Сети1 и 2 сем 2011 / 1 сем / Ethereal / MYFFFF1

Frame 1 (62 bytes on wire, 62 bytes captured)
Arrival Time: Nov 3, 2003 17:53:29.666112000
Time delta from previous packet: 0.000000000 seconds
Time relative to first packet: 0.000000000 seconds
Frame Number: 1
Packet Length: 62 bytes
Capture Length: 62 bytes
Ethernet II, Src: 00:e0:7d:d0:3b:8c, Dst: 00:08:e3:59:15:40
Destination: 00:08:e3:59:15:40 (Cisco_59:15:40)
Source: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Type: IP (0x0800)
Internet Protocol, Src Addr: 195.201.8.148 (195.201.8.148), Dst Addr: 194.87.182.137 (194.87.182.137)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 48
Identification: 0xc3d1 (50129)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0xf1b7 (correct)
Source: 195.201.8.148 (195.201.8.148)
Destination: 194.87.182.137 (194.87.182.137)
Transmission Control Protocol, Src Port: 1053 (1053), Dst Port: 3128 (3128), Seq: 29954716, Ack: 0, Len: 0
Source port: 1053 (1053)
Destination port: 3128 (3128)
Sequence number: 29954716
Header length: 28 bytes
Flags: 0x0002 (SYN)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 8192
Checksum: 0xf926 (correct)
Options: (8 bytes)
Maximum segment size: 1460 bytes
NOP
NOP
SACK permitted

Frame 2 (62 bytes on wire, 62 bytes captured)
Arrival Time: Nov 3, 2003 17:53:29.671870000
Time delta from previous packet: 0.005758000 seconds
Time relative to first packet: 0.005758000 seconds
Frame Number: 2
Packet Length: 62 bytes
Capture Length: 62 bytes
Ethernet II, Src: 00:08:e3:59:15:40, Dst: 00:e0:7d:d0:3b:8c
Destination: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Source: 00:08:e3:59:15:40 (Cisco_59:15:40)
Type: IP (0x0800)
Internet Protocol, Src Addr: 194.87.182.137 (194.87.182.137), Dst Addr: 195.201.8.148 (195.201.8.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00)
0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 48
Identification: 0x0000 (0)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xf669 (correct)
Source: 194.87.182.137 (194.87.182.137)
Destination: 195.201.8.148 (195.201.8.148)
Transmission Control Protocol, Src Port: 3128 (3128), Dst Port: 1053 (1053), Seq: 2206928338, Ack: 29954717, Len: 0
Source port: 3128 (3128)
Destination port: 1053 (1053)
Sequence number: 2206928338
Acknowledgement number: 29954717
Header length: 28 bytes
Flags: 0x0012 (SYN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 5840
Checksum: 0x70e8 (correct)
Options: (8 bytes)
Maximum segment size: 1460 bytes
NOP
NOP
SACK permitted

Frame 3 (60 bytes on wire, 60 bytes captured)
Arrival Time: Nov 3, 2003 17:53:29.672059000
Time delta from previous packet: 0.000189000 seconds
Time relative to first packet: 0.005947000 seconds
Frame Number: 3
Packet Length: 60 bytes
Capture Length: 60 bytes
Ethernet II, Src: 00:e0:7d:d0:3b:8c, Dst: 00:08:e3:59:15:40
Destination: 00:08:e3:59:15:40 (Cisco_59:15:40)
Source: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Type: IP (0x0800)
Trailer: 202020202020
Internet Protocol, Src Addr: 195.201.8.148 (195.201.8.148), Dst Addr: 194.87.182.137 (194.87.182.137)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xc5d1 (50641)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0xefbf (correct)
Source: 195.201.8.148 (195.201.8.148)
Destination: 194.87.182.137 (194.87.182.137)
Transmission Control Protocol, Src Port: 1053 (1053), Dst Port: 3128 (3128), Seq: 29954717, Ack: 2206928339, Len: 0
Source port: 1053 (1053)
Destination port: 3128 (3128)
Sequence number: 29954717
Acknowledgement number: 2206928339
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 8760
Checksum: 0x9244 (correct)

Frame 4 (529 bytes on wire, 529 bytes captured)
Arrival Time: Nov 3, 2003 17:53:29.672764000
Time delta from previous packet: 0.000705000 seconds
Time relative to first packet: 0.006652000 seconds
Frame Number: 4
Packet Length: 529 bytes
Capture Length: 529 bytes
Ethernet II, Src: 00:e0:7d:d0:3b:8c, Dst: 00:08:e3:59:15:40
Destination: 00:08:e3:59:15:40 (Cisco_59:15:40)
Source: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Type: IP (0x0800)
Internet Protocol, Src Addr: 195.201.8.148 (195.201.8.148), Dst Addr: 194.87.182.137 (194.87.182.137)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 515
Identification: 0xc6d1 (50897)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0xece4 (correct)
Source: 195.201.8.148 (195.201.8.148)
Destination: 194.87.182.137 (194.87.182.137)
Transmission Control Protocol, Src Port: 1053 (1053), Dst Port: 3128 (3128), Seq: 29954717, Ack: 2206928339, Len: 475
Source port: 1053 (1053)
Destination port: 3128 (3128)
Sequence number: 29954717
Next sequence number: 29955192
Acknowledgement number: 2206928339
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 8760
Checksum: 0x4f9e (correct)
Hypertext Transfer Protocol
GET http://www.yandex.ru/yandsearch?rpt=rad&text=%F1%EF%EE%F0%F2 HTTP/1.0\r\n
Request Method: GET
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-powerpoint, application/vnd.ms-excel, application/msword, application/x-shockwave-flash, */*\r\n
Referer: http://ya.ru/\r\n
Accept-Language: ru\r\n
Proxy-Connection: Keep-Alive\r\n
User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)\r\n
Host: www.yandex.ru\r\n
Cookie: yandexuid=8281771064384630; yabs-frequency=34317.1:33361.2\r\n
\r\n

Frame 5 (60 bytes on wire, 60 bytes captured)
Arrival Time: Nov 3, 2003 17:53:29.680126000
Time delta from previous packet: 0.007362000 seconds
Time relative to first packet: 0.014014000 seconds
Frame Number: 5
Packet Length: 60 bytes
Capture Length: 60 bytes
Ethernet II, Src: 00:08:e3:59:15:40, Dst: 00:e0:7d:d0:3b:8c
Destination: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Source: 00:08:e3:59:15:40 (Cisco_59:15:40)
Type: IP (0x0800)
Trailer: 000000000000
Internet Protocol, Src Addr: 194.87.182.137 (194.87.182.137), Dst Addr: 195.201.8.148 (195.201.8.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00)
0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0x1f39 (7993)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xd738 (correct)
Source: 194.87.182.137 (194.87.182.137)
Destination: 195.201.8.148 (195.201.8.148)
Transmission Control Protocol, Src Port: 3128 (3128), Dst Port: 1053 (1053), Seq: 2206928339, Ack: 29955192, Len: 0
Source port: 3128 (3128)
Destination port: 1053 (1053)
Sequence number: 2206928339
Acknowledgement number: 29955192
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0x9981 (correct)

Frame 6 (290 bytes on wire, 290 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.828898000
Time delta from previous packet: 1.148772000 seconds
Time relative to first packet: 1.162786000 seconds
Frame Number: 6
Packet Length: 290 bytes
Capture Length: 290 bytes
Ethernet II, Src: 00:08:e3:59:15:40, Dst: 00:e0:7d:d0:3b:8c
Destination: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Source: 00:08:e3:59:15:40 (Cisco_59:15:40)
Type: IP (0x0800)
Internet Protocol, Src Addr: 194.87.182.137 (194.87.182.137), Dst Addr: 195.201.8.148 (195.201.8.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00)
0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 276
Identification: 0x1f3a (7994)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xd64b (correct)
Source: 194.87.182.137 (194.87.182.137)
Destination: 195.201.8.148 (195.201.8.148)
Transmission Control Protocol, Src Port: 3128 (3128), Dst Port: 1053 (1053), Seq: 2206928339, Ack: 29955192, Len: 236
Source port: 3128 (3128)
Destination port: 1053 (1053)
Sequence number: 2206928339
Next sequence number: 2206928575
Acknowledgement number: 29955192
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0xc168 (correct)
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Response Code: 200
Date: Mon, 03 Nov 2003 14:42:04 GMT\r\n
Server: Apache/1.3.6 (Unix) PHP/4.0.1pl2 mod_perl/1.19 rus/PL28.15\r\n
Last-Modified: Mon, 03 Nov 2003 06:18:01 GMT\r\n
Connection: close\r\n
Content-Type: text/html; charset=windows-1251\r\n
\r\n

Frame 7 (1228 bytes on wire, 1228 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.830413000
Time delta from previous packet: 0.001515000 seconds
Time relative to first packet: 1.164301000 seconds
Frame Number: 7
Packet Length: 1228 bytes
Capture Length: 1228 bytes
Ethernet II, Src: 00:08:e3:59:15:40, Dst: 00:e0:7d:d0:3b:8c
Destination: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Source: 00:08:e3:59:15:40 (Cisco_59:15:40)
Type: IP (0x0800)
Internet Protocol, Src Addr: 194.87.182.137 (194.87.182.137), Dst Addr: 195.201.8.148 (195.201.8.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00)
0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1214
Identification: 0x1f3b (7995)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xd2a0 (correct)
Source: 194.87.182.137 (194.87.182.137)
Destination: 195.201.8.148 (195.201.8.148)
Transmission Control Protocol, Src Port: 3128 (3128), Dst Port: 1053 (1053), Seq: 2206928575, Ack: 29955192, Len: 1174
Source port: 3128 (3128)
Destination port: 1053 (1053)
Sequence number: 2206928575
Next sequence number: 2206929749
Acknowledgement number: 29955192
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0x4d20 (correct)
Hypertext Transfer Protocol
\n
Data (1173 bytes)

0000 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 0a 3c <HTML>.<HEAD>..<
0010 54 49 54 4c 45 3e df 6e 64 65 78 3a 20 f1 ef ee TITLE>.ndex: ...
0020 f0 f2 20 28 31 30 31 34 37 37 30 31 29 3c 2f 54 .. (10147701)</T
0030 49 54 4c 45 3e 0a 0a 3c 6c 69 6e 6b 20 72 65 6c ITLE>..<link rel
0040 3d 22 53 48 4f 52 54 43 55 54 20 49 43 4f 4e 22 ="SHORTCUT ICON"
0050 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e href="/favicon.
0060 69 63 6f 22 3e 0a 0a 3c 6c 69 6e 6b 20 72 65 6c ico">..<link rel
0070 3d 22 53 74 79 6c 65 73 68 65 65 74 22 20 68 72 ="Stylesheet" hr
0080 65 66 3d 22 68 74 74 70 3a 2f 2f 69 6d 67 2e 79 ef="http://img.y
0090 61 6e 64 65 78 2e 72 75 2f 63 73 73 2f 5f 79 61 andex.ru/css/_ya
00a0 6e 64 65 78 2d 67 6c 6f 62 61 6c 2e 63 73 73 22 ndex-global.css"
00b0 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 53 />.<link rel="S
00c0 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d tylesheet" href=
00d0 22 68 74 74 70 3a 2f 2f 69 6d 67 2e 79 61 6e 64 "http://img.yand
00e0 65 78 2e 72 75 2f 63 73 73 2f 5f 79 61 6e 64 65 ex.ru/css/_yande
00f0 78 2d 67 6c 6f 62 61 6c 2d 6d 6f 64 65 72 6e 2e x-global-modern.
0100 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 css" media="all"
0110 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 53 />.<link rel="S
0120 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d tylesheet" href=
0130 22 68 74 74 70 3a 2f 2f 69 6d 67 2e 79 61 6e 64 "http://img.yand
0140 65 78 2e 72 75 2f 63 73 73 2f 5f 73 65 61 72 63 ex.ru/css/_searc
0150 68 2d 67 6c 6f 62 61 6c 2d 6f 76 65 72 77 72 69 h-global-overwri
0160 74 65 2e 63 73 73 22 20 2f 3e 0a 3c 6c 69 6e 6b te.css" />.<link
0170 20 72 65 6c 3d 22 53 74 79 6c 65 73 68 65 65 74 rel="Stylesheet
0180 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 69 " href="http://i
0190 6d 67 2e 79 61 6e 64 65 78 2e 72 75 2f 63 73 73 mg.yandex.ru/css
01a0 2f 5f 73 65 61 72 63 68 2d 79 61 6e 64 65 78 32 /_search-yandex2
01b0 2e 63 73 73 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 .css" />.<link r
01c0 65 6c 3d 22 53 74 79 6c 65 73 68 65 65 74 22 20 el="Stylesheet"
01d0 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 69 6d 67 href="http://img
01e0 2e 79 61 6e 64 65 78 2e 72 75 2f 63 73 73 2f 5f .yandex.ru/css/_
01f0 73 65 61 72 63 68 2d 79 61 6e 64 65 78 2d 6d 6f search-yandex-mo
0200 64 65 72 6e 32 2e 63 73 73 22 20 6d 65 64 69 61 dern2.css" media
0210 3d 22 61 6c 6c 22 20 2f 3e 0a 0a 0a 3c 6c 69 6e ="all" />...<lin
0220 6b 20 72 65 6c 3d 22 68 65 6c 70 22 20 68 72 65 k rel="help" hre
0230 66 3d 22 2f 69 6e 66 6f 2f 22 3e 0a 3c 6c 69 6e f="/info/">.<lin
0240 6b 20 72 65 6c 3d 22 61 75 74 68 6f 72 22 20 68 k rel="author" h
0250 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e ref="http://www.
0260 79 61 6e 64 65 78 2e 72 75 2f 73 6b 61 7a 6b 69 yandex.ru/skazki
0270 2f 73 74 6f 72 79 2e 68 74 6d 6c 22 3e 0a 3c 6c /story.html">.<l
0280 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 ink rel="alterna
0290 74 65 22 20 74 69 74 6c 65 3d 22 cd e0 f1 f2 f0 te" title=".....
02a0 ee e9 ea e0 22 20 68 72 65 66 3d 22 2f 73 65 74 ...." href="/set
02b0 75 70 2f 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d up/">.<link rel=
02c0 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 "alternate" href
02d0 3d 22 68 74 74 70 3a 2f 2f 6f 6c 64 2e 79 61 6e ="http://old.yan
02e0 64 65 78 2e 72 75 2f 22 20 74 69 74 6c 65 3d 27 dex.ru/" title='
02f0 22 d1 f2 e0 f0 fb e9 22 20 df ed e4 e5 ea f1 27 "......" ......'
0300 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6e 65 78 >.<link rel="nex
0310 74 22 20 68 72 65 66 3d 22 2f 79 61 6e 64 70 61 t" href="/yandpa
0320 67 65 3f 71 3d 33 30 39 33 33 32 34 30 36 26 70 ge?q=309332406&p
0330 3d 31 26 61 67 3d 64 26 71 73 3d 72 70 74 25 33 =1&ag=d&qs=rpt%3
0340 44 72 61 64 25 32 36 74 65 78 74 25 33 44 25 32 Drad%26text%3D%2
0350 35 44 33 25 32 35 44 30 25 32 35 43 46 25 32 35 5D3%25D0%25CF%25
0360 44 32 25 32 35 44 34 22 20 74 69 74 6c 65 3d 27 D2%25D4" title='
0370 d1 eb e5 e4 f3 fe f9 e0 ff 20 f1 f2 f0 e0 ed e8 ......... ......
0380 f6 e0 27 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6c ..'><link rel="l
0390 61 73 74 22 20 68 72 65 66 3d 22 2f 79 61 6e 64 ast" href="/yand
03a0 70 61 67 65 3f 71 3d 33 30 39 33 33 32 34 30 36 page?q=309332406
03b0 26 70 3d 31 37 32 37 26 61 67 3d 64 26 71 73 3d &p=1727&ag=d&qs=
03c0 72 70 74 25 33 44 72 61 64 25 32 36 74 65 78 74 rpt%3Drad%26text
03d0 25 33 44 25 32 35 44 33 25 32 35 44 30 25 32 35 %3D%25D3%25D0%25
03e0 43 46 25 32 35 44 32 25 32 35 44 34 22 20 74 69 CF%25D2%25D4" ti
03f0 74 6c 65 3d 27 cf ee f1 eb e5 e4 ed ff ff 20 f1 tle='......... .
0400 f2 f0 e0 ed e8 f6 e0 27 3e 0a 0a 3c 73 63 72 69 .......'>..<scri
0410 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 pt language="Jav
0420 61 53 63 72 69 70 74 22 3e 0a 66 75 6e 63 74 69 aScript">.functi
0430 6f 6e 20 72 28 61 2c 20 77 29 0a 7b 0a 20 20 20 on r(a, w).{.
0440 20 69 6d 67 20 3d 20 6e 65 77 20 49 6d 61 67 65 img = new Image
0450 28 29 3b 0a 20 20 20 20 69 6d 67 2e 73 72 63 20 ();. img.src
0460 3d 20 27 68 74 74 70 3a 2f 2f 63 6c 63 6b 2e 79 = 'http://clck.y
0470 61 6e 64 65 78 2e 72 75 2f 63 6c 69 63 6b 2f 64 andex.ru/click/d
0480 74 79 70 65 3d 27 20 2b 20 77 20 2b 20 27 2f 2a type=' + w + '/*
0490 27 20 2b 20 61 ' + a

Frame 8 (60 bytes on wire, 60 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.830843000
Time delta from previous packet: 0.000430000 seconds
Time relative to first packet: 1.164731000 seconds
Frame Number: 8
Packet Length: 60 bytes
Capture Length: 60 bytes
Ethernet II, Src: 00:e0:7d:d0:3b:8c, Dst: 00:08:e3:59:15:40
Destination: 00:08:e3:59:15:40 (Cisco_59:15:40)
Source: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Type: IP (0x0800)
Trailer: 202020202020
Internet Protocol, Src Addr: 195.201.8.148 (195.201.8.148), Dst Addr: 194.87.182.137 (194.87.182.137)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xc8d1 (51409)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0xecbf (correct)
Source: 195.201.8.148 (195.201.8.148)
Destination: 194.87.182.137 (194.87.182.137)
Transmission Control Protocol, Src Port: 1053 (1053), Dst Port: 3128 (3128), Seq: 29955192, Ack: 2206929749, Len: 0
Source port: 1053 (1053)
Destination port: 3128 (3128)
Sequence number: 29955192
Acknowledgement number: 2206929749
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 7350
Checksum: 0x9069 (correct)

Frame 9 (1464 bytes on wire, 1464 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.834556000
Time delta from previous packet: 0.003713000 seconds
Time relative to first packet: 1.168444000 seconds
Frame Number: 9
Packet Length: 1464 bytes
Capture Length: 1464 bytes
Ethernet II, Src: 00:08:e3:59:15:40, Dst: 00:e0:7d:d0:3b:8c
Destination: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Source: 00:08:e3:59:15:40 (Cisco_59:15:40)
Type: IP (0x0800)
Internet Protocol, Src Addr: 194.87.182.137 (194.87.182.137), Dst Addr: 195.201.8.148 (195.201.8.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00)
0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1450
Identification: 0x1f3c (7996)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xd1b3 (correct)
Source: 194.87.182.137 (194.87.182.137)
Destination: 195.201.8.148 (195.201.8.148)
Transmission Control Protocol, Src Port: 3128 (3128), Dst Port: 1053 (1053), Seq: 2206929749, Ack: 29955192, Len: 1410
Source port: 3128 (3128)
Destination port: 1053 (1053)
Sequence number: 2206929749
Next sequence number: 2206931159
Acknowledgement number: 29955192
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0x83ae (correct)
Hypertext Transfer Protocol
Data (1410 bytes)

0000 2e 68 72 65 66 3b 0a 7d 0a 3c 2f 73 63 72 69 70 .href;.}.</scrip
0010 74 3e 0a 0a 3c 2f 48 45 41 44 3e 0a 3c 62 6f 64 t>..</HEAD>.<bod
0020 79 20 62 67 63 6f 6c 6f 72 3d 22 23 66 66 66 66 y bgcolor="#ffff
0030 66 66 22 20 74 65 78 74 3d 22 23 30 30 30 30 30 ff" text="#00000
0040 30 22 20 6c 69 6e 6b 3d 22 23 30 30 30 30 63 63 0" link="#0000cc
0050 22 20 6c 65 66 74 6d 61 72 67 69 6e 3d 22 30 22 " leftmargin="0"
0060 20 72 69 67 68 74 6d 61 72 67 69 6e 3d 22 30 22 rightmargin="0"
0070 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 marginwidth="0"
0080 20 74 6f 70 6d 61 72 67 69 6e 3d 22 30 22 20 6d topmargin="0" m
0090 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 arginheight="0"
00a0 6f 6e 4c 6f 61 64 3d 22 69 66 28 73 65 6c 66 2e onLoad="if(self.
00b0 70 61 72 65 6e 74 2e 66 72 61 6d 65 73 2e 6c 65 parent.frames.le
00c0 6e 67 74 68 29 7b 73 65 6c 66 2e 70 61 72 65 6e ngth){self.paren
00d0 74 2e 6c 6f 63 61 74 69 6f 6e 3d 64 6f 63 75 6d t.location=docum
00e0 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 3b 7d 3b 64 ent.location;};d
00f0 6f 63 75 6d 65 6e 74 2e 77 65 62 2e 72 65 73 65 ocument.web.rese
0100 74 28 29 3b 22 3e 3c 61 20 68 72 65 66 3d 22 2f t();"><a href="/
0110 6e 6f 72 6f 62 6f 74 2f 63 32 35 37 62 36 38 39 norobot/c257b689
0120 2d 33 66 61 36 36 39 33 63 2d 39 39 65 34 2e 68 -3fa6693c-99e4.h
0130 74 6d 6c 22 3e 3c 2f 61 3e 0a 20 20 20 3c 74 61 tml"></a>. <ta
0140 62 6c 65 20 62 6f 72 64 65 72 3d 22 30 22 20 77 ble border="0" w
0150 69 64 74 68 3d 22 31 30 30 25 22 20 63 65 6c 6c idth="100%" cell
0160 73 70 61 63 69 6e 67 3d 22 30 22 20 63 65 6c 6c spacing="0" cell
0170 70 61 64 64 69 6e 67 3d 22 35 22 20 63 6c 61 73 padding="5" clas
0180 73 3d 22 67 6c 6f 62 61 6c 2d 6d 65 6e 75 22 3e s="global-menu">
0190 0a 20 20 20 3c 74 72 3e 0a 20 20 20 3c 74 64 20 . <tr>. <td
01a0 77 69 64 74 68 3d 22 35 30 25 22 3e 3c 2f 74 64 width="50%"></td
01b0 3e 0a 20 20 20 3c 74 64 20 77 69 64 74 68 3d 22 >. <td width="
01c0 38 25 22 20 63 6c 61 73 73 3d 22 67 6c 6f 62 61 8%" class="globa
01d0 6c 2d 6d 65 6e 75 22 3e 0a 20 20 20 3c 61 20 68 l-menu">. <a h
01e0 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e ref="http://www.
01f0 79 61 6e 64 65 78 2e 72 75 2f 69 6e 66 6f 2f 69 yandex.ru/info/i
0200 6e 64 65 78 2e 68 74 6d 6c 22 3e cf ee ec ee f9 ndex.html">.....
0210 fc 3c 2f 61 3e 0a 20 20 20 3c 2f 74 64 3e 0a 20 .</a>. </td>.
0220 20 20 3c 74 64 20 77 69 64 74 68 3d 22 32 35 25 <td width="25%
0230 22 20 63 6c 61 73 73 3d 22 67 6c 6f 62 61 6c 2d " class="global-
0240 6d 65 6e 75 22 3e 0a 20 20 20 3c 61 20 68 72 65 menu">. <a hre
0250 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 79 61 f="http://www.ya
0260 6e 64 65 78 2e 72 75 2f 63 67 69 2d 62 69 6e 2f ndex.ru/cgi-bin/
0270 63 75 73 74 6f 6d 69 7a 65 2e 70 6c 3f 79 78 71 customize.pl?yxq
0280 73 3d 72 70 74 25 33 44 72 61 64 25 32 36 74 65 s=rpt%3Drad%26te
0290 78 74 25 33 44 25 32 35 46 31 25 32 35 45 46 25 xt%3D%25F1%25EF%
02a0 32 35 45 45 25 32 35 46 30 25 32 35 46 32 22 3e 25EE%25F0%25F2">
02b0 cd e0 f1 f2 f0 ee e9 ea e0 3c 2f 61 3e 0a 20 20 .........</a>.
02c0 20 3c 2f 74 64 3e 0a 20 20 20 3c 74 64 20 77 69 </td>. <td wi
02d0 64 74 68 3d 22 31 37 25 22 3e 3c 2f 74 64 3e 0a dth="17%"></td>.
02e0 20 20 20 3c 2f 74 72 3e 0a 20 20 20 3c 2f 74 61 </tr>. </ta
02f0 62 6c 65 3e 0a 0a 3c 74 61 62 6c 65 20 62 6f 72 ble>..<table bor
0300 64 65 72 3d 22 30 22 20 77 69 64 74 68 3d 22 31 der="0" width="1
0310 30 30 25 22 20 63 65 6c 6c 73 70 61 63 69 6e 67 00%" cellspacing
0320 3d 22 30 22 20 63 65 6c 6c 70 61 64 64 69 6e 67 ="0" cellpadding
0330 3d 22 30 22 3e 0a 3c 74 72 20 76 61 6c 69 67 6e ="0">.<tr valign
0340 3d 22 74 6f 70 22 3e 0a 3c 74 64 20 77 69 64 74 ="top">.<td widt
0350 68 3d 22 31 36 25 22 20 6e 6f 77 72 61 70 3d 22 h="16%" nowrap="
0360 6e 6f 77 72 61 70 22 3e 0a 3c 64 69 76 20 63 6c nowrap">.<div cl
0370 61 73 73 3d 22 6c 6f 67 6f 22 3e 0a 0a 20 20 20 ass="logo">..
0380 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 <a href="
0390 2f 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 /"><img src="htt
03a0 70 3a 2f 2f 69 6d 67 2e 79 61 6e 64 65 78 2e 72 p://img.yandex.r
03b0 75 2f 69 2f 6c 6f 67 6f 32 2e 67 69 66 22 20 61 u/i/logo2.gif" a
03c0 6c 74 3d 22 22 20 77 69 64 74 68 3d 22 37 30 22 lt="" width="70"
03d0 20 68 65 69 67 68 74 3d 22 34 38 22 20 62 6f 72 height="48" bor
03e0 64 65 72 3d 22 30 22 3e 3c 2f 61 3e 0a 0a 3c 2f der="0"></a>..</
03f0 64 69 76 3e 0a 3c 2f 74 64 3e 0a 3c 74 64 20 77 div>.</td>.<td w
0400 69 64 74 68 3d 22 38 34 25 22 3e 0a 0a 3c 66 6f idth="84%">..<fo
0410 72 6d 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 rm class="search
0420 22 20 6e 61 6d 65 3d 22 77 65 62 22 20 6d 65 74 " name="web" met
0430 68 6f 64 3d 22 67 65 74 22 20 61 63 74 69 6f 6e hod="get" action
0440 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 79 61 6e ="http://www.yan
0450 64 65 78 2e 72 75 2f 79 61 6e 64 73 65 61 72 63 dex.ru/yandsearc
0460 68 22 3e 0a 3c 74 61 62 6c 65 20 62 6f 72 64 65 h">.<table borde
0470 72 3d 22 30 22 20 77 69 64 74 68 3d 22 31 30 30 r="0" width="100
0480 25 22 20 63 65 6c 6c 73 70 61 63 69 6e 67 3d 22 %" cellspacing="
0490 30 22 20 63 65 6c 6c 70 61 64 64 69 6e 67 3d 22 0" cellpadding="
04a0 30 22 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 0" class="search
04b0 22 3e 0a 3c 74 72 3e 0a 3c 74 64 20 77 69 64 74 ">.<tr>.<td widt
04c0 68 3d 22 31 30 30 25 22 20 63 6c 61 73 73 3d 22 h="100%" class="
04d0 73 65 61 72 63 68 53 74 72 69 6e 67 22 3e 0a 3c searchString">.<
04e0 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 input type="text
04f0 22 20 6e 61 6d 65 3d 22 74 65 78 74 22 20 73 74 " name="text" st
0500 79 6c 65 3d 22 77 69 64 74 68 3a 31 30 30 25 22 yle="width:100%"
0510 20 73 69 7a 65 3d 22 34 33 22 20 6d 61 78 6c 65 size="43" maxle
0520 6e 67 74 68 3d 22 33 30 30 22 20 20 76 61 6c 75 ngth="300" valu
0530 65 3d 22 f1 ef ee f0 f2 22 3e 0a 3c 2f 74 64 3e e=".....">.</td>
0540 0a 3c 74 64 3e 3c 69 6e 70 75 74 20 74 79 70 65 .<td><input type
0550 3d 22 73 75 62 6d 69 74 22 20 76 61 6c 75 65 3d ="submit" value=
0560 22 cd e0 e9 f2 e8 22 3e 3c 2f 74 64 3e 0a 3c 74 "....."></td>.<t
0570 64 3e 3c 62 72 20 2f 3e 3c 2f 74 64 3e 0a 3c 74 d><br /></td>.<t
0580 64 20 d

Frame 10 (1464 bytes on wire, 1464 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.852505000
Time delta from previous packet: 0.017949000 seconds
Time relative to first packet: 1.186393000 seconds
Frame Number: 10
Packet Length: 1464 bytes
Capture Length: 1464 bytes
Ethernet II, Src: 00:08:e3:59:15:40, Dst: 00:e0:7d:d0:3b:8c
Destination: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Source: 00:08:e3:59:15:40 (Cisco_59:15:40)
Type: IP (0x0800)
Internet Protocol, Src Addr: 194.87.182.137 (194.87.182.137), Dst Addr: 195.201.8.148 (195.201.8.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00)
0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1450
Identification: 0x1f3d (7997)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xd1b2 (correct)
Source: 194.87.182.137 (194.87.182.137)
Destination: 195.201.8.148 (195.201.8.148)
Transmission Control Protocol, Src Port: 3128 (3128), Dst Port: 1053 (1053), Seq: 2206931159, Ack: 29955192, Len: 1410
Source port: 3128 (3128)
Destination port: 1053 (1053)
Sequence number: 2206931159
Next sequence number: 2206932569
Acknowledgement number: 29955192
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0xaa54 (correct)
Hypertext Transfer Protocol
Data (1410 bytes)

0000 72 6f 77 73 70 61 6e 3d 22 32 22 20 76 61 6c 69 rowspan="2" vali
0010 67 6e 3d 22 62 6f 74 74 6f 6d 22 20 63 6c 61 73 gn="bottom" clas
0020 73 3d 22 61 72 72 22 3e 3c 69 6d 67 20 73 72 63 s="arr"><img src
0030 3d 22 68 74 74 70 3a 2f 2f 69 6d 67 2e 79 61 6e ="http://img.yan
0040 64 65 78 2e 72 75 2f 69 2f 63 2d 62 2d 62 6f 74 dex.ru/i/c-b-bot
0050 32 2e 67 69 66 22 20 61 6c 74 3d 22 22 20 77 69 2.gif" alt="" wi
0060 64 74 68 3d 22 32 38 22 20 68 65 69 67 68 74 3d dth="28" height=
0070 22 35 36 22 20 62 6f 72 64 65 72 3d 22 30 22 20 "56" border="0"
0080 2f 3e 3c 2f 74 64 3e 0a 3c 2f 74 72 3e 0a 3c 74 /></td>.</tr>.<t
0090 72 3e 0a 3c 74 64 20 63 6f 6c 73 70 61 6e 3d 22 r>.<td colspan="
00a0 32 22 20 63 6c 61 73 73 3d 22 74 75 6e 65 22 3e 2" class="tune">
00b0 0a 0a 3c 74 61 62 6c 65 20 62 6f 72 64 65 72 3d ..<table border=
00c0 22 30 22 20 63 65 6c 6c 73 70 61 63 69 6e 67 3d "0" cellspacing=
00d0 22 30 22 20 63 65 6c 6c 70 61 64 64 69 6e 67 3d "0" cellpadding=
00e0 22 30 22 3e 0a 3c 74 72 20 76 61 6c 69 67 6e 3d "0">.<tr valign=
00f0 22 74 6f 70 22 3e 0a 3c 74 64 3e 0a 3c 69 6e 70 "top">.<td>.<inp
0100 75 74 20 74 79 70 65 3d 68 69 64 64 65 6e 20 6e ut type=hidden n
0110 61 6d 65 3d 73 74 79 70 65 20 76 61 6c 75 65 3d ame=stype value=
0120 77 77 77 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 www>.<input type
0130 3d 22 63 68 65 63 6b 62 6f 78 22 20 76 61 6c 75 ="checkbox" valu
0140 65 3d 22 f1 ef ee f0 f2 22 20 6e 61 6d 65 3d 22 e="....." name="
0150 68 6f 6c 64 72 65 71 22 20 69 64 3d 22 63 68 65 holdreq" id="che
0160 63 6b 31 22 3e 3c 6c 61 62 65 6c 20 66 6f 72 3d ck1"><label for=
0170 22 63 68 65 63 6b 31 22 3e c8 f1 ea e0 f2 fc 20 "check1">......
0180 e2 20 ed e0 e9 e4 e5 ed ed ee ec 3c 2f 6c 61 62 . .........</lab
0190 65 6c 3e 26 6e 62 73 70 3b 0a 3c 2f 74 64 3e 0a el>&nbsp;.</td>.
01a0 0a 0a 0a 3c 2f 74 72 3e 0a 3c 2f 74 61 62 6c 65 ...</tr>.</table
01b0 3e 0a 0a 3c 2f 74 64 3e 0a 3c 74 64 20 76 61 6c >..</td>.<td val
01c0 69 67 6e 3d 22 62 6f 74 74 6f 6d 22 3e 3c 61 20 ign="bottom"><a
01d0 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 href="http://www
01e0 2e 79 61 6e 64 65 78 2e 72 75 2f 61 64 76 61 6e .yandex.ru/advan
01f0 63 65 64 2e 68 74 6d 6c 22 3e 3c 69 6d 67 20 73 ced.html"><img s
0200 72 63 3d 22 68 74 74 70 3a 2f 2f 69 6d 67 2e 79 rc="http://img.y
0210 61 6e 64 65 78 2e 72 75 2f 69 2f 61 64 76 61 6e andex.ru/i/advan
0220 63 65 64 2e 67 69 66 22 20 77 69 64 74 68 3d 22 ced.gif" width="
0230 31 33 22 20 68 65 69 67 68 74 3d 22 31 33 22 20 13" height="13"
0240 63 6c 61 73 73 3d 22 61 64 76 61 6e 63 65 64 22 class="advanced"
0250 20 61 6c 74 3d 22 d0 e0 f1 f8 e8 f0 e5 ed ed fb alt="..........
0260 e9 20 ef ee e8 f1 ea 22 20 74 69 74 6c 65 3d 22 . ....." title="
0270 d0 e0 f1 f8 e8 f0 e5 ed ed fb e9 20 ef ee e8 f1 ........... ....
0280 ea 22 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e ." border="0" />
0290 3c 2f 61 3e 3c 2f 74 64 3e 0a 3c 2f 74 72 3e 0a </a></td>.</tr>.
02a0 3c 2f 74 61 62 6c 65 3e 0a 0a 0a 3c 21 2d 2d 20 </table>...<!--
02b0 74 61 62 73 20 2d 2d 3e 0a 3c 74 61 62 6c 65 20 tabs -->.<table
02c0 62 6f 72 64 65 72 3d 22 30 22 20 77 69 64 74 68 border="0" width
02d0 3d 22 31 30 30 25 22 20 63 65 6c 6c 73 70 61 63 ="100%" cellspac
02e0 69 6e 67 3d 22 30 22 20 63 65 6c 6c 70 61 64 64 ing="0" cellpadd
02f0 69 6e 67 3d 22 30 22 20 63 6c 61 73 73 3d 22 74 ing="0" class="t
0300 61 62 73 22 3e 0a 3c 74 72 20 63 6c 61 73 73 3d abs">.<tr class=
0310 22 74 61 62 73 22 3e 0a 3c 74 64 20 63 6c 61 73 "tabs">.<td clas
0320 73 3d 22 74 61 62 2d 61 63 74 69 76 65 22 3e 0a s="tab-active">.
0330 c2 e5 e7 e4 e5 0a 3c 2f 74 64 3e 0a 3c 74 64 20 ......</td>.<td
0340 63 6c 61 73 73 3d 22 74 61 62 22 20 73 74 79 6c class="tab" styl
0350 65 3d 22 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 e=""><a href="ht
0360 74 70 3a 2f 2f 79 61 63 61 2e 79 61 6e 64 65 78 tp://yaca.yandex
0370 2e 72 75 2f 79 61 6e 64 73 65 61 72 63 68 3f 72 .ru/yandsearch?r
0380 70 74 3d 72 73 32 26 74 65 78 74 3d 25 46 31 25 pt=rs2&text=%F1%
0390 45 46 25 45 45 25 46 30 25 46 32 22 3e ca e0 f2 EF%EE%F0%F2">...
03a0 e0 eb ee e3 3c 2f 61 3e 3c 2f 74 64 3e 0a 3c 74 ....</a></td>.<t
03b0 64 20 63 6c 61 73 73 3d 22 74 61 62 22 20 73 74 d class="tab" st
03c0 79 6c 65 3d 22 22 3e 3c 61 20 68 72 65 66 3d 22 yle=""><a href="
03d0 68 74 74 70 3a 2f 2f 6e 65 77 73 2e 79 61 6e 64 http://news.yand
03e0 65 78 2e 72 75 2f 79 61 6e 64 73 65 61 72 63 68 ex.ru/yandsearch
03f0 3f 67 72 68 6f 77 3d 63 6c 75 74 6f 70 26 72 70 ?grhow=clutop&rp
0400 74 3d 6e 6e 65 77 73 26 74 65 78 74 3d 25 46 31 t=nnews&text=%F1
0410 25 45 46 25 45 45 25 46 30 25 46 32 22 3e cd ee %EF%EE%F0%F2">..
0420 e2 ee f1 f2 e8 3c 2f 61 3e 3c 2f 74 64 3e 0a 3c .....</a></td>.<
0430 74 64 20 63 6c 61 73 73 3d 22 74 61 62 22 20 73 td class="tab" s
0440 74 79 6c 65 3d 22 22 3e 3c 61 20 68 72 65 66 3d tyle=""><a href=
0450 22 68 74 74 70 3a 2f 2f 6d 61 72 6b 65 74 2e 79 "http://market.y
0460 61 6e 64 65 78 2e 72 75 2f 73 65 61 72 63 68 2e andex.ru/search.
0470 78 6d 6c 3f 5f 3d 31 31 30 26 74 65 78 74 3d 25 xml?_=110&text=%
0480 46 31 25 45 46 25 45 45 25 46 30 25 46 32 22 3e F1%EF%EE%F0%F2">
0490 cc e0 f0 ea e5 f2 3c 2f 61 3e 3c 2f 74 64 3e 0a ......</a></td>.
04a0 3c 74 64 20 63 6c 61 73 73 3d 22 74 61 62 22 20 <td class="tab"
04b0 73 74 79 6c 65 3d 22 22 3e 3c 61 20 68 72 65 66 style=""><a href
04c0 3d 22 68 74 74 70 3a 2f 2f 65 6e 63 79 63 6c 2e ="http://encycl.
04d0 79 61 6e 64 65 78 2e 72 75 2f 79 61 6e 64 73 65 yandex.ru/yandse
04e0 61 72 63 68 3f 72 70 74 3d 65 6e 63 79 63 26 74 arch?rpt=encyc&t
04f0 65 78 74 3d 25 46 31 25 45 46 25 45 45 25 46 30 ext=%F1%EF%EE%F0
0500 25 46 32 22 3e dd ed f6 e8 ea eb ee ef e5 e4 e8 %F2">...........
0510 e8 3c 2f 61 3e 3c 2f 74 64 3e 0a 3c 74 64 20 63 .</a></td>.<td c
0520 6c 61 73 73 3d 22 74 61 62 22 20 73 74 79 6c 65 lass="tab" style
0530 3d 22 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 23 ="border-right:#
0540 46 46 43 43 30 30 20 31 70 78 20 73 6f 6c 69 64 FFCC00 1px solid
0550 3b 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 ;"><a href="http
0560 3a 2f 2f 69 6d 61 67 65 73 2e 79 61 6e 64 65 78 ://images.yandex
0570 2e 72 75 2f 79 61 6e 64 73 65 61 72 63 68 3f 72 .ru/yandsearch?r
0580 70 74 pt

Frame 11 (60 bytes on wire, 60 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.852632000
Time delta from previous packet: 0.000127000 seconds
Time relative to first packet: 1.186520000 seconds
Frame Number: 11
Packet Length: 60 bytes
Capture Length: 60 bytes
Ethernet II, Src: 00:e0:7d:d0:3b:8c, Dst: 00:08:e3:59:15:40
Destination: 00:08:e3:59:15:40 (Cisco_59:15:40)
Source: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Type: IP (0x0800)
Trailer: 202020202020
Internet Protocol, Src Addr: 195.201.8.148 (195.201.8.148), Dst Addr: 194.87.182.137 (194.87.182.137)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xc9d1 (51665)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0xebbf (correct)
Source: 195.201.8.148 (195.201.8.148)
Destination: 194.87.182.137 (194.87.182.137)
Transmission Control Protocol, Src Port: 1053 (1053), Dst Port: 3128 (3128), Seq: 29955192, Ack: 2206932569, Len: 0
Source port: 1053 (1053)
Destination port: 3128 (3128)
Sequence number: 29955192
Acknowledgement number: 2206932569
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 8760
Checksum: 0x7fe3 (correct)

Frame 12 (156 bytes on wire, 156 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.853225000
Time delta from previous packet: 0.000593000 seconds
Time relative to first packet: 1.187113000 seconds
Frame Number: 12
Packet Length: 156 bytes
Capture Length: 156 bytes
Ethernet II, Src: 00:08:e3:59:15:40, Dst: 00:e0:7d:d0:3b:8c
Destination: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Source: 00:08:e3:59:15:40 (Cisco_59:15:40)
Type: IP (0x0800)
Internet Protocol, Src Addr: 194.87.182.137 (194.87.182.137), Dst Addr: 195.201.8.148 (195.201.8.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00)
0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 142
Identification: 0x1f3e (7998)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xd6cd (correct)
Source: 194.87.182.137 (194.87.182.137)
Destination: 195.201.8.148 (195.201.8.148)
Transmission Control Protocol, Src Port: 3128 (3128), Dst Port: 1053 (1053), Seq: 2206932569, Ack: 29955192, Len: 102
Source port: 3128 (3128)
Destination port: 1053 (1053)
Sequence number: 2206932569
Next sequence number: 2206932671
Acknowledgement number: 29955192
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0x9e7f (correct)
Hypertext Transfer Protocol
Data (102 bytes)

0000 3d 69 6d 61 67 65 26 74 65 78 74 3d 25 46 31 25 =image&text=%F1%
0010 45 46 25 45 45 25 46 30 25 46 32 22 3e ca e0 f0 EF%EE%F0%F2">...
0020 f2 e8 ed ea e8 3c 2f 61 3e 3c 2f 74 64 3e 0a 3c .....</a></td>.<
0030 74 64 20 63 6c 61 73 73 3d 22 74 61 62 2d 66 69 td class="tab-fi
0040 6c 6c 65 72 22 20 77 69 64 74 68 3d 22 31 30 30 ller" width="100
0050 25 22 3e 3c 62 72 20 2f 3e 3c 2f 74 64 3e 0a 3c %"><br /></td>.<
0060 74 64 20 6e 6f 77 td now

Frame 13 (1464 bytes on wire, 1464 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.864145000
Time delta from previous packet: 0.010920000 seconds
Time relative to first packet: 1.198033000 seconds
Frame Number: 13
Packet Length: 1464 bytes
Capture Length: 1464 bytes
Ethernet II, Src: 00:08:e3:59:15:40, Dst: 00:e0:7d:d0:3b:8c
Destination: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Source: 00:08:e3:59:15:40 (Cisco_59:15:40)
Type: IP (0x0800)
Internet Protocol, Src Addr: 194.87.182.137 (194.87.182.137), Dst Addr: 195.201.8.148 (195.201.8.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00)
0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1450
Identification: 0x1f3f (7999)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xd1b0 (correct)
Source: 194.87.182.137 (194.87.182.137)
Destination: 195.201.8.148 (195.201.8.148)
Transmission Control Protocol, Src Port: 3128 (3128), Dst Port: 1053 (1053), Seq: 2206932671, Ack: 29955192, Len: 1410
Source port: 3128 (3128)
Destination port: 1053 (1053)
Sequence number: 2206932671
Next sequence number: 2206934081
Acknowledgement number: 29955192
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0x27f7 (correct)
Hypertext Transfer Protocol
Data (1410 bytes)

0000 72 61 70 3d 22 22 20 72 6f 77 73 70 61 6e 3d 22 rap="" rowspan="
0010 32 22 20 73 74 79 6c 65 3d 22 70 61 64 64 69 6e 2" style="paddin
0020 67 3a 20 30 3b 20 62 6f 72 64 65 72 3a 20 30 3b g: 0; border: 0;
0030 22 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 77 69 "><div style="wi
0040 64 74 68 3a 20 33 30 70 78 3b 22 3e 3c 6e 6f 70 dth: 30px;"><nop
0050 20 2f 3e 3c 2f 64 69 76 3e 3c 2f 74 64 3e 0a 3c /></div></td>.<
0060 2f 74 72 3e 0a 3c 74 72 20 63 6c 61 73 73 3d 22 /tr>.<tr class="
0070 73 75 62 74 61 62 73 22 3e 0a 0a 3c 74 64 20 63 subtabs">..<td c
0080 6c 61 73 73 3d 22 74 61 62 2d 61 63 74 69 76 65 lass="tab-active
0090 22 20 6e 6f 77 72 61 70 3d 22 22 3e 3c 64 69 76 " nowrap=""><div
00a0 3e 3c 6e 6f 70 20 2f 3e 3c 2f 64 69 76 3e 3c 2f ><nop /></div></
00b0 74 64 3e 0a 3c 74 64 20 63 6c 61 73 73 3d 74 61 td>.<td class=ta
00c0 62 20 6e 6f 77 72 61 70 3e 3c 64 69 76 3e 3c 6e b nowrap><div><n
00d0 6f 70 20 2f 3e 3c 2f 64 69 76 3e 3c 2f 74 64 3e op /></div></td>
00e0 3c 74 64 20 63 6c 61 73 73 3d 74 61 62 20 6e 6f <td class=tab no
00f0 77 72 61 70 3e 3c 64 69 76 3e 3c 6e 6f 70 20 2f wrap><div><nop /
0100 3e 3c 2f 64 69 76 3e 3c 2f 74 64 3e 3c 74 64 20 ></div></td><td
0110 63 6c 61 73 73 3d 74 61 62 20 6e 6f 77 72 61 70 class=tab nowrap
0120 3e 3c 64 69 76 3e 3c 6e 6f 70 20 2f 3e 3c 2f 64 ><div><nop /></d
0130 69 76 3e 3c 2f 74 64 3e 3c 74 64 20 63 6c 61 73 iv></td><td clas
0140 73 3d 74 61 62 20 6e 6f 77 72 61 70 3e 3c 64 69 s=tab nowrap><di
0150 76 3e 3c 6e 6f 70 20 2f 3e 3c 2f 64 69 76 3e 3c v><nop /></div><
0160 2f 74 64 3e 3c 74 64 20 63 6c 61 73 73 3d 74 61 /td><td class=ta
0170 62 20 6e 6f 77 72 61 70 3e 3c 64 69 76 3e 3c 6e b nowrap><div><n
0180 6f 70 20 2f 3e 3c 2f 64 69 76 3e 3c 2f 74 64 3e op /></div></td>
0190 0a 3c 2f 74 72 3e 0a 3c 2f 74 61 62 6c 65 3e 0a .</tr>.</table>.
01a0 3c 21 2d 2d 20 2f 74 61 62 73 20 2d 2d 3e 0a 0a <!-- /tabs -->..
01b0 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 68 69 64 .<input type=hid
01c0 64 65 6e 20 6e 61 6d 65 3d 72 70 74 20 76 61 6c den name=rpt val
01d0 75 65 3d 22 72 61 64 22 3e 3c 2f 66 6f 72 6d 3e ue="rad"></form>
01e0 3c 2f 74 64 3e 0a 3c 2f 74 72 3e 0a 3c 2f 74 61 </td>.</tr>.</ta
01f0 62 6c 65 3e 0a 3c 21 2d 2d 20 2f 73 65 61 72 63 ble>.<!-- /searc
0200 68 2e 66 6f 72 6d 20 2d 2d 3e 0a 0a 3c 73 63 72 h.form -->..<scr
0210 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 ipt language="Ja
0220 76 61 53 63 72 69 70 74 22 3e 0a 3c 21 2d 2d 0a vaScript">.<!--.
0230 64 6f 63 75 6d 65 6e 74 2e 77 65 62 2e 74 65 78 document.web.tex
0240 74 2e 66 6f 63 75 73 28 29 3b 0a 2d 2d 3e 0a 3c t.focus();.-->.<
0250 2f 73 63 72 69 70 74 3e 0a 0a 3c 62 72 20 2f 3e /script>..<br />
0260 0a 3c 21 2d 2d 20 72 69 67 68 74 20 63 6f 6c 75 .<!-- right colu
0270 6d 6e 20 2d 2d 3e 0a 3c 74 61 62 6c 65 20 62 6f mn -->.<table bo
0280 72 64 65 72 3d 22 30 22 20 63 65 6c 6c 73 70 61 rder="0" cellspa
0290 63 69 6e 67 3d 22 30 22 20 63 65 6c 6c 70 61 64 cing="0" cellpad
02a0 64 69 6e 67 3d 22 31 30 22 20 63 6c 61 73 73 3d ding="10" class=
02b0 22 72 69 67 68 74 42 6c 6f 63 6b 22 20 61 6c 69 "rightBlock" ali
02c0 67 6e 3d 22 72 69 67 68 74 22 3e 0a 3c 74 72 3e gn="right">.<tr>
02d0 0a 0a 3c 74 64 3e 0a 0a 3c 21 2d 2d 20 74 6f 76 ..<td>..<!-- tov
02e0 61 72 79 20 2d 2d 3e 0a 3c 64 69 76 20 63 6c 61 ary -->.<div cla
02f0 73 73 3d 22 69 6e 4d 61 72 6b 65 74 22 3e 0a 3c ss="inMarket">.<
0300 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 65 div class="heade
0310 72 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 r"><a href="http
0320 3a 2f 2f 6d 61 72 6b 65 74 2e 79 61 6e 64 65 78 ://market.yandex
0330 2e 72 75 2f 73 65 61 72 63 68 2e 78 6d 6c 3f 74 .ru/search.xml?t
0340 65 78 74 3d 25 46 31 25 45 46 25 45 45 25 46 30 ext=%F1%EF%EE%F0
0350 25 46 32 26 5f 3d 31 30 31 22 3e 3c 69 6d 67 20 %F2&_=101"><img
0360 73 72 63 3d 22 68 74 74 70 3a 2f 2f 69 6d 67 2e src="http://img.
0370 79 61 6e 64 65 78 2e 72 75 2f 69 2f 69 2d 6d 61 yandex.ru/i/i-ma
0380 72 6b 65 74 2e 67 69 66 22 20 77 69 64 74 68 3d rket.gif" width=
0390 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 "16" height="16"
03a0 20 62 6f 72 64 65 72 3d 22 30 22 20 2f 3e 26 6c border="0" />&l
03b0 61 71 75 6f 3b f1 ef ee f0 f2 26 72 61 71 75 6f aquo;.....&raquo
03c0 3b 20 ed e0 26 6e 62 73 70 3b cc e0 f0 ea e5 f2 ; ..&nbsp;......
03d0 e5 26 6e 62 73 70 3b 28 39 30 31 29 3c 2f 61 3e .&nbsp;(901)</a>
03e0 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 63 6c 61 </div>..<div cla
03f0 73 73 3d 22 73 65 63 74 69 6f 6e 22 3e 0a 20 3c ss="section">. <
0400 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 6d div><div class=m
0410 20 3e c2 f1 e5 20 e4 eb ff 20 e4 ee ec e0 3c 2f >... ... ....</
0420 64 69 76 3e 3c 41 20 68 72 65 66 3d 22 2f 72 65 div><A href="/re
0430 64 69 72 3f 64 74 79 70 65 3d 73 68 6f 70 26 75 dir?dtype=shop&u
0440 69 64 3d 36 32 33 36 30 31 31 30 36 37 38 37 30 id=6236011067870
0450 35 32 35 26 63 61 74 65 67 69 64 3d 31 35 36 36 525&categid=1566
0460 26 70 72 69 63 65 3d 37 36 26 75 72 6c 3d 68 74 &price=76&url=ht
0470 74 70 3a 2f 2f 77 77 77 2e 66 6c 6f 72 61 73 68 tp://www.florash
0480 6f 70 2e 72 75 2f 62 75 79 5f 69 74 65 6d 2e 70 op.ru/buy_item.p
0490 68 70 25 33 46 69 64 25 33 44 31 32 39 25 32 36 hp%3Fid%3D129%26
04a0 66 72 6f 6d 25 33 44 79 6e 64 26 67 75 72 75 69 from%3Dynd&gurui
04b0 64 3d 2d 31 26 65 78 74 3d 26 70 70 3d 31 26 63 d=-1&ext=&pp=1&c
04c0 70 3d 31 30 22 20 74 61 72 67 65 74 3d 5f 62 6c p=10" target=_bl
04d0 61 6e 6b 3e c3 e0 e7 ee ed ed e0 ff 20 f1 ec e5 ank>........ ...
04e0 f1 fc 20 26 71 75 6f 74 3b 3c 62 3e d1 ef ee f0 .. &quot;<b>....
04f0 f2 3c 2f 62 3e 26 71 75 6f 74 3b 20 28 30 2c 35 .</b>&quot; (0,5
0500 20 ea e3 2e 29 3c 2f 41 3e 3c 62 72 3e 3c 41 20 ...)</A><br><A
0510 63 6c 61 73 73 3d 6d 20 68 72 65 66 3d 22 2f 72 class=m href="/r
0520 65 64 69 72 3f 64 74 79 70 65 3d 73 68 6f 70 26 edir?dtype=shop&
0530 75 69 64 3d 36 32 33 36 30 31 31 30 36 37 38 37 uid=623601106787
0540 30 35 32 35 26 63 61 74 65 67 69 64 3d 31 35 36 0525&categid=156
0550 36 26 70 72 69 63 65 3d 37 36 26 75 72 6c 3d 68 6&price=76&url=h
0560 74 74 70 3a 2f 2f 77 77 77 2e 66 6c 6f 72 61 73 ttp://www.floras
0570 68 6f 70 2e 72 75 2f 62 75 79 5f 69 74 65 6d 2e hop.ru/buy_item.
0580 70 68 ph

Frame 14 (60 bytes on wire, 60 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.864324000
Time delta from previous packet: 0.000179000 seconds
Time relative to first packet: 1.198212000 seconds
Frame Number: 14
Packet Length: 60 bytes
Capture Length: 60 bytes
Ethernet II, Src: 00:e0:7d:d0:3b:8c, Dst: 00:08:e3:59:15:40
Destination: 00:08:e3:59:15:40 (Cisco_59:15:40)
Source: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Type: IP (0x0800)
Trailer: 202020202020
Internet Protocol, Src Addr: 195.201.8.148 (195.201.8.148), Dst Addr: 194.87.182.137 (194.87.182.137)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xcbd1 (52177)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0xe9bf (correct)
Source: 195.201.8.148 (195.201.8.148)
Destination: 194.87.182.137 (194.87.182.137)
Transmission Control Protocol, Src Port: 1053 (1053), Dst Port: 3128 (3128), Seq: 29955192, Ack: 2206934081, Len: 0
Source port: 1053 (1053)
Destination port: 3128 (3128)
Sequence number: 29955192
Acknowledgement number: 2206934081
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 8760
Checksum: 0x79fb (correct)

Frame 15 (1464 bytes on wire, 1464 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.867479000
Time delta from previous packet: 0.003155000 seconds
Time relative to first packet: 1.201367000 seconds
Frame Number: 15
Packet Length: 1464 bytes
Capture Length: 1464 bytes
Ethernet II, Src: 00:08:e3:59:15:40, Dst: 00:e0:7d:d0:3b:8c
Destination: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Source: 00:08:e3:59:15:40 (Cisco_59:15:40)
Type: IP (0x0800)
Internet Protocol, Src Addr: 194.87.182.137 (194.87.182.137), Dst Addr: 195.201.8.148 (195.201.8.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00)
0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1450
Identification: 0x1f40 (8000)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xd1af (correct)
Source: 194.87.182.137 (194.87.182.137)
Destination: 195.201.8.148 (195.201.8.148)
Transmission Control Protocol, Src Port: 3128 (3128), Dst Port: 1053 (1053), Seq: 2206934081, Ack: 29955192, Len: 1410
Source port: 3128 (3128)
Destination port: 1053 (1053)
Sequence number: 2206934081
Next sequence number: 2206935491
Acknowledgement number: 29955192
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0x5fdf (correct)
Hypertext Transfer Protocol
Data (1410 bytes)

0000 70 25 33 46 69 64 25 33 44 31 32 39 25 32 36 66 p%3Fid%3D129%26f
0010 72 6f 6d 25 33 44 79 6e 64 26 67 75 72 75 69 64 rom%3Dynd&guruid
0020 3d 2d 31 26 65 78 74 3d 26 70 70 3d 31 26 63 70 =-1&ext=&pp=1&cp
0030 3d 31 30 22 20 74 61 72 67 65 74 3d 5f 62 6c 61 =10" target=_bla
0040 6e 6b 3e 3c 62 3e 37 36 26 6e 62 73 70 3b f0 2e nk><b>76&nbsp;..
0050 3c 2f 62 3e 20 26 23 31 35 31 3b 20 46 6c 6f 72 </b> &#151; Flor
0060 61 53 68 6f 70 3c 2f 41 3e 3c 2f 64 69 76 3e 3c aShop</A></div><
0070 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 6d div><div class=m
0080 20 3e c2 f1 e5 20 f2 ee e2 e0 f0 fb 3c 2f 64 69 >... ......</di
0090 76 3e 3c 41 20 68 72 65 66 3d 22 2f 72 65 64 69 v><A href="/redi
00a0 72 3f 64 74 79 70 65 3d 73 68 6f 70 26 75 69 64 r?dtype=shop&uid
00b0 3d 37 33 38 30 36 38 31 30 36 37 38 37 30 35 32 =738068106787052
00c0 35 26 63 61 74 65 67 69 64 3d 30 26 70 72 69 63 5&categid=0&pric
00d0 65 3d 33 38 33 39 26 75 72 6c 3d 68 74 74 70 3a e=3839&url=http:
00e0 2f 2f 73 68 6f 70 2e 75 75 75 2e 72 75 2f 25 33 //shop.uuu.ru/%3
00f0 46 64 6f 25 33 44 62 6f 6f 6b 25 32 36 69 74 65 Fdo%3Dbook%26ite
0100 6d 25 33 44 31 33 34 35 37 25 32 36 66 72 6f 6d m%3D13457%26from
0110 25 33 44 79 61 6e 64 65 78 26 67 75 72 75 69 64 %3Dyandex&guruid
0120 3d 2d 31 26 65 78 74 3d 26 70 70 3d 31 26 63 70 =-1&ext=&pp=1&cp
0130 3d 31 30 22 20 74 61 72 67 65 74 3d 5f 62 6c 61 =10" target=_bla
0140 6e 6b 3e 20 2e 2e 2e 20 e2 fb ef f3 f1 ea e8 20 nk> ... .......
0150 e2 20 ef ee ec ee f9 fc 20 ed e5 ec e5 f6 ea ee . ...... .......
0160 ec f3 20 3c 62 3e f1 ef ee f0 f2 f3 3c 2f 62 3e .. <b>......</b>
0170 20 31 39 37 36 2d 31 39 39 35 20 e3 e3 2e 20 34 1976-1995 ... 4
0180 39 20 eb 2e 3c 2f 41 3e 3c 62 72 3e 3c 41 20 63 9 ..</A><br><A c
0190 6c 61 73 73 3d 6d 20 68 72 65 66 3d 22 2f 72 65 lass=m href="/re
01a0 64 69 72 3f 64 74 79 70 65 3d 73 68 6f 70 26 75 dir?dtype=shop&u
01b0 69 64 3d 37 33 38 30 36 38 31 30 36 37 38 37 30 id=7380681067870
01c0 35 32 35 26 63 61 74 65 67 69 64 3d 30 26 70 72 525&categid=0&pr
01d0 69 63 65 3d 33 38 33 39 26 75 72 6c 3d 68 74 74 ice=3839&url=htt
01e0 70 3a 2f 2f 73 68 6f 70 2e 75 75 75 2e 72 75 2f p://shop.uuu.ru/
01f0 25 33 46 64 6f 25 33 44 62 6f 6f 6b 25 32 36 69 %3Fdo%3Dbook%26i
0200 74 65 6d 25 33 44 31 33 34 35 37 25 32 36 66 72 tem%3D13457%26fr
0210 6f 6d 25 33 44 79 61 6e 64 65 78 26 67 75 72 75 om%3Dyandex&guru
0220 69 64 3d 2d 31 26 65 78 74 3d 26 70 70 3d 31 26 id=-1&ext=&pp=1&
0230 63 70 3d 31 30 22 20 74 61 72 67 65 74 3d 5f 62 cp=10" target=_b
0240 6c 61 6e 6b 3e 3c 62 3e 33 38 33 39 26 6e 62 73 lank><b>3839&nbs
0250 70 3b f0 2e 3c 2f 62 3e 20 26 23 31 35 31 3b 20 p;..</b> &#151;
0260 55 55 55 2e 52 55 3c 2f 41 3e 3c 2f 64 69 76 3e UUU.RU</A></div>
0270 3c 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d <div><div class=
0280 6d 20 3e c0 e2 f2 ee 3c 2f 64 69 76 3e 3c 41 20 m >....</div><A
0290 68 72 65 66 3d 22 2f 72 65 64 69 72 3f 64 74 79 href="/redir?dty
02a0 70 65 3d 73 68 6f 70 26 75 69 64 3d 36 37 39 39 pe=shop&uid=6799
02b0 37 32 31 30 36 37 38 37 30 35 32 35 26 63 61 74 721067870525&cat
02c0 65 67 69 64 3d 31 34 39 30 26 70 72 69 63 65 3d egid=1490&price=
02d0 31 34 31 35 2e 35 26 75 72 6c 3d 68 74 74 70 3a 1415.5&url=http:
02e0 2f 2f 61 76 61 6e 74 61 75 74 6f 2e 72 75 2f 73 //avantauto.ru/s
02f0 68 6f 70 2f 73 68 6f 77 5f 64 65 73 63 2e 65 70 hop/show_desc.ep
0300 68 74 6d 6c 25 33 46 67 69 64 25 33 44 33 39 37 html%3Fgid%3D397
0310 30 33 26 67 75 72 75 69 64 3d 2d 31 26 65 78 74 03&guruid=-1&ext
0320 3d 26 70 70 3d 31 26 63 70 3d 31 30 22 20 74 61 =&pp=1&cp=10" ta
0330 72 67 65 74 3d 5f 62 6c 61 6e 6b 3e c4 e8 f1 ea rget=_blank>....
0340 20 ea ee eb e5 f1 e0 20 4b 26 61 6d 70 3b 4b 20 ...... K&amp;K
0350 d4 ee f0 e0 2d 3c 62 3e d1 ef ee f0 f2 3c 2f 62 ....-<b>.....</b
0360 3e 20 52 31 34 20 4a 36 20 34 2a 39 38 20 45 54 > R14 J6 4*98 ET
0370 33 35 20 44 35 38 2e 36 3c 2f 41 3e 3c 62 72 3e 35 D58.6</A><br>
0380 3c 41 20 63 6c 61 73 73 3d 6d 20 68 72 65 66 3d <A class=m href=
0390 22 2f 72 65 64 69 72 3f 64 74 79 70 65 3d 73 68 "/redir?dtype=sh
03a0 6f 70 26 75 69 64 3d 36 37 39 39 37 32 31 30 36 op&uid=679972106
03b0 37 38 37 30 35 32 35 26 63 61 74 65 67 69 64 3d 7870525&categid=
03c0 31 34 39 30 26 70 72 69 63 65 3d 31 34 31 35 2e 1490&price=1415.
03d0 35 26 75 72 6c 3d 68 74 74 70 3a 2f 2f 61 76 61 5&url=http://ava
03e0 6e 74 61 75 74 6f 2e 72 75 2f 73 68 6f 70 2f 73 ntauto.ru/shop/s
03f0 68 6f 77 5f 64 65 73 63 2e 65 70 68 74 6d 6c 25 how_desc.ephtml%
0400 33 46 67 69 64 25 33 44 33 39 37 30 33 26 67 75 3Fgid%3D39703&gu
0410 72 75 69 64 3d 2d 31 26 65 78 74 3d 26 70 70 3d ruid=-1&ext=&pp=
0420 31 26 63 70 3d 31 30 22 20 74 61 72 67 65 74 3d 1&cp=10" target=
0430 5f 62 6c 61 6e 6b 3e 3c 62 3e 31 34 31 35 26 6e _blank><b>1415&n
0440 62 73 70 3b f0 2e 3c 2f 62 3e 20 26 23 31 35 31 bsp;..</b> &#151
0450 3b 20 c0 e2 e0 ed f2 20 c0 e2 f2 ee 3c 2f 41 3e ; ..... ....</A>
0460 3c 2f 64 69 76 3e 3c 64 69 76 3e 3c 64 69 76 20 </div><div><div
0470 63 6c 61 73 73 3d 6d 20 3e c0 ef f2 e5 ea e0 3c class=m >......<
0480 2f 64 69 76 3e 3c 41 20 68 72 65 66 3d 22 2f 72 /div><A href="/r
0490 65 64 69 72 3f 64 74 79 70 65 3d 73 68 6f 70 26 edir?dtype=shop&
04a0 75 69 64 3d 34 36 39 31 38 37 31 30 36 37 38 37 uid=469187106787
04b0 30 35 32 35 26 63 61 74 65 67 69 64 3d 32 26 70 0525&categid=2&p
04c0 72 69 63 65 3d 32 37 37 26 75 72 6c 3d 68 74 74 rice=277&url=htt
04d0 70 3a 2f 2f 77 77 77 2e 61 72 62 61 74 61 70 74 p://www.arbatapt
04e0 65 6b 61 2e 72 75 2f 25 33 46 70 61 67 65 25 33 eka.ru/%3Fpage%3
04f0 44 70 72 69 63 65 25 32 36 64 72 75 67 63 6f 64 Dprice%26drugcod
0500 65 25 33 44 34 31 35 39 26 67 75 72 75 69 64 3d e%3D4159&guruid=
0510 2d 31 26 65 78 74 3d 26 70 70 3d 31 26 63 70 3d -1&ext=&pp=1&cp=
0520 31 30 22 20 74 61 72 67 65 74 3d 5f 62 6c 61 6e 10" target=_blan
0530 6b 3e cf cd 20 3c 62 3e d1 ef ee f0 f2 3c 2f 62 k>.. <b>.....</b
0540 3e 3c 2f 41 3e 3c 62 72 3e 3c 41 20 63 6c 61 73 ></A><br><A clas
0550 73 3d 6d 20 68 72 65 66 3d 22 2f 72 65 64 69 72 s=m href="/redir
0560 3f 64 74 79 70 65 3d 73 68 6f 70 26 75 69 64 3d ?dtype=shop&uid=
0570 34 36 39 31 38 37 31 30 36 37 38 37 30 35 32 35 4691871067870525
0580 26 63 &c

Frame 16 (1330 bytes on wire, 1330 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.868988000
Time delta from previous packet: 0.001509000 seconds
Time relative to first packet: 1.202876000 seconds
Frame Number: 16
Packet Length: 1330 bytes
Capture Length: 1330 bytes
Ethernet II, Src: 00:08:e3:59:15:40, Dst: 00:e0:7d:d0:3b:8c
Destination: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Source: 00:08:e3:59:15:40 (Cisco_59:15:40)
Type: IP (0x0800)
Internet Protocol, Src Addr: 194.87.182.137 (194.87.182.137), Dst Addr: 195.201.8.148 (195.201.8.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00)
0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1316
Identification: 0x1f41 (8001)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xd234 (correct)
Source: 194.87.182.137 (194.87.182.137)
Destination: 195.201.8.148 (195.201.8.148)
Transmission Control Protocol, Src Port: 3128 (3128), Dst Port: 1053 (1053), Seq: 2206935491, Ack: 29955192, Len: 1276
Source port: 3128 (3128)
Destination port: 1053 (1053)
Sequence number: 2206935491
Next sequence number: 2206936767
Acknowledgement number: 29955192
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0x7a27 (correct)
Hypertext Transfer Protocol
Data (1276 bytes)

0000 61 74 65 67 69 64 3d 32 26 70 72 69 63 65 3d 32 ategid=2&price=2
0010 37 37 26 75 72 6c 3d 68 74 74 70 3a 2f 2f 77 77 77&url=http://ww
0020 77 2e 61 72 62 61 74 61 70 74 65 6b 61 2e 72 75 w.arbatapteka.ru
0030 2f 25 33 46 70 61 67 65 25 33 44 70 72 69 63 65 /%3Fpage%3Dprice
0040 25 32 36 64 72 75 67 63 6f 64 65 25 33 44 34 31 %26drugcode%3D41
0050 35 39 26 67 75 72 75 69 64 3d 2d 31 26 65 78 74 59&guruid=-1&ext
0060 3d 26 70 70 3d 31 26 63 70 3d 31 30 22 20 74 61 =&pp=1&cp=10" ta
0070 72 67 65 74 3d 5f 62 6c 61 6e 6b 3e 3c 62 3e 32 rget=_blank><b>2
0080 37 37 26 6e 62 73 70 3b f0 2e 3c 2f 62 3e 20 26 77&nbsp;..</b> &
0090 23 31 35 31 3b 20 c0 ef f2 e5 ea e0 20 cd ee e2 #151; ...... ...
00a0 ee e0 f0 e1 e0 f2 f1 ea e0 ff 3c 2f 41 3e 3c 2f ..........</A></
00b0 64 69 76 3e 3c 64 69 76 3e 3c 64 69 76 20 63 6c div><div><div cl
00c0 61 73 73 3d 6d 20 3e c2 f1 e5 20 f2 ee e2 e0 f0 ass=m >... .....
00d0 fb 3c 2f 64 69 76 3e 3c 41 20 68 72 65 66 3d 22 .</div><A href="
00e0 2f 72 65 64 69 72 3f 64 74 79 70 65 3d 73 68 6f /redir?dtype=sho
00f0 70 26 75 69 64 3d 38 38 34 34 36 32 31 30 36 37 p&uid=8844621067
0100 38 37 30 35 32 35 26 63 61 74 65 67 69 64 3d 30 870525&categid=0
0110 26 70 72 69 63 65 3d 39 35 38 2e 30 38 26 75 72 &price=958.08&ur
0120 6c 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 74 6f 75 l=http://www.tou
0130 72 73 2e 72 75 2f 68 6f 74 65 6c 2f 66 6f 72 6d rs.ru/hotel/form
0140 5f 68 6f 74 65 6c 2e 61 73 70 25 33 46 69 64 5f _hotel.asp%3Fid_
0150 70 61 72 74 6e 65 72 73 25 33 44 34 31 25 32 36 partners%3D41%26
0160 69 64 5f 63 69 74 69 65 73 25 33 44 4d 4f 57 25 id_cities%3DMOW%
0170 32 36 69 64 5f 68 6f 74 65 6c 73 65 6c 25 33 44 26id_hotelsel%3D
0180 32 32 37 26 67 75 72 75 69 64 3d 2d 31 26 65 78 227&guruid=-1&ex
0190 74 3d 26 70 70 3d 31 26 63 70 3d 31 30 22 20 74 t=&pp=1&cp=10" t
01a0 61 72 67 65 74 3d 5f 62 6c 61 6e 6b 3e cc ee f1 arget=_blank>...
01b0 ea e2 e0 20 e3 ee f1 f2 e8 ed e8 f6 e0 20 3c 62 ... ......... <b
01c0 3e d1 ef ee f0 f2 3c 2f 62 3e 20 2d 20 e7 e0 e1 >.....</b> - ...
01d0 f0 ee ed e8 f0 ee e2 e0 f2 fc 20 ee f2 e5 eb fc .......... .....
01e0 2c 20 f5 ee f0 ee f8 e0 ff 20 f6 e5 ed e0 3c 2f , ....... ....</
01f0 41 3e 3c 62 72 3e 3c 41 20 63 6c 61 73 73 3d 6d A><br><A class=m
0200 20 68 72 65 66 3d 22 2f 72 65 64 69 72 3f 64 74 href="/redir?dt
0210 79 70 65 3d 73 68 6f 70 26 75 69 64 3d 38 38 34 ype=shop&uid=884
0220 34 36 32 31 30 36 37 38 37 30 35 32 35 26 63 61 4621067870525&ca
0230 74 65 67 69 64 3d 30 26 70 72 69 63 65 3d 39 35 tegid=0&price=95
0240 38 2e 30 38 26 75 72 6c 3d 68 74 74 70 3a 2f 2f 8.08&url=http://
0250 77 77 77 2e 74 6f 75 72 73 2e 72 75 2f 68 6f 74 www.tours.ru/hot
0260 65 6c 2f 66 6f 72 6d 5f 68 6f 74 65 6c 2e 61 73 el/form_hotel.as
0270 70 25 33 46 69 64 5f 70 61 72 74 6e 65 72 73 25 p%3Fid_partners%
0280 33 44 34 31 25 32 36 69 64 5f 63 69 74 69 65 73 3D41%26id_cities
0290 25 33 44 4d 4f 57 25 32 36 69 64 5f 68 6f 74 65 %3DMOW%26id_hote
02a0 6c 73 65 6c 25 33 44 32 32 37 26 67 75 72 75 69 lsel%3D227&gurui
02b0 64 3d 2d 31 26 65 78 74 3d 26 70 70 3d 31 26 63 d=-1&ext=&pp=1&c
02c0 70 3d 31 30 22 20 74 61 72 67 65 74 3d 5f 62 6c p=10" target=_bl
02d0 61 6e 6b 3e 3c 62 3e 24 33 32 3c 2f 62 3e 20 26 ank><b>$32</b> &
02e0 23 31 35 31 3b 20 31 30 30 20 c4 ee f0 ee e3 3c #151; 100 .....<
02f0 2f 41 3e 3c 2f 64 69 76 3e 3c 64 69 76 3e 3c 2f /A></div><div></
0300 64 69 76 3e 0a 3c 64 69 76 3e 0a 3c 61 20 68 72 div>.<div>.<a hr
0310 65 66 3d 22 68 74 74 70 3a 2f 2f 6d 61 72 6b 65 ef="http://marke
0320 74 2e 79 61 6e 64 65 78 2e 72 75 2f 73 65 61 72 t.yandex.ru/sear
0330 63 68 2e 78 6d 6c 3f 74 65 78 74 3d 25 46 31 25 ch.xml?text=%F1%
0340 45 46 25 45 45 25 46 30 25 46 32 26 5f 3d 31 30 EF%EE%F0%F2&_=10
0350 31 22 3e c2 f1 e5 26 6e 62 73 70 3b ef f0 e5 e4 1">...&nbsp;....
0360 eb ee e6 e5 ed e8 ff 20 28 39 30 31 29 20 26 72 ....... (901) &r
0370 61 72 72 3b 3c 2f 61 3e 0a 3c 2f 64 69 76 3e 0a arr;</a>.</div>.
0380 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0a 3c 21 2d </div></div>.<!-
0390 2d 20 2f 74 6f 76 61 72 79 20 2d 2d 3e 0a 0a 3c - /tovary -->..<
03a0 21 2d 2d 20 65 6e 63 79 63 20 2d 2d 3e 0a 3c 64 !-- encyc -->.<d
03b0 69 76 20 63 6c 61 73 73 3d 22 69 6e 45 6e 63 22 iv class="inEnc"
03c0 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 >.<div class="he
03d0 61 64 65 72 22 3e 3c 61 20 68 72 65 66 3d 22 68 ader"><a href="h
03e0 74 74 70 3a 2f 2f 65 6e 63 79 63 6c 2e 79 61 6e ttp://encycl.yan
03f0 64 65 78 2e 72 75 2f 79 61 6e 64 73 65 61 72 63 dex.ru/yandsearc
0400 68 3f 73 74 79 70 65 3d 65 6e 63 79 63 26 74 65 h?stype=encyc&te
0410 78 74 3d 25 46 31 25 45 46 25 45 45 25 46 30 25 xt=%F1%EF%EE%F0%
0420 46 32 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 F2"><img src="ht
0430 74 70 3a 2f 2f 69 6d 67 2e 79 61 6e 64 65 78 2e tp://img.yandex.
0440 72 75 2f 69 2f 69 2d 65 6e 63 2e 67 69 66 22 20 ru/i/i-enc.gif"
0450 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 width="16" heigh
0460 74 3d 22 31 36 22 20 62 6f 72 64 65 72 3d 22 30 t="16" border="0
0470 22 20 2f 3e 26 6c 61 71 75 6f 3b f1 ef ee f0 f2 " />&laquo;.....
0480 26 72 61 71 75 6f 3b 20 e2 26 6e 62 73 70 3b fd &raquo; .&nbsp;.
0490 ed f6 e8 ea eb ee ef e5 e4 e8 ff f5 26 6e 62 73 ............&nbs
04a0 70 3b 28 35 37 29 3c 2f 61 3e 3c 2f 64 69 76 3e p;(57)</a></div>
04b0 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 ..<div class="se
04c0 63 74 69 6f 6e 22 3e 0a 3c 61 20 68 72 65 66 3d ction">.<a href=
04d0 22 68 74 74 70 3a 2f 2f 65 6e 63 79 63 6c 2e 79 "http://encycl.y
04e0 61 6e 64 65 78 2e 72 75 2f 63 67 69 2d 62 69 6e andex.ru/cgi-bin
04f0 2f 61 72 74 2e 70 6c 3f 61 72 74 3d /art.pl?art=

Frame 17 (60 bytes on wire, 60 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.869986000
Time delta from previous packet: 0.000998000 seconds
Time relative to first packet: 1.203874000 seconds
Frame Number: 17
Packet Length: 60 bytes
Capture Length: 60 bytes
Ethernet II, Src: 00:e0:7d:d0:3b:8c, Dst: 00:08:e3:59:15:40
Destination: 00:08:e3:59:15:40 (Cisco_59:15:40)
Source: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Type: IP (0x0800)
Trailer: 202020202020
Internet Protocol, Src Addr: 195.201.8.148 (195.201.8.148), Dst Addr: 194.87.182.137 (194.87.182.137)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xccd1 (52433)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0xe8bf (correct)
Source: 195.201.8.148 (195.201.8.148)
Destination: 194.87.182.137 (194.87.182.137)
Transmission Control Protocol, Src Port: 1053 (1053), Dst Port: 3128 (3128), Seq: 29955192, Ack: 2206936767, Len: 0
Source port: 1053 (1053)
Destination port: 3128 (3128)
Sequence number: 29955192
Acknowledgement number: 2206936767
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 8760
Checksum: 0x6f7d (correct)

Frame 18 (1464 bytes on wire, 1464 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.883648000
Time delta from previous packet: 0.013662000 seconds
Time relative to first packet: 1.217536000 seconds
Frame Number: 18
Packet Length: 1464 bytes
Capture Length: 1464 bytes
Ethernet II, Src: 00:08:e3:59:15:40, Dst: 00:e0:7d:d0:3b:8c
Destination: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Source: 00:08:e3:59:15:40 (Cisco_59:15:40)
Type: IP (0x0800)
Internet Protocol, Src Addr: 194.87.182.137 (194.87.182.137), Dst Addr: 195.201.8.148 (195.201.8.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00)
0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1450
Identification: 0x1f42 (8002)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xd1ad (correct)
Source: 194.87.182.137 (194.87.182.137)
Destination: 195.201.8.148 (195.201.8.148)
Transmission Control Protocol, Src Port: 3128 (3128), Dst Port: 1053 (1053), Seq: 2206936767, Ack: 29955192, Len: 1410
Source port: 3128 (3128)
Destination port: 1053 (1053)
Sequence number: 2206936767
Next sequence number: 2206938177
Acknowledgement number: 29955192
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0xc627 (correct)
Hypertext Transfer Protocol
Data (1410 bytes)

0000 6a 61 70 61 6e 2f 73 39 32 2e 68 74 6d 26 65 6e japan/s92.htm&en
0010 63 70 61 67 65 3d 6a 61 70 61 6e 22 3e d1 cf ce cpage=japan">...
0020 d0 d2 3c 2f 61 3e 20 26 23 31 35 31 3b 20 c4 ee ..</a> &#151; ..
0030 20 f1 e2 ee e5 e3 ee 20 e7 ed e0 ea ee ec f1 f2 ...... ........
0040 e2 e0 20 f1 20 e7 e0 ef e0 e4 ed fb ec e8 20 e2 .. . ......... .
0050 e8 e4 e0 ec e8 20 f1 ef ee f0 f2 e0 20 df ef ee ..... ...... ...
0060 ed e8 ff 20 f3 e6 e5 20 e8 ec e5 eb e0 20 e2 e5 ... ... ..... ..
0070 ea ee e2 fb e5 20 2e 2e 2e 3c 62 72 3e dd df 26 ..... ...<br>..&
0080 6e 62 73 70 3b 28 df ef ee ed e8 ff 20 f1 e5 e3 nbsp;(...... ...
0090 ee e4 ed ff 29 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 ....).</div>..<d
00a0 69 76 20 63 6c 61 73 73 3d 22 73 65 63 74 69 6f iv class="sectio
00b0 6e 22 3e 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 n">.<a href="htt
00c0 70 3a 2f 2f 65 6e 63 79 63 6c 2e 79 61 6e 64 65 p://encycl.yande
00d0 78 2e 72 75 2f 63 67 69 2d 62 69 6e 2f 61 72 74 x.ru/cgi-bin/art
00e0 2e 70 6c 3f 61 72 74 3d 62 72 6f 6b 6d 69 6e 6f .pl?art=brokmino
00f0 72 2f 33 37 2f 33 37 34 39 33 2e 68 74 6d 6c 26 r/37/37493.html&
0100 65 6e 63 70 61 67 65 3d 62 72 6f 6b 6d 69 6e 6f encpage=brokmino
0110 72 22 3e d1 cf ce d0 d2 3c 2f 61 3e 20 26 23 31 r">.....</a> &#1
0120 35 31 3b 20 d1 ef ee f0 f2 2c 20 e7 e0 ed ff f2 51; ....., .....
0130 e8 ff 2c 20 ea e0 ea 20 e8 ec e5 fe f9 e8 e5 20 .., ... .......
0140 f5 e0 f0 e0 ea f2 e5 f0 20 f4 e8 e7 e8 f7 e5 f1 ........ .......
0150 ea e8 f5 20 f3 ef f0 e0 e6 ed e5 ed e8 e9 20 e4 ... .......... .
0160 eb ff 20 f0 e0 e7 e2 e8 f2 e8 ff 20 f1 e8 eb fb .. ........ ....
0170 2c 20 2e 2e 2e 3c 62 72 3e c1 f0 ee ea e3 e0 f3 , ...<br>.......
0180 e7 26 6e 62 73 70 3b 28 cd ee e2 fb e9 20 c4 e8 .&nbsp;(..... ..
0190 f1 ea 29 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 ..).</div>..<div
01a0 20 63 6c 61 73 73 3d 22 73 65 63 74 69 6f 6e 22 class="section"
01b0 3e 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a >.<a href="http:
01c0 2f 2f 65 6e 63 79 63 6c 2e 79 61 6e 64 65 78 2e //encycl.yandex.
01d0 72 75 2f 63 67 69 2d 62 69 6e 2f 61 72 74 2e 70 ru/cgi-bin/art.p
01e0 6c 3f 61 72 74 3d 62 73 65 2f 30 30 30 37 33 2f l?art=bse/00073/
01f0 39 31 30 30 30 2e 68 74 6d 26 65 6e 63 70 61 67 91000.htm&encpag
0200 65 3d 62 73 65 22 3e d1 cf ce d0 d2 3c 2f 61 3e e=bse">.....</a>
0210 20 26 23 31 35 31 3b 20 d1 ef ee f0 f2 20 28 e0 &#151; ..... (.
0220 ed e3 eb 2e 20 73 70 6f 72 74 2c 20 f1 ee ea f0 .... sport, ....
0230 e0 f9 e5 ed e8 e5 20 ef e5 f0 e2 ee ed e0 f7 e0 ...... .........
0240 eb fc ed ee 20 64 69 73 70 6f 72 74 20 2d 20 e8 .... disport - .
0250 e3 f0 e0 2c 20 f0 e0 e7 e2 eb e5 f7 e5 ed e8 e5 ..., ...........
0260 29 2c 20 2e 2e 2e 3c 62 72 3e c1 d1 dd 26 6e 62 ), ...<br>...&nb
0270 73 70 3b 28 d0 f3 e1 f0 e8 ea ee ed 29 0a 3c 2f sp;(........).</
0280 64 69 76 3e 0a 3c 21 2d 2d 0a 3c 64 69 76 20 63 div>.<!--.<div c
0290 6c 61 73 73 3d 22 73 65 63 74 69 6f 6e 22 3e 0a lass="section">.
02a0 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f <a href="http://
02b0 65 6e 63 79 63 6c 2e 79 61 6e 64 65 78 2e 72 75 encycl.yandex.ru
02c0 2f 79 61 6e 64 73 65 61 72 63 68 3f 73 74 79 70 /yandsearch?styp
02d0 65 3d 65 6e 63 79 63 26 74 65 78 74 3d 25 46 31 e=encyc&text=%F1
02e0 25 45 46 25 45 45 25 46 30 25 46 32 22 3e c5 f9 %EF%EE%F0%F2">..
02f0 e5 20 f1 f2 e0 f2 fc e8 20 28 35 37 29 20 26 67 . ...... (57) &g
0300 74 3b 26 67 74 3b 3c 2f 61 3e 0a 3c 2f 64 69 76 t;&gt;</a>.</div
0310 3e 0a 2d 2d 3e 0a 3c 2f 64 69 76 3e 0a 3c 21 2d >.-->.</div>.<!-
0320 2d 20 2f 65 6e 63 79 63 20 2d 2d 3e 0a 3c 2f 74 - /encyc -->.</t
0330 64 3e 0a 3c 2f 74 72 3e 0a 3c 2f 74 61 62 6c 65 d>.</tr>.</table
0340 3e 0a 3c 21 2d 2d 20 2f 72 69 67 68 74 20 63 6f >.<!-- /right co
0350 6c 75 6d 6e 20 2d 2d 3e 0a 3c 64 69 76 20 63 6c lumn -->.<div cl
0360 61 73 73 3d 22 72 65 66 62 6c 6f 63 6b 22 3e 0a ass="refblock">.
0370 d0 e5 e7 f3 eb fc f2 e0 f2 20 ef ee e8 f1 ea e0 ......... ......
0380 3a 20 f1 f2 f0 e0 ed e8 f6 26 6e 62 73 70 3b 26 : .......&nbsp;&
0390 23 31 35 31 3b 20 3c 62 3e 31 30 31 34 37 37 30 #151; <b>1014770
03a0 31 3c 2f 62 3e 2c 20 f1 e0 e9 f2 ee e2 26 6e 62 1</b>, ......&nb
03b0 73 70 3b 26 23 31 35 31 3b 20 ed e5 20 ec e5 ed sp;&#151; .. ...
03c0 e5 e5 20 3c 62 3e 31 37 32 37 36 3c 2f 62 3e 3c .. <b>17276</b><
03d0 62 72 3e 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 br>.<a href="htt
03e0 70 3a 2f 2f 77 77 77 2e 79 61 6e 64 65 78 2e 72 p://www.yandex.r
03f0 75 2f 61 64 76 65 72 74 69 73 69 6e 67 2f 63 6f u/advertising/co
0400 6e 74 65 78 74 2e 68 74 6d 6c 22 3e c7 e0 ef f0 ntext.html">....
0410 ee f1 ee e2 20 e7 e0 20 ec e5 f1 ff f6 3c 2f 61 .... .. .....</a
0420 3e 3a 20 3c 69 3e f1 ef ee f0 f2 3c 2f 69 3e 26 >: <i>.....</i>&
0430 6e 62 73 70 3b 26 23 31 35 31 3b 20 31 35 37 32 nbsp;&#151; 1572
0440 37 35 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 2f f1 75</div>.<!-- /.
0450 f2 e0 f2 e8 f1 f2 e8 ea e0 20 2d 2d 3e 0a 0a 3c ......... -->..<
0460 21 2d 2d 20 54 4f 50 49 43 53 20 74 6d 61 72 20 !-- TOPICS tmar
0470 2d 2d 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 -->.<div class="
0480 63 61 74 65 67 6f 72 69 65 73 22 3e 0a ca e0 f2 categories">....
0490 e5 e3 ee f0 e8 e8 20 f2 ee e2 e0 f0 ee e2 3a 20 ...... .......:
04a0 0a 3c 75 6c 3e 0a 3c 6c 69 3e 3c 61 20 6f 6e 43 .<ul>.<li><a onC
04b0 6c 69 63 6b 3d 22 72 28 74 68 69 73 2c 27 74 6d lick="r(this,'tm
04c0 61 72 27 29 22 20 68 72 65 66 3d 27 68 74 74 70 ar')" href='http
04d0 3a 2f 2f 6d 61 72 6b 65 74 2e 79 61 6e 64 65 78 ://market.yandex
04e0 2e 72 75 2f 3f 68 69 64 3d 39 30 38 32 39 27 3e .ru/?hid=90829'>
04f0 ca ed e8 e3 e8 3c 2f 61 3e 26 6e 62 73 70 3b 26 .....</a>&nbsp;&
0500 67 74 3b 26 6e 62 73 70 3b 3c 61 20 6f 6e 43 6c gt;&nbsp;<a onCl
0510 69 63 6b 3d 22 72 28 74 68 69 73 2c 27 74 6d 61 ick="r(this,'tma
0520 72 27 29 22 20 68 72 65 66 3d 27 68 74 74 70 3a r')" href='http:
0530 2f 2f 6d 61 72 6b 65 74 2e 79 61 6e 64 65 78 2e //market.yandex.
0540 72 75 2f 3f 68 69 64 3d 39 30 39 33 31 27 3e c4 ru/?hid=90931'>.
0550 ee ec 2c 20 e1 fb f2 2c 20 f1 e5 ec fc ff 2c 20 .., ..., .....,
0560 e4 ee f1 f3 e3 3c 2f 61 3e 26 6e 62 73 70 3b 26 .....</a>&nbsp;&
0570 67 74 3b 26 6e 62 73 70 3b 3c 62 3e 3c 61 20 6f gt;&nbsp;<b><a o
0580 6e 43 nC

Frame 19 (1464 bytes on wire, 1464 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.885280000
Time delta from previous packet: 0.001632000 seconds
Time relative to first packet: 1.219168000 seconds
Frame Number: 19
Packet Length: 1464 bytes
Capture Length: 1464 bytes
Ethernet II, Src: 00:08:e3:59:15:40, Dst: 00:e0:7d:d0:3b:8c
Destination: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Source: 00:08:e3:59:15:40 (Cisco_59:15:40)
Type: IP (0x0800)
Internet Protocol, Src Addr: 194.87.182.137 (194.87.182.137), Dst Addr: 195.201.8.148 (195.201.8.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00)
0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1450
Identification: 0x1f43 (8003)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xd1ac (correct)
Source: 194.87.182.137 (194.87.182.137)
Destination: 195.201.8.148 (195.201.8.148)
Transmission Control Protocol, Src Port: 3128 (3128), Dst Port: 1053 (1053), Seq: 2206938177, Ack: 29955192, Len: 1410
Source port: 3128 (3128)
Destination port: 1053 (1053)
Sequence number: 2206938177
Next sequence number: 2206939587
Acknowledgement number: 29955192
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0xeb19 (correct)
Hypertext Transfer Protocol
Data (1410 bytes)

0000 6c 69 63 6b 3d 22 72 28 74 68 69 73 2c 27 74 6d lick="r(this,'tm
0010 61 72 27 29 22 20 68 72 65 66 3d 27 68 74 74 70 ar')" href='http
0020 3a 2f 2f 6d 61 72 6b 65 74 2e 79 61 6e 64 65 78 ://market.yandex
0030 2e 72 75 2f 63 61 74 61 6c 6f 67 2e 78 6d 6c 3f .ru/catalog.xml?
0040 68 69 64 3d 39 30 39 34 33 27 3e d1 ef ee f0 f2 hid=90943'>.....
0050 3c 2f 61 3e 3c 2f 62 3e 0a 3c 2f 75 6c 3e 0a 3c </a></b>.</ul>.<
0060 2f 64 69 76 3e 0a 3c 21 2d 2d 20 2f 54 4f 50 49 /div>.<!-- /TOPI
0070 43 53 20 74 6d 61 72 20 2d 2d 3e 0a 3c 21 2d 2d CS tmar -->.<!--
0080 20 54 4f 50 49 43 53 20 74 63 61 74 20 2d 2d 3e TOPICS tcat -->
0090 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 61 74 .<div class="cat
00a0 65 67 6f 72 69 65 73 22 3e 0a d0 f3 e1 f0 e8 ea egories">.......
00b0 e8 20 ea e0 f2 e0 eb ee e3 e0 3a 20 0a 3c 75 6c . ........: .<ul
00c0 3e 0a 3c 6c 69 3e 3c 61 20 20 6f 6e 43 6c 69 63 >.<li><a onClic
00d0 6b 3d 22 72 28 74 68 69 73 2c 27 74 63 61 74 27 k="r(this,'tcat'
00e0 29 22 20 20 68 72 65 66 3d 22 68 74 74 70 3a 2f )" href="http:/
00f0 2f 79 61 63 61 2e 79 61 6e 64 65 78 2e 72 75 2f /yaca.yandex.ru/
0100 79 63 61 2f 63 61 74 2f 45 6e 74 65 72 74 61 69 yca/cat/Entertai
0110 6e 6d 65 6e 74 2f 22 3e d0 e0 e7 e2 eb e5 f7 e5 nment/">........
0120 ed e8 ff 20 e8 20 ee f2 e4 fb f5 3c 2f 61 3e 26 ... . .....</a>&
0130 6e 62 73 70 3b 26 67 74 3b 26 6e 62 73 70 3b 3c nbsp;&gt;&nbsp;<
0140 61 20 20 6f 6e 43 6c 69 63 6b 3d 22 72 28 74 68 a onClick="r(th
0150 69 73 2c 27 74 63 61 74 27 29 22 20 20 68 72 65 is,'tcat')" hre
0160 66 3d 22 68 74 74 70 3a 2f 2f 79 61 63 61 2e 79 f="http://yaca.y
0170 61 6e 64 65 78 2e 72 75 2f 79 63 61 2f 63 61 74 andex.ru/yca/cat
0180 2f 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2f 53 /Entertainment/S
0190 70 6f 72 74 73 2f 22 3e d1 ef ee f0 f2 3c 2f 61 ports/">.....</a
01a0 3e 26 6e 62 73 70 3b 26 67 74 3b 26 6e 62 73 70 >&nbsp;&gt;&nbsp
01b0 3b 3c 62 3e 3c 61 20 20 6f 6e 43 6c 69 63 6b 3d ;<b><a onClick=
01c0 22 72 28 74 68 69 73 2c 27 74 63 61 74 27 29 22 "r(this,'tcat')"
01d0 20 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 79 href="http://y
01e0 61 63 61 2e 79 61 6e 64 65 78 2e 72 75 2f 79 63 aca.yandex.ru/yc
01f0 61 2f 63 61 74 2f 45 6e 74 65 72 74 61 69 6e 6d a/cat/Entertainm
0200 65 6e 74 2f 53 70 6f 72 74 73 2f 42 6f 64 79 62 ent/Sports/Bodyb
0210 75 69 6c 64 69 6e 67 5f 61 6e 64 5f 41 72 6d 5f uilding_and_Arm_
0220 57 72 65 73 74 6c 69 6e 67 2f 22 3e d1 e8 eb ee Wrestling/">....
0230 e2 fb e5 20 e2 e8 e4 fb 20 f1 ef ee f0 f2 e0 3c ... .... ......<
0240 2f 61 3e 3c 2f 62 3e 3c 6c 69 3e 3c 61 20 20 6f /a></b><li><a o
0250 6e 43 6c 69 63 6b 3d 22 72 28 74 68 69 73 2c 27 nClick="r(this,'
0260 74 63 61 74 27 29 22 20 20 68 72 65 66 3d 22 68 tcat')" href="h
0270 74 74 70 3a 2f 2f 79 61 63 61 2e 79 61 6e 64 65 ttp://yaca.yande
0280 78 2e 72 75 2f 79 63 61 2f 63 61 74 2f 43 6f 6d x.ru/yca/cat/Com
0290 70 75 74 65 72 73 2f 53 6f 66 74 77 61 72 65 2f puters/Software/
02a0 53 6f 66 74 2f 22 3e d1 ee f4 f2 3c 2f 61 3e 26 Soft/">....</a>&
02b0 6e 62 73 70 3b 26 67 74 3b 26 6e 62 73 70 3b 3c nbsp;&gt;&nbsp;<
02c0 61 20 20 6f 6e 43 6c 69 63 6b 3d 22 72 28 74 68 a onClick="r(th
02d0 69 73 2c 27 74 63 61 74 27 29 22 20 20 68 72 65 is,'tcat')" hre
02e0 66 3d 22 68 74 74 70 3a 2f 2f 79 61 63 61 2e 79 f="http://yaca.y
02f0 61 6e 64 65 78 2e 72 75 2f 79 63 61 2f 63 61 74 andex.ru/yca/cat
0300 2f 43 6f 6d 70 75 74 65 72 73 2f 53 6f 66 74 77 /Computers/Softw
0310 61 72 65 2f 53 6f 66 74 2f 48 6f 62 62 69 65 73 are/Soft/Hobbies
0320 2f 22 3e d5 ee e1 e1 e8 3c 2f 61 3e 26 6e 62 73 /">.....</a>&nbs
0330 70 3b 26 67 74 3b 26 6e 62 73 70 3b 3c 62 3e 3c p;&gt;&nbsp;<b><
0340 61 20 20 6f 6e 43 6c 69 63 6b 3d 22 72 28 74 68 a onClick="r(th
0350 69 73 2c 27 74 63 61 74 27 29 22 20 20 68 72 65 is,'tcat')" hre
0360 66 3d 22 68 74 74 70 3a 2f 2f 79 61 63 61 2e 79 f="http://yaca.y
0370 61 6e 64 65 78 2e 72 75 2f 79 63 61 2f 63 61 74 andex.ru/yca/cat
0380 2f 43 6f 6d 70 75 74 65 72 73 2f 53 6f 66 74 77 /Computers/Softw
0390 61 72 65 2f 53 6f 66 74 2f 48 6f 62 62 69 65 73 are/Soft/Hobbies
03a0 2f 31 30 35 39 39 2f 22 3e d1 ef ee f0 f2 3c 2f /10599/">.....</
03b0 61 3e 3c 2f 62 3e 3c 6c 69 3e 3c 61 20 20 6f 6e a></b><li><a on
03c0 43 6c 69 63 6b 3d 22 72 28 74 68 69 73 2c 27 74 Click="r(this,'t
03d0 63 61 74 27 29 22 20 20 68 72 65 66 3d 22 68 74 cat')" href="ht
03e0 74 70 3a 2f 2f 79 61 63 61 2e 79 61 6e 64 65 78 tp://yaca.yandex
03f0 2e 72 75 2f 79 63 61 2f 63 61 74 2f 45 6e 74 65 .ru/yca/cat/Ente
0400 72 74 61 69 6e 6d 65 6e 74 2f 22 3e d0 e0 e7 e2 rtainment/">....
0410 eb e5 f7 e5 ed e8 ff 20 e8 20 ee f2 e4 fb f5 3c ....... . .....<
0420 2f 61 3e 26 6e 62 73 70 3b 26 67 74 3b 26 6e 62 /a>&nbsp;&gt;&nb
0430 73 70 3b 3c 61 20 20 6f 6e 43 6c 69 63 6b 3d 22 sp;<a onClick="
0440 72 28 74 68 69 73 2c 27 74 63 61 74 27 29 22 20 r(this,'tcat')"
0450 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 79 61 href="http://ya
0460 63 61 2e 79 61 6e 64 65 78 2e 72 75 2f 79 63 61 ca.yandex.ru/yca
0470 2f 63 61 74 2f 45 6e 74 65 72 74 61 69 6e 6d 65 /cat/Entertainme
0480 6e 74 2f 53 70 6f 72 74 73 2f 22 3e d1 ef ee f0 nt/Sports/">....
0490 f2 3c 2f 61 3e 26 6e 62 73 70 3b 26 67 74 3b 26 .</a>&nbsp;&gt;&
04a0 6e 62 73 70 3b 3c 62 3e 3c 61 20 20 6f 6e 43 6c nbsp;<b><a onCl
04b0 69 63 6b 3d 22 72 28 74 68 69 73 2c 27 74 63 61 ick="r(this,'tca
04c0 74 27 29 22 20 20 68 72 65 66 3d 22 68 74 74 70 t')" href="http
04d0 3a 2f 2f 79 61 63 61 2e 79 61 6e 64 65 78 2e 72 ://yaca.yandex.r
04e0 75 2f 79 63 61 2f 63 61 74 2f 45 6e 74 65 72 74 u/yca/cat/Entert
04f0 61 69 6e 6d 65 6e 74 2f 53 70 6f 72 74 73 2f 57 ainment/Sports/W
0500 61 74 65 72 5f 53 70 6f 72 74 73 2f 22 3e c2 ee ater_Sports/">..
0510 e4 ed fb e9 20 f1 ef ee f0 f2 3c 2f 61 3e 3c 2f .... .....</a></
0520 62 3e 0a 3c 2f 75 6c 3e 0a 3c 2f 64 69 76 3e 0a b>.</ul>.</div>.
0530 3c 21 2d 2d 20 2f 54 4f 50 49 43 53 20 74 63 61 <!-- /TOPICS tca
0540 74 20 2d 2d 3e 0a 0a 3c 21 2d 2d 20 77 65 62 20 t -->..<!-- web
0550 72 65 73 75 6c 74 73 20 2d 2d 3e 0a 3c 21 2d 2d results -->.<!--
0560 20 77 65 62 20 73 65 61 72 63 68 20 72 65 73 75 web search resu
0570 6c 74 73 20 2d 2d 3e 0a 3c 6f 6c 20 63 6c 61 73 lts -->.<ol clas
0580 73 3d s=

Frame 20 (60 bytes on wire, 60 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.885454000
Time delta from previous packet: 0.000174000 seconds
Time relative to first packet: 1.219342000 seconds
Frame Number: 20
Packet Length: 60 bytes
Capture Length: 60 bytes
Ethernet II, Src: 00:e0:7d:d0:3b:8c, Dst: 00:08:e3:59:15:40
Destination: 00:08:e3:59:15:40 (Cisco_59:15:40)
Source: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Type: IP (0x0800)
Trailer: 202020202020
Internet Protocol, Src Addr: 195.201.8.148 (195.201.8.148), Dst Addr: 194.87.182.137 (194.87.182.137)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xcdd1 (52689)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0xe7bf (correct)
Source: 195.201.8.148 (195.201.8.148)
Destination: 194.87.182.137 (194.87.182.137)
Transmission Control Protocol, Src Port: 1053 (1053), Dst Port: 3128 (3128), Seq: 29955192, Ack: 2206939587, Len: 0
Source port: 1053 (1053)
Destination port: 3128 (3128)
Sequence number: 29955192
Acknowledgement number: 2206939587
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 8760
Checksum: 0x6479 (correct)