John Scott wrote:

Can you access the following http://www.sonicwall.com/sonicwall.css

Make sure to capture while trying to access. You should see the stylesheet text if it succeeds. And please post a snippet of the capture file whether it fails or succeeds along with a portion of the capture that didn't succeed from the earlier attempt.

John

Ok John, I could not reach http://www.sonicwall.com/sonicwall.css. Here is my snippet of just www.sonicwall.com: No. Time Source Destination Protocol Info 1 0.000000 192.168.1.123 64.69.184.13 TCP 39010 > http [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=101488833 TSER=0 WS=2 2 0.095001 64.69.184.13 192.168.1.123 TCP http > 39010 [SYN, ACK] Seq=0 Ack=1 Win=17472 Len=0 MSS=1456 WS=0 TSV=0 TSER=0 3 0.095055 192.168.1.123 64.69.184.13 TCP 39010 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=101488928 TSER=0 4 0.095407 192.168.1.123 64.69.184.13 HTTP GET / HTTP/1.1 5 0.192584 64.69.184.13 192.168.1.123 TCP http > 39010 [ACK] Seq=1 Ack=399 Win=17074 Len=0 TSV=66282 TSER=101488928 6 8.904779 64.69.184.13 192.168.1.123 HTTP Continuation or non-HTTP traffic 7 8.904833 192.168.1.123 64.69.184.13 TCP [TCP Dup ACK 3#1] 39010 > http [ACK] Seq=399 Ack=1 Win=5840 Len=0 TSV=101497739 TSER=66282 SLE=2592048076 SRE=2592048088 8 15.467812 64.69.184.13 192.168.1.123 HTTP Continuation or non-HTTP traffic 9 15.467859 192.168.1.123 64.69.184.13 TCP [TCP Dup ACK 3#2] 39010 > http [ACK] Seq=399 Ack=1 Win=5840 Len=0 TSV=101504303 TSER=66282 SLE=2592048076 SRE=2592048088 SLE=2592048076 SRE=2592048088 Here is the snippet for www.sonicwall.com/sonicwall.css: No. Time Source Destination Protocol Info 1 0.000000 192.168.1.123 64.69.184.13 TCP 39005 > http [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=101412923 TSER=0 WS=2 2 0.094471 64.69.184.13 192.168.1.123 TCP http > 39005 [SYN, ACK] Seq=0 Ack=1 Win=17472 Len=0 MSS=1456 WS=0 TSV=0 TSER=0 3 0.094533 192.168.1.123 64.69.184.13 TCP 39005 > http [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=101413017 TSER=0 4 0.094943 192.168.1.123 64.69.184.13 HTTP GET /sonicwall.css HTTP/1.1 5 0.191991 64.69.184.13 192.168.1.123 TCP http > 39005 [ACK] Seq=1 Ack=412 Win=17061 Len=0 TSV=65523 TSER=101413018 6 0.194295 64.69.184.13 192.168.1.123 HTTP Continuation or non-HTTP traffic 7 0.194341 192.168.1.123 64.69.184.13 TCP [TCP Dup ACK 3#1] 39005 > http [ACK] Seq=412 Ack=1 Win=5840 Len=0 TSV=101413117 TSER=65523 SLE=4031858389 SRE=4031859078 8 8.885516 64.69.184.13 192.168.1.123 HTTP Continuation or non-HTTP traffic 9 8.885564 192.168.1.123 64.69.184.13 TCP [TCP Dup ACK 3#2] 39005 > http [ACK] Seq=412 Ack=1 Win=5840 Len=0 TSV=101421810 TSER=65523 SLE=4031858389 SRE=4031858401 SLE=4031858389 SRE=4031859078 It looks like I am getting the same output regardless. If there is a different filter that you want me to use ( I used 'tcp port 80') let me know. Also I exported to text file with just packet summary line. If you need all the other stuff too just let me know your preference and I'll do it again. Thanks for bearing with me. James W