No.     Time        Source                Destination           Protocol Info
   1077 27.753093   172.16.255.145        172.16.255.2          HTTP     GET / HTTP/1.1

Frame 1077 (147 bytes on wire, 147 bytes captured)
    Arrival Time: Oct 29, 2008 14:06:54.261789000
    Time delta from previous packet: 27.753093000 seconds
    Time since reference or first frame: 27.753093000 seconds
    Frame Number: 1077
    Packet Length: 147 bytes
    Capture Length: 147 bytes
    Protocols in frame: eth:ip:tcp:http
    Coloring Rule Name: HTTP
    Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: 00:19:db:ac:57:d2 (00:19:db:ac:57:d2), Dst: Cisco_cb:46:d5 (00:14:f2:cb:46:d5)
    Destination: Cisco_cb:46:d5 (00:14:f2:cb:46:d5)
        Address: Cisco_cb:46:d5 (00:14:f2:cb:46:d5)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: 00:19:db:ac:57:d2 (00:19:db:ac:57:d2)
        Address: 00:19:db:ac:57:d2 (00:19:db:ac:57:d2)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 172.16.255.145 (172.16.255.145), Dst: 172.16.255.2 (172.16.255.2)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 133
    Identification: 0x51de (20958)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x51df [correct]
        Good: True
        Bad : False
    Source: 172.16.255.145 (172.16.255.145)
    Destination: 172.16.255.2 (172.16.255.2)
Transmission Control Protocol, Src Port: 1333 (1333), Dst Port: http (80), Seq: 303, Ack: 1, Len: 93
    Source port: 1333 (1333)
    Destination port: http (80)
    Sequence number: 303    (relative sequence number)
    Next sequence number: 396    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 65535
    Checksum: 0x82a1 [correct]
    TCP segment data (93 bytes)
Reassembled TCP Segments (395 bytes): #1075(302), #1077(93)
Hypertext Transfer Protocol
    GET / HTTP/1.1\r\n
        Request Method: GET
        Request URI: /
        Request Version: HTTP/1.1
    Host: 172.16.255.2\r\n
    User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.8.1.17) Gecko/20080829 Firefox/2.0.0.17\r\n
    Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
    Accept-Language: ru-ru,ru;q=0.8,en-us;q=0.5,en;q=0.3\r\n
    Accept-Charset: windows-1251,utf-8;q=0.7,*;q=0.7\r\n
    Keep-Alive: 300\r\n
    Connection: keep-alive\r\n
    \r\n

Frame (147 bytes):

0000  00 14 f2 cb 46 d5 00 19 db ac 57 d2 08 00 45 00   ....F.....W...E.
0010  00 85 51 de 40 00 80 06 51 df ac 10 ff 91 ac 10   ..Q.@...Q.......
0020  ff 02 05 35 00 50 71 19 44 12 72 42 ac f8 50 18   ...5.Pq.D.rB..P.
0030  ff ff 82 a1 00 00 41 63 63 65 70 74 2d 43 68 61   ......Accept-Cha
0040  72 73 65 74 3a 20 77 69 6e 64 6f 77 73 2d 31 32   rset: windows-12
0050  35 31 2c 75 74 66 2d 38 3b 71 3d 30 2e 37 2c 2a   51,utf-8;q=0.7,*
0060  3b 71 3d 30 2e 37 0d 0a 4b 65 65 70 2d 41 6c 69   ;q=0.7..Keep-Ali
0070  76 65 3a 20 33 30 30 0d 0a 43 6f 6e 6e 65 63 74   ve: 300..Connect
0080  69 6f 6e 3a 20 6b 65 65 70 2d 61 6c 69 76 65 0d   ion: keep-alive.
0090  0a 0d 0a                                          ...

Reassembled TCP (395 bytes):

0000  47 45 54 20 2f 20 48 54 54 50 2f 31 2e 31 0d 0a   GET / HTTP/1.1..
0010  48 6f 73 74 3a 20 31 37 32 2e 31 36 2e 32 35 35   Host: 172.16.255
0020  2e 32 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20   .2..User-Agent: 
0030  4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e   Mozilla/5.0 (Win
0040  64 6f 77 73 3b 20 55 3b 20 57 69 6e 64 6f 77 73   dows; U; Windows
0050  20 4e 54 20 35 2e 31 3b 20 72 75 3b 20 72 76 3a    NT 5.1; ru; rv:
0060  31 2e 38 2e 31 2e 31 37 29 20 47 65 63 6b 6f 2f   1.8.1.17) Gecko/
0070  32 30 30 38 30 38 32 39 20 46 69 72 65 66 6f 78   20080829 Firefox
0080  2f 32 2e 30 2e 30 2e 31 37 0d 0a 41 63 63 65 70   /2.0.0.17..Accep
0090  74 3a 20 74 65 78 74 2f 78 6d 6c 2c 61 70 70 6c   t: text/xml,appl
00a0  69 63 61 74 69 6f 6e 2f 78 6d 6c 2c 61 70 70 6c   ication/xml,appl
00b0  69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d   ication/xhtml+xm
00c0  6c 2c 74 65 78 74 2f 68 74 6d 6c 3b 71 3d 30 2e   l,text/html;q=0.
00d0  39 2c 74 65 78 74 2f 70 6c 61 69 6e 3b 71 3d 30   9,text/plain;q=0
00e0  2e 38 2c 69 6d 61 67 65 2f 70 6e 67 2c 2a 2f 2a   .8,image/png,*/*
00f0  3b 71 3d 30 2e 35 0d 0a 41 63 63 65 70 74 2d 4c   ;q=0.5..Accept-L
0100  61 6e 67 75 61 67 65 3a 20 72 75 2d 72 75 2c 72   anguage: ru-ru,r
0110  75 3b 71 3d 30 2e 38 2c 65 6e 2d 75 73 3b 71 3d   u;q=0.8,en-us;q=
0120  30 2e 35 2c 65 6e 3b 71 3d 30 2e 33 0d 0a 41 63   0.5,en;q=0.3..Ac
0130  63 65 70 74 2d 43 68 61 72 73 65 74 3a 20 77 69   cept-Charset: wi
0140  6e 64 6f 77 73 2d 31 32 35 31 2c 75 74 66 2d 38   ndows-1251,utf-8
0150  3b 71 3d 30 2e 37 2c 2a 3b 71 3d 30 2e 37 0d 0a   ;q=0.7,*;q=0.7..
0160  4b 65 65 70 2d 41 6c 69 76 65 3a 20 33 30 30 0d   Keep-Alive: 300.
0170  0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65   .Connection: kee
0180  70 2d 61 6c 69 76 65 0d 0a 0d 0a                  p-alive....

No.     Time        Source                Destination           Protocol Info
   1078 27.765457   172.16.255.2          172.16.255.145        HTTP     HTTP/1.1 401 Unauthorized

Frame 1078 (254 bytes on wire, 254 bytes captured)
    Arrival Time: Oct 29, 2008 14:06:54.274153000
    Time delta from previous packet: 0.012364000 seconds
    Time since reference or first frame: 27.765457000 seconds
    Frame Number: 1078
    Packet Length: 254 bytes
    Capture Length: 254 bytes
    Protocols in frame: eth:ip:tcp:http:data
    Coloring Rule Name: HTTP
    Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: Cisco_cb:46:d5 (00:14:f2:cb:46:d5), Dst: 00:19:db:ac:57:d2 (00:19:db:ac:57:d2)
    Destination: 00:19:db:ac:57:d2 (00:19:db:ac:57:d2)
        Address: 00:19:db:ac:57:d2 (00:19:db:ac:57:d2)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: Cisco_cb:46:d5 (00:14:f2:cb:46:d5)
        Address: Cisco_cb:46:d5 (00:14:f2:cb:46:d5)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 172.16.255.2 (172.16.255.2), Dst: 172.16.255.145 (172.16.255.145)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 240
    Identification: 0x0002 (2)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: TCP (0x06)
    Header checksum: 0x6450 [correct]
        Good: True
        Bad : False
    Source: 172.16.255.2 (172.16.255.2)
    Destination: 172.16.255.145 (172.16.255.145)
Transmission Control Protocol, Src Port: http (80), Dst Port: 1333 (1333), Seq: 1, Ack: 396, Len: 200
    Source port: http (80)
    Destination port: 1333 (1333)
    Sequence number: 1    (relative sequence number)
    Next sequence number: 201    (relative sequence number)
    Acknowledgement number: 396    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 3733
    Checksum: 0x81c5 [correct]
Hypertext Transfer Protocol
    HTTP/1.1 401 Unauthorized\r\n
        Request Version: HTTP/1.1
        Response Code: 401
    Date: Wed, 29 Oct 2008 09:09:54 GMT\r\n
    Server: cisco-IOS\r\n
    Connection: close\r\n
    Accept-Ranges: none\r\n
    WWW-Authenticate: Basic realm="level_15_or_view_access"\r\n
    \r\n
    Data (18 bytes)

0000  00 19 db ac 57 d2 00 14 f2 cb 46 d5 08 00 45 00   ....W.....F...E.
0010  00 f0 00 02 00 00 ff 06 64 50 ac 10 ff 02 ac 10   ........dP......
0020  ff 91 00 50 05 35 72 42 ac f8 71 19 44 6f 50 10   ...P.5rB..q.DoP.
0030  0e 95 81 c5 00 00 48 54 54 50 2f 31 2e 31 20 34   ......HTTP/1.1 4
0040  30 31 20 55 6e 61 75 74 68 6f 72 69 7a 65 64 0d   01 Unauthorized.
0050  0a 44 61 74 65 3a 20 57 65 64 2c 20 32 39 20 4f   .Date: Wed, 29 O
0060  63 74 20 32 30 30 38 20 30 39 3a 30 39 3a 35 34   ct 2008 09:09:54
0070  20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 63 69    GMT..Server: ci
0080  73 63 6f 2d 49 4f 53 0d 0a 43 6f 6e 6e 65 63 74   sco-IOS..Connect
0090  69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 41 63 63 65   ion: close..Acce
00a0  70 74 2d 52 61 6e 67 65 73 3a 20 6e 6f 6e 65 0d   pt-Ranges: none.
00b0  0a 57 57 57 2d 41 75 74 68 65 6e 74 69 63 61 74   .WWW-Authenticat
00c0  65 3a 20 42 61 73 69 63 20 72 65 61 6c 6d 3d 22   e: Basic realm="
00d0  6c 65 76 65 6c 5f 31 35 5f 6f 72 5f 76 69 65 77   level_15_or_view
00e0  5f 61 63 63 65 73 73 22 0d 0a 0d 0a 34 30 31 20   _access"....401 
00f0  55 6e 61 75 74 68 6f 72 69 7a 65 64 0d 0a         Unauthorized..

No.     Time        Source                Destination           Protocol Info
   1091 31.201076   172.16.255.145        172.16.255.2          HTTP     GET / HTTP/1.1

Frame 1091 (174 bytes on wire, 174 bytes captured)
    Arrival Time: Oct 29, 2008 14:06:57.709772000
    Time delta from previous packet: 3.435619000 seconds
    Time since reference or first frame: 31.201076000 seconds
    Frame Number: 1091
    Packet Length: 174 bytes
    Capture Length: 174 bytes
    Protocols in frame: eth:ip:tcp:http
    Coloring Rule Name: HTTP
    Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: 00:19:db:ac:57:d2 (00:19:db:ac:57:d2), Dst: Cisco_cb:46:d5 (00:14:f2:cb:46:d5)
    Destination: Cisco_cb:46:d5 (00:14:f2:cb:46:d5)
        Address: Cisco_cb:46:d5 (00:14:f2:cb:46:d5)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: 00:19:db:ac:57:d2 (00:19:db:ac:57:d2)
        Address: 00:19:db:ac:57:d2 (00:19:db:ac:57:d2)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 172.16.255.145 (172.16.255.145), Dst: 172.16.255.2 (172.16.255.2)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 160
    Identification: 0x51ed (20973)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x51b5 [correct]
        Good: True
        Bad : False
    Source: 172.16.255.145 (172.16.255.145)
    Destination: 172.16.255.2 (172.16.255.2)
Transmission Control Protocol, Src Port: 1334 (1334), Dst Port: http (80), Seq: 303, Ack: 1, Len: 120
    Source port: 1334 (1334)
    Destination port: http (80)
    Sequence number: 303    (relative sequence number)
    Next sequence number: 423    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 65535
    Checksum: 0x4cbd [correct]
    TCP segment data (120 bytes)
Reassembled TCP Segments (422 bytes): #1089(302), #1091(120)
Hypertext Transfer Protocol
    GET / HTTP/1.1\r\n
        Request Method: GET
        Request URI: /
        Request Version: HTTP/1.1
    Host: 172.16.255.2\r\n
    User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.8.1.17) Gecko/20080829 Firefox/2.0.0.17\r\n
    Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\r\n
    Accept-Language: ru-ru,ru;q=0.8,en-us;q=0.5,en;q=0.3\r\n
    Accept-Charset: windows-1251,utf-8;q=0.7,*;q=0.7\r\n
    Keep-Alive: 300\r\n
    Connection: keep-alive\r\n
    Authorization: Basic Og==\r\n
    \r\n

Frame (174 bytes):

0000  00 14 f2 cb 46 d5 00 19 db ac 57 d2 08 00 45 00   ....F.....W...E.
0010  00 a0 51 ed 40 00 80 06 51 b5 ac 10 ff 91 ac 10   ..Q.@...Q.......
0020  ff 02 05 36 00 50 32 25 95 93 03 0d a0 ea 50 18   ...6.P2%......P.
0030  ff ff 4c bd 00 00 41 63 63 65 70 74 2d 43 68 61   ..L...Accept-Cha
0040  72 73 65 74 3a 20 77 69 6e 64 6f 77 73 2d 31 32   rset: windows-12
0050  35 31 2c 75 74 66 2d 38 3b 71 3d 30 2e 37 2c 2a   51,utf-8;q=0.7,*
0060  3b 71 3d 30 2e 37 0d 0a 4b 65 65 70 2d 41 6c 69   ;q=0.7..Keep-Ali
0070  76 65 3a 20 33 30 30 0d 0a 43 6f 6e 6e 65 63 74   ve: 300..Connect
0080  69 6f 6e 3a 20 6b 65 65 70 2d 61 6c 69 76 65 0d   ion: keep-alive.
0090  0a 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 3a 20   .Authorization: 
00a0  42 61 73 69 63 20 4f 67 3d 3d 0d 0a 0d 0a         Basic Og==....

Reassembled TCP (422 bytes):

0000  47 45 54 20 2f 20 48 54 54 50 2f 31 2e 31 0d 0a   GET / HTTP/1.1..
0010  48 6f 73 74 3a 20 31 37 32 2e 31 36 2e 32 35 35   Host: 172.16.255
0020  2e 32 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20   .2..User-Agent: 
0030  4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e   Mozilla/5.0 (Win
0040  64 6f 77 73 3b 20 55 3b 20 57 69 6e 64 6f 77 73   dows; U; Windows
0050  20 4e 54 20 35 2e 31 3b 20 72 75 3b 20 72 76 3a    NT 5.1; ru; rv:
0060  31 2e 38 2e 31 2e 31 37 29 20 47 65 63 6b 6f 2f   1.8.1.17) Gecko/
0070  32 30 30 38 30 38 32 39 20 46 69 72 65 66 6f 78   20080829 Firefox
0080  2f 32 2e 30 2e 30 2e 31 37 0d 0a 41 63 63 65 70   /2.0.0.17..Accep
0090  74 3a 20 74 65 78 74 2f 78 6d 6c 2c 61 70 70 6c   t: text/xml,appl
00a0  69 63 61 74 69 6f 6e 2f 78 6d 6c 2c 61 70 70 6c   ication/xml,appl
00b0  69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d   ication/xhtml+xm
00c0  6c 2c 74 65 78 74 2f 68 74 6d 6c 3b 71 3d 30 2e   l,text/html;q=0.
00d0  39 2c 74 65 78 74 2f 70 6c 61 69 6e 3b 71 3d 30   9,text/plain;q=0
00e0  2e 38 2c 69 6d 61 67 65 2f 70 6e 67 2c 2a 2f 2a   .8,image/png,*/*
00f0  3b 71 3d 30 2e 35 0d 0a 41 63 63 65 70 74 2d 4c   ;q=0.5..Accept-L
0100  61 6e 67 75 61 67 65 3a 20 72 75 2d 72 75 2c 72   anguage: ru-ru,r
0110  75 3b 71 3d 30 2e 38 2c 65 6e 2d 75 73 3b 71 3d   u;q=0.8,en-us;q=
0120  30 2e 35 2c 65 6e 3b 71 3d 30 2e 33 0d 0a 41 63   0.5,en;q=0.3..Ac
0130  63 65 70 74 2d 43 68 61 72 73 65 74 3a 20 77 69   cept-Charset: wi
0140  6e 64 6f 77 73 2d 31 32 35 31 2c 75 74 66 2d 38   ndows-1251,utf-8
0150  3b 71 3d 30 2e 37 2c 2a 3b 71 3d 30 2e 37 0d 0a   ;q=0.7,*;q=0.7..
0160  4b 65 65 70 2d 41 6c 69 76 65 3a 20 33 30 30 0d   Keep-Alive: 300.
0170  0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65   .Connection: kee
0180  70 2d 61 6c 69 76 65 0d 0a 41 75 74 68 6f 72 69   p-alive..Authori
0190  7a 61 74 69 6f 6e 3a 20 42 61 73 69 63 20 4f 67   zation: Basic Og
01a0  3d 3d 0d 0a 0d 0a                                 ==....

No.     Time        Source                Destination           Protocol Info
   1094 33.213228   172.16.255.2          172.16.255.145        HTTP     HTTP/1.1 401 Unauthorized

Frame 1094 (254 bytes on wire, 254 bytes captured)
    Arrival Time: Oct 29, 2008 14:06:59.721924000
    Time delta from previous packet: 2.012152000 seconds
    Time since reference or first frame: 33.213228000 seconds
    Frame Number: 1094
    Packet Length: 254 bytes
    Capture Length: 254 bytes
    Protocols in frame: eth:ip:tcp:http:data
    Coloring Rule Name: HTTP
    Coloring Rule String: http || tcp.port == 80
Ethernet II, Src: Cisco_cb:46:d5 (00:14:f2:cb:46:d5), Dst: 00:19:db:ac:57:d2 (00:19:db:ac:57:d2)
    Destination: 00:19:db:ac:57:d2 (00:19:db:ac:57:d2)
        Address: 00:19:db:ac:57:d2 (00:19:db:ac:57:d2)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: Cisco_cb:46:d5 (00:14:f2:cb:46:d5)
        Address: Cisco_cb:46:d5 (00:14:f2:cb:46:d5)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 172.16.255.2 (172.16.255.2), Dst: 172.16.255.145 (172.16.255.145)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 240
    Identification: 0x0003 (3)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: TCP (0x06)
    Header checksum: 0x644f [correct]
        Good: True
        Bad : False
    Source: 172.16.255.2 (172.16.255.2)
    Destination: 172.16.255.145 (172.16.255.145)
Transmission Control Protocol, Src Port: http (80), Dst Port: 1334 (1334), Seq: 1, Ack: 423, Len: 200
    Source port: http (80)
    Destination port: 1334 (1334)
    Sequence number: 1    (relative sequence number)
    Next sequence number: 201    (relative sequence number)
    Acknowledgement number: 423    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 3706
    Checksum: 0xea75 [correct]
Hypertext Transfer Protocol
    HTTP/1.1 401 Unauthorized\r\n
        Request Version: HTTP/1.1
        Response Code: 401
    Date: Wed, 29 Oct 2008 09:09:59 GMT\r\n
    Server: cisco-IOS\r\n
    Connection: close\r\n
    Accept-Ranges: none\r\n
    WWW-Authenticate: Basic realm="level_15_or_view_access"\r\n
    \r\n
    Data (18 bytes)

0000  00 19 db ac 57 d2 00 14 f2 cb 46 d5 08 00 45 00   ....W.....F...E.
0010  00 f0 00 03 00 00 ff 06 64 4f ac 10 ff 02 ac 10   ........dO......
0020  ff 91 00 50 05 36 03 0d a0 ea 32 25 96 0b 50 10   ...P.6....2%..P.
0030  0e 7a ea 75 00 00 48 54 54 50 2f 31 2e 31 20 34   .z.u..HTTP/1.1 4
0040  30 31 20 55 6e 61 75 74 68 6f 72 69 7a 65 64 0d   01 Unauthorized.
0050  0a 44 61 74 65 3a 20 57 65 64 2c 20 32 39 20 4f   .Date: Wed, 29 O
0060  63 74 20 32 30 30 38 20 30 39 3a 30 39 3a 35 39   ct 2008 09:09:59
0070  20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 63 69    GMT..Server: ci
0080  73 63 6f 2d 49 4f 53 0d 0a 43 6f 6e 6e 65 63 74   sco-IOS..Connect
0090  69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 41 63 63 65   ion: close..Acce
00a0  70 74 2d 52 61 6e 67 65 73 3a 20 6e 6f 6e 65 0d   pt-Ranges: none.
00b0  0a 57 57 57 2d 41 75 74 68 65 6e 74 69 63 61 74   .WWW-Authenticat
00c0  65 3a 20 42 61 73 69 63 20 72 65 61 6c 6d 3d 22   e: Basic realm="
00d0  6c 65 76 65 6c 5f 31 35 5f 6f 72 5f 76 69 65 77   level_15_or_view
00e0  5f 61 63 63 65 73 73 22 0d 0a 0d 0a 34 30 31 20   _access"....401 
00f0  55 6e 61 75 74 68 6f 72 69 7a 65 64 0d 0a         Unauthorized..