Frame 11721: Packet, 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:54.825131000 UTC UTC Arrival Time: Nov 21, 2017 01:00:54.825131000 UTC Epoch Arrival Time: 1511226054.825131000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 208.000 microseconds] [Time since reference or first frame: 48.959391000 seconds] Frame Number: 11721 Frame Length: 1514 bytes (12112 bits) Capture Length: 1514 bytes (12112 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xebe3 (60387) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x46bd [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 6855445, Ack: 1736, Len: 1460 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 11407] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 6855445 (relative sequence number) Sequence Number (raw): 2953471826 [Next Sequence Number: 6856905 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0dbb [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 7.416275000 seconds] [Time since previous frame in this TCP stream: 208.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] [Client Contiguous Streams: 1] [Server Contiguous Streams: 100] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 1460 bytes Data (1460 bytes) 0000 2f 3e 42 3e 4d 3e 5c 3e 64 3e 6c 3e 74 3e 7e 3e />B>M>\>d>l>t>~> 0010 8f 3e 9b 3e 07 3f 10 3f 71 3f 95 3f ab 3f d2 3f .>.>.?.?q?.?.?.? 0020 de 3f eb 3f 00 10 35 00 ec 00 00 00 e8 30 fe 30 .?.?..5......0.0 0030 06 31 0f 31 18 31 21 31 2c 31 33 31 3a 31 40 31 .1.1.1!1,131:1@1 0040 4a 31 4f 31 57 31 62 31 6d 31 78 31 83 31 8e 31 J1O1W1b1m1x1.1.1 0050 96 31 ac 31 bb 31 c5 31 ce 31 d8 31 de 31 e8 31 .1.1.1.1.1.1.1.1 0060 ef 31 f4 31 ff 31 04 32 32 32 51 32 68 32 84 32 .1.1.1.222Q2h2.2 0070 a2 32 44 33 62 33 01 34 1d 34 41 34 5b 34 79 34 .2D3b3.4.4A4[4y4 0080 98 34 6a 35 c4 35 e4 35 e9 35 f5 35 91 36 ad 36 .4j5.5.5.5.5.6.6 0090 e3 36 f8 36 97 37 83 38 8b 38 0b 39 f8 39 6a 3a .6.6.7.8.8.9.9j: 00a0 9a 3a b1 3a 35 3b 4a 3b 56 3b 62 3b 98 3b 9e 3b .:.:5;J;V;b;.;.; 00b0 03 3c 17 3c 23 3c 29 3c 33 3c 3d 3c b0 3c f0 3c .<.<#<)<3<=<.<.< 00c0 f8 3c 39 3d 4c 3d 50 3d 54 3d 58 3d 5c 3d 60 3d .<9=L=P=T=X=\=`= 00d0 64 3d 68 3d 82 3d 8c 3d 92 3d 98 3d 21 3e 27 3e d=h=.=.=.=.=!>'> 00e0 43 3e 49 3e 58 3e 5e 3e 66 3e 6c 3e 94 3e 9c 3e C>I>X>^>f>l>.>.> 00f0 c8 3e d3 3e db 3e e2 3e e8 3e 2c 3f 35 3f 3e 3f .>.>.>.>.>,?5?>? 0100 47 3f 50 3f 59 3f 5f 3f 77 3f 9f 3f d8 3f 00 00 G?P?Y?_?w?.?.?.. 0110 00 20 35 00 fc 00 00 00 29 30 2f 30 35 30 4f 30 . 5.....)0/050O0 0120 55 30 5b 30 64 30 6a 30 7c 30 84 30 8a 30 90 30 U0[0d0j0|0.0.0.0 0130 b7 30 bf 30 15 31 5d 31 b4 31 c8 31 10 32 16 32 .0.0.1]1.1.1.2.2 0140 25 32 2b 32 41 32 47 32 64 32 6d 32 73 32 84 32 %2+2A2G2d2m2s2.2 0150 8a 32 af 32 b5 32 cb 32 d1 32 d7 32 02 33 0a 33 .2.2.2.2.2.2.3.3 0160 71 33 7e 33 84 33 8c 33 92 33 15 34 1c 34 29 34 q3~3.3.3.3.4.4)4 0170 35 34 41 34 4d 34 56 34 5c 34 8f 34 99 34 9f 34 54A4M4V4\4.4.4.4 0180 ba 34 c4 34 ce 34 d7 34 dd 34 04 35 62 35 6d 35 .4.4.4.4.4.5b5m5 0190 73 35 90 35 c3 35 c8 35 ce 35 f0 35 14 36 2e 36 s5.5.5.5.5.5.6.6 01a0 51 36 5b 36 93 36 9c 36 a3 36 ad 36 bb 36 c4 36 Q6[6.6.6.6.6.6.6 01b0 cb 36 db 36 e1 36 eb 36 f3 36 24 37 33 37 5b 37 .6.6.6.6.6$737[7 01c0 67 37 88 37 b0 37 b5 37 dc 37 f9 37 3a 38 67 39 g7.7.7.7.7.7:8g9 01d0 83 39 8d 39 9b 39 a5 39 ed 39 f4 39 06 3a 82 3a .9.9.9.9.9.9.:.: 01e0 92 3a a9 3a da 3a eb 3a 0d 3d 7e 3d ad 3d d8 3d .:.:.:.:.=~=.=.= 01f0 15 3e 9d 3e aa 3e e7 3e f0 3e 24 3f 34 3f 5f 3f .>.>.>.>.>$?4?_? 0200 6b 3f 8c 3f b8 3f bd 3f e6 3f 00 00 00 30 35 00 k?.?.?.?.?...05. 0210 3c 01 00 00 07 30 44 30 07 31 3b 31 49 31 4f 31 <....0D0.1;1I1O1 0220 55 31 6c 31 7e 31 97 31 b6 31 f2 31 0d 32 1a 32 U1l1~1.1.1.1.2.2 0230 26 32 33 32 b2 32 b8 32 e2 32 e8 32 12 33 18 33 &232.2.2.2.2.3.3 0240 42 33 48 33 bf 33 d1 33 5c 34 6a 34 7b 34 b6 34 B3H3.3.3\4j4{4.4 0250 bd 34 c3 34 d9 34 09 35 23 35 39 35 3f 35 51 35 .4.4.4.5#595?5Q5 0260 59 35 6b 35 76 35 88 35 90 35 a2 35 ad 35 bf 35 Y5k5v5.5.5.5.5.5 0270 cd 35 d3 35 df 35 f7 35 10 36 17 36 78 36 7e 36 .5.5.5.5.6.6x6~6 0280 af 36 06 37 0f 37 16 37 1f 37 32 37 43 37 4d 37 .6.7.7.7.727C7M7 0290 5e 37 64 37 83 37 a3 37 a9 37 af 37 be 37 c9 37 ^7d7.7.7.7.7.7.7 02a0 cd 37 d5 37 db 37 e6 37 ec 37 f0 37 f8 37 fc 37 .7.7.7.7.7.7.7.7 02b0 02 38 06 38 0f 38 1a 38 1e 38 24 38 28 38 30 38 .8.8.8.8.8$8(808 02c0 36 38 46 38 4f 38 5f 38 67 38 6e 38 76 38 7f 38 68F8O8_8g8n8v8.8 02d0 94 38 9a 38 a0 38 b6 38 bb 38 c1 38 cb 38 d5 38 .8.8.8.8.8.8.8.8 02e0 df 38 e9 38 ef 38 2f 39 65 39 89 39 8e 39 b4 39 .8.8.8/9e9.9.9.9 02f0 b9 39 dc 39 0a 3b bb 3b c7 3b cd 3b d7 3b e1 3b .9.9.;.;.;.;.;.; 0300 12 3c 26 3c 32 3c 42 3c 52 3c 64 3c 69 3c 82 3c .<&<2Q?g?r?{?.? 0330 87 3f 8d 3f 92 3f a4 3f a8 3f ac 3f b0 3f b4 3f .?.?.?.?.?.?.?.? 0340 b8 3f bc 3f c0 3f 00 00 00 40 35 00 d0 00 00 00 .?.?.?...@5..... 0350 37 30 36 31 7f 31 92 31 30 32 34 32 38 32 3c 32 7061.1.1024282<2 0360 40 32 44 32 48 32 4c 32 ad 32 2a 33 39 33 83 33 @2D2H2L2.2*393.3 0370 d5 33 f4 33 8e 35 e8 35 f9 35 11 36 64 36 73 36 .3.3.5.5.5.6d6s6 0380 a0 36 af 36 c5 36 d9 36 ef 36 fe 36 8d 37 83 38 .6.6.6.6.6.6.7.8 0390 ac 38 cb 38 1c 39 9a 39 a1 39 a6 39 c5 39 d7 39 .8.8.9.9.9.9.9.9 03a0 01 3a 29 3a 55 3a 75 3a 9b 3a b5 3b d6 3b f5 3b .:):U:u:.:.;.;.; 03b0 10 3c 2d 3c 47 3c b4 3c bb 3c c0 3c c6 3c cc 3c .<-p>{> 0410 82 3e 90 3e d0 3e 00 00 00 50 35 00 40 00 00 00 .>.>.>...P5.@... 0420 83 34 88 34 20 35 28 35 cc 35 08 36 5f 36 6f 36 .4.4 5(5.5.6_6o6 0430 83 36 8b 36 c3 36 23 37 5e 37 b5 37 c5 37 d9 37 .6.6.6#7^7.7.7.7 0440 e1 37 19 38 f7 38 ff 38 11 39 28 39 30 39 17 3a .7.8.8.8.9(909.: 0450 1f 3a 46 3f 9e 3f 00 00 00 60 35 00 50 00 00 00 .:F?.?...`5.P... 0460 1b 32 72 32 25 33 1b 35 57 35 ae 35 be 35 d2 35 .2r2%3.5W5.5.5.5 0470 da 35 12 36 73 36 ae 36 05 37 15 37 29 37 31 37 .5.6s6.6.7.7)717 0480 69 37 ec 38 5d 39 65 39 6b 39 79 39 e4 39 f3 39 i7.8]9e9k9y9.9.9 0490 77 3a 7f 3a 85 3a 97 3a d0 3b 00 3c 70 3c 80 3c w:.:.:.:.;.V?...p5..... 04b0 45 31 b8 31 12 32 27 32 39 32 d2 32 de 33 eb 33 E1.1.2'292.2.3.3 04c0 f1 33 fb 33 05 34 97 35 aa 35 b5 35 39 36 53 36 .3.3.4.5.5.596S6 04d0 c6 36 e0 36 ed 37 34 38 38 38 3c 38 40 38 44 38 .6.6.74888<8@8D8 04e0 48 38 4c 38 50 38 c8 39 e7 39 27 3a 67 3a 86 3a H8L8P8.9.9':g:.: 04f0 8c 3a 99 3a a0 3a c3 3a ed 3a c5 3b cc 3b da 3b .:.:.:.:.:.;.;.; 0500 32 3c 38 3c 51 3c a7 3c ae 3c bc 3c c7 3c f7 3c 2<8.>)>=>E>p>.> 0530 97 3e a1 3e b4 3e c9 3e dd 3e e5 3e 10 3f 23 3f .>.>.>.>.>.>.?#? 0540 37 3f 41 3f 54 3f 67 3f 6d 3f 81 3f a9 3f bb 3f 7?A?T?g?m?.?.?.? 0550 c3 3f 00 00 00 80 35 00 70 01 00 00 1a 30 2c 30 .?....5.p....0,0 0560 34 30 5d 30 70 30 7f 30 89 30 9c 30 db 30 12 31 40]0p0.0.0.0.0.1 0570 43 31 69 31 79 31 9b 31 b9 31 cd 31 d5 31 00 32 C1i1y1.1.1.1.1.2 0580 13 32 31 32 44 32 59 32 6d 32 75 32 a0 32 b3 32 .212D2Y2m2u2.2.2 0590 c2 32 cb 32 de 32 f9 32 0d 33 15 33 40 33 53 33 .2.2.2.2.3.3@3S3 05a0 73 33 85 33 8f 33 a2 33 b9 33 cd 33 d5 33 00 34 s3.3.3.3.3.3.3.4 05b0 13 34 29 34 .4)4 Data […]: 2f3e423e4d3e5c3e643e6c3e743e7e3e8f3e9b3e073f103f713f953fab3fd23fde3feb3f00103500ec000000e830fe3006310f31183121312c3133313a3140314a314f31573162316d31783183318e319631ac31bb31c531ce31d831de31e831ef31f431ff3104323232513268328432a23 [Length: 1460]