Frame 11693: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:54.811265000 UTC UTC Arrival Time: Nov 21, 2017 01:00:54.811265000 UTC Epoch Arrival Time: 1511226054.811265000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 137.000 microseconds] [Time since reference or first frame: 48.945525000 seconds] Frame Number: 11693 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xebce (60366) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x4a7a [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 6840773, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 11379] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 6840773 (relative sequence number) Sequence Number (raw): 2953457154 [Next Sequence Number: 6841297 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x5020 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 7.402409000 seconds] [Time since previous frame in this TCP stream: 137.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [TCP Analysis Flags] [Expert Info (Warning/Sequence): Previous segment(s) not captured (common at capture start)] [Previous segment(s) not captured (common at capture start)] [Severity level: Warning] [Group: Sequence] [Client Contiguous Streams: 1] [Server Contiguous Streams: 100] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 2c 34 32 34 3a 34 40 34 48 34 4e 34 56 34 5c 34 ,424:4@4H4N4V4\4 0010 64 34 6a 34 72 34 78 34 80 34 86 34 8e 34 94 34 d4j4r4x4.4.4.4.4 0020 9c 34 a2 34 aa 34 b0 34 b8 34 bc 34 c0 34 c4 34 .4.4.4.4.4.4.4.4 0030 c8 34 cc 34 d0 34 d4 34 d8 34 dc 34 e0 34 e4 34 .4.4.4.4.4.4.4.4 0040 e8 34 ec 34 f0 34 f4 34 f8 34 fc 34 00 35 04 35 .4.4.4.4.4.4.5.5 0050 08 35 0c 35 10 35 14 35 18 35 1c 35 20 35 24 35 .5.5.5.5.5.5 5$5 0060 28 35 2c 35 30 35 34 35 38 35 3c 35 40 35 44 35 (5,5054585<5@5D5 0070 48 35 4c 35 50 35 54 35 58 35 5c 35 60 35 64 35 H5L5P5T5X5\5`5d5 0080 68 35 6c 35 70 35 74 35 78 35 7c 35 80 35 84 35 h5l5p5t5x5|5.5.5 0090 88 35 8c 35 2d 36 35 36 3b 36 43 36 49 36 51 36 .5.5-656;6C6I6Q6 00a0 57 36 5f 36 65 36 6d 36 73 36 7b 36 81 36 89 36 W6_6e6m6s6{6.6.6 00b0 8f 36 97 36 9d 36 a4 36 a8 36 ac 36 b0 36 b4 36 .6.6.6.6.6.6.6.6 00c0 b8 36 bc 36 c0 36 da 36 df 36 f2 36 08 37 19 37 .6.6.6.6.6.6.7.7 00d0 2a 37 54 37 65 37 7b 37 97 37 9e 37 b1 37 c6 37 *7T7e7{7.7.7.7.7 00e0 d8 37 ec 37 02 38 14 38 5e 38 68 38 73 38 a6 38 .7.7.8.8^8h8s8.8 00f0 1c 39 42 39 47 39 53 39 94 39 a0 39 47 3a 6d 3a .9B9G9S9.9.9G:m: 0100 72 3a 7e 3a ba 3a c6 3a 25 3b 34 3b 61 3b 6d 3b r:~:.:.:%;4;a;m; 0110 61 3c f0 3c 39 3d e5 3d f6 3d 00 3e 12 3e 80 3e a<.<9=.=.=.>.>.> 0120 86 3e 99 3e ab 3e b3 3e be 3e d2 3e f2 3e fa 3e .>.>.>.>.>.>.>.> 0130 29 3f 4c 3f c1 3f db 3f 00 a0 2f 00 a0 00 00 00 )?L?.?.?../..... 0140 42 30 a6 30 ad 30 d6 30 f0 30 14 31 2e 31 3b 31 B0.0.0.0.0.1.1;1 0150 69 31 93 31 9a 31 91 32 ab 32 78 33 c7 33 e3 33 i1.1.1.2.2x3.3.3 0160 fd 33 40 34 5a 34 f9 34 63 35 d3 35 54 37 5b 37 .3@4Z4.4c5.5T7[7 0170 be 37 3a 38 5f 38 97 39 b1 39 ed 39 fb 39 19 3a .7:8_8.9.9.9.9.: 0180 27 3a e2 3a 19 3b 64 3b 6f 3b 8b 3b 3b 3c 46 3c ':.:.;d;o;.;;.> 01b0 16 3e 2f 3e 40 3e 5a 3e 6a 3e 78 3e 7e 3e 84 3e .>/>@>Z>j>x>~>.> 01c0 8f 3e b2 3e c2 3e d0 3e db 3e 02 3f 0b 3f 14 3f .>.>.>.>.>.?.?.? 01d0 23 3f 3d 3f 67 3f d9 3f 00 b0 2f 00 f8 00 00 00 #?=?g?.?../..... 01e0 e7 30 fa 30 0a 31 85 31 c9 31 24 32 42 32 53 32 .0.0.1.1.1$2B2S2 01f0 78 32 7c 32 80 32 84 32 b7 32 cf 32 f1 32 fc 32 x2|2.2.2.2.2.2.2 0200 05 33 0f 33 18 33 1e 33 57 33 75 33 .3.3.3.3W3u3 Data […]: 2c3432343a34403448344e3456345c3464346a3472347834803486348e3494349c34a234aa34b034b834bc34c034c434c834cc34d034d434d834dc34e034e434e834ec34f034f434f834fc340035043508350c351035143518351c352035243528352c353035343538353c3540354435483 [Length: 524]