09:56:03.878295 IP (tos 0x0, ttl  64, id 1855, offset 0, flags [none], length: 62) 192.168.0.4.50005 > 192.168.0.1.domain: [udp sum ok]  33778+ A? www.flip4mac.com. (34)
	0x0000:  0009 5ba9 713e 0011 2493 175e 0800 4500  ..[.q>..$..^..E.
	0x0010:  003e 073f 0000 4011 f21a c0a8 0004 c0a8  .>.?..@.........
	0x0020:  0001 c355 0035 002a 34fd 83f2 0100 0001  ...U.5.*4.......
	0x0030:  0000 0000 0000 0377 7777 0866 6c69 7034  .......www.flip4
	0x0040:  6d61 6303 636f 6d00 0001 0001            mac.com.....
09:56:18.878865 IP (tos 0x0, ttl  64, id 1869, offset 0, flags [none], length: 62) 192.168.0.4.50005 > 192.168.0.1.domain: [udp sum ok]  33778+ A? www.flip4mac.com. (34)
	0x0000:  0009 5ba9 713e 0011 2493 175e 0800 4500  ..[.q>..$..^..E.
	0x0010:  003e 074d 0000 4011 f20c c0a8 0004 c0a8  .>.M..@.........
	0x0020:  0001 c355 0035 002a 34fd 83f2 0100 0001  ...U.5.*4.......
	0x0030:  0000 0000 0000 0377 7777 0866 6c69 7034  .......www.flip4
	0x0040:  6d61 6303 636f 6d00 0001 0001            mac.com.....
09:56:19.202017 IP (tos 0x0, ttl  64, id 21288, offset 0, flags [none], length: 92) 192.168.0.1.domain > 192.168.0.4.50005: [udp sum ok]  33778 q: A? www.flip4mac.com. 2/0/0 www.flip4mac.com. CNAME flip4mac.com., flip4mac.com. A flipcenter.com (64)
	0x0000:  0011 2493 175e 0009 5ba9 713e 0800 4500  ..$..^..[.q>..E.
	0x0010:  005c 5328 0000 4011 a613 c0a8 0001 c0a8  .\S(..@.........
	0x0020:  0004 0035 c355 0048 fc2e 83f2 8180 0001  ...5.U.H........
	0x0030:  0002 0000 0000 0377 7777 0866 6c69 7034  .......www.flip4
	0x0040:  6d61 6303 636f 6d00 0001 0001 c00c 0005  mac.com.........
	0x0050:  0001 0000 0708 0002 c010 c010 0001 0001  ................
	0x0060:  0000 0708 0004 d87a 9148                 .......z.H
09:56:19.240975 IP (tos 0x0, ttl  64, id 1870, offset 0, flags [DF], length: 60) 192.168.0.4.53705 > flipcenter.com.http: S [tcp sum ok] 156300637:156300637(0) win 65535 <mss 1460,nop,wscale 0,nop,nop,timestamp 1744688882 0>
	0x0000:  0009 5ba9 713e 0011 2493 175e 0800 4500  ..[.q>..$..^..E.
	0x0010:  003c 074e 4000 4006 08ff c0a8 0004 d87a  .<.N@.@........z
	0x0020:  9148 d1c9 0050 0950 f55d 0000 0000 a002  .H...P.P.]......
	0x0030:  ffff 10e1 0000 0204 05b4 0103 0300 0101  ................
	0x0040:  080a 67fd d6f2 0000 0000                 ..g.......
09:56:19.409082 IP (tos 0x0, ttl 119, id 42889, offset 0, flags [none], length: 60) flipcenter.com.http > 192.168.0.4.53705: S [tcp sum ok] 2353106926:2353106926(0) ack 156300638 win 17424 <mss 1452,nop,wscale 0,nop,nop,timestamp 0 0>
	0x0000:  0011 2493 175e 0009 5ba9 713e 0800 4500  ..$..^..[.q>..E.
	0x0010:  003c a789 0000 7706 71c3 d87a 9148 c0a8  .<....w.q..z.H..
	0x0020:  0004 0050 d1c9 8c41 8fee 0950 f55e a012  ...P...A...P.^..
	0x0030:  4410 ef87 0000 0204 05ac 0103 0300 0101  D...............
	0x0040:  080a 0000 0000 0000 0000                 ..........
09:56:19.409223 IP (tos 0x0, ttl  64, id 1871, offset 0, flags [DF], length: 52) 192.168.0.4.53705 > flipcenter.com.http: . [tcp sum ok] 1:1(0) ack 1 win 65535 <nop,nop,timestamp 1744688882 0>
	0x0000:  0009 5ba9 713e 0011 2493 175e 0800 4500  ..[.q>..$..^..E.
	0x0010:  0034 074f 4000 4006 0906 c0a8 0004 d87a  .4.O@.@........z
	0x0020:  9148 d1c9 0050 0950 f55e 8c41 8fef 8010  .H...P.P.^.A....
	0x0030:  ffff 2064 0000 0101 080a 67fd d6f2 0000  ...d......g.....
	0x0040:  0000                                     ..
09:56:19.410193 IP (tos 0x0, ttl  64, id 1872, offset 0, flags [DF], length: 241) 192.168.0.4.53705 > flipcenter.com.http: P [tcp sum ok] 1:190(189) ack 1 win 65535 <nop,nop,timestamp 1744688882 0>
	0x0000:  0009 5ba9 713e 0011 2493 175e 0800 4500  ..[.q>..$..^..E.
	0x0010:  00f1 0750 4000 4006 0848 c0a8 0004 d87a  ...P@.@..H.....z
	0x0020:  9148 d1c9 0050 0950 f55e 8c41 8fef 8018  .H...P.P.^.A....
	0x0030:  ffff 837e 0000 0101 080a 67fd d6f2 0000  ...~......g.....
	0x0040:  0000 4745 5420 2f75 7064 6174 6572 2f77  ..GET./updater/w
	0x0050:  6d76 2f75 7064 6174 652e 706c 6973 7420  mv/update.plist.
	0x0060:  4854 5450 2f31 2e31 0d0a 5573 6572 2d41  HTTP/1.1..User-A
	0x0070:  6765 6e74 3a20 4346 4e65 7477 6f72 6b2f  gent:.CFNetwork/
	0x0080:  3130 2e34 2e33 0d0a 4163 6365 7074 3a20  10.4.3..Accept:.
	0x0090:  2a2f 2a0d 0a41 6363 6570 742d 4c61 6e67  */*..Accept-Lang
	0x00a0:  7561 6765 3a20 6465 2d64 650d 0a41 6363  uage:.de-de..Acc
	0x00b0:  6570 742d 456e 636f 6469 6e67 3a20 677a  ept-Encoding:.gz
	0x00c0:  6970 2c20 6465 666c 6174 650d 0a43 6f6e  ip,.deflate..Con
	0x00d0:  6e65 6374 696f 6e3a 206b 6565 702d 616c  nection:.keep-al
	0x00e0:  6976 650d 0a48 6f73 743a 2077 7777 2e66  ive..Host:.www.f
	0x00f0:  6c69 7034 6d61 632e 636f 6d0d 0a0d 0a    lip4mac.com....
09:56:20.618458 IP (tos 0x0, ttl  64, id 1873, offset 0, flags [DF], length: 241) 192.168.0.4.53705 > flipcenter.com.http: P [tcp sum ok] 1:190(189) ack 1 win 65535 <nop,nop,timestamp 1744688884 0>
	0x0000:  0009 5ba9 713e 0011 2493 175e 0800 4500  ..[.q>..$..^..E.
	0x0010:  00f1 0751 4000 4006 0847 c0a8 0004 d87a  ...Q@.@..G.....z
	0x0020:  9148 d1c9 0050 0950 f55e 8c41 8fef 8018  .H...P.P.^.A....
	0x0030:  ffff 837c 0000 0101 080a 67fd d6f4 0000  ...|......g.....
	0x0040:  0000 4745 5420 2f75 7064 6174 6572 2f77  ..GET./updater/w
	0x0050:  6d76 2f75 7064 6174 652e 706c 6973 7420  mv/update.plist.
	0x0060:  4854 5450 2f31 2e31 0d0a 5573 6572 2d41  HTTP/1.1..User-A
	0x0070:  6765 6e74 3a20 4346 4e65 7477 6f72 6b2f  gent:.CFNetwork/
	0x0080:  3130 2e34 2e33 0d0a 4163 6365 7074 3a20  10.4.3..Accept:.
	0x0090:  2a2f 2a0d 0a41 6363 6570 742d 4c61 6e67  */*..Accept-Lang
	0x00a0:  7561 6765 3a20 6465 2d64 650d 0a41 6363  uage:.de-de..Acc
	0x00b0:  6570 742d 456e 636f 6469 6e67 3a20 677a  ept-Encoding:.gz
	0x00c0:  6970 2c20 6465 666c 6174 650d 0a43 6f6e  ip,.deflate..Con
	0x00d0:  6e65 6374 696f 6e3a 206b 6565 702d 616c  nection:.keep-al
	0x00e0:  6976 650d 0a48 6f73 743a 2077 7777 2e66  ive..Host:.www.f
	0x00f0:  6c69 7034 6d61 632e 636f 6d0d 0a0d 0a    lip4mac.com....
09:56:20.803229 IP (tos 0x0, ttl 119, id 44272, offset 0, flags [none], length: 52) flipcenter.com.http > 192.168.0.4.53705: . [tcp sum ok] 873:873(0) ack 190 win 17235 <nop,nop,timestamp 6792355 1744688882>
	0x0000:  0011 2493 175e 0009 5ba9 713e 0800 4500  ..$..^..[.q>..E.
	0x0010:  0034 acf0 0000 7706 6c64 d87a 9148 c0a8  .4....w.ld.z.H..
	0x0020:  0004 0050 d1c9 8c41 9357 0950 f61b 8010  ...P...A.W.P....
	0x0030:  4353 33e1 0000 0101 080a 0067 a4a3 67fd  CS3........g..g.
	0x0040:  d6f2                                     ..
09:56:22.567022 IP (tos 0x0, ttl 119, id 46442, offset 0, flags [none], length: 924) flipcenter.com.http > 192.168.0.4.53705: P [tcp sum ok] 1:873(872) ack 190 win 17235 <nop,nop,timestamp 6792373 1744688882>
	0x0000:  0011 2493 175e 0009 5ba9 713e 0800 4500  ..$..^..[.q>..E.
	0x0010:  039c b56a 0000 7706 6082 d87a 9148 c0a8  ...j..w.`..z.H..
	0x0020:  0004 0050 d1c9 8c41 8fef 0950 f61b 8018  ...P...A...P....
	0x0030:  4353 b151 0000 0101 080a 0067 a4b5 67fd  CS.Q.......g..g.
	0x0040:  d6f2 4854 5450 2f31 2e31 2032 3030 204f  ..HTTP/1.1.200.O
	0x0050:  4b0d 0a43 6f6e 7465 6e74 2d4c 656e 6774  K..Content-Lengt
	0x0060:  683a 2035 3838 0d0a 436f 6e74 656e 742d  h:.588..Content-
	0x0070:  5479 7065 3a20 7465 7874 2f78 6d6c 0d0a  Type:.text/xml..
	0x0080:  4c61 7374 2d4d 6f64 6966 6965 643a 2054  Last-Modified:.T
	0x0090:  6875 2c20 3035 204a 616e 2032 3030 3620  hu,.05.Jan.2006.
	0x00a0:  3233 3a35 353a 3237 2047 4d54 0d0a 4163  23:55:27.GMT..Ac
	0x00b0:  6365 7074 2d52 616e 6765 733a 2062 7974  cept-Ranges:.byt
	0x00c0:  6573 0d0a 4554 6167 3a20 2232 6462 3561  es..ETag:."2db5a
	0x00d0:  3138 3035 3331 3263 3631 3a31 3162 6522  1805312c61:11be"
	0x00e0:  0d0a 5365 7276 6572 3a20 4d69 6372 6f73  ..Server:.Micros
	0x00f0:  6f66 742d 4949 532f 362e 300d 0a4d 6963  oft-IIS/6.0..Mic
	0x0100:  726f 736f 6674 4f66 6669 6365 5765 6253  rosoftOfficeWebS
	0x0110:  6572 7665 723a 2035 2e30 5f50 7562 0d0a  erver:.5.0_Pub..
	0x0120:  582d 506f 7765 7265 642d 4279 3a20 4153  X-Powered-By:.AS
	0x0130:  502e 4e45 540d 0a44 6174 653a 2053 6174  P.NET..Date:.Sat
	0x0140:  2c20 3134 204a 616e 2032 3030 3620 3038  ,.14.Jan.2006.08
	0x0150:  3a35 363a 3233 2047 4d54 0d0a 0d0a 3c3f  :56:23.GMT....<?
	0x0160:  786d 6c20 7665 7273 696f 6e3d 2231 2e30  xml.version="1.0
	0x0170:  2220 656e 636f 6469 6e67 3d22 5554 462d  ".encoding="UTF-
	0x0180:  3822 3f3e 0a3c 2144 4f43 5459 5045 2070  8"?>.<!DOCTYPE.p
	0x0190:  6c69 7374 2050 5542 4c49 4320 222d 2f2f  list.PUBLIC."-//
	0x01a0:  4170 706c 6520 436f 6d70 7574 6572 2f2f  Apple.Computer//
	0x01b0:  4454 4420 504c 4953 5420 312e 302f 2f45  DTD.PLIST.1.0//E
	0x01c0:  4e22 2022 6874 7470 3a2f 2f77 7777 2e61  N"."http://www.a
	0x01d0:  7070 6c65 2e63 6f6d 2f44 5444 732f 5072  pple.com/DTDs/Pr
	0x01e0:  6f70 6572 7479 4c69 7374 2d31 2e30 2e64  opertyList-1.0.d
	0x01f0:  7464 223e 0a3c 706c 6973 7420 7665 7273  td">.<plist.vers
	0x0200:  696f 6e3d 2231 2e30 223e 0a3c 6469 6374  ion="1.0">.<dict
	0x0210:  3e0a 093c 6b65 793e 4163 6365 7074 4275  >..<key>AcceptBu
	0x0220:  7474 6f6e 5469 746c 653c 2f6b 6579 3e0a  ttonTitle</key>.
	0x0230:  093c 7374 7269 6e67 3e41 6363 6570 743c  .<string>Accept<
	0x0240:  2f73 7472 696e 673e 0a09 3c6b 6579 3e43  /string>..<key>C
	0x0250:  616e 6365 6c42 7574 746f 6e54 6974 6c65  ancelButtonTitle
	0x0260:  3c2f 6b65 793e 0a09 3c73 7472 696e 673e  </key>..<string>
	0x0270:  4361 6e63 656c 3c2f 7374 7269 6e67 3e0a  Cancel</string>.
	0x0280:  093c 6b65 793e 496e 666f 726d 6174 6976  .<key>Informativ
	0x0290:  6554 6578 743c 2f6b 6579 3e0a 093c 7374  eText</key>..<st
	0x02a0:  7269 6e67 3e54 6869 7320 6973 2074 6865  ring>This.is.the
	0x02b0:  2062 6f64 7920 7465 7874 2066 6f72 2074  .body.text.for.t
	0x02c0:  6865 2075 7064 6174 6520 6469 616c 6f67  he.update.dialog
	0x02d0:  2e3c 2f73 7472 696e 673e 0a09 3c6b 6579  .</string>..<key
	0x02e0:  3e4c 6174 6573 7456 6572 7369 6f6e 3c2f  >LatestVersion</
	0x02f0:  6b65 793e 0a09 3c73 7472 696e 673e 313c  key>..<string>1<
	0x0300:  2f73 7472 696e 673e 0a09 3c6b 6579 3e4d  /string>..<key>M
	0x0310:  6573 7361 6765 5465 7874 3c2f 6b65 793e  essageText</key>
	0x0320:  0a09 3c73 7472 696e 673e 4120 6e65 7720  ..<string>A.new.
	0x0330:  7665 7273 696f 6e20 6f66 2046 6c69 7034  version.of.Flip4
	0x0340:  4d61 6320 574d 5620 6973 2061 7661 696c  Mac.WMV.is.avail
	0x0350:  6162 6c65 2e3c 2f73 7472 696e 673e 0a09  able.</string>..
	0x0360:  3c6b 6579 3e55 524c 3c2f 6b65 793e 0a09  <key>URL</key>..
	0x0370:  3c73 7472 696e 673e 6874 7470 3a2f 2f77  <string>http://w
	0x0380:  7777 2e66 6c69 7034 6d61 632e 636f 6d3c  ww.flip4mac.com<
	0x0390:  2f73 7472 696e 673e 0a3c 2f64 6963 743e  /string>.</dict>
	0x03a0:  0a3c 2f70 6c69 7374 3e0a                 .</plist>.
09:56:22.709475 IP (tos 0x0, ttl  64, id 1876, offset 0, flags [DF], length: 52) 192.168.0.4.53705 > flipcenter.com.http: . [tcp sum ok] 190:190(0) ack 873 win 65535 <nop,nop,timestamp 1744688889 6792373>
	0x0000:  0009 5ba9 713e 0011 2493 175e 0800 4500  ..[.q>..$..^..E.
	0x0010:  0034 0754 4000 4006 0901 c0a8 0004 d87a  .4.T@.@........z
	0x0020:  9148 d1c9 0050 0950 f61b 8c41 9357 8010  .H...P.P...A.W..
	0x0030:  ffff 771b 0000 0101 080a 67fd d6f9 0067  ..w.......g....g
	0x0040:  a4b5                                     ..
09:56:22.819217 IP (tos 0x0, ttl  64, id 1878, offset 0, flags [DF], length: 52) 192.168.0.4.53705 > flipcenter.com.http: F [tcp sum ok] 190:190(0) ack 873 win 65535 <nop,nop,timestamp 1744688889 6792373>
	0x0000:  0009 5ba9 713e 0011 2493 175e 0800 4500  ..[.q>..$..^..E.
	0x0010:  0034 0756 4000 4006 08ff c0a8 0004 d87a  .4.V@.@........z
	0x0020:  9148 d1c9 0050 0950 f61b 8c41 9357 8011  .H...P.P...A.W..
	0x0030:  ffff 771a 0000 0101 080a 67fd d6f9 0067  ..w.......g....g
	0x0040:  a4b5                                     ..
09:56:22.987817 IP (tos 0x0, ttl 119, id 46876, offset 0, flags [none], length: 52) flipcenter.com.http > 192.168.0.4.53705: . [tcp sum ok] 873:873(0) ack 191 win 17235 <nop,nop,timestamp 6792377 1744688889>
	0x0000:  0011 2493 175e 0009 5ba9 713e 0800 4500  ..$..^..[.q>..E.
	0x0010:  0034 b71c 0000 7706 6238 d87a 9148 c0a8  .4....w.b8.z.H..
	0x0020:  0004 0050 d1c9 8c41 9357 0950 f61c 8010  ...P...A.W.P....
	0x0030:  4353 33c3 0000 0101 080a 0067 a4b9 67fd  CS3........g..g.
	0x0040:  d6f9                                     ..
09:56:22.989990 IP (tos 0x0, ttl 119, id 46877, offset 0, flags [none], length: 52) flipcenter.com.http > 192.168.0.4.53705: F [tcp sum ok] 873:873(0) ack 191 win 17235 <nop,nop,timestamp 6792377 1744688889>
	0x0000:  0011 2493 175e 0009 5ba9 713e 0800 4500  ..$..^..[.q>..E.
	0x0010:  0034 b71d 0000 7706 6237 d87a 9148 c0a8  .4....w.b7.z.H..
	0x0020:  0004 0050 d1c9 8c41 9357 0950 f61c 8011  ...P...A.W.P....
	0x0030:  4353 33c2 0000 0101 080a 0067 a4b9 67fd  CS3........g..g.
	0x0040:  d6f9                                     ..
09:56:22.990067 IP (tos 0x0, ttl  64, id 1879, offset 0, flags [DF], length: 52) 192.168.0.4.53705 > flipcenter.com.http: . [tcp sum ok] 191:191(0) ack 874 win 65535 <nop,nop,timestamp 1744688889 6792377>
	0x0000:  0009 5ba9 713e 0011 2493 175e 0800 4500  ..[.q>..$..^..E.
	0x0010:  0034 0757 4000 4006 08fe c0a8 0004 d87a  .4.W@.@........z
	0x0020:  9148 d1c9 0050 0950 f61c 8c41 9358 8010  .H...P.P...A.X..
	0x0030:  ffff 7715 0000 0101 080a 67fd d6f9 0067  ..w.......g....g
	0x0040:  a4b9                                     ..