Сети1 и 2 сем 2011 / 1 сем / Ethereal / MYFFFF2

Frame 21 (1330 bytes on wire, 1330 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.887108000
Time delta from previous packet: 0.001654000 seconds
Time relative to first packet: 1.220996000 seconds
Frame Number: 21
Packet Length: 1330 bytes
Capture Length: 1330 bytes
Ethernet II, Src: 00:08:e3:59:15:40, Dst: 00:e0:7d:d0:3b:8c
Destination: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Source: 00:08:e3:59:15:40 (Cisco_59:15:40)
Type: IP (0x0800)
Internet Protocol, Src Addr: 194.87.182.137 (194.87.182.137), Dst Addr: 195.201.8.148 (195.201.8.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00)
0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1316
Identification: 0x1f44 (8004)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xd231 (correct)
Source: 194.87.182.137 (194.87.182.137)
Destination: 195.201.8.148 (195.201.8.148)
Transmission Control Protocol, Src Port: 3128 (3128), Dst Port: 1053 (1053), Seq: 2206939587, Ack: 29955192, Len: 1276
Source port: 3128 (3128)
Destination port: 1053 (1053)
Sequence number: 2206939587
Next sequence number: 2206940863
Acknowledgement number: 29955192
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0x058e (correct)
Hypertext Transfer Protocol
Data (1276 bytes)

0000 72 65 73 75 6c 74 73 3e 3c 6c 69 20 76 61 6c 75 results><li valu
0010 65 3d 31 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d e=1>.<div class=
0020 22 74 69 74 6c 65 22 3e 0a 3c 41 20 6f 6e 43 6c "title">.<A onCl
0030 69 63 6b 3d 22 72 28 74 68 69 73 2c 27 77 65 62 ick="r(this,'web
0040 27 29 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f ')" href="http:/
0050 2f 77 77 77 2e 73 70 6f 72 74 2d 65 78 70 72 65 /www.sport-expre
0060 73 73 2e 72 75 2f 22 20 74 61 72 67 65 74 3d 5f ss.ru/" target=_
0070 62 6c 61 6e 6b 3e 0a cf ee f0 f2 e0 eb 20 3c 62 blank>....... <b
0080 3e d1 cf ce d0 d2 3c 2f 62 3e 2d dd ca d1 cf d0 >.....</b>-.....
0090 c5 d1 d1 20 28 c3 eb e0 e2 ed e0 ff 20 f1 f2 f0 ... (....... ...
00a0 e0 ed e8 f6 e0 29 3c 2f 41 3e 0a 3c 2f 64 69 76 .....)</A>.</div
00b0 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 65 >.<div class="te
00c0 78 74 22 3e 0a d0 e0 f1 f1 fb eb ea e8 20 ef ee xt">......... ..
00d0 f0 f2 e0 eb e0 20 26 71 75 6f 74 3b 3c 62 3e d1 ..... &quot;<b>.
00e0 ef ee f0 f2 3c 2f 62 3e 2d dd ea f1 ef f0 e5 f1 ....</b>-.......
00f0 f1 26 71 75 6f 74 3b 20 ed e0 20 53 75 62 73 63 .&quot; .. Subsc
0100 72 69 62 65 2e 52 75 3c 62 72 3e d2 ee e3 e4 e0 ribe.Ru<br>.....
0110 20 ec fb 20 f0 e0 e4 fb 20 f1 ee ee e1 f9 e8 f2 .. .... .......
0120 fc 20 e2 e0 ec 20 ee 20 f1 ee e7 e4 e0 ed e8 e8 . ... . ........
0130 20 ea eb f3 e1 e0 20 ef ee e4 ef e8 f1 f7 e8 ea ..... .........
0140 ee e2 20 27 3c 62 3e d1 cf ce d0 d2 3c 2f 62 3e .. '<b>.....</b>
0150 2d dd ca d1 cf d0 c5 d1 d1 27 2c 20 f7 eb e5 ed -........', ....
0160 fb 20 ea ee f2 ee f0 ee e3 ee 20 ec ee e3 f3 f2 . ........ .....
0170 20 f0 e0 f1 f1 f7 e8 f2 fb e2 e0 f2 fc 20 ed e0 ............ ..
0180 20 f1 ea e8 e4 ea e8 20 e8 20 eb fc e3 ee f2 fb ...... . ......
0190 20 e2 20 f1 e0 ec fb f5 20 e8 ed f2 e5 f0 e5 f1 . ..... .......
01a0 ed fb f5 20 2e 2e 2e 20 0a 3c 2f 64 69 76 3e 0a ... ... .</div>.
01b0 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 66 .<div class="inf
01c0 6f 22 3e 0a 68 74 74 70 3a 2f 2f 77 77 77 2e 73 o">.http://www.s
01d0 70 6f 72 74 2d 65 78 70 72 65 73 73 2e 72 75 2f port-express.ru/
01e0 20 28 34 31 ca c1 29 20 26 23 31 35 31 3b 20 f1 (41..) &#151; .
01f0 f2 f0 ee e3 ee e5 20 f1 ee ee f2 e2 e5 f2 f1 f2 ...... .........
0200 e2 e8 e5 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 0a 3c ....</div>.....<
0210 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 66 6f 22 div class="info"
0220 3e 0a 0a 3c 6e 6f 62 72 3e 3c 41 20 68 72 65 66 >..<nobr><A href
0230 3d 22 68 74 74 70 3a 2f 2f 68 67 68 6c 74 64 2e ="http://hghltd.
0240 79 61 6e 64 65 78 2e 72 75 2f 79 61 6e 64 62 74 yandex.ru/yandbt
0250 6d 3f 75 72 6c 3d 68 74 74 70 3a 2f 2f 77 77 77 m?url=http://www
0260 2e 73 70 6f 72 74 2d 65 78 70 72 65 73 73 2e 72 .sport-express.r
0270 75 2f 26 74 65 78 74 3d 25 46 31 25 45 46 25 45 u/&text=%F1%EF%E
0280 45 25 46 30 25 46 32 26 64 73 6e 3d 33 39 26 71 E%F0%F2&dsn=39&q
0290 3d 32 31 34 36 37 32 32 31 36 33 26 64 3d 32 35 =2146722163&d=25
02a0 38 31 30 30 30 22 20 74 61 72 67 65 74 3d 5f 62 81000" target=_b
02b0 6c 61 6e 6b 3e cd e0 e9 e4 e5 ed ed fb e5 20 f1 lank>......... .
02c0 eb ee e2 e0 3c 2f 41 3e 20 26 6e 62 73 70 3b 26 ....</A> &nbsp;&
02d0 6d 69 64 64 6f 74 3b 26 6e 62 73 70 3b 3c 2f 6e middot;&nbsp;</n
02e0 6f 62 72 3e 0a 0a 3c 6e 6f 62 72 3e 3c 41 20 48 obr>..<nobr><A H
02f0 52 45 46 3d 22 2f 79 61 6e 64 73 65 61 72 63 68 REF="/yandsearch
0300 3f 72 70 74 3d 72 61 64 26 64 73 3d 68 74 74 70 ?rpt=rad&ds=http
0310 3a 2f 2f 77 77 77 2e 73 70 6f 72 74 2d 65 78 70 ://www.sport-exp
0320 72 65 73 73 2e 72 75 2f 22 3e cf ee f5 ee e6 e8 ress.ru/">......
0330 e5 20 e4 ee ea f3 ec e5 ed f2 fb 3c 2f 41 3e 20 . .........</A>
0340 26 6e 62 73 70 3b 26 6d 69 64 64 6f 74 3b 26 6e &nbsp;&middot;&n
0350 62 73 70 3b 3c 2f 6e 6f 62 72 3e 0a 0a 3c 6e 6f bsp;</nobr>..<no
0360 62 72 3e 3c 41 20 48 52 45 46 3d 22 2f 79 61 6e br><A HREF="/yan
0370 64 73 65 61 72 63 68 3f 74 65 78 74 3d 25 46 31 dsearch?text=%F1
0380 25 45 46 25 45 45 25 46 30 25 46 32 26 73 75 72 %EF%EE%F0%F2&sur
0390 6c 3d 73 70 6f 72 74 2d 65 78 70 72 65 73 73 2e l=sport-express.
03a0 72 75 26 70 61 67 3d 75 26 72 70 74 3d 72 61 64 ru&pag=u&rpt=rad
03b0 22 3e c5 f9 e5 20 f1 20 f1 e0 e9 f2 e0 3c 2f 41 ">... . .....</A
03c0 3e 26 6e 62 73 70 3b 28 33 34 34 31 34 29 20 26 >&nbsp;(34414) &
03d0 6e 62 73 70 3b 26 6d 69 64 64 6f 74 3b 26 6e 62 nbsp;&middot;&nb
03e0 73 70 3b 3c 2f 6e 6f 62 72 3e 0a 3c 6e 6f 62 72 sp;</nobr>.<nobr
03f0 3e d0 f3 e1 f0 e8 ea e0 3a 20 3c 61 20 20 6f 6e >.......: <a on
0400 43 6c 69 63 6b 3d 22 72 28 74 68 69 73 2c 27 77 Click="r(this,'w
0410 65 62 32 79 61 63 61 27 29 22 20 20 68 72 65 66 eb2yaca')" href
0420 3d 22 68 74 74 70 3a 2f 2f 79 61 63 61 2e 79 61 ="http://yaca.ya
0430 6e 64 65 78 2e 72 75 2f 79 63 61 2f 63 61 74 2f ndex.ru/yca/cat/
0440 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2f 53 70 Entertainment/Sp
0450 6f 72 74 73 2f 22 3e d1 ef ee f0 f2 3c 2f 61 3e orts/">.....</a>
0460 3c 2f 6e 6f 62 72 3e 0a 3c 2f 64 69 76 3e 0a 3c </nobr>.</div>.<
0470 2f 6c 69 3e 0a 3c 6c 69 20 76 61 6c 75 65 3d 32 /li>.<li value=2
0480 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 69 >.<div class="ti
0490 74 6c 65 22 3e 0a 3c 41 20 6f 6e 43 6c 69 63 6b tle">.<A onClick
04a0 3d 22 72 28 74 68 69 73 2c 27 77 65 62 27 29 22 ="r(this,'web')"
04b0 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 href="http://ww
04c0 77 2e 73 6f 76 73 70 6f 72 74 2e 72 75 2f 22 20 w.sovsport.ru/"
04d0 74 61 72 67 65 74 3d 5f 62 6c 61 6e 6b 3e 0a d1 target=_blank>..
04e0 ee e2 e5 f2 f1 ea e8 e9 20 3c 62 3e d1 ef ee f0 ........ <b>....
04f0 f2 3c 2f 62 3e 3c 2f 41 3e 0a 3c 2f .</b></A>.</

Frame 22 (62 bytes on wire, 62 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.910316000
Time delta from previous packet: 0.023208000 seconds
Time relative to first packet: 1.244204000 seconds
Frame Number: 22
Packet Length: 62 bytes
Capture Length: 62 bytes
Ethernet II, Src: 00:e0:7d:d0:3b:8c, Dst: 00:08:e3:59:15:40
Destination: 00:08:e3:59:15:40 (Cisco_59:15:40)
Source: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Type: IP (0x0800)
Internet Protocol, Src Addr: 195.201.8.148 (195.201.8.148), Dst Addr: 194.87.182.137 (194.87.182.137)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 48
Identification: 0xcfd1 (53201)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0xe5b7 (correct)
Source: 195.201.8.148 (195.201.8.148)
Destination: 194.87.182.137 (194.87.182.137)
Transmission Control Protocol, Src Port: 1054 (1054), Dst Port: 3128 (3128), Seq: 29955961, Ack: 0, Len: 0
Source port: 1054 (1054)
Destination port: 3128 (3128)
Sequence number: 29955961
Header length: 28 bytes
Flags: 0x0002 (SYN)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 8192
Checksum: 0xf448 (correct)
Options: (8 bytes)
Maximum segment size: 1460 bytes
NOP
NOP
SACK permitted

Frame 23 (62 bytes on wire, 62 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.912676000
Time delta from previous packet: 0.002360000 seconds
Time relative to first packet: 1.246564000 seconds
Frame Number: 23
Packet Length: 62 bytes
Capture Length: 62 bytes
Ethernet II, Src: 00:e0:7d:d0:3b:8c, Dst: 00:08:e3:59:15:40
Destination: 00:08:e3:59:15:40 (Cisco_59:15:40)
Source: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Type: IP (0x0800)
Internet Protocol, Src Addr: 195.201.8.148 (195.201.8.148), Dst Addr: 194.87.182.137 (194.87.182.137)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 48
Identification: 0xd1d1 (53713)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0xe3b7 (correct)
Source: 195.201.8.148 (195.201.8.148)
Destination: 194.87.182.137 (194.87.182.137)
Transmission Control Protocol, Src Port: 1055 (1055), Dst Port: 3128 (3128), Seq: 29955963, Ack: 0, Len: 0
Source port: 1055 (1055)
Destination port: 3128 (3128)
Sequence number: 29955963
Header length: 28 bytes
Flags: 0x0002 (SYN)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 8192
Checksum: 0xf445 (correct)
Options: (8 bytes)
Maximum segment size: 1460 bytes
NOP
NOP
SACK permitted

Frame 24 (62 bytes on wire, 62 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.913908000
Time delta from previous packet: 0.001232000 seconds
Time relative to first packet: 1.247796000 seconds
Frame Number: 24
Packet Length: 62 bytes
Capture Length: 62 bytes
Ethernet II, Src: 00:08:e3:59:15:40, Dst: 00:e0:7d:d0:3b:8c
Destination: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Source: 00:08:e3:59:15:40 (Cisco_59:15:40)
Type: IP (0x0800)
Internet Protocol, Src Addr: 194.87.182.137 (194.87.182.137), Dst Addr: 195.201.8.148 (195.201.8.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00)
0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 48
Identification: 0x0000 (0)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xf669 (correct)
Source: 194.87.182.137 (194.87.182.137)
Destination: 195.201.8.148 (195.201.8.148)
Transmission Control Protocol, Src Port: 3128 (3128), Dst Port: 1054 (1054), Seq: 2208067145, Ack: 29955962, Len: 0
Source port: 3128 (3128)
Destination port: 1054 (1054)
Sequence number: 2208067145
Acknowledgement number: 29955962
Header length: 28 bytes
Flags: 0x0012 (SYN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 5840
Checksum: 0x0b82 (correct)
Options: (8 bytes)
Maximum segment size: 1460 bytes
NOP
NOP
SACK permitted

Frame 25 (60 bytes on wire, 60 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.914044000
Time delta from previous packet: 0.000136000 seconds
Time relative to first packet: 1.247932000 seconds
Frame Number: 25
Packet Length: 60 bytes
Capture Length: 60 bytes
Ethernet II, Src: 00:e0:7d:d0:3b:8c, Dst: 00:08:e3:59:15:40
Destination: 00:08:e3:59:15:40 (Cisco_59:15:40)
Source: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Type: IP (0x0800)
Trailer: 202020202020
Internet Protocol, Src Addr: 195.201.8.148 (195.201.8.148), Dst Addr: 194.87.182.137 (194.87.182.137)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xd2d1 (53969)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0xe2bf (correct)
Source: 195.201.8.148 (195.201.8.148)
Destination: 194.87.182.137 (194.87.182.137)
Transmission Control Protocol, Src Port: 1054 (1054), Dst Port: 3128 (3128), Seq: 29955962, Ack: 2208067146, Len: 0
Source port: 1054 (1054)
Destination port: 3128 (3128)
Sequence number: 29955962
Acknowledgement number: 2208067146
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 8760
Checksum: 0x2cde (correct)

Frame 26 (461 bytes on wire, 461 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.914572000
Time delta from previous packet: 0.000528000 seconds
Time relative to first packet: 1.248460000 seconds
Frame Number: 26
Packet Length: 461 bytes
Capture Length: 461 bytes
Ethernet II, Src: 00:e0:7d:d0:3b:8c, Dst: 00:08:e3:59:15:40
Destination: 00:08:e3:59:15:40 (Cisco_59:15:40)
Source: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Type: IP (0x0800)
Internet Protocol, Src Addr: 195.201.8.148 (195.201.8.148), Dst Addr: 194.87.182.137 (194.87.182.137)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 447
Identification: 0xd3d1 (54225)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0xe028 (correct)
Source: 195.201.8.148 (195.201.8.148)
Destination: 194.87.182.137 (194.87.182.137)
Transmission Control Protocol, Src Port: 1054 (1054), Dst Port: 3128 (3128), Seq: 29955962, Ack: 2208067146, Len: 407
Source port: 1054 (1054)
Destination port: 3128 (3128)
Sequence number: 29955962
Next sequence number: 29956369
Acknowledgement number: 2208067146
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 8760
Checksum: 0x2722 (correct)
Hypertext Transfer Protocol
GET http://img.yandex.ru/css/_yandex-global.css HTTP/1.0\r\n
Request Method: GET
Accept: */*\r\n
Referer: http://www.yandex.ru/yandsearch?rpt=rad&text=%F1%EF%EE%F0%F2\r\n
Accept-Language: ru\r\n
Cookie: yandexuid=8281771064384630; yabs-frequency=34317.1:33361.2\r\n
If-Modified-Since: Thu, 09 Oct 2003 14:43:23 GMT; length=2210\r\n
User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)\r\n
Host: img.yandex.ru\r\n
Proxy-Connection: Keep-Alive\r\n
\r\n

Frame 27 (62 bytes on wire, 62 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.919426000
Time delta from previous packet: 0.004854000 seconds
Time relative to first packet: 1.253314000 seconds
Frame Number: 27
Packet Length: 62 bytes
Capture Length: 62 bytes
Ethernet II, Src: 00:08:e3:59:15:40, Dst: 00:e0:7d:d0:3b:8c
Destination: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Source: 00:08:e3:59:15:40 (Cisco_59:15:40)
Type: IP (0x0800)
Internet Protocol, Src Addr: 194.87.182.137 (194.87.182.137), Dst Addr: 195.201.8.148 (195.201.8.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00)
0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 48
Identification: 0x0000 (0)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xf669 (correct)
Source: 194.87.182.137 (194.87.182.137)
Destination: 195.201.8.148 (195.201.8.148)
Transmission Control Protocol, Src Port: 3128 (3128), Dst Port: 1055 (1055), Seq: 2200836408, Ack: 29955964, Len: 0
Source port: 3128 (3128)
Destination port: 1055 (1055)
Sequence number: 2200836408
Acknowledgement number: 29955964
Header length: 28 bytes
Flags: 0x0012 (SYN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 5840
Checksum: 0x60fe (correct)
Options: (8 bytes)
Maximum segment size: 1460 bytes
NOP
NOP
SACK permitted

Frame 28 (60 bytes on wire, 60 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.919530000
Time delta from previous packet: 0.000104000 seconds
Time relative to first packet: 1.253418000 seconds
Frame Number: 28
Packet Length: 60 bytes
Capture Length: 60 bytes
Ethernet II, Src: 00:e0:7d:d0:3b:8c, Dst: 00:08:e3:59:15:40
Destination: 00:08:e3:59:15:40 (Cisco_59:15:40)
Source: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Type: IP (0x0800)
Trailer: 202020202020
Internet Protocol, Src Addr: 195.201.8.148 (195.201.8.148), Dst Addr: 194.87.182.137 (194.87.182.137)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xd5d1 (54737)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0xdfbf (correct)
Source: 195.201.8.148 (195.201.8.148)
Destination: 194.87.182.137 (194.87.182.137)
Transmission Control Protocol, Src Port: 1055 (1055), Dst Port: 3128 (3128), Seq: 29955964, Ack: 2200836409, Len: 0
Source port: 1055 (1055)
Destination port: 3128 (3128)
Sequence number: 29955964
Acknowledgement number: 2200836409
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 8760
Checksum: 0x825a (correct)

Frame 29 (467 bytes on wire, 467 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.920010000
Time delta from previous packet: 0.000480000 seconds
Time relative to first packet: 1.253898000 seconds
Frame Number: 29
Packet Length: 467 bytes
Capture Length: 467 bytes
Ethernet II, Src: 00:e0:7d:d0:3b:8c, Dst: 00:08:e3:59:15:40
Destination: 00:08:e3:59:15:40 (Cisco_59:15:40)
Source: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Type: IP (0x0800)
Internet Protocol, Src Addr: 195.201.8.148 (195.201.8.148), Dst Addr: 194.87.182.137 (194.87.182.137)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 453
Identification: 0xd6d1 (54993)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0xdd22 (correct)
Source: 195.201.8.148 (195.201.8.148)
Destination: 194.87.182.137 (194.87.182.137)
Transmission Control Protocol, Src Port: 1055 (1055), Dst Port: 3128 (3128), Seq: 29955964, Ack: 2200836409, Len: 413
Source port: 1055 (1055)
Destination port: 3128 (3128)
Sequence number: 29955964
Next sequence number: 29956377
Acknowledgement number: 2200836409
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 8760
Checksum: 0x4f3f (correct)
Hypertext Transfer Protocol
GET http://img.yandex.ru/css/_yandex-global-modern.css HTTP/1.0\r\n
Request Method: GET
Accept: */*\r\n
Referer: http://www.yandex.ru/yandsearch?rpt=rad&text=%F1%EF%EE%F0%F2\r\n
Accept-Language: ru\r\n
Cookie: yandexuid=8281771064384630; yabs-frequency=34317.1:33361.2\r\n
If-Modified-Since: Thu, 09 Oct 2003 12:27:18 GMT; length=102\r\n
User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)\r\n
Host: img.yandex.ru\r\n
Proxy-Connection: Keep-Alive\r\n
\r\n

Frame 30 (60 bytes on wire, 60 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.922118000
Time delta from previous packet: 0.002108000 seconds
Time relative to first packet: 1.256006000 seconds
Frame Number: 30
Packet Length: 60 bytes
Capture Length: 60 bytes
Ethernet II, Src: 00:08:e3:59:15:40, Dst: 00:e0:7d:d0:3b:8c
Destination: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Source: 00:08:e3:59:15:40 (Cisco_59:15:40)
Type: IP (0x0800)
Trailer: 000000000000
Internet Protocol, Src Addr: 194.87.182.137 (194.87.182.137), Dst Addr: 195.201.8.148 (195.201.8.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00)
0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0x7d2c (32044)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0x7945 (correct)
Source: 194.87.182.137 (194.87.182.137)
Destination: 195.201.8.148 (195.201.8.148)
Transmission Control Protocol, Src Port: 3128 (3128), Dst Port: 1054 (1054), Seq: 2208067146, Ack: 29956369, Len: 0
Source port: 3128 (3128)
Destination port: 1054 (1054)
Sequence number: 2208067146
Acknowledgement number: 29956369
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0x345f (correct)

Frame 31 (1464 bytes on wire, 1464 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.935041000
Time delta from previous packet: 0.012923000 seconds
Time relative to first packet: 1.268929000 seconds
Frame Number: 31
Packet Length: 1464 bytes
Capture Length: 1464 bytes
Ethernet II, Src: 00:08:e3:59:15:40, Dst: 00:e0:7d:d0:3b:8c
Destination: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Source: 00:08:e3:59:15:40 (Cisco_59:15:40)
Type: IP (0x0800)
Internet Protocol, Src Addr: 194.87.182.137 (194.87.182.137), Dst Addr: 195.201.8.148 (195.201.8.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00)
0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1450
Identification: 0x1f45 (8005)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xd1aa (correct)
Source: 194.87.182.137 (194.87.182.137)
Destination: 195.201.8.148 (195.201.8.148)
Transmission Control Protocol, Src Port: 3128 (3128), Dst Port: 1053 (1053), Seq: 2206940863, Ack: 29955192, Len: 1410
Source port: 3128 (3128)
Destination port: 1053 (1053)
Sequence number: 2206940863
Next sequence number: 2206942273
Acknowledgement number: 29955192
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0x97b5 (correct)
Hypertext Transfer Protocol
Data (1410 bytes)

0000 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d div>.<div class=
0010 22 74 65 78 74 22 3e 0a cf d0 c0 c2 c8 cb c0 20 "text">........
0020 cf ce 20 c2 c8 c4 c0 cc 20 3c 62 3e d1 cf ce d0 .. ..... <b>....
0030 d2 c0 3c 2f 62 3e 3c 62 72 3e ce f0 e3 e0 ed e8 ..</b><br>......
0040 e7 e0 f2 ee f0 e0 ec e8 20 f7 e5 ec ef e8 ee ed ........ .......
0050 e0 f2 e0 20 ff e2 eb ff fe f2 f1 ff 20 d4 e5 e4 ... ........ ...
0060 e5 f0 e0 f6 e8 ff 20 ed e0 f1 f2 ee eb fc ed ee ...... .........
0070 e3 ee 20 f2 e5 ed ed e8 f1 e0 20 d0 ee f1 f1 e8 .. ....... .....
0080 e8 20 e8 20 ea ee ec e8 f2 e5 f2 20 ef ee 20 f4 . . ....... .. .
0090 e8 e7 e8 f7 e5 f1 ea ee e9 20 ea f3 eb fc f2 f3 ......... ......
00a0 f0 e5 20 e8 20 3c 62 3e f1 ef ee f0 f2 f3 3c 2f .. . <b>......</
00b0 62 3e 20 ef f0 e8 20 ef f0 e0 e2 e8 f2 e5 eb fc b> ... .........
00c0 f1 f2 e2 e5 20 cc ee f1 ea e2 fb 2e 0a 3c 2f 64 .... ........</d
00d0 69 76 3e 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d iv>..<div class=
00e0 22 69 6e 66 6f 22 3e 0a 68 74 74 70 3a 2f 2f 77 "info">.http://w
00f0 77 77 2e 73 6f 76 73 70 6f 72 74 2e 72 75 2f 20 ww.sovsport.ru/
0100 28 34 39 ca c1 29 20 26 23 31 35 31 3b 20 f1 f2 (49..) &#151; ..
0110 f0 ee e3 ee e5 20 f1 ee ee f2 e2 e5 f2 f1 f2 e2 ..... ..........
0120 e8 e5 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 0a 3c 64 ...</div>.....<d
0130 69 76 20 63 6c 61 73 73 3d 22 69 6e 66 6f 22 3e iv class="info">
0140 0a 0a 3c 6e 6f 62 72 3e 3c 41 20 68 72 65 66 3d ..<nobr><A href=
0150 22 68 74 74 70 3a 2f 2f 68 67 68 6c 74 64 2e 79 "http://hghltd.y
0160 61 6e 64 65 78 2e 72 75 2f 79 61 6e 64 62 74 6d andex.ru/yandbtm
0170 3f 75 72 6c 3d 68 74 74 70 3a 2f 2f 77 77 77 2e ?url=http://www.
0180 73 6f 76 73 70 6f 72 74 2e 72 75 2f 26 74 65 78 sovsport.ru/&tex
0190 74 3d 25 46 31 25 45 46 25 45 45 25 46 30 25 46 t=%F1%EF%EE%F0%F
01a0 32 26 64 73 6e 3d 33 33 26 71 3d 32 31 34 36 37 2&dsn=33&q=21467
01b0 32 32 31 36 33 26 64 3d 31 30 31 36 34 35 35 22 22163&d=1016455"
01c0 20 74 61 72 67 65 74 3d 5f 62 6c 61 6e 6b 3e cd target=_blank>.
01d0 e0 e9 e4 e5 ed ed fb e5 20 f1 eb ee e2 e0 3c 2f ........ .....</
01e0 41 3e 20 26 6e 62 73 70 3b 26 6d 69 64 64 6f 74 A> &nbsp;&middot
01f0 3b 26 6e 62 73 70 3b 3c 2f 6e 6f 62 72 3e 0a 0a ;&nbsp;</nobr>..
0200 3c 6e 6f 62 72 3e 3c 41 20 48 52 45 46 3d 22 2f <nobr><A HREF="/
0210 79 61 6e 64 73 65 61 72 63 68 3f 72 70 74 3d 72 yandsearch?rpt=r
0220 61 64 26 64 73 3d 68 74 74 70 3a 2f 2f 77 77 77 ad&ds=http://www
0230 2e 73 6f 76 73 70 6f 72 74 2e 72 75 2f 22 3e cf .sovsport.ru/">.
0240 ee f5 ee e6 e8 e5 20 e4 ee ea f3 ec e5 ed f2 fb ...... .........
0250 3c 2f 41 3e 20 26 6e 62 73 70 3b 26 6d 69 64 64 </A> &nbsp;&midd
0260 6f 74 3b 26 6e 62 73 70 3b 3c 2f 6e 6f 62 72 3e ot;&nbsp;</nobr>
0270 0a 0a 3c 6e 6f 62 72 3e 3c 41 20 48 52 45 46 3d ..<nobr><A HREF=
0280 22 2f 79 61 6e 64 73 65 61 72 63 68 3f 74 65 78 "/yandsearch?tex
0290 74 3d 25 46 31 25 45 46 25 45 45 25 46 30 25 46 t=%F1%EF%EE%F0%F
02a0 32 26 73 75 72 6c 3d 73 6f 76 73 70 6f 72 74 2e 2&surl=sovsport.
02b0 72 75 26 70 61 67 3d 75 26 72 70 74 3d 72 61 64 ru&pag=u&rpt=rad
02c0 22 3e c5 f9 e5 20 f1 20 f1 e0 e9 f2 e0 3c 2f 41 ">... . .....</A
02d0 3e 26 6e 62 73 70 3b 28 31 34 36 30 32 29 20 26 >&nbsp;(14602) &
02e0 6e 62 73 70 3b 26 6d 69 64 64 6f 74 3b 26 6e 62 nbsp;&middot;&nb
02f0 73 70 3b 3c 2f 6e 6f 62 72 3e 0a 3c 6e 6f 62 72 sp;</nobr>.<nobr
0300 3e d0 f3 e1 f0 e8 ea e0 3a 20 3c 61 20 20 6f 6e >.......: <a on
0310 43 6c 69 63 6b 3d 22 72 28 74 68 69 73 2c 27 77 Click="r(this,'w
0320 65 62 32 79 61 63 61 27 29 22 20 20 68 72 65 66 eb2yaca')" href
0330 3d 22 68 74 74 70 3a 2f 2f 79 61 63 61 2e 79 61 ="http://yaca.ya
0340 6e 64 65 78 2e 72 75 2f 79 63 61 2f 63 61 74 2f ndex.ru/yca/cat/
0350 53 6f 63 69 65 74 79 2f 4d 65 64 69 61 2f 50 65 Society/Media/Pe
0360 72 69 6f 64 69 63 61 6c 73 2f 4e 65 77 73 70 61 riodicals/Newspa
0370 70 65 72 73 2f 22 3e c3 e0 e7 e5 f2 fb 3c 2f 61 pers/">......</a
0380 3e 3c 2f 6e 6f 62 72 3e 0a 3c 2f 64 69 76 3e 0a ></nobr>.</div>.
0390 3c 2f 6c 69 3e 0a 3c 6c 69 20 76 61 6c 75 65 3d </li>.<li value=
03a0 33 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 3>.<div class="t
03b0 69 74 6c 65 22 3e 0a 3c 41 20 6f 6e 43 6c 69 63 itle">.<A onClic
03c0 6b 3d 22 72 28 74 68 69 73 2c 27 77 65 62 27 29 k="r(this,'web')
03d0 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 " href="http://w
03e0 77 77 2e 73 70 6f 72 74 73 2e 72 75 2f 22 20 74 ww.sports.ru/" t
03f0 61 72 67 65 74 3d 5f 62 6c 61 6e 6b 3e 0a 3c 62 arget=_blank>.<b
0400 3e d1 ef ee f0 f2 3c 2f 62 3e 20 d1 e5 e3 ee e4 >.....</b> .....
0410 ed ff 20 2f 20 3c 62 3e d1 ef ee f0 f2 3c 2f 62 .. / <b>.....</b
0420 3e 20 f1 e5 e3 ee e4 ed ff 3c 2f 41 3e 0a 3c 2f > .......</A>.</
0430 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d div>.<div class=
0440 22 74 65 78 74 22 3e 0a d0 e5 ea eb e0 ec e0 20 "text">........
0450 ed e0 20 26 71 75 6f 74 3b 3c 62 3e d1 ef ee f0 .. &quot;<b>....
0460 f2 3c 2f 62 3e 20 d1 e5 e3 ee e4 ed ff 26 71 75 .</b> .......&qu
0470 6f 74 3b 3c 62 72 3e 3c 62 3e d1 ef ee f0 f2 3c ot;<br><b>.....<
0480 2f 62 3e 20 ed e5 e4 e5 eb e8 0a 3c 2f 64 69 76 /b> .......</div
0490 3e 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 >..<div class="i
04a0 6e 66 6f 22 3e 0a 68 74 74 70 3a 2f 2f 77 77 77 nfo">.http://www
04b0 2e 73 70 6f 72 74 73 2e 72 75 2f 20 28 37 39 ca .sports.ru/ (79.
04c0 c1 29 20 26 23 31 35 31 3b 20 f1 f2 f0 ee e3 ee .) &#151; ......
04d0 e5 20 f1 ee ee f2 e2 e5 f2 f1 f2 e2 e8 e5 0a 3c . .............<
04e0 2f 64 69 76 3e 0a 0a 0a 0a 0a 3c 64 69 76 20 63 /div>.....<div c
04f0 6c 61 73 73 3d 22 69 6e 66 6f 22 3e 0a 0a 3c 6e lass="info">..<n
0500 6f 62 72 3e 3c 41 20 68 72 65 66 3d 22 68 74 74 obr><A href="htt
0510 70 3a 2f 2f 68 67 68 6c 74 64 2e 79 61 6e 64 65 p://hghltd.yande
0520 78 2e 72 75 2f 79 61 6e 64 62 74 6d 3f 75 72 6c x.ru/yandbtm?url
0530 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 73 70 6f 72 =http://www.spor
0540 74 73 2e 72 75 2f 26 74 65 78 74 3d 25 46 31 25 ts.ru/&text=%F1%
0550 45 46 25 45 45 25 46 30 25 46 32 26 64 73 6e 3d EF%EE%F0%F2&dsn=
0560 33 35 26 71 3d 32 31 34 36 37 32 32 31 36 33 26 35&q=2146722163&
0570 64 3d 35 39 30 36 35 39 22 20 74 61 72 67 65 74 d=590659" target
0580 3d 5f =_

Frame 32 (60 bytes on wire, 60 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.935188000
Time delta from previous packet: 0.000147000 seconds
Time relative to first packet: 1.269076000 seconds
Frame Number: 32
Packet Length: 60 bytes
Capture Length: 60 bytes
Ethernet II, Src: 00:e0:7d:d0:3b:8c, Dst: 00:08:e3:59:15:40
Destination: 00:08:e3:59:15:40 (Cisco_59:15:40)
Source: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Type: IP (0x0800)
Trailer: 202020202020
Internet Protocol, Src Addr: 195.201.8.148 (195.201.8.148), Dst Addr: 194.87.182.137 (194.87.182.137)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xd8d1 (55505)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0xdcbf (correct)
Source: 195.201.8.148 (195.201.8.148)
Destination: 194.87.182.137 (194.87.182.137)
Transmission Control Protocol, Src Port: 1053 (1053), Dst Port: 3128 (3128), Seq: 29955192, Ack: 2206942273, Len: 0
Source port: 1053 (1053)
Destination port: 3128 (3128)
Sequence number: 29955192
Acknowledgement number: 2206942273
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 8760
Checksum: 0x59fb (correct)

Frame 33 (1464 bytes on wire, 1464 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.939534000
Time delta from previous packet: 0.004346000 seconds
Time relative to first packet: 1.273422000 seconds
Frame Number: 33
Packet Length: 1464 bytes
Capture Length: 1464 bytes
Ethernet II, Src: 00:08:e3:59:15:40, Dst: 00:e0:7d:d0:3b:8c
Destination: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Source: 00:08:e3:59:15:40 (Cisco_59:15:40)
Type: IP (0x0800)
Internet Protocol, Src Addr: 194.87.182.137 (194.87.182.137), Dst Addr: 195.201.8.148 (195.201.8.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00)
0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1450
Identification: 0x1f46 (8006)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xd1a9 (correct)
Source: 194.87.182.137 (194.87.182.137)
Destination: 195.201.8.148 (195.201.8.148)
Transmission Control Protocol, Src Port: 3128 (3128), Dst Port: 1053 (1053), Seq: 2206942273, Ack: 29955192, Len: 1410
Source port: 3128 (3128)
Destination port: 1053 (1053)
Sequence number: 2206942273
Next sequence number: 2206943683
Acknowledgement number: 29955192
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0xf10e (correct)
Hypertext Transfer Protocol
Data (1410 bytes)

0000 62 6c 61 6e 6b 3e cd e0 e9 e4 e5 ed ed fb e5 20 blank>.........
0010 f1 eb ee e2 e0 3c 2f 41 3e 20 26 6e 62 73 70 3b .....</A> &nbsp;
0020 26 6d 69 64 64 6f 74 3b 26 6e 62 73 70 3b 3c 2f &middot;&nbsp;</
0030 6e 6f 62 72 3e 0a 0a 3c 6e 6f 62 72 3e 3c 41 20 nobr>..<nobr><A
0040 48 52 45 46 3d 22 2f 79 61 6e 64 73 65 61 72 63 HREF="/yandsearc
0050 68 3f 72 70 74 3d 72 61 64 26 64 73 3d 68 74 74 h?rpt=rad&ds=htt
0060 70 3a 2f 2f 77 77 77 2e 73 70 6f 72 74 73 2e 72 p://www.sports.r
0070 75 2f 22 3e cf ee f5 ee e6 e8 e5 20 e4 ee ea f3 u/">....... ....
0080 ec e5 ed f2 fb 3c 2f 41 3e 20 26 6e 62 73 70 3b .....</A> &nbsp;
0090 26 6d 69 64 64 6f 74 3b 26 6e 62 73 70 3b 3c 2f &middot;&nbsp;</
00a0 6e 6f 62 72 3e 0a 0a 3c 6e 6f 62 72 3e 3c 41 20 nobr>..<nobr><A
00b0 48 52 45 46 3d 22 2f 79 61 6e 64 73 65 61 72 63 HREF="/yandsearc
00c0 68 3f 74 65 78 74 3d 25 46 31 25 45 46 25 45 45 h?text=%F1%EF%EE
00d0 25 46 30 25 46 32 26 73 75 72 6c 3d 73 70 6f 72 %F0%F2&surl=spor
00e0 74 73 2e 72 75 26 70 61 67 3d 75 26 72 70 74 3d ts.ru&pag=u&rpt=
00f0 72 61 64 22 3e c5 f9 e5 20 f1 20 f1 e0 e9 f2 e0 rad">... . .....
0100 3c 2f 41 3e 26 6e 62 73 70 3b 28 32 34 34 31 29 </A>&nbsp;(2441)
0110 20 26 6e 62 73 70 3b 26 6d 69 64 64 6f 74 3b 26 &nbsp;&middot;&
0120 6e 62 73 70 3b 3c 2f 6e 6f 62 72 3e 0a 3c 6e 6f nbsp;</nobr>.<no
0130 62 72 3e d0 f3 e1 f0 e8 ea e0 3a 20 3c 61 20 20 br>.......: <a
0140 6f 6e 43 6c 69 63 6b 3d 22 72 28 74 68 69 73 2c onClick="r(this,
0150 27 77 65 62 32 79 61 63 61 27 29 22 20 20 68 72 'web2yaca')" hr
0160 65 66 3d 22 68 74 74 70 3a 2f 2f 79 61 63 61 2e ef="http://yaca.
0170 79 61 6e 64 65 78 2e 72 75 2f 79 63 61 2f 63 61 yandex.ru/yca/ca
0180 74 2f 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2f t/Entertainment/
0190 53 70 6f 72 74 73 2f 22 3e d1 ef ee f0 f2 3c 2f Sports/">.....</
01a0 61 3e 3c 2f 6e 6f 62 72 3e 0a 3c 2f 64 69 76 3e a></nobr>.</div>
01b0 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 76 61 6c 75 65 .</li>.<li value
01c0 3d 34 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 =4>.<div class="
01d0 74 69 74 6c 65 22 3e 0a 3c 41 20 6f 6e 43 6c 69 title">.<A onCli
01e0 63 6b 3d 22 72 28 74 68 69 73 2c 27 77 65 62 27 ck="r(this,'web'
01f0 29 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f )" href="http://
0200 77 77 77 2e 6e 65 76 61 73 70 6f 72 74 2e 72 75 www.nevasport.ru
0210 2f 22 20 74 61 72 67 65 74 3d 5f 62 6c 61 6e 6b /" target=_blank
0220 3e 0a cd e5 e2 f1 ea e8 e9 20 3c 62 3e d1 ef ee >........ <b>...
0230 f0 f2 3c 2f 62 3e 20 2d 20 c2 f1 e5 20 ee 20 3c ..</b> - ... . <
0240 62 3e f1 ef ee f0 f2 e5 3c 2f 62 3e 20 e2 20 d1 b>......</b> . .
0250 e0 ed ea f2 2d cf e5 f2 e5 f0 e1 f3 f0 e3 e5 3c ....-..........<
0260 2f 41 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 /A>.</div>.<div
0270 63 6c 61 73 73 3d 22 74 65 78 74 22 3e 0a cd e5 class="text">...
0280 e2 f1 ea e8 e9 20 3c 62 3e d1 ef ee f0 f2 3c 2f ..... <b>.....</
0290 62 3e 20 26 71 75 6f 74 3b 20 e3 eb e0 e2 ed e0 b> &quot; ......
02a0 ff 20 f1 f2 f0 e0 ed e8 f6 e0 3c 62 72 3e 20 2e . ........<br> .
02b0 2e 2e 20 ef ee 20 e4 e2 e5 20 eb f3 f7 f8 e8 f5 .. .. ... ......
02c0 20 ef e0 f0 fb 20 ee f2 20 ea e0 e6 e4 ee e9 20 .... .. ......
02d0 f1 f2 f0 e0 ed fb 2c 20 e3 e4 e5 20 e5 f1 f2 fc ......, ... ....
02e0 20 ef f0 ee f4 e8 eb fc ed e0 ff 20 ed e0 f6 e8 .......... ....
02f0 ee ed e0 eb fc ed e0 ff 20 f4 e5 e4 e5 f0 e0 f6 ........ .......
0300 e8 ff 2c 20 e2 f5 ee e4 ff f9 e0 ff 20 e2 20 cc .., ........ . .
0310 e5 e6 e4 f3 ed e0 f0 ee e4 ed f3 fe 20 f4 e5 e4 ............ ...
0320 e5 f0 e0 f6 e8 fe 20 f2 e0 ed f6 e5 e2 e0 eb fc ...... .........
0330 ed ee e3 ee 20 3c 62 3e f1 ef ee f0 f2 e0 3c 2f .... <b>......</
0340 62 3e 20 28 49 44 53 46 29 20 2e 2e 2e 20 0a 3c b> (IDSF) ... .<
0350 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 63 6c 61 73 /div>..<div clas
0360 73 3d 22 69 6e 66 6f 22 3e 0a 68 74 74 70 3a 2f s="info">.http:/
0370 2f 77 77 77 2e 6e 65 76 61 73 70 6f 72 74 2e 72 /www.nevasport.r
0380 75 2f 20 28 36 31 ca c1 29 20 26 23 31 35 31 3b u/ (61..) &#151;
0390 20 f1 f2 f0 ee e3 ee e5 20 f1 ee ee f2 e2 e5 f2 ....... .......
03a0 f1 f2 e2 e8 e5 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a ......</div>....
03b0 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 66 .<div class="inf
03c0 6f 22 3e 0a 0a 3c 6e 6f 62 72 3e 3c 41 20 68 72 o">..<nobr><A hr
03d0 65 66 3d 22 68 74 74 70 3a 2f 2f 68 67 68 6c 74 ef="http://hghlt
03e0 64 2e 79 61 6e 64 65 78 2e 72 75 2f 79 61 6e 64 d.yandex.ru/yand
03f0 62 74 6d 3f 75 72 6c 3d 68 74 74 70 3a 2f 2f 77 btm?url=http://w
0400 77 77 2e 6e 65 76 61 73 70 6f 72 74 2e 72 75 2f ww.nevasport.ru/
0410 26 74 65 78 74 3d 25 46 31 25 45 46 25 45 45 25 &text=%F1%EF%EE%
0420 46 30 25 46 32 26 64 73 6e 3d 31 39 26 71 3d 32 F0%F2&dsn=19&q=2
0430 31 34 36 37 32 32 31 36 33 26 64 3d 35 31 30 31 146722163&d=5101
0440 34 30 22 20 74 61 72 67 65 74 3d 5f 62 6c 61 6e 40" target=_blan
0450 6b 3e cd e0 e9 e4 e5 ed ed fb e5 20 f1 eb ee e2 k>......... ....
0460 e0 3c 2f 41 3e 20 26 6e 62 73 70 3b 26 6d 69 64 .</A> &nbsp;&mid
0470 64 6f 74 3b 26 6e 62 73 70 3b 3c 2f 6e 6f 62 72 dot;&nbsp;</nobr
0480 3e 0a 0a 3c 6e 6f 62 72 3e 3c 41 20 48 52 45 46 >..<nobr><A HREF
0490 3d 22 2f 79 61 6e 64 73 65 61 72 63 68 3f 72 70 ="/yandsearch?rp
04a0 74 3d 72 61 64 26 64 73 3d 68 74 74 70 3a 2f 2f t=rad&ds=http://
04b0 77 77 77 2e 6e 65 76 61 73 70 6f 72 74 2e 72 75 www.nevasport.ru
04c0 2f 22 3e cf ee f5 ee e6 e8 e5 20 e4 ee ea f3 ec /">....... .....
04d0 e5 ed f2 fb 3c 2f 41 3e 20 26 6e 62 73 70 3b 26 ....</A> &nbsp;&
04e0 6d 69 64 64 6f 74 3b 26 6e 62 73 70 3b 3c 2f 6e middot;&nbsp;</n
04f0 6f 62 72 3e 0a 0a 3c 6e 6f 62 72 3e 3c 41 20 48 obr>..<nobr><A H
0500 52 45 46 3d 22 2f 79 61 6e 64 73 65 61 72 63 68 REF="/yandsearch
0510 3f 74 65 78 74 3d 25 46 31 25 45 46 25 45 45 25 ?text=%F1%EF%EE%
0520 46 30 25 46 32 26 73 75 72 6c 3d 6e 65 76 61 73 F0%F2&surl=nevas
0530 70 6f 72 74 2e 72 75 26 70 61 67 3d 75 26 72 70 port.ru&pag=u&rp
0540 74 3d 72 61 64 22 3e c5 f9 e5 20 f1 20 f1 e0 e9 t=rad">... . ...
0550 f2 e0 3c 2f 41 3e 26 6e 62 73 70 3b 28 33 32 30 ..</A>&nbsp;(320
0560 35 29 20 26 6e 62 73 70 3b 26 6d 69 64 64 6f 74 5) &nbsp;&middot
0570 3b 26 6e 62 73 70 3b 3c 2f 6e 6f 62 72 3e 0a 3c ;&nbsp;</nobr>.<
0580 6e 6f no

Frame 34 (1330 bytes on wire, 1330 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.944315000
Time delta from previous packet: 0.004781000 seconds
Time relative to first packet: 1.278203000 seconds
Frame Number: 34
Packet Length: 1330 bytes
Capture Length: 1330 bytes
Ethernet II, Src: 00:08:e3:59:15:40, Dst: 00:e0:7d:d0:3b:8c
Destination: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Source: 00:08:e3:59:15:40 (Cisco_59:15:40)
Type: IP (0x0800)
Internet Protocol, Src Addr: 194.87.182.137 (194.87.182.137), Dst Addr: 195.201.8.148 (195.201.8.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00)
0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1316
Identification: 0x1f47 (8007)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xd22e (correct)
Source: 194.87.182.137 (194.87.182.137)
Destination: 195.201.8.148 (195.201.8.148)
Transmission Control Protocol, Src Port: 3128 (3128), Dst Port: 1053 (1053), Seq: 2206943683, Ack: 29955192, Len: 1276
Source port: 3128 (3128)
Destination port: 1053 (1053)
Sequence number: 2206943683
Next sequence number: 2206944959
Acknowledgement number: 29955192
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0x6a4e (correct)
Hypertext Transfer Protocol
Data (1276 bytes)

0000 62 72 3e d0 f3 e1 f0 e8 ea e0 3a 20 3c 61 20 20 br>.......: <a
0010 6f 6e 43 6c 69 63 6b 3d 22 72 28 74 68 69 73 2c onClick="r(this,
0020 27 77 65 62 32 79 61 63 61 27 29 22 20 20 68 72 'web2yaca')" hr
0030 65 66 3d 22 68 74 74 70 3a 2f 2f 79 61 63 61 2e ef="http://yaca.
0040 79 61 6e 64 65 78 2e 72 75 2f 79 63 61 2f 63 61 yandex.ru/yca/ca
0050 74 2f 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2f t/Entertainment/
0060 53 70 6f 72 74 73 2f 22 3e d1 ef ee f0 f2 3c 2f Sports/">.....</
0070 61 3e 3c 2f 6e 6f 62 72 3e 0a 3c 2f 64 69 76 3e a></nobr>.</div>
0080 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 76 61 6c 75 65 .</li>.<li value
0090 3d 35 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 =5>.<div class="
00a0 74 69 74 6c 65 22 3e 0a 3c 41 20 6f 6e 43 6c 69 title">.<A onCli
00b0 63 6b 3d 22 72 28 74 68 69 73 2c 27 77 65 62 27 ck="r(this,'web'
00c0 29 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f )" href="http://
00d0 77 77 77 2e 72 74 72 2d 73 70 6f 72 74 2e 72 75 www.rtr-sport.ru
00e0 2f 22 20 74 61 72 67 65 74 3d 5f 62 6c 61 6e 6b /" target=_blank
00f0 3e 0a d0 d2 d0 2d 3c 62 3e d1 ef ee f0 f2 3c 2f >....-<b>.....</
0100 62 3e 20 7c 3c 2f 41 3e 0a 3c 2f 64 69 76 3e 0a b> |</A>.</div>.
0110 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 65 78 74 <div class="text
0120 22 3e 0a 3c 62 3e d1 ef ee f0 f2 3c 2f 62 3e 20 ">.<b>.....</b>
0130 ed e0 20 ea e0 ed e0 eb e5 20 26 71 75 6f 74 3b .. ...... &quot;
0140 d0 ee f1 f1 e8 ff 26 71 75 6f 74 3b 3c 62 72 3e ......&quot;<br>
0150 cf f0 e8 20 eb fe e1 ee ec 20 e8 f1 ef ee eb fc ... ..... ......
0160 e7 ee e2 e0 ed e8 e8 20 f2 e5 ea f1 f2 ee e2 fb ....... ........
0170 f5 2c 20 e0 f3 e4 e8 ee 2d 2c 20 f4 ee f2 ee 2d ., .....-, ....-
0180 20 e8 20 e2 e8 e4 e5 ee ec e0 f2 e5 f0 e8 e0 eb . .............
0190 ee e2 20 f1 f1 fb eb ea e0 20 ed e0 20 26 71 75 .. ...... .. &qu
01a0 6f 74 3b d0 d2 d0 2d 3c 62 3e d1 ef ee f0 f2 3c ot;...-<b>.....<
01b0 2f 62 3e 2e 52 75 26 71 75 6f 74 3b 20 e8 20 26 /b>.Ru&quot; . &
01c0 71 75 6f 74 3b d0 d2 d0 2d 3c 62 3e d1 ef ee f0 quot;...-<b>....
01d0 f2 3c 2f 62 3e 26 71 75 6f 74 3b 20 ee e1 ff e7 .</b>&quot; ....
01e0 e0 f2 e5 eb fc ed e0 2e 0a 3c 2f 64 69 76 3e 0a .........</div>.
01f0 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 66 .<div class="inf
0200 6f 22 3e 0a 68 74 74 70 3a 2f 2f 77 77 77 2e 72 o">.http://www.r
0210 74 72 2d 73 70 6f 72 74 2e 72 75 2f 20 28 32 37 tr-sport.ru/ (27
0220 ca c1 29 20 30 36 2e 30 34 2e 32 30 30 33 20 26 ..) 06.04.2003 &
0230 23 31 35 31 3b 20 f1 f2 f0 ee e3 ee e5 20 f1 ee #151; ....... ..
0240 ee f2 e2 e5 f2 f1 f2 e2 e8 e5 0a 3c 2f 64 69 76 ...........</div
0250 3e 0a 0a 0a 0a 0a 3c 64 69 76 20 63 6c 61 73 73 >.....<div class
0260 3d 22 69 6e 66 6f 22 3e 0a 0a 3c 6e 6f 62 72 3e ="info">..<nobr>
0270 3c 41 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f <A href="http://
0280 68 67 68 6c 74 64 2e 79 61 6e 64 65 78 2e 72 75 hghltd.yandex.ru
0290 2f 79 61 6e 64 62 74 6d 3f 75 72 6c 3d 68 74 74 /yandbtm?url=htt
02a0 70 3a 2f 2f 77 77 77 2e 72 74 72 2d 73 70 6f 72 p://www.rtr-spor
02b0 74 2e 72 75 2f 26 74 65 78 74 3d 25 46 31 25 45 t.ru/&text=%F1%E
02c0 46 25 45 45 25 46 30 25 46 32 26 64 73 6e 3d 39 F%EE%F0%F2&dsn=9
02d0 26 71 3d 32 31 34 36 37 32 32 31 36 33 26 64 3d &q=2146722163&d=
02e0 31 34 33 34 35 33 31 22 20 74 61 72 67 65 74 3d 1434531" target=
02f0 5f 62 6c 61 6e 6b 3e cd e0 e9 e4 e5 ed ed fb e5 _blank>.........
0300 20 f1 eb ee e2 e0 3c 2f 41 3e 20 26 6e 62 73 70 .....</A> &nbsp
0310 3b 26 6d 69 64 64 6f 74 3b 26 6e 62 73 70 3b 3c ;&middot;&nbsp;<
0320 2f 6e 6f 62 72 3e 0a 0a 3c 6e 6f 62 72 3e 3c 41 /nobr>..<nobr><A
0330 20 48 52 45 46 3d 22 2f 79 61 6e 64 73 65 61 72 HREF="/yandsear
0340 63 68 3f 72 70 74 3d 72 61 64 26 64 73 3d 68 74 ch?rpt=rad&ds=ht
0350 74 70 3a 2f 2f 77 77 77 2e 72 74 72 2d 73 70 6f tp://www.rtr-spo
0360 72 74 2e 72 75 2f 22 3e cf ee f5 ee e6 e8 e5 20 rt.ru/">.......
0370 e4 ee ea f3 ec e5 ed f2 fb 3c 2f 41 3e 20 26 6e .........</A> &n
0380 62 73 70 3b 26 6d 69 64 64 6f 74 3b 26 6e 62 73 bsp;&middot;&nbs
0390 70 3b 3c 2f 6e 6f 62 72 3e 0a 0a 3c 6e 6f 62 72 p;</nobr>..<nobr
03a0 3e 3c 41 20 48 52 45 46 3d 22 2f 79 61 6e 64 73 ><A HREF="/yands
03b0 65 61 72 63 68 3f 74 65 78 74 3d 25 46 31 25 45 earch?text=%F1%E
03c0 46 25 45 45 25 46 30 25 46 32 26 73 75 72 6c 3d F%EE%F0%F2&surl=
03d0 72 74 72 2d 73 70 6f 72 74 2e 72 75 26 70 61 67 rtr-sport.ru&pag
03e0 3d 75 26 72 70 74 3d 72 61 64 22 3e c5 f9 e5 20 =u&rpt=rad">...
03f0 f1 20 f1 e0 e9 f2 e0 3c 2f 41 3e 26 6e 62 73 70 . .....</A>&nbsp
0400 3b 28 31 34 30 36 35 29 20 26 6e 62 73 70 3b 26 ;(14065) &nbsp;&
0410 6d 69 64 64 6f 74 3b 26 6e 62 73 70 3b 3c 2f 6e middot;&nbsp;</n
0420 6f 62 72 3e 0a 3c 6e 6f 62 72 3e d0 f3 e1 f0 e8 obr>.<nobr>.....
0430 ea e0 3a 20 3c 61 20 20 6f 6e 43 6c 69 63 6b 3d ..: <a onClick=
0440 22 72 28 74 68 69 73 2c 27 77 65 62 32 79 61 63 "r(this,'web2yac
0450 61 27 29 22 20 20 68 72 65 66 3d 22 68 74 74 70 a')" href="http
0460 3a 2f 2f 79 61 63 61 2e 79 61 6e 64 65 78 2e 72 ://yaca.yandex.r
0470 75 2f 79 63 61 2f 63 61 74 2f 53 6f 63 69 65 74 u/yca/cat/Societ
0480 79 2f 4d 65 64 69 61 2f 54 56 2f 54 65 6c 65 63 y/Media/TV/Telec
0490 61 73 74 73 2f 22 3e d2 e5 eb e5 ef e5 f0 e5 e4 asts/">.........
04a0 e0 f7 e8 3c 2f 61 3e 3c 2f 6e 6f 62 72 3e 0a 3c ...</a></nobr>.<
04b0 2f 64 69 76 3e 0a 3c 2f 6c 69 3e 0a 3c 2f 6f 6c /div>.</li>.</ol
04c0 3e 3c 6f 6c 20 63 6c 61 73 73 3d 22 72 65 73 75 ><ol class="resu
04d0 6c 74 73 22 3e 3c 6c 69 20 76 61 6c 75 65 3d 36 lts"><li value=6
04e0 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 69 >.<div class="ti
04f0 74 6c 65 22 3e 0a 3c 41 20 6f 6e 43 tle">.<A onC

Frame 35 (62 bytes on wire, 62 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.944381000
Time delta from previous packet: 0.000066000 seconds
Time relative to first packet: 1.278269000 seconds
Frame Number: 35
Packet Length: 62 bytes
Capture Length: 62 bytes
Ethernet II, Src: 00:e0:7d:d0:3b:8c, Dst: 00:08:e3:59:15:40
Destination: 00:08:e3:59:15:40 (Cisco_59:15:40)
Source: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Type: IP (0x0800)
Internet Protocol, Src Addr: 195.201.8.148 (195.201.8.148), Dst Addr: 194.87.182.137 (194.87.182.137)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 48
Identification: 0xdbd1 (56273)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0xd9b7 (correct)
Source: 195.201.8.148 (195.201.8.148)
Destination: 194.87.182.137 (194.87.182.137)
Transmission Control Protocol, Src Port: 1056 (1056), Dst Port: 3128 (3128), Seq: 29955994, Ack: 0, Len: 0
Source port: 1056 (1056)
Destination port: 3128 (3128)
Sequence number: 29955994
Header length: 28 bytes
Flags: 0x0002 (SYN)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 8192
Checksum: 0xf425 (correct)
Options: (8 bytes)
Maximum segment size: 1460 bytes
NOP
NOP
SACK permitted

Frame 36 (60 bytes on wire, 60 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.944469000
Time delta from previous packet: 0.000088000 seconds
Time relative to first packet: 1.278357000 seconds
Frame Number: 36
Packet Length: 60 bytes
Capture Length: 60 bytes
Ethernet II, Src: 00:e0:7d:d0:3b:8c, Dst: 00:08:e3:59:15:40
Destination: 00:08:e3:59:15:40 (Cisco_59:15:40)
Source: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Type: IP (0x0800)
Trailer: 202020202020
Internet Protocol, Src Addr: 195.201.8.148 (195.201.8.148), Dst Addr: 194.87.182.137 (194.87.182.137)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xddd1 (56785)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0xd7bf (correct)
Source: 195.201.8.148 (195.201.8.148)
Destination: 194.87.182.137 (194.87.182.137)
Transmission Control Protocol, Src Port: 1053 (1053), Dst Port: 3128 (3128), Seq: 29955192, Ack: 2206944959, Len: 0
Source port: 1053 (1053)
Destination port: 3128 (3128)
Sequence number: 29955192
Acknowledgement number: 2206944959
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 8760
Checksum: 0x4f7d (correct)

Frame 37 (60 bytes on wire, 60 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.946192000
Time delta from previous packet: 0.001723000 seconds
Time relative to first packet: 1.280080000 seconds
Frame Number: 37
Packet Length: 60 bytes
Capture Length: 60 bytes
Ethernet II, Src: 00:08:e3:59:15:40, Dst: 00:e0:7d:d0:3b:8c
Destination: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Source: 00:08:e3:59:15:40 (Cisco_59:15:40)
Type: IP (0x0800)
Trailer: 000000000000
Internet Protocol, Src Addr: 194.87.182.137 (194.87.182.137), Dst Addr: 195.201.8.148 (195.201.8.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00)
0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0x0a5e (2654)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xec13 (correct)
Source: 194.87.182.137 (194.87.182.137)
Destination: 195.201.8.148 (195.201.8.148)
Transmission Control Protocol, Src Port: 3128 (3128), Dst Port: 1055 (1055), Seq: 2200836409, Ack: 29956377, Len: 0
Source port: 3128 (3128)
Destination port: 1055 (1055)
Sequence number: 2200836409
Acknowledgement number: 29956377
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0x89d5 (correct)

Frame 38 (1464 bytes on wire, 1464 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.957041000
Time delta from previous packet: 0.010849000 seconds
Time relative to first packet: 1.290929000 seconds
Frame Number: 38
Packet Length: 1464 bytes
Capture Length: 1464 bytes
Ethernet II, Src: 00:08:e3:59:15:40, Dst: 00:e0:7d:d0:3b:8c
Destination: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Source: 00:08:e3:59:15:40 (Cisco_59:15:40)
Type: IP (0x0800)
Internet Protocol, Src Addr: 194.87.182.137 (194.87.182.137), Dst Addr: 195.201.8.148 (195.201.8.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00)
0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1450
Identification: 0x1f48 (8008)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xd1a7 (correct)
Source: 194.87.182.137 (194.87.182.137)
Destination: 195.201.8.148 (195.201.8.148)
Transmission Control Protocol, Src Port: 3128 (3128), Dst Port: 1053 (1053), Seq: 2206944959, Ack: 29955192, Len: 1410
Source port: 3128 (3128)
Destination port: 1053 (1053)
Sequence number: 2206944959
Next sequence number: 2206946369
Acknowledgement number: 29955192
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0xabce (correct)
Hypertext Transfer Protocol
Data (1410 bytes)

0000 6c 69 63 6b 3d 22 72 28 74 68 69 73 2c 27 77 65 lick="r(this,'we
0010 62 27 29 22 20 68 72 65 66 3d 22 68 74 74 70 3a b')" href="http:
0020 2f 2f 77 77 77 2e 61 74 6c 61 6e 74 2e 72 75 2f //www.atlant.ru/
0030 73 70 6f 72 74 2f 22 20 74 61 72 67 65 74 3d 5f sport/" target=_
0040 62 6c 61 6e 6b 3e 0a 3c 62 3e d1 ef ee f0 f2 3c blank>.<b>.....<
0050 2f 62 3e 20 c1 e8 e7 ed e5 f1 20 cc e0 f0 ea e5 /b> ...... .....
0060 f2 20 4e 31 35 28 31 33 37 29 28 31 31 2e 30 37 . N15(137)(11.07
0070 2d 31 38 2e 30 37 29 20 ed e0 20 41 74 6c 61 6e -18.07) .. Atlan
0080 74 2e 52 75 3c 2f 41 3e 0a 3c 2f 64 69 76 3e 0a t.Ru</A>.</div>.
0090 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 65 78 74 <div class="text
00a0 22 3e 0a 3c 62 3e d1 ef ee f0 f2 3c 2f 62 3e 20 ">.<b>.....</b>
00b0 c1 e8 e7 ed e5 f1 20 cc e0 f0 ea e5 f2 0a 3c 2f ...... .......</
00c0 64 69 76 3e 0a 0a 3c 64 69 76 20 63 6c 61 73 73 div>..<div class
00d0 3d 22 69 6e 66 6f 22 3e 0a 68 74 74 70 3a 2f 2f ="info">.http://
00e0 77 77 77 2e 61 74 6c 61 6e 74 2e 72 75 2f 73 70 www.atlant.ru/sp
00f0 6f 72 74 2f 20 28 31 35 ca c1 29 20 26 23 31 35 ort/ (15..) &#15
0100 31 3b 20 f1 f2 f0 ee e3 ee e5 20 f1 ee ee f2 e2 1; ....... .....
0110 e5 f2 f1 f2 e2 e8 e5 0a 3c 2f 64 69 76 3e 0a 0a ........</div>..
0120 0a 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 ...<div class="i
0130 6e 66 6f 22 3e 0a 0a 3c 6e 6f 62 72 3e 3c 41 20 nfo">..<nobr><A
0140 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 68 67 68 href="http://hgh
0150 6c 74 64 2e 79 61 6e 64 65 78 2e 72 75 2f 79 61 ltd.yandex.ru/ya
0160 6e 64 62 74 6d 3f 75 72 6c 3d 68 74 74 70 3a 2f ndbtm?url=http:/
0170 2f 77 77 77 2e 61 74 6c 61 6e 74 2e 72 75 2f 73 /www.atlant.ru/s
0180 70 6f 72 74 2f 26 74 65 78 74 3d 25 46 31 25 45 port/&text=%F1%E
0190 46 25 45 45 25 46 30 25 46 32 26 64 73 6e 3d 32 F%EE%F0%F2&dsn=2
01a0 26 71 3d 32 31 34 36 37 32 32 31 36 33 26 64 3d &q=2146722163&d=
01b0 31 36 33 31 32 33 38 22 20 74 61 72 67 65 74 3d 1631238" target=
01c0 5f 62 6c 61 6e 6b 3e cd e0 e9 e4 e5 ed ed fb e5 _blank>.........
01d0 20 f1 eb ee e2 e0 3c 2f 41 3e 20 26 6e 62 73 70 .....</A> &nbsp
01e0 3b 26 6d 69 64 64 6f 74 3b 26 6e 62 73 70 3b 3c ;&middot;&nbsp;<
01f0 2f 6e 6f 62 72 3e 0a 0a 3c 6e 6f 62 72 3e 3c 41 /nobr>..<nobr><A
0200 20 48 52 45 46 3d 22 2f 79 61 6e 64 73 65 61 72 HREF="/yandsear
0210 63 68 3f 72 70 74 3d 72 61 64 26 64 73 3d 68 74 ch?rpt=rad&ds=ht
0220 74 70 3a 2f 2f 77 77 77 2e 61 74 6c 61 6e 74 2e tp://www.atlant.
0230 72 75 2f 73 70 6f 72 74 2f 22 3e cf ee f5 ee e6 ru/sport/">.....
0240 e8 e5 20 e4 ee ea f3 ec e5 ed f2 fb 3c 2f 41 3e .. .........</A>
0250 20 26 6e 62 73 70 3b 26 6d 69 64 64 6f 74 3b 26 &nbsp;&middot;&
0260 6e 62 73 70 3b 3c 2f 6e 6f 62 72 3e 0a 0a 3c 6e nbsp;</nobr>..<n
0270 6f 62 72 3e 3c 41 20 48 52 45 46 3d 22 2f 79 61 obr><A HREF="/ya
0280 6e 64 73 65 61 72 63 68 3f 74 65 78 74 3d 25 46 ndsearch?text=%F
0290 31 25 45 46 25 45 45 25 46 30 25 46 32 26 73 75 1%EF%EE%F0%F2&su
02a0 72 6c 3d 61 74 6c 61 6e 74 2e 72 75 26 70 61 67 rl=atlant.ru&pag
02b0 3d 75 26 72 70 74 3d 72 61 64 22 3e c5 f9 e5 20 =u&rpt=rad">...
02c0 f1 20 f1 e0 e9 f2 e0 3c 2f 41 3e 26 6e 62 73 70 . .....</A>&nbsp
02d0 3b 28 34 30 33 29 20 26 6e 62 73 70 3b 26 6d 69 ;(403) &nbsp;&mi
02e0 64 64 6f 74 3b 26 6e 62 73 70 3b 3c 2f 6e 6f 62 ddot;&nbsp;</nob
02f0 72 3e 0a 3c 6e 6f 62 72 3e d0 f3 e1 f0 e8 ea e0 r>.<nobr>.......
0300 3a 20 3c 61 20 20 6f 6e 43 6c 69 63 6b 3d 22 72 : <a onClick="r
0310 28 74 68 69 73 2c 27 77 65 62 32 79 61 63 61 27 (this,'web2yaca'
0320 29 22 20 20 68 72 65 66 3d 22 68 74 74 70 3a 2f )" href="http:/
0330 2f 79 61 63 61 2e 79 61 6e 64 65 78 2e 72 75 2f /yaca.yandex.ru/
0340 79 63 61 2f 63 61 74 2f 45 6e 74 65 72 74 61 69 yca/cat/Entertai
0350 6e 6d 65 6e 74 2f 41 64 76 65 6e 74 75 72 65 73 nment/Adventures
0360 2f 22 3e c0 ea f2 e8 e2 ed fb e9 20 ee f2 e4 fb /">........ ....
0370 f5 3c 2f 61 3e 3c 2f 6e 6f 62 72 3e 0a 3c 2f 64 .</a></nobr>.</d
0380 69 76 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 76 61 iv>.</li>.<li va
0390 6c 75 65 3d 37 3e 0a 3c 64 69 76 20 63 6c 61 73 lue=7>.<div clas
03a0 73 3d 22 74 69 74 6c 65 22 3e 0a 3c 41 20 6f 6e s="title">.<A on
03b0 43 6c 69 63 6b 3d 22 72 28 74 68 69 73 2c 27 77 Click="r(this,'w
03c0 65 62 27 29 22 20 68 72 65 66 3d 22 68 74 74 70 eb')" href="http
03d0 3a 2f 2f 77 77 77 2e 66 63 73 2e 63 6f 6d 2e 75 ://www.fcs.com.u
03e0 61 2f 22 20 74 61 72 67 65 74 3d 5f 62 6c 61 6e a/" target=_blan
03f0 6b 3e 0a 43 6f 6d 70 75 74 65 72 20 53 70 6f 72 k>.Computer Spor
0400 74 20 46 65 64 65 72 61 74 69 6f 6e 20 6f 66 20 t Federation of
0410 55 6b 72 61 69 6e 65 20 48 6f 6d 65 50 61 67 65 Ukraine HomePage
0420 3c 2f 41 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 </A>.</div>.<div
0430 20 63 6c 61 73 73 3d 22 74 65 78 74 22 3e 0a c2 class="text">..
0440 ea eb fe f7 e8 f2 fc 20 e2 20 ef e5 f0 e5 f7 e5 ....... . ......
0450 ed fc 20 e2 e8 e4 ee e2 20 3c 62 3e f1 ef ee f0 .. ..... <b>....
0460 f2 e0 3c 2f 62 3e 20 e4 eb ff 20 e2 e2 e5 e4 e5 ..</b> ... .....
0470 ed e8 ff 20 e2 20 e3 ee f1 f3 e4 e0 f0 f1 f2 e2 ... . ..........
0480 e5 ed ed fb e5 20 ef f0 ee e3 f0 e0 ec ec fb 20 ..... .........
0490 f4 e8 e7 e8 f7 e5 f1 ea ee e3 ee 20 e2 ee f1 ef ........... ....
04a0 e8 f2 e0 ed e8 ff 20 ed e0 f1 e5 eb e5 ed e8 ff ...... .........
04b0 20 e8 20 f0 e5 ea ee ec e5 ed e4 f3 e5 ec fb e9 . .............
04c0 20 e4 eb ff 20 f0 e0 e7 e2 e8 f2 e8 ff 20 e2 20 ... ........ .
04d0 d0 ee f1 f1 e8 e9 f1 ea ee e9 20 2e 2e 2e 20 3c .......... ... <
04e0 62 72 3e d2 e0 ea 20 f7 f2 ee 20 d0 ce d1 d1 c8 br>... ... .....
04f0 df 20 2d 20 cf c5 d0 c2 c0 df 20 c2 20 cc c8 d0 . - ...... . ...
0500 c5 20 f1 f2 f0 e0 ed e0 2c 20 e3 e4 e5 20 ea ee . ......, ... ..
0510 ec ef fc fe f2 e5 f0 ed fb e9 20 3c 62 3e f1 ef .......... <b>..
0520 ee f0 f2 3c 2f 62 3e 20 ee f4 e8 f6 e8 e0 eb fc ...</b> ........
0530 ed ee 20 ef f0 e8 e7 ed e0 ed 20 c3 ee f1 f3 e4 .. ....... .....
0540 e0 f0 f1 f2 e2 ee ec 20 ea e0 ea 20 e2 e8 e4 20 ....... ... ...
0550 3c 62 3e f1 ef ee f0 f2 e0 3c 2f 62 3e 21 0a 3c <b>......</b>!.<
0560 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 63 6c 61 73 /div>..<div clas
0570 73 3d 22 69 6e 66 6f 22 3e 0a 68 74 74 70 3a 2f s="info">.http:/
0580 2f 77 /w

Frame 39 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.967191000
Time delta from previous packet: 0.010150000 seconds
Time relative to first packet: 1.301079000 seconds
Frame Number: 39
Packet Length: 1514 bytes
Capture Length: 1514 bytes
Ethernet II, Src: 00:08:e3:59:15:40, Dst: 00:e0:7d:d0:3b:8c
Destination: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Source: 00:08:e3:59:15:40 (Cisco_59:15:40)
Type: IP (0x0800)
Internet Protocol, Src Addr: 194.87.182.137 (194.87.182.137), Dst Addr: 195.201.8.148 (195.201.8.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00)
0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1500
Identification: 0x1f49 (8009)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xd174 (correct)
Source: 194.87.182.137 (194.87.182.137)
Destination: 195.201.8.148 (195.201.8.148)
Transmission Control Protocol, Src Port: 3128 (3128), Dst Port: 1053 (1053), Seq: 2206946369, Ack: 29955192, Len: 1460
Source port: 3128 (3128)
Destination port: 1053 (1053)
Sequence number: 2206946369
Next sequence number: 2206947829
Acknowledgement number: 29955192
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0x48a0 (correct)
Hypertext Transfer Protocol
Data (1460 bytes)

0000 77 77 2e 66 63 73 2e 63 6f 6d 2e 75 61 2f 20 28 ww.fcs.com.ua/ (
0010 31 30 30 ca c1 29 20 26 23 31 35 31 3b 20 f1 f2 100..) &#151; ..
0020 f0 ee e3 ee e5 20 f1 ee ee f2 e2 e5 f2 f1 f2 e2 ..... ..........
0030 e8 e5 0a 3c 2f 64 69 76 3e 0a 0a 0a 0a 0a 3c 64 ...</div>.....<d
0040 69 76 20 63 6c 61 73 73 3d 22 69 6e 66 6f 22 3e iv class="info">
0050 0a 0a 3c 6e 6f 62 72 3e 3c 41 20 68 72 65 66 3d ..<nobr><A href=
0060 22 68 74 74 70 3a 2f 2f 68 67 68 6c 74 64 2e 79 "http://hghltd.y
0070 61 6e 64 65 78 2e 72 75 2f 79 61 6e 64 62 74 6d andex.ru/yandbtm
0080 3f 75 72 6c 3d 68 74 74 70 3a 2f 2f 77 77 77 2e ?url=http://www.
0090 66 63 73 2e 63 6f 6d 2e 75 61 2f 26 74 65 78 74 fcs.com.ua/&text
00a0 3d 25 46 31 25 45 46 25 45 45 25 46 30 25 46 32 =%F1%EF%EE%F0%F2
00b0 26 64 73 6e 3d 35 26 71 3d 32 31 34 36 37 32 32 &dsn=5&q=2146722
00c0 31 36 33 26 64 3d 33 31 34 38 32 39 22 20 74 61 163&d=314829" ta
00d0 72 67 65 74 3d 5f 62 6c 61 6e 6b 3e cd e0 e9 e4 rget=_blank>....
00e0 e5 ed ed fb e5 20 f1 eb ee e2 e0 3c 2f 41 3e 20 ..... .....</A>
00f0 26 6e 62 73 70 3b 26 6d 69 64 64 6f 74 3b 26 6e &nbsp;&middot;&n
0100 62 73 70 3b 3c 2f 6e 6f 62 72 3e 0a 0a 3c 6e 6f bsp;</nobr>..<no
0110 62 72 3e 3c 41 20 48 52 45 46 3d 22 2f 79 61 6e br><A HREF="/yan
0120 64 73 65 61 72 63 68 3f 72 70 74 3d 72 61 64 26 dsearch?rpt=rad&
0130 64 73 3d 68 74 74 70 3a 2f 2f 77 77 77 2e 66 63 ds=http://www.fc
0140 73 2e 63 6f 6d 2e 75 61 2f 22 3e cf ee f5 ee e6 s.com.ua/">.....
0150 e8 e5 20 e4 ee ea f3 ec e5 ed f2 fb 3c 2f 41 3e .. .........</A>
0160 20 26 6e 62 73 70 3b 26 6d 69 64 64 6f 74 3b 26 &nbsp;&middot;&
0170 6e 62 73 70 3b 3c 2f 6e 6f 62 72 3e 0a 3c 6e 6f nbsp;</nobr>.<no
0180 62 72 3e d0 f3 e1 f0 e8 ea e0 3a 20 3c 61 20 20 br>.......: <a
0190 6f 6e 43 6c 69 63 6b 3d 22 72 28 74 68 69 73 2c onClick="r(this,
01a0 27 77 65 62 32 79 61 63 61 27 29 22 20 20 68 72 'web2yaca')" hr
01b0 65 66 3d 22 68 74 74 70 3a 2f 2f 79 61 63 61 2e ef="http://yaca.
01c0 79 61 6e 64 65 78 2e 72 75 2f 79 63 61 2f 63 61 yandex.ru/yca/ca
01d0 74 2f 43 6f 6d 70 75 74 65 72 73 2f 49 6e 74 65 t/Computers/Inte
01e0 72 6e 65 74 2f 22 3e c8 ed f2 e5 f0 ed e5 f2 3c rnet/">........<
01f0 2f 61 3e 3c 2f 6e 6f 62 72 3e 0a 3c 2f 64 69 76 /a></nobr>.</div
0200 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 76 61 6c 75 >.</li>.<li valu
0210 65 3d 38 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d e=8>.<div class=
0220 22 74 69 74 6c 65 22 3e 0a 3c 41 20 6f 6e 43 6c "title">.<A onCl
0230 69 63 6b 3d 22 72 28 74 68 69 73 2c 27 77 65 62 ick="r(this,'web
0240 27 29 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f ')" href="http:/
0250 2f 6c 69 62 2e 73 70 6f 72 74 65 64 75 2e 72 75 /lib.sportedu.ru
0260 2f 22 20 74 61 72 67 65 74 3d 5f 62 6c 61 6e 6b /" target=_blank
0270 3e 0a c1 e8 e1 eb e8 ee f2 e5 ea e0 20 ef ee 20 >........... ..
0280 f4 e8 e7 e8 f7 e5 f1 ea ee e9 20 ea f3 eb fc f2 .......... .....
0290 f3 f0 e5 20 e8 20 3c 62 3e f1 ef ee f0 f2 f3 3c ... . <b>......<
02a0 2f 62 3e 3c 2f 41 3e 0a 3c 2f 64 69 76 3e 0a 3c /b></A>.</div>.<
02b0 64 69 76 20 63 6c 61 73 73 3d 22 74 65 78 74 22 div class="text"
02c0 3e 0a ce f4 e8 f6 e8 e0 eb fc ed fb e9 20 f1 e0 >............ ..
02d0 e9 f2 20 d6 e5 ed f2 f0 e0 eb fc ed ee e9 20 ee .. ........... .
02e0 f2 f0 e0 f1 eb e5 e2 ee e9 20 e1 e8 e1 eb e8 ee ......... ......
02f0 f2 e5 ea e8 20 ef ee 20 f4 e8 e7 e8 f7 e5 f1 ea .... .. ........
0300 ee e9 20 ea f3 eb fc f2 f3 f0 e5 20 e8 20 f1 ef .. ........ . ..
0310 ee f0 f2 f3 2c 20 d0 ee f1 f1 e8 e9 f1 ea ee e9 ...., ..........
0320 20 c3 ee f1 f3 e4 e0 f0 f1 f2 e2 e5 ed ed ee e9 ...............
0330 20 c0 ea e0 e4 e5 ec e8 e8 20 d4 e8 e7 e8 f7 e5 ........ ......
0340 f1 ea ee e9 20 ea f3 eb fc f2 f3 f0 fb 0a 3c 2f .... .........</
0350 64 69 76 3e 0a 0a 3c 64 69 76 20 63 6c 61 73 73 div>..<div class
0360 3d 22 69 6e 66 6f 22 3e 0a 68 74 74 70 3a 2f 2f ="info">.http://
0370 6c 69 62 2e 73 70 6f 72 74 65 64 75 2e 72 75 2f lib.sportedu.ru/
0380 20 28 31 30 ca c1 29 20 32 30 2e 31 30 2e 32 30 (10..) 20.10.20
0390 30 32 20 26 23 31 35 31 3b 20 f1 f2 f0 ee e3 ee 02 &#151; ......
03a0 e5 20 f1 ee ee f2 e2 e5 f2 f1 f2 e2 e8 e5 0a 3c . .............<
03b0 2f 64 69 76 3e 0a 0a 0a 0a 0a 3c 64 69 76 20 63 /div>.....<div c
03c0 6c 61 73 73 3d 22 69 6e 66 6f 22 3e 0a 0a 3c 6e lass="info">..<n
03d0 6f 62 72 3e 3c 41 20 68 72 65 66 3d 22 68 74 74 obr><A href="htt
03e0 70 3a 2f 2f 68 67 68 6c 74 64 2e 79 61 6e 64 65 p://hghltd.yande
03f0 78 2e 72 75 2f 79 61 6e 64 62 74 6d 3f 75 72 6c x.ru/yandbtm?url
0400 3d 68 74 74 70 3a 2f 2f 6c 69 62 2e 73 70 6f 72 =http://lib.spor
0410 74 65 64 75 2e 72 75 2f 26 74 65 78 74 3d 25 46 tedu.ru/&text=%F
0420 31 25 45 46 25 45 45 25 46 30 25 46 32 26 64 73 1%EF%EE%F0%F2&ds
0430 6e 3d 31 39 26 71 3d 32 31 34 36 37 32 32 31 36 n=19&q=214672216
0440 33 26 64 3d 31 32 33 34 34 36 33 22 20 74 61 72 3&d=1234463" tar
0450 67 65 74 3d 5f 62 6c 61 6e 6b 3e cd e0 e9 e4 e5 get=_blank>.....
0460 ed ed fb e5 20 f1 eb ee e2 e0 3c 2f 41 3e 20 26 .... .....</A> &
0470 6e 62 73 70 3b 26 6d 69 64 64 6f 74 3b 26 6e 62 nbsp;&middot;&nb
0480 73 70 3b 3c 2f 6e 6f 62 72 3e 0a 0a 3c 6e 6f 62 sp;</nobr>..<nob
0490 72 3e 3c 41 20 48 52 45 46 3d 22 2f 79 61 6e 64 r><A HREF="/yand
04a0 73 65 61 72 63 68 3f 72 70 74 3d 72 61 64 26 64 search?rpt=rad&d
04b0 73 3d 68 74 74 70 3a 2f 2f 6c 69 62 2e 73 70 6f s=http://lib.spo
04c0 72 74 65 64 75 2e 72 75 2f 22 3e cf ee f5 ee e6 rtedu.ru/">.....
04d0 e8 e5 20 e4 ee ea f3 ec e5 ed f2 fb 3c 2f 41 3e .. .........</A>
04e0 20 26 6e 62 73 70 3b 26 6d 69 64 64 6f 74 3b 26 &nbsp;&middot;&
04f0 6e 62 73 70 3b 3c 2f 6e 6f 62 72 3e 0a 0a 3c 6e nbsp;</nobr>..<n
0500 6f 62 72 3e 3c 41 20 48 52 45 46 3d 22 2f 79 61 obr><A HREF="/ya
0510 6e 64 73 65 61 72 63 68 3f 74 65 78 74 3d 25 46 ndsearch?text=%F
0520 31 25 45 46 25 45 45 25 46 30 25 46 32 26 73 75 1%EF%EE%F0%F2&su
0530 72 6c 3d 73 70 6f 72 74 65 64 75 2e 72 75 26 70 rl=sportedu.ru&p
0540 61 67 3d 75 26 72 70 74 3d 72 61 64 22 3e c5 f9 ag=u&rpt=rad">..
0550 e5 20 f1 20 f1 e0 e9 f2 e0 3c 2f 41 3e 26 6e 62 . . .....</A>&nb
0560 73 70 3b 28 31 36 35 35 29 20 26 6e 62 73 70 3b sp;(1655) &nbsp;
0570 26 6d 69 64 64 6f 74 3b 26 6e 62 73 70 3b 3c 2f &middot;&nbsp;</
0580 6e 6f 62 72 3e 0a 3c 6e 6f 62 72 3e d0 f3 e1 f0 nobr>.<nobr>....
0590 e8 ea e0 3a 20 3c 61 20 20 6f 6e 43 6c 69 63 6b ...: <a onClick
05a0 3d 22 72 28 74 68 69 73 2c 27 77 65 62 32 79 61 ="r(this,'web2ya
05b0 63 61 27 29 ca')

Frame 40 (1280 bytes on wire, 1280 bytes captured)
Arrival Time: Nov 3, 2003 17:53:30.968235000
Time delta from previous packet: 0.001044000 seconds
Time relative to first packet: 1.302123000 seconds
Frame Number: 40
Packet Length: 1280 bytes
Capture Length: 1280 bytes
Ethernet II, Src: 00:08:e3:59:15:40, Dst: 00:e0:7d:d0:3b:8c
Destination: 00:e0:7d:d0:3b:8c (Netronix_d0:3b:8c)
Source: 00:08:e3:59:15:40 (Cisco_59:15:40)
Type: IP (0x0800)
Internet Protocol, Src Addr: 194.87.182.137 (194.87.182.137), Dst Addr: 195.201.8.148 (195.201.8.148)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x20 (DSCP 0x08: Class Selector 1; ECN: 0x00)
0010 00.. = Differentiated Services Codepoint: Class Selector 1 (0x08)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1266
Identification: 0x1f4a (8010)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: TCP (0x06)
Header checksum: 0xd25d (correct)
Source: 194.87.182.137 (194.87.182.137)
Destination: 195.201.8.148 (195.201.8.148)
Transmission Control Protocol, Src Port: 3128 (3128), Dst Port: 1053 (1053), Seq: 2206947829, Ack: 29955192, Len: 1226
Source port: 3128 (3128)
Destination port: 1053 (1053)
Sequence number: 2206947829
Next sequence number: 2206949055
Acknowledgement number: 29955192
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 6432
Checksum: 0x42aa (correct)
Hypertext Transfer Protocol
Data (1226 bytes)

0000 22 20 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f " href="http://
0010 79 61 63 61 2e 79 61 6e 64 65 78 2e 72 75 2f 79 yaca.yandex.ru/y
0020 63 61 2f 63 61 74 2f 53 63 69 65 6e 63 65 2f 41 ca/cat/Science/A
0030 64 6d 69 6e 69 73 74 72 61 74 69 6f 6e 2f 4c 69 dministration/Li
0040 62 72 61 72 69 65 73 2f 22 3e c1 e8 e1 eb e8 ee braries/">......
0050 f2 e5 ea e8 3c 2f 61 3e 3c 2f 6e 6f 62 72 3e 0a ....</a></nobr>.
0060 3c 2f 64 69 76 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 </div>.</li>.<li
0070 20 76 61 6c 75 65 3d 39 3e 0a 3c 64 69 76 20 63 value=9>.<div c
0080 6c 61 73 73 3d 22 74 69 74 6c 65 22 3e 0a 3c 41 lass="title">.<A
0090 20 6f 6e 43 6c 69 63 6b 3d 22 72 28 74 68 69 73 onClick="r(this
00a0 2c 27 77 65 62 27 29 22 20 68 72 65 66 3d 22 68 ,'web')" href="h
00b0 74 74 70 3a 2f 2f 77 77 77 2e 72 75 73 73 69 61 ttp://www.russia
00c0 6e 2d 72 61 63 69 6e 67 2e 72 75 2f 73 73 6d 2f n-racing.ru/ssm/
00d0 22 20 74 61 72 67 65 74 3d 5f 62 6c 61 6e 6b 3e " target=_blank>
00e0 0a 26 71 75 6f 74 3b 3c 62 3e d1 ef ee f0 f2 3c .&quot;<b>.....<
00f0 2f 62 3e 20 d1 e5 f0 e2 e8 f1 20 ec ee f2 ee f1 /b> ...... .....
0100 ef ee f0 f2 26 71 75 6f 74 3b 20 2d 20 fd ea e8 ....&quot; - ...
0110 ef e8 f0 ee e2 ea e0 20 e4 eb ff 20 3c 62 3e f1 ....... ... <b>.
0120 ef ee f0 f2 e0 3c 2f 62 3e 3c 2f 41 3e 0a 3c 2f .....</b></A>.</
0130 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d div>.<div class=
0140 22 74 65 78 74 22 3e 0a ca e0 f2 e0 eb ee e3 20 "text">........
0150 ef f0 ee e4 f3 ea f6 e8 e8 2c 20 f4 ee f2 ee e3 ........., .....
0160 f0 e0 f4 e8 e8 20 e8 20 ef f0 e0 e9 f1 2d eb e8 ..... . .....-..
0170 f1 f2 fb 20 28 e3 ee ed ee f7 ed e0 ff 20 f2 e5 ... (........ ..
0180 f5 ed e8 ea e0 2c 20 ea ee ec ef eb e5 ea f2 f3 ....., .........
0190 fe f9 e8 e5 2c 20 ee e4 e5 e6 e4 e0 29 2e 0a 3c ...., ......)..<
01a0 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 63 6c 61 73 /div>..<div clas
01b0 73 3d 22 69 6e 66 6f 22 3e 0a 68 74 74 70 3a 2f s="info">.http:/
01c0 2f 77 77 77 2e 72 75 73 73 69 61 6e 2d 72 61 63 /www.russian-rac
01d0 69 6e 67 2e 72 75 2f 73 73 6d 2f 20 28 32 ca c1 ing.ru/ssm/ (2..
01e0 29 20 26 23 31 35 31 3b 20 ed e0 e9 e4 e5 ed 20 ) &#151; ......
01f0 ef ee 20 f1 f1 fb eb ea e5 0a 3c 2f 64 69 76 3e .. .......</div>
0200 0a 0a 0a 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d .....<div class=
0210 22 69 6e 66 6f 22 3e 0a 0a 3c 6e 6f 62 72 3e 3c "info">..<nobr><
0220 41 20 48 52 45 46 3d 22 2f 79 61 6e 64 73 65 61 A HREF="/yandsea
0230 72 63 68 3f 72 70 74 3d 72 61 64 26 64 73 3d 68 rch?rpt=rad&ds=h
0240 74 74 70 3a 2f 2f 77 77 77 2e 72 75 73 73 69 61 ttp://www.russia
0250 6e 2d 72 61 63 69 6e 67 2e 72 75 2f 73 73 6d 2f n-racing.ru/ssm/
0260 22 3e cf ee f5 ee e6 e8 e5 20 e4 ee ea f3 ec e5 ">....... ......
0270 ed f2 fb 3c 2f 41 3e 20 26 6e 62 73 70 3b 26 6d ...</A> &nbsp;&m
0280 69 64 64 6f 74 3b 26 6e 62 73 70 3b 3c 2f 6e 6f iddot;&nbsp;</no
0290 62 72 3e 0a 0a 3c 6e 6f 62 72 3e 3c 41 20 48 52 br>..<nobr><A HR
02a0 45 46 3d 22 2f 79 61 6e 64 73 65 61 72 63 68 3f EF="/yandsearch?
02b0 74 65 78 74 3d 25 46 31 25 45 46 25 45 45 25 46 text=%F1%EF%EE%F
02c0 30 25 46 32 26 73 75 72 6c 3d 72 75 73 73 69 61 0%F2&surl=russia
02d0 6e 2d 72 61 63 69 6e 67 2e 72 75 26 70 61 67 3d n-racing.ru&pag=
02e0 75 26 72 70 74 3d 72 61 64 22 3e c5 f9 e5 20 f1 u&rpt=rad">... .
02f0 20 f1 e0 e9 f2 e0 3c 2f 41 3e 26 6e 62 73 70 3b .....</A>&nbsp;
0300 28 32 30 29 20 26 6e 62 73 70 3b 26 6d 69 64 64 (20) &nbsp;&midd
0310 6f 74 3b 26 6e 62 73 70 3b 3c 2f 6e 6f 62 72 3e ot;&nbsp;</nobr>
0320 0a 3c 6e 6f 62 72 3e d0 f3 e1 f0 e8 ea e0 3a 20 .<nobr>.......:
0330 3c 61 20 20 6f 6e 43 6c 69 63 6b 3d 22 72 28 74 <a onClick="r(t
0340 68 69 73 2c 27 77 65 62 32 79 61 63 61 27 29 22 his,'web2yaca')"
0350 20 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 79 href="http://y
0360 61 63 61 2e 79 61 6e 64 65 78 2e 72 75 2f 79 63 aca.yandex.ru/yc
0370 61 2f 63 61 74 2f 45 6e 74 65 72 74 61 69 6e 6d a/cat/Entertainm
0380 65 6e 74 2f 53 70 6f 72 74 73 2f 41 75 74 6f 5f ent/Sports/Auto_
0390 52 61 63 69 6e 67 2f 22 3e c0 e2 f2 ee f1 ef ee Racing/">.......
03a0 f0 f2 3c 2f 61 3e 3c 2f 6e 6f 62 72 3e 0a 3c 2f ..</a></nobr>.</
03b0 64 69 76 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 76 div>.</li>.<li v
03c0 61 6c 75 65 3d 31 30 3e 0a 3c 64 69 76 20 63 6c alue=10>.<div cl
03d0 61 73 73 3d 22 74 69 74 6c 65 22 3e 0a 3c 41 20 ass="title">.<A
03e0 6f 6e 43 6c 69 63 6b 3d 22 72 28 74 68 69 73 2c onClick="r(this,
03f0 27 77 65 62 27 29 22 20 68 72 65 66 3d 22 68 74 'web')" href="ht
0400 74 70 3a 2f 2f 77 77 77 2e 73 70 6f 72 74 73 6d tp://www.sportsm
0410 61 6e 2e 72 75 2f 22 20 74 61 72 67 65 74 3d 5f an.ru/" target=_
0420 62 6c 61 6e 6b 3e 0a 53 70 6f 72 74 20 2d 20 c3 blank>.Sport - .
0430 eb e0 e2 ed e0 ff 20 2d 3c 2f 41 3e 0a 3c 2f 64 ...... -</A>.</d
0440 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 iv>.<div class="
0450 74 65 78 74 22 3e 0a 30 36 2e 30 38 2e 30 33 20 text">.06.08.03
0460 ca f3 e1 ee ea 20 cd e0 f1 e8 e1 ee e2 e0 3a 20 ..... ........:
0470 ea ee f0 ee eb e5 e2 f1 ea e8 e9 20 3c 62 3e f1 ........... <b>.
0480 ef ee f0 f2 3c 2f 62 3e 20 e2 20 cc ee f1 ea e2 ....</b> . .....
0490 e5 2e 3c 62 72 3e 20 2e 2e 2e 20 c1 e0 e4 ec e8 ..<br> ... .....
04a0 ed f2 ee ed 20 2f 20 c1 e5 e3 ee e2 fb e5 20 eb .... / ....... .
04b0 fb e6 e8 20 2f 20 c2 ee e4 ed fb e9 20 3c 62 3e ... / ...... <b>
04c0 f1 ef ee f0 f2 3c 2f 62 3e 20 .....</b>