Frame 1110: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:49.371628000 UTC UTC Arrival Time: Nov 21, 2017 01:00:49.371628000 UTC Epoch Arrival Time: 1511226049.371628000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 54.000 microseconds] [Time since reference or first frame: 43.505888000 seconds] Frame Number: 1110 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xcc40 (52288) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x6a08 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 433301, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 796] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 433301 (relative sequence number) Sequence Number (raw): 2947049682 [Next Sequence Number: 433825 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xaef1 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 1.962772000 seconds] [Time since previous frame in this TCP stream: 54.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1572] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 6] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 48 0f 84 05 62 35 00 48 75 15 8b 03 89 44 24 38 H...b5.Hu....D$8 0010 c6 44 24 44 01 8d 5c 24 38 8b 4c 24 10 eb 85 48 .D$D..\$8.L$...H 0020 0f 84 d3 61 35 00 48 0f 84 9d 61 35 00 48 0f 85 ...a5.H...a5.H.. 0030 7c 61 35 00 6a 0a 57 ff 33 ff 15 b8 d3 3b 10 83 |a5.j.W.3....;.. 0040 c4 0c eb c8 80 7b 0c 06 0f 85 4b ff ff ff 8b 46 .....{....K....F 0050 04 3b 43 04 0f 8c ae 00 00 00 8b c6 8b 7d 08 c6 .;C..........}.. 0060 47 0c 06 8b 48 04 51 ff 30 89 4c 24 20 e8 3a 59 G...H.Q.0.L$ .:Y 0070 fb ff 59 59 33 c9 8b d0 89 54 24 10 39 4b 04 7e ..YY3....T$.9K.~ 0080 0e 8b 03 8a 04 08 08 04 11 41 3b 4b 04 7c f2 3b .........A;K.|.; 0090 fe 75 15 8b 07 3b 05 e0 70 67 10 72 74 50 e8 d9 .u...;..pg.rtP.. 00a0 a2 fe ff 8b 54 24 14 59 8b 44 24 18 89 17 89 47 ....T$.Y.D$....G 00b0 04 e9 fb fe ff ff 8a 46 0c 3c 01 0f 84 1d ff ff .......F.<...... 00c0 ff 0f b6 c0 2b c7 74 57 48 48 0f 84 3b 60 35 00 ....+.tWHH..;`5. 00d0 48 74 48 48 0f 84 1e 60 35 00 48 0f 84 e8 5f 35 HtHH...`5.H..._5 00e0 00 48 0f 85 c7 5f 35 00 6a 0a 57 ff 36 ff 15 b8 .H..._5.j.W.6... 00f0 d3 3b 10 83 c4 0c 89 44 24 28 c6 44 24 34 01 8d .;.....D$(.D$4.. 0100 74 24 28 e9 d6 fe ff ff 8b c3 8b de e9 4b ff ff t$(..........K.. 0110 ff 3b 05 dc 70 67 10 72 84 eb 8d 8b 06 eb d7 89 .;..pg.r........ 0120 7c 24 28 eb d5 89 7c 24 38 e9 e2 fe ff ff cc cc |$(...|$8....... 0130 cc cc cc cc cc cc cc cc cc cc cc cc 53 8b d9 56 ............S..V 0140 57 8b 3b 8b 77 04 8b 57 0c 8b 06 89 04 1a 8b 46 W.;.w..W.......F 0150 04 89 44 1a 04 8b 4f 0c 8a 46 0c 88 44 19 0c 8b ..D...O..F..D... 0160 47 0c 03 c3 80 78 0c 03 76 07 50 e8 5c 32 fb ff G....x..v.P.\2.. 0170 59 83 03 1c 5f 5e 33 c0 5b c3 cc cc 51 51 a1 5c Y..._^3.[...QQ.\ 0180 6f 67 10 55 8b 40 14 8b e9 b9 20 01 00 00 23 c1 og.U.@.... ...#. 0190 56 8b f2 3b c1 0f 84 32 8e 32 00 53 57 6a 18 e8 V..;...2.2.SWj.. 01a0 c8 cc fd ff 83 60 10 00 83 c6 08 8b f8 a5 a5 a5 .....`.......... 01b0 89 44 24 14 a5 8b 45 0c 6a 00 40 8d 5d 08 50 ff .D$...E.j.@.].P. 01c0 33 ff 15 bc 6d 67 10 8b f8 83 c4 10 3b 3d e0 70 3...mg......;=.p 01d0 67 10 73 6b 3b 3d dc 70 67 10 72 63 8b 4f dc 6a g.sk;=.pg.rc.O.j 01e0 02 6a 00 6a 04 8d 44 24 1c 50 8b 45 0c 51 40 50 .j.j..D$.P.E.Q@P 01f0 a1 5c 6f 67 10 83 c0 74 57 50 e8 7d c7 fd ff 83 .\og...tWP.}.... 0200 c4 20 83 f8 ff 0f 84 d5 8d 32 00 80 . .......2.. Data […]: 480f84056235004875158b0389442438c6442444018d5c24388b4c2410eb85480f84d3613500480f849d613500480f857c6135006a0a57ff33ff15b8d33b1083c40cebc8807b0c060f854bffffff8b46043b43040f8cae0000008bc68b7d08c6470c068b480451ff30894c2420e83a59fbf [Length: 524]