48 (192.168.103.48)
Transmission Control Protocol, Src Port: http-alt (8080), Dst Port: 62668 (62668), Seq: 2031, Ack: 1982, Len: 1225
Source port: http-alt (8080)
Destination port: 62668 (62668)
Sequence number: 2031 (relative sequence number)
Next sequence number: 3256 (relative sequence number)
Acknowledgement number: 1982 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x4a5f [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 621136340, tsecr 1613857515
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Request Version: HTTP/1.1
Response Code: 200
Server: Apache-Coyote/1.1\r\n
ETag: W/"1019-1146515966000"\r\n
Last-Modified: Mon, 01 May 2006 20:39:26 GMT\r\n
Content-Type: image/gif\r\n
Content-Length: 1019\r\n
Date: Tue, 30 May 2006 18:31:29 GMT\r\n
\r\n
Compuserve GIF, Version: GIF89a
Version: GIF89a
Screen width: 10
Screen height: 24
Global settings: (Global color table present) (7 bits per color) (8 bits per pixel)
1... .... = Global color map is present: True (1)
.111 .... = Bits per color minus 1: 7
.... 0... = Global color map is ordered: False (0)
.... .111 = Image bits per pixel minus 1: 7
Background color index: 0
Global color map: FFFFFFFDFDFFC2C2C2F9F9FFFAFAFFFEFEFFF8F8FFFCFCFF...
Extension: Graphics Control
Extension label: Graphics Control (0xf9)
Data block (length = 4)
Data block (length = 0)
Image
Image left position: 0
Image top position: 0
Image width: 10
Image height: 24
Local settings: (1 bit per color) (1 bit per pixel)
0... .... = Local color map is present: False (0)
.000 .... = Bits per color minus 1: 0
.... 0... = Local color map is ordered: False (0)
.... .000 = Image bits per pixel minus 1: 0
LZW minimum code size: 8
Data block (length = 216)
Data block (length = 0)
Trailer (End of the GIF stream)

No. Time Source Destination Protocol Info
322 2259.188395 192.168.103.48 192.168.103.148 HTTP GET /scooby/templates/default/images/button_right_dim.gif HTTP/1.1

Frame 322 (605 bytes on wire, 605 bytes captured)
Arrival Time: May 30, 2006 11:32:08.776143000
Time delta from previous packet: 0.002308000 seconds
Time since reference or first frame: 2259.188395000 seconds
Frame Number: 322
Packet Length: 605 bytes
Capture Length: 605 bytes
Protocols in frame: eth:ip:tcp:http
Coloring Rule Name: HTTP
Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20), Dst: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Destination: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
Address: AppleCom^?_26:a0:23 (00:11:24:26:a0:23)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
Address: AppleCom^?_b7:ec:20 (00:16:cb:b7:ec:20)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.103.48 (192.168.103.48), Dst: 192.168.103.148 (192.168.103.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 591
Identification: 0x23c4 (9156)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xc4cf [correct]
Good: True
Bad : False
Source: 192.168.103.48 (192.168.103.48)
Destination: 192.168.103.148 (192.168.103.148)
Transmission Control Protocol, Src Port: 62668 (62668), Dst Port: http-alt (8080), Seq: 1982, Ack: 3256, Len: 539
Source port: 62668 (62668)
Destination port: http-alt (8080)
Sequence number: 1982 (relative sequence number)
Next sequence number: 2521 (relative sequence number)
Acknowledgement number: 3256 (relative ack number)
Header length: 32 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 65535
Checksum: 0x878f [correct]
Options: (12 bytes)
NOP
NOP
Time stamp: tsval 1613857516, tsecr 621136340
Hypertext Transfer Protocol
GET /scooby/templates/default/images/button_right_dim.gif HTTP/1.1\r\n
Request Method: GET
Request URI: /scooby/templates/default/images/button_right_dim.gif
Request Version: HTTP/1.1
Host: 192.168.103.148:8080\r\n
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3\r\n
Accept: image/png,*/*;q=0.5\r\n
Accept-Language: en-us,en;q=0.5\r\n
Accept-Encoding: gzip,deflate\r\n
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7\r\n
Keep-Alive: 300\r\n
Connection: keep-alive\r\n
Referer: http://192.168.103.148:8080/scooby/main.page\r\n
Cookie: JSESSIONID=61DA50AD3AC5614B0D2DD30A6D7BB267; username=adam; inputTimestamp=1149013760100\r\n
\r\n