No.     Time        Source                Destination           Protocol Info
    599 4.817920    10.96.84.65           10.96.87.85           HTTP     GET /rm/iqm/pdf/stateguidelines/Colorado.pdf HTTP/1.1 

Frame 599 (543 bytes on wire, 543 bytes captured)
    Arrival Time: Jan 29, 2010 18:37:43.370490000
    [Time delta from previous captured frame: 0.000130000 seconds]
    [Time delta from previous displayed frame: 0.524969000 seconds]
    [Time since reference or first frame: 4.817920000 seconds]
    Frame Number: 599
    Frame Length: 543 bytes
    Capture Length: 543 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:tcp:http]
    [Coloring Rule Name: HTTP]
    [Coloring Rule String: http || tcp.port == 80]
Ethernet II, Src: Dell_91:a0:44 (00:21:70:91:a0:44), Dst: All-HSRP-routers_6a (00:00:0c:07:ac:6a)
    Destination: All-HSRP-routers_6a (00:00:0c:07:ac:6a)
        Address: All-HSRP-routers_6a (00:00:0c:07:ac:6a)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Dell_91:a0:44 (00:21:70:91:a0:44)
        Address: Dell_91:a0:44 (00:21:70:91:a0:44)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 10.96.84.65 (10.96.84.65), Dst: 10.96.87.85 (10.96.87.85)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 529
    Identification: 0x42c1 (17089)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0xf5cf [correct]
        [Good: True]
        [Bad : False]
    Source: 10.96.84.65 (10.96.84.65)
    Destination: 10.96.87.85 (10.96.87.85)
Transmission Control Protocol, Src Port: wanscaler (2312), Dst Port: http (80), Seq: 1, Ack: 1, Len: 489
    Source port: wanscaler (2312)
    Destination port: http (80)
    [Stream index: 4]
    Sequence number: 1    (relative sequence number)
    [Next sequence number: 490    (relative sequence number)]
    Acknowledgement number: 1    (relative ack number)
    Header length: 20 bytes
    Flags: 0x18 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgement: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 65535
    Checksum: 0x0e17 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
    [SEQ/ACK analysis]
        [Number of bytes in flight: 489]
Hypertext Transfer Protocol
    GET /rm/iqm/pdf/stateguidelines/Colorado.pdf HTTP/1.1\r\n
        [Expert Info (Chat/Sequence): GET /rm/iqm/pdf/stateguidelines/Colorado.pdf HTTP/1.1\r\n]
            [Message: GET /rm/iqm/pdf/stateguidelines/Colorado.pdf HTTP/1.1\r\n]
            [Severity level: Chat]
            [Group: Sequence]
        Request Method: GET
        Request URI: /rm/iqm/pdf/stateguidelines/Colorado.pdf
        Request Version: HTTP/1.1
    Accept: */*\r\n
    Range: bytes=4650004-4654099\r\n
    Accept-Encoding: gzip, deflate\r\n
    User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; GTB6.3; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; MS-RTC LM 8; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)\r\n
    Host: newfsiqdev02.techlab.local\r\n
    Connection: Keep-Alive\r\n
    Cache-Control: no-cache\r\n
    Cookie: rm=bvProductCID%3DDME%3BBookFontSize%3D11px%3BrevProductCID%3DAISD\r\n
    \r\n