No. Time Source Destination Protocol Info 1077 27.753093 172.16.255.145 172.16.255.2 HTTP GET / HTTP/1.1 Frame 1077 (147 bytes on wire, 147 bytes captured) Arrival Time: Oct 29, 2008 14:06:54.261789000 Time delta from previous packet: 27.753093000 seconds Time since reference or first frame: 27.753093000 seconds Frame Number: 1077 Packet Length: 147 bytes Capture Length: 147 bytes Protocols in frame: eth:ip:tcp:http Coloring Rule Name: HTTP Coloring Rule String: http || tcp.port == 80 Ethernet II, Src: 00:19:db:ac:57:d2 (00:19:db:ac:57:d2), Dst: Cisco_cb:46:d5 (00:14:f2:cb:46:d5) Destination: Cisco_cb:46:d5 (00:14:f2:cb:46:d5) Address: Cisco_cb:46:d5 (00:14:f2:cb:46:d5) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Source: 00:19:db:ac:57:d2 (00:19:db:ac:57:d2) Address: 00:19:db:ac:57:d2 (00:19:db:ac:57:d2) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Type: IP (0x0800) Internet Protocol, Src: 172.16.255.145 (172.16.255.145), Dst: 172.16.255.2 (172.16.255.2) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 133 Identification: 0x51de (20958) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x51df [correct] Good: True Bad : False Source: 172.16.255.145 (172.16.255.145) Destination: 172.16.255.2 (172.16.255.2) Transmission Control Protocol, Src Port: 1333 (1333), Dst Port: http (80), Seq: 303, Ack: 1, Len: 93 Source port: 1333 (1333) Destination port: http (80) Sequence number: 303 (relative sequence number) Next sequence number: 396 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 65535 Checksum: 0x82a1 [correct] TCP segment data (93 bytes) Reassembled TCP Segments (395 bytes): #1075(302), #1077(93) Hypertext Transfer Protocol GET / HTTP/1.1\r\n Request Method: GET Request URI: / Request Version: HTTP/1.1 Host: 172.16.255.2\r\n User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.8.1.17) Gecko/20080829 Firefox/2.0.0.17\r\n Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n Accept-Language: ru-ru,ru;q=0.8,en-us;q=0.5,en;q=0.3\r\n Accept-Charset: windows-1251,utf-8;q=0.7,*;q=0.7\r\n Keep-Alive: 300\r\n Connection: keep-alive\r\n \r\n Frame (147 bytes): 0000 00 14 f2 cb 46 d5 00 19 db ac 57 d2 08 00 45 00 ....F.....W...E. 0010 00 85 51 de 40 00 80 06 51 df ac 10 ff 91 ac 10 ..Q.@...Q....... 0020 ff 02 05 35 00 50 71 19 44 12 72 42 ac f8 50 18 ...5.Pq.D.rB..P. 0030 ff ff 82 a1 00 00 41 63 63 65 70 74 2d 43 68 61 ......Accept-Cha 0040 72 73 65 74 3a 20 77 69 6e 64 6f 77 73 2d 31 32 rset: windows-12 0050 35 31 2c 75 74 66 2d 38 3b 71 3d 30 2e 37 2c 2a 51,utf-8;q=0.7,* 0060 3b 71 3d 30 2e 37 0d 0a 4b 65 65 70 2d 41 6c 69 ;q=0.7..Keep-Ali 0070 76 65 3a 20 33 30 30 0d 0a 43 6f 6e 6e 65 63 74 ve: 300..Connect 0080 69 6f 6e 3a 20 6b 65 65 70 2d 61 6c 69 76 65 0d ion: keep-alive. 0090 0a 0d 0a ... Reassembled TCP (395 bytes): 0000 47 45 54 20 2f 20 48 54 54 50 2f 31 2e 31 0d 0a GET / HTTP/1.1.. 0010 48 6f 73 74 3a 20 31 37 32 2e 31 36 2e 32 35 35 Host: 172.16.255 0020 2e 32 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 .2..User-Agent: 0030 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e Mozilla/5.0 (Win 0040 64 6f 77 73 3b 20 55 3b 20 57 69 6e 64 6f 77 73 dows; U; Windows 0050 20 4e 54 20 35 2e 31 3b 20 72 75 3b 20 72 76 3a NT 5.1; ru; rv: 0060 31 2e 38 2e 31 2e 31 37 29 20 47 65 63 6b 6f 2f 1.8.1.17) Gecko/ 0070 32 30 30 38 30 38 32 39 20 46 69 72 65 66 6f 78 20080829 Firefox 0080 2f 32 2e 30 2e 30 2e 31 37 0d 0a 41 63 63 65 70 /2.0.0.17..Accep 0090 74 3a 20 74 65 78 74 2f 78 6d 6c 2c 61 70 70 6c t: text/xml,appl 00a0 69 63 61 74 69 6f 6e 2f 78 6d 6c 2c 61 70 70 6c ication/xml,appl 00b0 69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d ication/xhtml+xm 00c0 6c 2c 74 65 78 74 2f 68 74 6d 6c 3b 71 3d 30 2e l,text/html;q=0. 00d0 39 2c 74 65 78 74 2f 70 6c 61 69 6e 3b 71 3d 30 9,text/plain;q=0 00e0 2e 38 2c 69 6d 61 67 65 2f 70 6e 67 2c 2a 2f 2a .8,image/png,*/* 00f0 3b 71 3d 30 2e 35 0d 0a 41 63 63 65 70 74 2d 4c ;q=0.5..Accept-L 0100 61 6e 67 75 61 67 65 3a 20 72 75 2d 72 75 2c 72 anguage: ru-ru,r 0110 75 3b 71 3d 30 2e 38 2c 65 6e 2d 75 73 3b 71 3d u;q=0.8,en-us;q= 0120 30 2e 35 2c 65 6e 3b 71 3d 30 2e 33 0d 0a 41 63 0.5,en;q=0.3..Ac 0130 63 65 70 74 2d 43 68 61 72 73 65 74 3a 20 77 69 cept-Charset: wi 0140 6e 64 6f 77 73 2d 31 32 35 31 2c 75 74 66 2d 38 ndows-1251,utf-8 0150 3b 71 3d 30 2e 37 2c 2a 3b 71 3d 30 2e 37 0d 0a ;q=0.7,*;q=0.7.. 0160 4b 65 65 70 2d 41 6c 69 76 65 3a 20 33 30 30 0d Keep-Alive: 300. 0170 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 .Connection: kee 0180 70 2d 61 6c 69 76 65 0d 0a 0d 0a p-alive.... No. Time Source Destination Protocol Info 1078 27.765457 172.16.255.2 172.16.255.145 HTTP HTTP/1.1 401 Unauthorized Frame 1078 (254 bytes on wire, 254 bytes captured) Arrival Time: Oct 29, 2008 14:06:54.274153000 Time delta from previous packet: 0.012364000 seconds Time since reference or first frame: 27.765457000 seconds Frame Number: 1078 Packet Length: 254 bytes Capture Length: 254 bytes Protocols in frame: eth:ip:tcp:http:data Coloring Rule Name: HTTP Coloring Rule String: http || tcp.port == 80 Ethernet II, Src: Cisco_cb:46:d5 (00:14:f2:cb:46:d5), Dst: 00:19:db:ac:57:d2 (00:19:db:ac:57:d2) Destination: 00:19:db:ac:57:d2 (00:19:db:ac:57:d2) Address: 00:19:db:ac:57:d2 (00:19:db:ac:57:d2) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Source: Cisco_cb:46:d5 (00:14:f2:cb:46:d5) Address: Cisco_cb:46:d5 (00:14:f2:cb:46:d5) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Type: IP (0x0800) Internet Protocol, Src: 172.16.255.2 (172.16.255.2), Dst: 172.16.255.145 (172.16.255.145) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 240 Identification: 0x0002 (2) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: TCP (0x06) Header checksum: 0x6450 [correct] Good: True Bad : False Source: 172.16.255.2 (172.16.255.2) Destination: 172.16.255.145 (172.16.255.145) Transmission Control Protocol, Src Port: http (80), Dst Port: 1333 (1333), Seq: 1, Ack: 396, Len: 200 Source port: http (80) Destination port: 1333 (1333) Sequence number: 1 (relative sequence number) Next sequence number: 201 (relative sequence number) Acknowledgement number: 396 (relative ack number) Header length: 20 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 3733 Checksum: 0x81c5 [correct] Hypertext Transfer Protocol HTTP/1.1 401 Unauthorized\r\n Request Version: HTTP/1.1 Response Code: 401 Date: Wed, 29 Oct 2008 09:09:54 GMT\r\n Server: cisco-IOS\r\n Connection: close\r\n Accept-Ranges: none\r\n WWW-Authenticate: Basic realm="level_15_or_view_access"\r\n \r\n Data (18 bytes) 0000 00 19 db ac 57 d2 00 14 f2 cb 46 d5 08 00 45 00 ....W.....F...E. 0010 00 f0 00 02 00 00 ff 06 64 50 ac 10 ff 02 ac 10 ........dP...... 0020 ff 91 00 50 05 35 72 42 ac f8 71 19 44 6f 50 10 ...P.5rB..q.DoP. 0030 0e 95 81 c5 00 00 48 54 54 50 2f 31 2e 31 20 34 ......HTTP/1.1 4 0040 30 31 20 55 6e 61 75 74 68 6f 72 69 7a 65 64 0d 01 Unauthorized. 0050 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 39 20 4f .Date: Wed, 29 O 0060 63 74 20 32 30 30 38 20 30 39 3a 30 39 3a 35 34 ct 2008 09:09:54 0070 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 63 69 GMT..Server: ci 0080 73 63 6f 2d 49 4f 53 0d 0a 43 6f 6e 6e 65 63 74 sco-IOS..Connect 0090 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 41 63 63 65 ion: close..Acce 00a0 70 74 2d 52 61 6e 67 65 73 3a 20 6e 6f 6e 65 0d pt-Ranges: none. 00b0 0a 57 57 57 2d 41 75 74 68 65 6e 74 69 63 61 74 .WWW-Authenticat 00c0 65 3a 20 42 61 73 69 63 20 72 65 61 6c 6d 3d 22 e: Basic realm=" 00d0 6c 65 76 65 6c 5f 31 35 5f 6f 72 5f 76 69 65 77 level_15_or_view 00e0 5f 61 63 63 65 73 73 22 0d 0a 0d 0a 34 30 31 20 _access"....401 00f0 55 6e 61 75 74 68 6f 72 69 7a 65 64 0d 0a Unauthorized.. No. Time Source Destination Protocol Info 1091 31.201076 172.16.255.145 172.16.255.2 HTTP GET / HTTP/1.1 Frame 1091 (174 bytes on wire, 174 bytes captured) Arrival Time: Oct 29, 2008 14:06:57.709772000 Time delta from previous packet: 3.435619000 seconds Time since reference or first frame: 31.201076000 seconds Frame Number: 1091 Packet Length: 174 bytes Capture Length: 174 bytes Protocols in frame: eth:ip:tcp:http Coloring Rule Name: HTTP Coloring Rule String: http || tcp.port == 80 Ethernet II, Src: 00:19:db:ac:57:d2 (00:19:db:ac:57:d2), Dst: Cisco_cb:46:d5 (00:14:f2:cb:46:d5) Destination: Cisco_cb:46:d5 (00:14:f2:cb:46:d5) Address: Cisco_cb:46:d5 (00:14:f2:cb:46:d5) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Source: 00:19:db:ac:57:d2 (00:19:db:ac:57:d2) Address: 00:19:db:ac:57:d2 (00:19:db:ac:57:d2) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Type: IP (0x0800) Internet Protocol, Src: 172.16.255.145 (172.16.255.145), Dst: 172.16.255.2 (172.16.255.2) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 160 Identification: 0x51ed (20973) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x51b5 [correct] Good: True Bad : False Source: 172.16.255.145 (172.16.255.145) Destination: 172.16.255.2 (172.16.255.2) Transmission Control Protocol, Src Port: 1334 (1334), Dst Port: http (80), Seq: 303, Ack: 1, Len: 120 Source port: 1334 (1334) Destination port: http (80) Sequence number: 303 (relative sequence number) Next sequence number: 423 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 65535 Checksum: 0x4cbd [correct] TCP segment data (120 bytes) Reassembled TCP Segments (422 bytes): #1089(302), #1091(120) Hypertext Transfer Protocol GET / HTTP/1.1\r\n Request Method: GET Request URI: / Request Version: HTTP/1.1 Host: 172.16.255.2\r\n User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.8.1.17) Gecko/20080829 Firefox/2.0.0.17\r\n Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n Accept-Language: ru-ru,ru;q=0.8,en-us;q=0.5,en;q=0.3\r\n Accept-Charset: windows-1251,utf-8;q=0.7,*;q=0.7\r\n Keep-Alive: 300\r\n Connection: keep-alive\r\n Authorization: Basic Og==\r\n \r\n Frame (174 bytes): 0000 00 14 f2 cb 46 d5 00 19 db ac 57 d2 08 00 45 00 ....F.....W...E. 0010 00 a0 51 ed 40 00 80 06 51 b5 ac 10 ff 91 ac 10 ..Q.@...Q....... 0020 ff 02 05 36 00 50 32 25 95 93 03 0d a0 ea 50 18 ...6.P2%......P. 0030 ff ff 4c bd 00 00 41 63 63 65 70 74 2d 43 68 61 ..L...Accept-Cha 0040 72 73 65 74 3a 20 77 69 6e 64 6f 77 73 2d 31 32 rset: windows-12 0050 35 31 2c 75 74 66 2d 38 3b 71 3d 30 2e 37 2c 2a 51,utf-8;q=0.7,* 0060 3b 71 3d 30 2e 37 0d 0a 4b 65 65 70 2d 41 6c 69 ;q=0.7..Keep-Ali 0070 76 65 3a 20 33 30 30 0d 0a 43 6f 6e 6e 65 63 74 ve: 300..Connect 0080 69 6f 6e 3a 20 6b 65 65 70 2d 61 6c 69 76 65 0d ion: keep-alive. 0090 0a 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 3a 20 .Authorization: 00a0 42 61 73 69 63 20 4f 67 3d 3d 0d 0a 0d 0a Basic Og==.... Reassembled TCP (422 bytes): 0000 47 45 54 20 2f 20 48 54 54 50 2f 31 2e 31 0d 0a GET / HTTP/1.1.. 0010 48 6f 73 74 3a 20 31 37 32 2e 31 36 2e 32 35 35 Host: 172.16.255 0020 2e 32 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 .2..User-Agent: 0030 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e Mozilla/5.0 (Win 0040 64 6f 77 73 3b 20 55 3b 20 57 69 6e 64 6f 77 73 dows; U; Windows 0050 20 4e 54 20 35 2e 31 3b 20 72 75 3b 20 72 76 3a NT 5.1; ru; rv: 0060 31 2e 38 2e 31 2e 31 37 29 20 47 65 63 6b 6f 2f 1.8.1.17) Gecko/ 0070 32 30 30 38 30 38 32 39 20 46 69 72 65 66 6f 78 20080829 Firefox 0080 2f 32 2e 30 2e 30 2e 31 37 0d 0a 41 63 63 65 70 /2.0.0.17..Accep 0090 74 3a 20 74 65 78 74 2f 78 6d 6c 2c 61 70 70 6c t: text/xml,appl 00a0 69 63 61 74 69 6f 6e 2f 78 6d 6c 2c 61 70 70 6c ication/xml,appl 00b0 69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d ication/xhtml+xm 00c0 6c 2c 74 65 78 74 2f 68 74 6d 6c 3b 71 3d 30 2e l,text/html;q=0. 00d0 39 2c 74 65 78 74 2f 70 6c 61 69 6e 3b 71 3d 30 9,text/plain;q=0 00e0 2e 38 2c 69 6d 61 67 65 2f 70 6e 67 2c 2a 2f 2a .8,image/png,*/* 00f0 3b 71 3d 30 2e 35 0d 0a 41 63 63 65 70 74 2d 4c ;q=0.5..Accept-L 0100 61 6e 67 75 61 67 65 3a 20 72 75 2d 72 75 2c 72 anguage: ru-ru,r 0110 75 3b 71 3d 30 2e 38 2c 65 6e 2d 75 73 3b 71 3d u;q=0.8,en-us;q= 0120 30 2e 35 2c 65 6e 3b 71 3d 30 2e 33 0d 0a 41 63 0.5,en;q=0.3..Ac 0130 63 65 70 74 2d 43 68 61 72 73 65 74 3a 20 77 69 cept-Charset: wi 0140 6e 64 6f 77 73 2d 31 32 35 31 2c 75 74 66 2d 38 ndows-1251,utf-8 0150 3b 71 3d 30 2e 37 2c 2a 3b 71 3d 30 2e 37 0d 0a ;q=0.7,*;q=0.7.. 0160 4b 65 65 70 2d 41 6c 69 76 65 3a 20 33 30 30 0d Keep-Alive: 300. 0170 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 .Connection: kee 0180 70 2d 61 6c 69 76 65 0d 0a 41 75 74 68 6f 72 69 p-alive..Authori 0190 7a 61 74 69 6f 6e 3a 20 42 61 73 69 63 20 4f 67 zation: Basic Og 01a0 3d 3d 0d 0a 0d 0a ==.... No. Time Source Destination Protocol Info 1094 33.213228 172.16.255.2 172.16.255.145 HTTP HTTP/1.1 401 Unauthorized Frame 1094 (254 bytes on wire, 254 bytes captured) Arrival Time: Oct 29, 2008 14:06:59.721924000 Time delta from previous packet: 2.012152000 seconds Time since reference or first frame: 33.213228000 seconds Frame Number: 1094 Packet Length: 254 bytes Capture Length: 254 bytes Protocols in frame: eth:ip:tcp:http:data Coloring Rule Name: HTTP Coloring Rule String: http || tcp.port == 80 Ethernet II, Src: Cisco_cb:46:d5 (00:14:f2:cb:46:d5), Dst: 00:19:db:ac:57:d2 (00:19:db:ac:57:d2) Destination: 00:19:db:ac:57:d2 (00:19:db:ac:57:d2) Address: 00:19:db:ac:57:d2 (00:19:db:ac:57:d2) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Source: Cisco_cb:46:d5 (00:14:f2:cb:46:d5) Address: Cisco_cb:46:d5 (00:14:f2:cb:46:d5) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Type: IP (0x0800) Internet Protocol, Src: 172.16.255.2 (172.16.255.2), Dst: 172.16.255.145 (172.16.255.145) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 240 Identification: 0x0003 (3) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: TCP (0x06) Header checksum: 0x644f [correct] Good: True Bad : False Source: 172.16.255.2 (172.16.255.2) Destination: 172.16.255.145 (172.16.255.145) Transmission Control Protocol, Src Port: http (80), Dst Port: 1334 (1334), Seq: 1, Ack: 423, Len: 200 Source port: http (80) Destination port: 1334 (1334) Sequence number: 1 (relative sequence number) Next sequence number: 201 (relative sequence number) Acknowledgement number: 423 (relative ack number) Header length: 20 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 3706 Checksum: 0xea75 [correct] Hypertext Transfer Protocol HTTP/1.1 401 Unauthorized\r\n Request Version: HTTP/1.1 Response Code: 401 Date: Wed, 29 Oct 2008 09:09:59 GMT\r\n Server: cisco-IOS\r\n Connection: close\r\n Accept-Ranges: none\r\n WWW-Authenticate: Basic realm="level_15_or_view_access"\r\n \r\n Data (18 bytes) 0000 00 19 db ac 57 d2 00 14 f2 cb 46 d5 08 00 45 00 ....W.....F...E. 0010 00 f0 00 03 00 00 ff 06 64 4f ac 10 ff 02 ac 10 ........dO...... 0020 ff 91 00 50 05 36 03 0d a0 ea 32 25 96 0b 50 10 ...P.6....2%..P. 0030 0e 7a ea 75 00 00 48 54 54 50 2f 31 2e 31 20 34 .z.u..HTTP/1.1 4 0040 30 31 20 55 6e 61 75 74 68 6f 72 69 7a 65 64 0d 01 Unauthorized. 0050 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 39 20 4f .Date: Wed, 29 O 0060 63 74 20 32 30 30 38 20 30 39 3a 30 39 3a 35 39 ct 2008 09:09:59 0070 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 63 69 GMT..Server: ci 0080 73 63 6f 2d 49 4f 53 0d 0a 43 6f 6e 6e 65 63 74 sco-IOS..Connect 0090 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 41 63 63 65 ion: close..Acce 00a0 70 74 2d 52 61 6e 67 65 73 3a 20 6e 6f 6e 65 0d pt-Ranges: none. 00b0 0a 57 57 57 2d 41 75 74 68 65 6e 74 69 63 61 74 .WWW-Authenticat 00c0 65 3a 20 42 61 73 69 63 20 72 65 61 6c 6d 3d 22 e: Basic realm=" 00d0 6c 65 76 65 6c 5f 31 35 5f 6f 72 5f 76 69 65 77 level_15_or_view 00e0 5f 61 63 63 65 73 73 22 0d 0a 0d 0a 34 30 31 20 _access"....401 00f0 55 6e 61 75 74 68 6f 72 69 7a 65 64 0d 0a Unauthorized..