Frame 214: 1304 bytes on wire (10432 bits), 1304 bytes captured (10432 bits)
    Encapsulation type: Ethernet (1)
    Arrival Time: Jun 28, 2011 14:08:50.752901000 UTC
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1309270130.752901000 seconds
    [Time delta from previous captured frame: 0.000100000 seconds]
    [Time delta from previous displayed frame: 0.000000000 seconds]
    [Time since reference or first frame: 182.477118000 seconds]
    Frame Number: 214
    Frame Length: 1304 bytes (10432 bits)
    Capture Length: 1304 bytes (10432 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ethertype:ip:tcp:http:data]
Ethernet II, Src: VMware_e8:5e:a9 (00:0c:29:e8:5e:a9), Dst: VMware_c0:00:08 (00:50:56:c0:00:08)
    Destination: VMware_c0:00:08 (00:50:56:c0:00:08)
        Address: VMware_c0:00:08 (00:50:56:c0:00:08)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: VMware_e8:5e:a9 (00:0c:29:e8:5e:a9)
        Address: VMware_e8:5e:a9 (00:0c:29:e8:5e:a9)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: 192.168.129.145, Dst: 192.168.129.1
    0100 .... = Version: 4
    .... 0101 = Header Length: 20 bytes (5)
    Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
        0000 00.. = Differentiated Services Codepoint: Default (0)
        .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
    Total Length: 1290
    Identification: 0x8a83 (35459)
    Flags: 0x40, Don't fragment
        0... .... = Reserved bit: Not set
        .1.. .... = Don't fragment: Set
        ..0. .... = More fragments: Not set
    ...0 0000 0000 0000 = Fragment Offset: 0
    Time to Live: 64
    Protocol: TCP (6)
    Header Checksum: 0x2787 [validation disabled]
    [Header checksum status: Unverified]
    Source Address: 192.168.129.145
    Destination Address: 192.168.129.1
Transmission Control Protocol, Src Port: 80, Dst Port: 49228, Seq: 2921, Ack: 583, Len: 1250
    Source Port: 80
    Destination Port: 49228
    [Stream index: 14]
    [Conversation completeness: Incomplete, DATA (15)]
    [TCP Segment Len: 1250]
    Sequence Number: 2921    (relative sequence number)
    Sequence Number (raw): 103466388
    [Next Sequence Number: 4171    (relative sequence number)]
    Acknowledgment Number: 583    (relative ack number)
    Acknowledgment number (raw): 1628237841
    0101 .... = Header Length: 20 bytes (5)
    Flags: 0x018 (PSH, ACK)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...1 .... = Acknowledgment: Set
        .... .... 1... = Push: Set
        .... .... .0.. = Reset: Not set
        .... .... ..0. = Syn: Not set
        .... .... ...0 = Fin: Not set
        [TCP Flags: ·······AP···]
    Window: 6984
    [Calculated window size: 6984]
    [Window size scaling factor: 1]
    Checksum: 0xd36a [unverified]
    [Checksum Status: Unverified]
    Urgent Pointer: 0
    [Timestamps]
        [Time since first frame in this TCP stream: 0.099606000 seconds]
        [Time since previous frame in this TCP stream: 0.000100000 seconds]
    [SEQ/ACK analysis]
        [iRTT: 0.000271000 seconds]
        [Bytes in flight: 1250]
        [Bytes sent since last PSH flag: 4170]
    TCP payload (1250 bytes)
Hypertext Transfer Protocol
    File Data: 1250 bytes
    Data (1250 bytes)

0000  52 65 66 65 72 65 6e 63 65 20 2d 3c 2f 69 3e 3c   Reference -</i><
0010  2f 42 3e 3c 2f 43 65 6e 74 65 72 3e 3c 70 3e 0d   /B></Center><p>.
0020  0a 09 09 3c 41 20 48 52 45 46 3d 22 2f 42 61 64   ...<A HREF="/Bad
0030  53 74 6f 72 65 5f 6e 65 74 5f 76 31 5f 32 5f 4d   Store_net_v1_2_M
0040  61 6e 75 61 6c 2e 70 64 66 22 3e 3c 46 4f 4e 54   anual.pdf"><FONT
0050  20 53 49 5a 45 3d 2d 32 3e 3c 69 3e 42 61 64 53    SIZE=-2><i>BadS
0060  74 6f 72 65 2e 6e 65 74 20 4d 61 6e 75 61 6c 0d   tore.net Manual.
0070  0a 76 31 2e 32 3c 2f 69 3e 3c 2f 46 4f 4e 54 3e   .v1.2</i></FONT>
0080  3c 2f 41 3e 3c 42 52 3e 0d 0a 09 09 3c 41 20 48   </A><BR>....<A H
0090  52 45 46 3d 22 2f 73 63 61 6e 62 6f 74 2f 73 63   REF="/scanbot/sc
00a0  61 6e 62 6f 74 2e 68 74 6d 6c 22 3e 3c 2f 41 3e   anbot.html"></A>
00b0  0d 0a 09 09 3c 50 3e 0d 0a 09 09 3c 48 52 3e 0d   ....<P>....<HR>.
00c0  0a 09 09 3c 2f 54 44 3e 3c 2f 54 52 3e 0d 0a 0d   ...</TD></TR>...
00d0  0a 3c 2f 54 42 4f 44 59 3e 3c 2f 54 41 42 4c 45   .</TBODY></TABLE
00e0  3e 3c 2f 54 44 3e 0d 0a 20 20 20 20 3c 54 44 20   ></TD>..    <TD 
00f0  77 69 64 74 68 3d 31 20 62 67 43 6f 6c 6f 72 3d   width=1 bgColor=
0100  23 65 63 65 63 65 30 3e 20 0d 0a 20 20 20 20 20   #ecece0> ..     
0110  20 3c 2f 54 44 3e 0d 0a 20 20 20 20 3c 54 44 20    </TD>..    <TD 
0120  77 69 64 74 68 3d 36 31 35 3e 0d 0a 20 20 20 20   width=615>..    
0130  20 20 3c 54 41 42 4c 45 20 63 65 6c 6c 53 70 61     <TABLE cellSpa
0140  63 69 6e 67 3d 30 20 63 65 6c 6c 50 61 64 64 69   cing=0 cellPaddi
0150  6e 67 3d 30 20 77 69 64 74 68 3d 36 31 34 20 62   ng=0 width=614 b
0160  6f 72 64 65 72 3d 30 3e 0d 0a 20 20 20 20 20 20   order=0>..      
0170  20 20 3c 54 42 4f 44 59 3e 0d 0a 20 20 20 20 20     <TBODY>..     
0180  20 20 20 3c 54 52 3e 0d 0a 20 20 20 20 20 20 20      <TR>..       
0190  20 20 20 3c 54 44 20 62 67 43 6f 6c 6f 72 3d 23      <TD bgColor=#
01a0  33 33 33 33 33 33 3e 3c 2f 54 44 3e 3c 2f 54 52   333333></TD></TR
01b0  3e 3c 2f 54 42 4f 44 59 3e 3c 2f 54 41 42 4c 45   ></TBODY></TABLE
01c0  3e 0d 0a 20 20 20 20 20 20 3c 54 41 42 4c 45 20   >..      <TABLE 
01d0  63 65 6c 6c 53 70 61 63 69 6e 67 3d 30 20 63 65   cellSpacing=0 ce
01e0  6c 6c 50 61 64 64 69 6e 67 3d 30 20 77 69 64 74   llPadding=0 widt
01f0  68 3d 36 31 34 20 62 6f 72 64 65 72 3d 30 3e 0d   h=614 border=0>.
0200  0a 20 20 20 20 20 20 20 20 3c 54 42 4f 44 59 3e   .        <TBODY>
0210  0d 0a 20 20 20 20 20 20 20 20 3c 54 52 20 62 67   ..        <TR bg
0220  43 6f 6c 6f 72 3d 23 65 63 65 63 65 30 3e 3c 2f   Color=#ecece0></
0230  54 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 54 52   TR>..        <TR
0240  20 62 67 43 6f 6c 6f 72 3d 23 65 63 65 63 65 30    bgColor=#ecece0
0250  3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 54 44   >..          <TD
0260  20 63 6c 61 73 73 3d 6e 6f 72 6d 61 6c 20 77 69    class=normal wi
0270  64 74 68 3d 35 35 30 20 68 65 69 67 68 74 3d 32   dth=550 height=2
0280  30 3e 26 6e 62 73 70 3b 0d 0a 3c 49 46 52 41 4d   0>&nbsp;..<IFRAM
0290  45 20 6e 61 6d 65 3d 22 62 73 68 65 61 64 65 72   E name="bsheader
02a0  22 20 73 72 63 3d 22 62 73 68 65 61 64 65 72 2e   " src="bsheader.
02b0  63 67 69 22 20 68 65 69 67 68 74 3d 32 37 20 77   cgi" height=27 w
02c0  69 64 74 68 3d 34 35 30 20 6d 61 72 67 69 6e 68   idth=450 marginh
02d0  65 69 67 68 74 3d 30 20 6d 61 72 67 69 6e 77 69   eight=0 marginwi
02e0  64 74 68 3d 30 20 73 63 72 6f 6c 6c 69 6e 67 3d   dth=0 scrolling=
02f0  22 6e 6f 22 20 6e 6f 72 65 73 69 7a 65 3e 3c 2f   "no" noresize></
0300  49 46 52 41 4d 45 3e 0d 0a 20 20 20 20 20 20 20   IFRAME>..       
0310  20 20 20 20 20 3c 2f 54 44 3e 0d 0a 20 20 20 20        </TD>..    
0320  20 20 20 20 20 20 3c 54 44 20 63 6c 61 73 73 3d         <TD class=
0330  6e 6f 72 6d 61 6c 20 77 69 64 74 68 3d 31 32 30   normal width=120
0340  3e 3c 49 4d 47 20 53 52 43 3d 22 2f 69 6d 61 67   ><IMG SRC="/imag
0350  65 73 2f 63 61 72 74 2e 6a 70 67 22 3e 3c 41 0d   es/cart.jpg"><A.
0360  0a 48 52 45 46 3d 22 2f 63 67 69 2d 62 69 6e 2f   .HREF="/cgi-bin/
0370  62 61 64 73 74 6f 72 65 2e 63 67 69 3f 61 63 74   badstore.cgi?act
0380  69 6f 6e 3d 63 61 72 74 76 69 65 77 22 3e 56 69   ion=cartview">Vi
0390  65 77 20 43 61 72 74 3c 2f 41 3e 3c 2f 54 44 3e   ew Cart</A></TD>
03a0  3c 2f 54 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c   </TR>..        <
03b0  54 52 20 62 67 43 6f 6c 6f 72 3d 23 33 33 33 33   TR bgColor=#3333
03c0  33 33 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c   33>..          <
03d0  2f 54 52 3e 3c 2f 54 42 4f 44 59 3e 3c 2f 54 41   /TR></TBODY></TA
03e0  42 4c 45 3e 3c 46 4f 4e 54 20 46 41 43 45 3d 27   BLE><FONT FACE='
03f0  41 72 69 61 6c 27 3e 0d 0a 3c 21 44 4f 43 54 59   Arial'>..<!DOCTY
0400  50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22   PE HTML PUBLIC "
0410  2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d   -//IETF//DTD HTM
0420  4c 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 3c 48   L//EN">.<HTML><H
0430  45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 53 74   EAD><TITLE>BadSt
0440  6f 72 65 2e 6e 65 74 20 2d 20 52 65 67 69 73 74   ore.net - Regist
0450  65 72 2f 4c 6f 67 69 6e 3c 2f 54 49 54 4c 45 3e   er/Login</TITLE>
0460  0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 3c 48   .</HEAD><BODY><H
0470  32 3e 4c 6f 67 69 6e 20 74 6f 20 59 6f 75 72 20   2>Login to Your 
0480  41 63 63 6f 75 6e 74 20 6f 72 20 52 65 67 69 73   Account or Regis
0490  74 65 72 20 66 6f 72 20 61 20 4e 65 77 20 41 63   ter for a New Ac
04a0  63 6f 75 6e 74 3c 2f 48 32 3e 3c 48 52 3e 3c 50   count</H2><HR><P
04b0  3e 3c 48 33 3e 4c 6f 67 69 6e 20 74 6f 20 59 6f   ><H3>Login to Yo
04c0  75 72 20 41 63 63 6f 75 6e 74 3c 2f 48 33 3e 3c   ur Account</H3><
04d0  46 4f 52 4d 20 4d 45 54 48 4f 44 3d 22 50 4f 53   FORM METHOD="POS
04e0  0d 0a                                             ..
        Data: 5265666572656e6365202d3c2f693e3c2f423e3c2f43656e7465723e3c703e0d0a09093c…
        [Length: 1250]