No. Time Source Destination Protocol Info 217 00:00:26 127.0.0.1 127.0.0.1 TCP 3240 > daap [SYN] Seq=0 Len=0 MSS=16396 TSV=9833254 TSER=0 WS=2 Frame 217 (74 bytes on wire, 74 bytes captured) Arrival Time: Jul 13, 2006 00:00:26.916330000 Time delta from previous packet: 2.942779000 seconds Time since reference or first frame: 320.491070000 seconds Frame Number: 217 Packet Length: 74 bytes Capture Length: 74 bytes Protocols in frame: eth:ip:tcp Coloring Rule Name: TCP SYN/FIN Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1 Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Destination: 00:00:00_00:00:00 (00:00:00:00:00:00) Address: 00:00:00_00:00:00 (00:00:00:00:00:00) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Source: 00:00:00_00:00:00 (00:00:00:00:00:00) Address: 00:00:00_00:00:00 (00:00:00:00:00:00) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Type: IP (0x0800) Internet Protocol, Src: 127.0.0.1 (127.0.0.1), Dst: 127.0.0.1 (127.0.0.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0xa906 (43270) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x93b3 [correct] Good: True Bad : False Source: 127.0.0.1 (127.0.0.1) Destination: 127.0.0.1 (127.0.0.1) Transmission Control Protocol, Src Port: 3240 (3240), Dst Port: daap (3689), Seq: 0, Len: 0 Source port: 3240 (3240) Destination port: daap (3689) Sequence number: 0 (relative sequence number) Header length: 40 bytes Flags: 0x0002 (SYN) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...0 .... = Acknowledgment: Not set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 131168 (scaled) Checksum: 0xe832 [correct] Options: (20 bytes) Maximum segment size: 16396 bytes SACK permitted Time stamp: tsval 9833254, tsecr 0 NOP Window scale: 2 (multiply by 4) No. Time Source Destination Protocol Info 218 00:00:26 127.0.0.1 127.0.0.1 TCP daap > 3240 [SYN, ACK] Seq=0 Ack=1 Win=131072 Len=0 MSS=16396 TSV=9833254 TSER=9833254 WS=2 Frame 218 (74 bytes on wire, 74 bytes captured) Arrival Time: Jul 13, 2006 00:00:26.916382000 Time delta from previous packet: 0.000052000 seconds Time since reference or first frame: 320.491122000 seconds Frame Number: 218 Packet Length: 74 bytes Capture Length: 74 bytes Protocols in frame: eth:ip:tcp Coloring Rule Name: TCP SYN/FIN Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1 Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Destination: 00:00:00_00:00:00 (00:00:00:00:00:00) Address: 00:00:00_00:00:00 (00:00:00:00:00:00) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Source: 00:00:00_00:00:00 (00:00:00:00:00:00) Address: 00:00:00_00:00:00 (00:00:00:00:00:00) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Type: IP (0x0800) Internet Protocol, Src: 127.0.0.1 (127.0.0.1), Dst: 127.0.0.1 (127.0.0.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x3cba [correct] Good: True Bad : False Source: 127.0.0.1 (127.0.0.1) Destination: 127.0.0.1 (127.0.0.1) Transmission Control Protocol, Src Port: daap (3689), Dst Port: 3240 (3240), Seq: 0, Ack: 1, Len: 0 Source port: daap (3689) Destination port: 3240 (3240) Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 40 bytes Flags: 0x0012 (SYN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 131072 (scaled) Checksum: 0x771c [correct] Options: (20 bytes) Maximum segment size: 16396 bytes SACK permitted Time stamp: tsval 9833254, tsecr 9833254 NOP Window scale: 2 (multiply by 4) No. Time Source Destination Protocol Info 219 00:00:26 127.0.0.1 127.0.0.1 TCP 3240 > daap [ACK] Seq=1 Ack=1 Win=32792 Len=0 TSV=9833254 TSER=9833254 Frame 219 (66 bytes on wire, 66 bytes captured) Arrival Time: Jul 13, 2006 00:00:26.916416000 Time delta from previous packet: 0.000034000 seconds Time since reference or first frame: 320.491156000 seconds Frame Number: 219 Packet Length: 66 bytes Capture Length: 66 bytes Protocols in frame: eth:ip:tcp Coloring Rule Name: TCP Coloring Rule String: tcp Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Destination: 00:00:00_00:00:00 (00:00:00:00:00:00) Address: 00:00:00_00:00:00 (00:00:00:00:00:00) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Source: 00:00:00_00:00:00 (00:00:00:00:00:00) Address: 00:00:00_00:00:00 (00:00:00:00:00:00) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Type: IP (0x0800) Internet Protocol, Src: 127.0.0.1 (127.0.0.1), Dst: 127.0.0.1 (127.0.0.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 52 Identification: 0xa907 (43271) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x93ba [correct] Good: True Bad : False Source: 127.0.0.1 (127.0.0.1) Destination: 127.0.0.1 (127.0.0.1) Transmission Control Protocol, Src Port: 3240 (3240), Dst Port: daap (3689), Seq: 1, Ack: 1, Len: 0 Source port: 3240 (3240) Destination port: daap (3689) Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 32 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 32792 (scaled) Checksum: 0x4036 [correct] Options: (12 bytes) NOP NOP Time stamp: tsval 9833254, tsecr 9833254 No. Time Source Destination Protocol Info 220 00:00:26 127.0.0.1 127.0.0.1 DAAP GET /login HTTP/1.1 Frame 220 (301 bytes on wire, 301 bytes captured) Arrival Time: Jul 13, 2006 00:00:26.922724000 Time delta from previous packet: 0.006308000 seconds Time since reference or first frame: 320.497464000 seconds Frame Number: 220 Packet Length: 301 bytes Capture Length: 301 bytes Protocols in frame: eth:ip:tcp:http Coloring Rule Name: HTTP Coloring Rule String: http || tcp.port == 80 Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Destination: 00:00:00_00:00:00 (00:00:00:00:00:00) Address: 00:00:00_00:00:00 (00:00:00:00:00:00) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Source: 00:00:00_00:00:00 (00:00:00:00:00:00) Address: 00:00:00_00:00:00 (00:00:00:00:00:00) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Type: IP (0x0800) Internet Protocol, Src: 127.0.0.1 (127.0.0.1), Dst: 127.0.0.1 (127.0.0.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 287 Identification: 0xa908 (43272) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x92ce [correct] Good: True Bad : False Source: 127.0.0.1 (127.0.0.1) Destination: 127.0.0.1 (127.0.0.1) Transmission Control Protocol, Src Port: 3240 (3240), Dst Port: daap (3689), Seq: 1, Ack: 1, Len: 235 Source port: 3240 (3240) Destination port: daap (3689) Sequence number: 1 (relative sequence number) Next sequence number: 236 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 32 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 32792 (scaled) Checksum: 0x789a [correct] Options: (12 bytes) NOP NOP Time stamp: tsval 9833261, tsecr 9833254 Hypertext Transfer Protocol GET /login HTTP/1.1\r\n Request Method: GET Request URI: /login Request Version: HTTP/1.1 accept: */*\r\n client-daap-access-index: 2\r\n client-daap-request-id: 0\r\n client-daap-validation: E3B047FF11C1F845093E898495A585E2\r\n client-daap-version: 3.0\r\n host: 127.0.0.1:3689\r\n user-agent: iTunes/4.6 (Windows; N)\r\n \r\n No. Time Source Destination Protocol Info 221 00:00:26 127.0.0.1 127.0.0.1 TCP daap > 3240 [ACK] Seq=1 Ack=236 Win=32768 Len=0 TSV=9833261 TSER=9833261 Frame 221 (66 bytes on wire, 66 bytes captured) Arrival Time: Jul 13, 2006 00:00:26.922772000 Time delta from previous packet: 0.000048000 seconds Time since reference or first frame: 320.497512000 seconds Frame Number: 221 Packet Length: 66 bytes Capture Length: 66 bytes Protocols in frame: eth:ip:tcp Coloring Rule Name: TCP Coloring Rule String: tcp Ethernet II, Src: 00:00:00_00:00:00 (00:00:00:00:00:00), Dst: 00:00:00_00:00:00 (00:00:00:00:00:00) Destination: 00:00:00_00:00:00 (00:00:00:00:00:00) Address: 00:00:00_00:00:00 (00:00:00:00:00:00) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Source: 00:00:00_00:00:00 (00:00:00:00:00:00) Address: 00:00:00_00:00:00 (00:00:00:00:00:00) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Type: IP (0x0800) Internet Protocol, Src: 127.0.0.1 (127.0.0.1), Dst: 127.0.0.1 (127.0.0.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 52 Identification: 0x8cb1 (36017) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0xb010 [correct] Good: True Bad : False Source: 127.0.0.1 (127.0.0.1) Destination: 127.0.0.1 (127.0.0.1) Transmission Control Protocol, Src Port: daap (3689), Dst Port: 3240 (3240), Seq: 1, Ack: 236, Len: 0 Source port: daap (3689) Destination port: 3240 (3240) Sequence number: 1 (relative sequence number) Acknowledgement number: 236 (relative ack number) Header length: 32 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 32768 (scaled) Checksum: 0x3f43 [correct] Options: (12 bytes) NOP NOP Time stamp: tsval 9833261, tsecr 9833261