No. Time Source Destination Protocol Info 1784 2010-01-04 16:11:32.246492 10.39.0.196 10.39.0.202 MMSE/SMIL MMS m-send-req (JPEG JFIF image) (text/plain) Frame 1784 (626 bytes on wire, 626 bytes captured) Arrival Time: Jan 4, 2010 16:11:32.246492000 [Time delta from previous captured frame: 0.000040000 seconds] [Time delta from previous displayed frame: 0.000040000 seconds] [Time since reference or first frame: 124.725551000 seconds] Frame Number: 1784 Frame Length: 626 bytes Capture Length: 626 bytes [Frame is marked: False] [Protocols in frame: eth:ip:tcp:http:mmse:xml:image-jfif:data-text-lines] [Coloring Rule Name: HTTP] [Coloring Rule String: http || tcp.port == 80] Ethernet II, Src: Netscree_ff:20:80 (00:10:db:ff:20:80), Dst: HewlettP_eb:7e:0d (00:17:a4:eb:7e:0d) Destination: HewlettP_eb:7e:0d (00:17:a4:eb:7e:0d) Address: HewlettP_eb:7e:0d (00:17:a4:eb:7e:0d) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Netscree_ff:20:80 (00:10:db:ff:20:80) Address: Netscree_ff:20:80 (00:10:db:ff:20:80) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 10.39.0.196 (10.39.0.196), Dst: 10.39.0.202 (10.39.0.202) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 612 Identification: 0x51c4 (20932) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: TCP (0x06) Header checksum: 0x91f4 [correct] [Good: True] [Bad : False] Source: 10.39.0.196 (10.39.0.196) Destination: 10.39.0.202 (10.39.0.202) Transmission Control Protocol, Src Port: 10560 (10560), Dst Port: http (80), Seq: 231916, Ack: 207041, Len: 560 Source port: 10560 (10560) Destination port: http (80) Sequence number: 231916 (relative sequence number) [Next sequence number: 232476 (relative sequence number)] Acknowledgement number: 207041 (relative ack number) Header length: 32 bytes Flags: 0x18 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 15836 Checksum: 0x5d23 [correct] [Good Checksum: True] [Bad Checksum: False] Options: (12 bytes) NOP NOP Timestamps: TSval 27265749, TSecr 27256969 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1783] [The RTT to ACK the segment was: 0.000040000 seconds] TCP segment data (560 bytes) [Reassembled TCP Segments (45704 bytes): #1727(1188), #1728(1188), #1730(1188), #1731(1188), #1733(1188), #1734(1188), #1736(1188), #1737(1188), #1739(1188), #1740(1188), #1742(1188), #1743(1188), #1745(1188), #1746(1188), #1748(1188), #174] [Frame: 1727, payload: 0-1187 (1188 bytes)] [Frame: 1728, payload: 1188-2375 (1188 bytes)] [Frame: 1730, payload: 2376-3563 (1188 bytes)] [Frame: 1731, payload: 3564-4751 (1188 bytes)] [Frame: 1733, payload: 4752-5939 (1188 bytes)] [Frame: 1734, payload: 5940-7127 (1188 bytes)] [Frame: 1736, payload: 7128-8315 (1188 bytes)] [Frame: 1737, payload: 8316-9503 (1188 bytes)] [Frame: 1739, payload: 9504-10691 (1188 bytes)] [Frame: 1740, payload: 10692-11879 (1188 bytes)] [Frame: 1742, payload: 11880-13067 (1188 bytes)] [Frame: 1743, payload: 13068-14255 (1188 bytes)] [Frame: 1745, payload: 14256-15443 (1188 bytes)] [Frame: 1746, payload: 15444-16631 (1188 bytes)] [Frame: 1748, payload: 16632-17819 (1188 bytes)] [Frame: 1749, payload: 17820-19007 (1188 bytes)] [Frame: 1751, payload: 19008-20195 (1188 bytes)] [Frame: 1752, payload: 20196-21383 (1188 bytes)] [Frame: 1754, payload: 21384-22571 (1188 bytes)] [Frame: 1755, payload: 22572-23759 (1188 bytes)] [Frame: 1757, payload: 23760-24947 (1188 bytes)] [Frame: 1758, payload: 24948-26135 (1188 bytes)] [Frame: 1760, payload: 26136-27323 (1188 bytes)] [Frame: 1761, payload: 27324-28511 (1188 bytes)] [Frame: 1763, payload: 28512-29699 (1188 bytes)] [Frame: 1764, payload: 29700-30887 (1188 bytes)] [Frame: 1766, payload: 30888-32075 (1188 bytes)] [Frame: 1767, payload: 32076-33263 (1188 bytes)] [Frame: 1769, payload: 33264-34451 (1188 bytes)] [Frame: 1770, payload: 34452-35639 (1188 bytes)] [Frame: 1772, payload: 35640-36827 (1188 bytes)] [Frame: 1773, payload: 36828-38015 (1188 bytes)] [Frame: 1775, payload: 38016-39203 (1188 bytes)] [Frame: 1776, payload: 39204-40391 (1188 bytes)] [Frame: 1778, payload: 40392-41579 (1188 bytes)] [Frame: 1779, payload: 41580-42767 (1188 bytes)] [Frame: 1781, payload: 42768-43955 (1188 bytes)] [Frame: 1782, payload: 43956-45143 (1188 bytes)] [Frame: 1784, payload: 45144-45703 (560 bytes)] Hypertext Transfer Protocol POST / HTTP/1.1\r\n Request Method: POST Request URI: / Request Version: HTTP/1.1 Accept: */*, application/vnd.wap.mms-message, application/vnd.wap.sic\r\n x-wap-profile: http://gsm.lge.com/html/gsm/GW620-M6-D2.xml\r\n Accept-Language: fr-FR, en-US\r\n X-MSISDN: \r\n Content-Length: 45115\r\n [Content length: 45115] Content-Type: application/vnd.wap.mms-message\r\n User-Agent: Mozilla/5.0 (Linux; U; Android 1.5; en-us; LG Eve-Orange) AppleWebKit/528.5+ (KHTML, like Gecko) Version/3.1.2 Mobile Safari/525.20.1 Java/Jbed/7.0 Profile/MIDP-2.1 Configuration/CLDC-1.1 MMS/LG-Android-MMS-V1.0/1.2\r\n Connection: Keep-Alive\r\n msisdn: 262692387830\r\n X-WAP-Client-IP: 10.40.10.24\r\n Host: mms.orange.re\r\n \r\n MMS Message Encapsulation, Type: m-send-req X-Mms-Message-Type: m-send-req (0x80) X-Mms-Transaction-ID: T125f93f1d4c X-Mms-MMS-Version: 1.2 Date: Jan 4, 2010 16:11:27.000000000 From: To: 0692080392/TYPE=PLMN X-Mms-Message-Class: Personal (0x80) X-Mms-Expiry: 604800.000000000 seconds X-Mms-Priority: Normal (0x81) X-Mms-Delivery-Report: No (0x81) X-Mms-Read-Report: No (0x81) Content-Type: application/vnd.wap.multipart.related; start=; type=application/smil Start: Type: application/smil Data (Post) Multipart body Part: 1, content-type: application/smil Content-Type: application/smil; name=smil.xml Name: smil.xml Headers Content-Id: "" Content-Location: smil.xml Synchronized Multimedia Integration Language Part: 2, content-type: image/jpeg Content-Type: image/jpeg; name=IMG001.jpg Name: IMG001.jpg Headers Content-Id: "" Content-Location: IMG001.jpg JPEG File Interchange Format Marker: Start of Image (0xffd8) Marker segment: Reserved for application segments - 0 (0xFFE0) Marker: Reserved for application segments - 0 (0xffe0) Length: 16 Identifier: JFIF Version: 1.1 Major Version: 1 Minor Version: 1 Units: No units; Xdensity and Ydensity specify the pixel aspect ratio (0) Xdensity: 1 Ydensity: 1 Xthumbnail: 0 Ythumbnail: 0 Marker segment: Define quantization table(s) (0xFFDB) Marker: Define quantization table(s) (0xffdb) Length: 67 Remaining segment data (65 bytes) Marker segment: Define quantization table(s) (0xFFDB) Marker: Define quantization table(s) (0xffdb) Length: 67 Remaining segment data (65 bytes) Start of Frame header: Start of Frame (non-differential, Huffman coding) - Baseline DCT (0xFFC0) Marker: Start of Frame (non-differential, Huffman coding) - Baseline DCT (0xffc0) Length: 17 Sample Precision (bits): 8 Lines: 480 Samples per line: 640 Number of image components in frame: 3 Component identifier: 1 0010 .... = Horizontal sampling factor: 2 .... 0010 = Vertical sampling factor: 2 Quantization table destination selector: 0 Component identifier: 2 0001 .... = Horizontal sampling factor: 1 .... 0001 = Vertical sampling factor: 1 Quantization table destination selector: 1 Component identifier: 3 0001 .... = Horizontal sampling factor: 1 .... 0001 = Vertical sampling factor: 1 Quantization table destination selector: 1 Marker segment: Define Huffman table(s) (0xFFC4) Marker: Define Huffman table(s) (0xffc4) Length: 31 Remaining segment data (29 bytes) Marker segment: Define Huffman table(s) (0xFFC4) Marker: Define Huffman table(s) (0xffc4) Length: 181 Remaining segment data (179 bytes) Marker segment: Define Huffman table(s) (0xFFC4) Marker: Define Huffman table(s) (0xffc4) Length: 31 Remaining segment data (29 bytes) Marker segment: Define Huffman table(s) (0xFFC4) Marker: Define Huffman table(s) (0xffc4) Length: 181 Remaining segment data (179 bytes) Start of Segment header: Start of Scan (0xFFDA) Marker: Start of Scan (0xffda) Length: 12 Number of image components in scan: 3 Scan component selector: 1 0000 .... = DC entropy coding table destination selector: 0 .... 0000 = AC entropy coding table destination selector: 0 Scan component selector: 2 0001 .... = DC entropy coding table destination selector: 1 .... 0001 = AC entropy coding table destination selector: 1 Scan component selector: 3 0001 .... = DC entropy coding table destination selector: 1 .... 0001 = AC entropy coding table destination selector: 1 Start of spectral or predictor selection: 0 End of spectral selection: 63 0000 .... = Successive approximation bit position high: 0 .... 0000 = Successive approximation bit position low or point transform: 0 JFIF dissection stops here (dissection of a scan is not yet implemented) Part: 3, content-type: text/plain Content-Type: text/plain; name=text_0.txt; charset=utf-8 Name: text_0.txt Charset: utf-8 Headers Content-Id: "" Content-Location: text_0.txt Line-based text data: text/plain Bxbx