Frame 11494: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:54.729009000 UTC UTC Arrival Time: Nov 21, 2017 01:00:54.729009000 UTC Epoch Arrival Time: 1511226054.729009000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 102.000 microseconds] [Time since reference or first frame: 48.863269000 seconds] Frame Number: 11494 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xeb49 (60233) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x4aff [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 6742785, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 11180] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 6742785 (relative sequence number) Sequence Number (raw): 2953359166 [Next Sequence Number: 6743309 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0908 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 7.320153000 seconds] [Time since previous frame in this TCP stream: 102.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1572] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 100] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 30 3e 34 3e 38 3e 3c 3e 40 3e 44 3e 48 3e 4c 3e 0>4>8><>@>D>H>L> 0010 50 3e 54 3e 58 3e 5c 3e a4 3e a8 3e ac 3e b0 3e P>T>X>\>.>.>.>.> 0020 b4 3e b8 3e bc 3e c0 3e c4 3e c8 3e cc 3e d0 3e .>.>.>.>.>.>.>.> 0030 48 3f 4c 3f 50 3f 54 3f 58 3f 5c 3f 60 3f 64 3f H?L?P?T?X?\?`?d? 0040 68 3f 6c 3f 70 3f 74 3f 78 3f 7c 3f 80 3f 84 3f h?l?p?t?x?|?.?.? 0050 88 3f 8c 3f 00 00 09 00 c8 00 00 00 04 30 08 30 .?.?.........0.0 0060 0c 30 10 30 14 30 18 30 1c 30 20 30 24 30 28 30 .0.0.0.0.0 0$0(0 0070 2c 30 30 30 34 30 7c 30 80 30 84 30 88 30 8c 30 ,00040|0.0.0.0.0 0080 90 30 94 30 98 30 9c 30 a0 30 a4 30 a8 30 ac 30 .0.0.0.0.0.0.0.0 0090 1c 31 20 31 24 31 28 31 2c 31 30 31 34 31 38 31 .1 1$1(1,1014181 00a0 3c 31 40 31 44 31 48 31 4c 31 bc 31 c0 31 c4 31 <1@1D1H1L1.1.1.1 00b0 c8 31 cc 31 d0 31 d4 31 d8 31 dc 31 14 32 18 32 .1.1.1.1.1.1.2.2 00c0 1c 32 20 32 24 32 28 32 2c 32 30 32 34 32 38 32 .2 2$2(2,2024282 00d0 3c 32 40 32 44 32 48 32 4c 32 50 32 54 32 ac 32 <2@2D2H2L2P2T2.2 00e0 b0 32 b4 32 b8 32 bc 32 c0 32 c4 32 c8 32 cc 32 .2.2.2.2.2.2.2.2 00f0 d0 32 d4 32 59 34 95 34 d0 34 1f 35 60 35 0a 38 .2.2Y4.4.4.5`5.8 0100 ce 38 1d 39 57 39 c0 39 d1 39 dc 39 b3 3b a0 3c .8.9W9.9.9.9.;.< 0110 eb 3c f2 3c 96 3d d9 3d ef 3e 32 3f 00 10 09 00 .<.<.=.=.>2?.... 0120 0c 00 00 00 2d 39 8b 3e 00 20 09 00 80 00 00 00 ....-9.>. ...... 0130 73 31 90 31 94 31 98 31 9c 31 a0 31 a4 31 a8 31 s1.1.1.1.1.1.1.1 0140 9a 33 a0 33 23 34 32 34 50 34 5d 34 68 34 6d 34 .3.3#424P4]4h4m4 0150 76 34 80 34 8a 34 94 34 9e 34 ab 34 b5 34 d6 34 v4.4.4.4.4.4.4.4 0160 db 34 e0 34 25 35 2c 35 5d 35 71 35 8b 35 51 37 .4.4%5,5]5q5.5Q7 0170 b7 37 c7 37 68 38 a5 38 63 39 6c 39 ec 39 88 3a .7.7h8.8c9l9.9.: 0180 8d 3a e7 3a f7 3a 3e 3b c6 3b dc 3b e7 3b 18 3c .:.:.:>;.;.;.;.< 0190 2d 3c 37 3c 5c 3c 95 3c b5 3c bf 3c e5 3c ff 3c -<7<\<.<.<.<.<.< 01a0 12 3d 38 3d 48 3d 00 00 00 30 09 00 9c 00 00 00 .=8=H=...0...... 01b0 3b 30 69 30 74 30 9a 30 c4 30 fc 30 00 31 04 31 ;0i0t0.0.0.0.1.1 01c0 08 31 0c 31 1a 31 26 31 67 31 78 31 97 31 ba 31 .1.1.1&1g1x1.1.1 01d0 71 32 7c 32 82 32 46 33 5e 33 78 33 99 33 bf 33 q2|2.2F3^3x3.3.3 01e0 d0 33 ed 33 0f 34 c6 34 df 34 f0 34 03 35 cd 35 .3.3.4.4.4.4.5.5 01f0 da 35 0f 36 16 36 48 36 5a 36 6a 36 98 36 ab 36 .5.6.6H6Z6j6.6.6 0200 ba 36 c5 36 ca 36 d6 36 e6 36 eb 36 .6.6.6.6.6.6 Data […]: 303e343e383e3c3e403e443e483e4c3e503e543e583e5c3ea43ea83eac3eb03eb43eb83ebc3ec03ec43ec83ecc3ed03e483f4c3f503f543f583f5c3f603f643f683f6c3f703f743f783f7c3f803f843f883f8c3f00000900c8000000043008300c301030143018301c302030243028302c3 [Length: 524]