Frame 11012: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:54.120791000 UTC UTC Arrival Time: Nov 21, 2017 01:00:54.120791000 UTC Epoch Arrival Time: 1511226054.120791000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 107.000 microseconds] [Time since reference or first frame: 48.255051000 seconds] Frame Number: 11012 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xe888 (59528) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x4dc0 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 5920105, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 10698] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 5920105 (relative sequence number) Sequence Number (raw): 2952536486 [Next Sequence Number: 5920629 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x30f5 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 6.711935000 seconds] [Time since previous frame in this TCP stream: 107.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 3668] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 100] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 71 24 03 61 40 03 61 65 03 61 41 02 72 2b 01 45 q$.a@.ae.aA.r+.E 0010 4e 01 48 39 03 23 79 01 4e 3c 04 26 71 02 27 4a N.H9.#y.N<.&q.'J 0020 03 29 53 03 29 54 02 2b 46 04 29 72 03 2d 3c 03 .)S.)T.+F.)r.-<. 0030 31 66 02 2f 77 02 2f 79 03 31 65 02 2f 78 03 31 1f./w./y.1e./x.1 0040 67 02 2f 7a 01 5b 43 02 36 3b 02 2f 7b 03 36 62 g./z.[C.6;./{.6b 0050 02 36 3a 02 36 3c 02 36 3d 02 3c 7d 01 60 22 02 .6:.6<.6=.<}.`". 0060 3c 7e 02 3d 22 01 60 23 01 60 21 02 3d 21 03 41 <~.=".`#.`!.=!.A 0070 7d 02 44 22 02 43 7e 02 43 7d 03 41 7c 02 43 7c }.D".C~.C}.A|.C| 0080 02 43 7b 01 64 58 02 44 21 01 69 39 02 4b 2b 02 .C{.dX.D!.i9.K+. 0090 4b 2d 01 69 3a 02 4b 2c 01 6d 45 03 4c 66 01 6d K-.i:.K,.mE.Lf.m 00a0 44 02 51 39 03 4c 65 03 4c 67 02 57 6a 02 57 69 D.Q9.Le.Lg.Wj.Wi 00b0 02 57 6b 03 51 46 03 51 45 01 71 24 0f 55 39 02 .Wk.QF.QE.q$.U9. 00c0 5d 37 01 73 7c 03 55 2b 02 61 74 01 76 56 02 65 ]7.s|.U+.at.vV.e 00d0 64 01 7b 63 01 45 4f 01 46 5f 01 48 3a 01 4a 63 d.{c.EO.F_.H:.Jc 00e0 01 4e 3d 01 4e 3e 03 29 55 03 29 56 01 51 71 03 .N=.N>.)U.)V.Qq. 00f0 2d 3d 03 31 68 02 2f 7c 03 3c 49 03 3c 47 04 44 -=.1h./|..= 0160 23 02 3d 26 01 60 25 02 3d 24 01 60 24 02 3d 25 #.=&.`%.=$.`$.=% 0170 02 44 23 03 42 22 04 44 31 02 4b 2e 02 4b 2f 02 .D#.B".D1.K..K/. 0180 4b 30 03 47 54 02 51 3c 02 51 3b 01 6d 46 02 51 K0.GT.Q<.Q;.mF.Q 0190 3a 02 51 3d 02 57 6c 04 50 6d 05 5b 72 02 57 6d :.Q=.Wl.Pm.[r.Wm 01a0 02 57 6e 04 56 52 02 5d 38 01 73 7d 01 76 58 02 .Wn.VR.]8.s}.vX. 01b0 65 65 01 7a 73 02 21 3f 03 29 59 01 51 74 02 2b ee.zs.!?.)Y.Qt.+ 01c0 49 01 56 33 04 32 4e 04 32 50 01 5b 44 03 36 65 I.V3.2N.2P.[D.6e 01d0 01 60 26 02 3d 27 03 3c 4b 01 64 5b 01 64 5a 03 .`&.='.