Frame 11658: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:54.808990000 UTC UTC Arrival Time: Nov 21, 2017 01:00:54.808990000 UTC Epoch Arrival Time: 1511226054.808990000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 63.000 microseconds] [Time since reference or first frame: 48.943250000 seconds] Frame Number: 11658 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xebb2 (60338) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x488a [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 6820337, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 11344] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 6820337 (relative sequence number) Sequence Number (raw): 2953436718 [Next Sequence Number: 6821385 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xe5ab [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 7.400134000 seconds] [Time since previous frame in this TCP stream: 63.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2620] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 100] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 5f 3d 7b 3d a4 3d a9 3d bc 3d cf 3d e2 3d f5 3d _={=.=.=.=.=.=.= 0010 08 3e 18 3e 28 3e 38 3e 51 3e 58 3e 5d 3e 93 3e .>.>(>8>Q>X>]>.> 0020 98 3e a8 3e b8 3e c8 3e cd 3e fe 3e 15 3f 28 3f .>.>.>.>.>.>.?(? 0030 2c 3f 30 3f 34 3f 38 3f 3c 3f 40 3f 44 3f 48 3f ,?0?4?8?i>.> 0110 b7 3e 00 00 00 f0 26 00 b0 00 00 00 a7 30 04 32 .>....&......0.2 0120 51 32 7f 32 e6 32 fe 32 17 33 de 33 f9 33 84 34 Q2.2.2.2.3.3.3.4 0130 98 34 9c 34 a0 34 a4 34 a8 34 63 35 70 35 7f 35 .4.4.4.4.4c5p5.5 0140 84 35 b3 35 c1 35 7f 36 84 36 b4 36 b8 36 bc 36 .5.5.5.6.6.6.6.6 0150 c0 36 f5 36 03 37 08 37 11 37 91 37 9f 37 b6 37 .6.6.7.7.7.7.7.7 0160 37 38 4f 38 6f 38 82 38 d9 38 53 39 5a 39 7c 39 78O8o8.8.8S9Z9|9 0170 97 39 ab 39 b2 39 e1 39 e8 39 3c 3a 63 3a 6a 3a .9.9.9.9.9<:c:j: 0180 02 3b 09 3b 23 3b ab 3b b2 3b cc 3b 02 3c 22 3c .;.;#;.;.;.;.<"< 0190 3b 3c 5a 3c 68 3c 6c 3c 70 3c 74 3c ac 3c ef 3c ;<>j>.> 01b0 e2 3e f0 3e f4 3e f8 3e fc 3e 00 3f 5b 3f 84 3f .>.>.>.>.>.?[?.? 01c0 b4 3f 00 00 00 00 27 00 60 00 00 00 02 30 4b 30 .?....'.`....0K0 01d0 55 30 9a 30 cc 30 64 31 42 33 68 33 6c 33 70 33 U0.0.0d1B3h3l3p3 01e0 74 33 78 33 7c 33 80 33 84 33 9b 33 16 34 85 34 t3x3|3.3.3.3.4.4 01f0 f4 34 ca 35 ab 36 d3 37 49 38 57 38 72 38 d4 38 .4.5.6.7I8W8r8.8 0200 d8 38 dc 38 e0 38 7b 39 fa 39 64 3b dc 3b 11 3d .8.8.8{9.9d;.;.= 0210 76 3d 9e 3d 14 3e 4a 3e ad 3e d4 3e 21 3f 47 3f v=.=.>J>.>.>!?G? 0220 92 3f 00 00 00 10 27 00 78 00 00 00 61 30 e5 30 .?....'.x...a0.0 0230 fe 30 46 31 87 31 b3 31 ef 31 40 32 44 32 48 32 .0F1.1.1.1@2D2H2 0240 4c 32 50 32 54 32 58 32 5c 32 60 32 fc 32 01 33 L2P2T2X2\2`2.2.3 0250 f2 33 f7 33 4f 34 ac 34 b1 34 17 35 38 35 56 35 .3.3O4.4.4.585V5 0260 78 35 94 35 2a 36 2f 36 6d 36 de 36 fa 36 81 37 x5.5*6/6m6.6.6.7 0270 97 37 b5 37 cb 37 90 38 0b 39 e0 39 9e 3a 02 3b .7.7.7.8.9.9.:.; 0280 83 3b bf 3b 04 3c 08 3c 0c 3c 10 3c 14 3c ed 3c .;.;.<.<.<.<.<.< 0290 f9 3c 73 3d ca 3d 24 3e 30 3e 00 00 00 20 27 00 .0>... '. 02a0 64 00 00 00 d7 30 25 31 75 31 8b 31 f8 34 24 35 d....0%1u1.1.4$5 02b0 52 36 ec 36 39 37 77 37 3a 38 84 38 d5 38 19 39 R6.697w7:8.8.8.9 02c0 be 39 46 3a 60 3a 64 3a 68 3a 6c 3a 70 3a 74 3a .9F:`:d:h:l:p:t: 02d0 84 3a d5 3a dc 3a e7 3a 18 3b 49 3b 7a 3b bc 3b .:.:.:.:.;I;z;.; 02e0 e7 3b 12 3c 3d 3c 95 3c a1 3c db 3c 24 3d e3 3d .;.<=<.<.<.<$=.= 02f0 e8 3d 29 3e a8 3e c9 3e 2b 3f 96 3f d7 3f f6 3f .=)>.>.>+?.?.?.? 0300 00 30 27 00 a8 00 00 00 a9 30 d8 30 f8 30 26 31 .0'......0.0.0&1 0310 6a 31 86 31 fe 31 20 32 44 32 48 32 4c 32 50 32 j1.1.1 2D2H2L2P2 0320 54 32 58 32 5c 32 60 32 64 32 7c 32 80 32 84 32 T2X2\2`2d2|2.2.2 0330 88 32 8c 32 94 32 15 33 3c 33 6a 33 9e 33 c5 33 .2.2.2.3<3j3.3.3 0340 e0 33 11 34 4a 34 72 34 a0 34 ee 34 fa 34 3e 35 .3.4J4r4.4.4.4>5 0350 4d 35 16 36 26 36 7d 36 8d 36 ed 36 fd 36 45 37 M5.6&6}6.6.6.6E7 0360 54 37 82 37 01 38 ca 38 f1 38 53 39 62 39 92 39 T7.7.8.8.8S9b9.9 0370 cb 39 05 3a 48 3a 4c 3a 50 3a 54 3a 58 3a 20 3b .9.:H:L:P:T:X: ; 0380 66 3b a1 3b e5 3b 6f 3c b6 3c d4 3c b0 3d c4 3d f;.;.;o<.<.<.=.= 0390 d8 3d f7 3d 65 3e 6a 3e 06 3f 0b 3f 18 3f 22 3f .=.=e>j>.?.?.?"? 03a0 90 3f 9b 3f c6 3f ef 3f 00 40 27 00 a4 00 00 00 .?.?.?.?.@'..... 03b0 78 33 aa 33 bb 33 d6 33 e1 33 89 34 bd 34 ec 34 x3.3.3.3.3.4.4.4 03c0 fa 34 28 35 35 35 43 35 8d 35 96 35 b6 35 d2 35 .4(555C5.5.5.5.5 03d0 e0 35 26 36 2f 36 3f 36 65 36 73 36 ae 36 35 37 .5&6/6?6e6s6.657 03e0 43 37 7e 37 f5 37 03 38 52 38 f4 38 49 39 9a 39 C7~7.7.8R8.8I9.9 03f0 c7 39 d0 39 fa 39 0c 3a 50 3a 90 3a a1 3a d2 3a .9.9.9.:P:.:.:.: 0400 db 3a e8 3a 13 3b 1d 3b 32 3b 3b 3b 48 3b 73 3b .:.:.;.;2;;;H;s; 0410 7d 3b 67 3c 75 3c 9f 3c };g