Frame 11221: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:54.209015000 UTC UTC Arrival Time: Nov 21, 2017 01:00:54.209015000 UTC Epoch Arrival Time: 1511226054.209015000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 38.000 microseconds] [Time since reference or first frame: 48.343275000 seconds] Frame Number: 11221 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xe91f (59679) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x4d29 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 6028049, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 10907] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 6028049 (relative sequence number) Sequence Number (raw): 2952644430 [Next Sequence Number: 6028573 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0f35 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 6.800159000 seconds] [Time since previous frame in this TCP stream: 38.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2096] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 100] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 59 0f 32 62 0f 32 63 0f 32 64 05 51 6e 04 4e 36 Y.2b.2c.2d.Qn.N6 0010 04 35 6f 05 36 31 05 36 30 05 36 35 05 36 2e 05 .5o.61.60.65.6.. 0020 36 32 04 35 6d 06 45 66 05 36 34 07 29 7a 07 29 62.5m.Ef.64.)z.) 0030 79 06 45 68 0f 32 61 0f 38 76 0f 52 54 07 29 76 y.Eh.2a.8v.RT.)v 0040 07 29 77 07 29 7b 07 29 78 06 45 63 06 45 65 06 .)w.){.)x.Ec.Ee. 0050 45 64 06 45 62 0f 33 3c 06 45 67 05 36 2f 05 36 Ed.Eb.3<.Eg.6/.6 0060 33 05 30 68 04 3b 5f 05 3d 23 05 3c 7e 05 3d 22 3.0h.;_.=#.<~.=" 0070 04 3b 5d 05 3d 24 06 4f 64 05 3d 21 05 43 67 05 .;].=$.Od.=!.Cg. 0080 3c 7d 05 3c 7c 06 4f 62 06 4f 5b 04 3b 5c 0f 3f <}.<|.Ob.O[.;\.? 0090 63 0f 3f 64 0f 3f 65 0f 58 41 07 34 4e 06 4f 5d c.?d.?e.XA.4N.O] 00a0 06 4f 5c 06 4f 5e 06 4f 5f 06 4f 60 06 4f 61 0f .O\.O^.O_.O`.Oa. 00b0 3f 66 06 4f 63 07 34 4d 05 3c 7b 07 3c 64 05 43 ?f.Oc.4M.<{..JZ. 0140 4a 5e 05 4a 64 04 4e 38 07 4b 23 05 51 72 07 2a J^.Jd.N8.K#.Qr.* 0150 21 04 4e 37 05 51 73 04 4e 39 05 59 28 05 51 6f !.N7.Qs.N9.Y(.Qo 0160 05 51 70 07 29 7e 07 2a 22 04 4e 3a 0f 52 53 0f .Qp.)~.*".N:.RS. 0170 52 55 0f 52 56 07 4b 26 07 4b 24 07 2a 23 07 2a RU.RV.K&.K$.*#.* 0180 25 07 2a 26 07 2a 24 07 29 7c 07 29 7d 05 51 74 %.*&.*$.)|.)}.Qt 0190 07 34 50 05 51 71 07 4b 25 05 6e 2a 05 59 25 05 .4P.Qq.K%.n*.Y%. 01a0 59 26 07 50 5c 04 54 38 07 34 4f 05 59 21 05 59 Y&.P\.T8.4O.Y!.Y 01b0 24 07 34 52 05 59 22 05 59 23 04 54 39 07 34 51 $.4R.Y".Y#.T9.4Q 01c0 0f 58 40 07 50 5d 07 50 5b 05 6e 2b 07 3c 65 07 .X@.P].P[.n+.