Frame 1317: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:49.533401000 UTC UTC Arrival Time: Nov 21, 2017 01:00:49.533401000 UTC Epoch Arrival Time: 1511226049.533401000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 1.000 microseconds] [Time since reference or first frame: 43.667661000 seconds] Frame Number: 1317 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xccd2 (52434) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x676a [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 543865, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 1003] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 543865 (relative sequence number) Sequence Number (raw): 2947160246 [Next Sequence Number: 544913 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb279 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.124545000 seconds] [Time since previous frame in this TCP stream: 1.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2620] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 7] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 56 57 ff 74 24 20 e8 6d 71 fe ff 8b 74 24 1c 8b VW.t$ .mq...t$.. 0010 e8 ff 75 14 56 e8 9e 96 fb ff 56 e8 58 71 fe ff ..u.V.....V.Xq.. 0020 83 c4 10 8b d8 e8 2e e8 01 00 89 43 10 8b 75 10 ...........C..u. 0030 8b f8 b9 36 00 00 00 f3 a5 8b 45 10 8b 40 3c 85 ...6......E..@<. 0040 c0 74 10 50 ff 15 c8 d4 3b 10 8b 4b 10 83 c4 04 .t.P....;..K.... 0050 89 41 3c 8b 45 10 8b 48 40 85 c9 74 06 8b 43 10 .A<.E..H@..t..C. 0060 89 48 40 5f 5e 5d 5b c3 68 94 8a 54 10 ff 74 24 .H@_^][.h..T..t$ 0070 08 e8 62 0c fb ff 83 c4 08 83 f8 ff 74 72 53 ff ..b.........trS. 0080 74 24 14 e8 f0 70 fe ff 8b d8 83 c4 04 83 7b 1c t$...p........{. 0090 00 74 5c 55 56 8b 74 24 14 57 ff 73 14 56 e8 15 .t\UV.t$.W.s.V.. 00a0 96 fb ff 56 e8 cf 70 fe ff 83 c4 0c 8b e8 e8 a5 ...V..p......... 00b0 e7 01 00 89 45 10 8b 73 1c 8b f8 b9 36 00 00 00 ....E..s....6... 00c0 f3 a5 8b 4b 1c 8b 41 3c 85 c0 74 10 50 ff 15 c8 ...K..A<..t.P... 00d0 d4 3b 10 8b 4d 10 83 c4 04 89 41 3c 8b 43 1c 8b .;..M.....A<.C.. 00e0 48 40 85 c9 74 06 8b 45 10 89 48 40 5f 5e 5d 5b H@..t..E..H@_^][ 00f0 c3 cc cc cc cc cc cc cc 68 94 8a 54 10 ff 74 24 ........h..T..t$ 0100 08 e8 d2 0b fb ff 83 c4 08 83 f8 ff 74 3c 56 57 ............t.........u 0240 10 68 7c 13 3c 10 6a 01 50 e8 8a b2 fa ff 83 c4 .h|.<.j.P....... 0250 0c 8b 3e 8b cf 8d 51 01 8a 01 41 84 c0 75 f9 8b ..>...Q...A..u.. 0260 74 24 10 2b ca 89 4e 04 79 0f 68 bc 73 55 10 6a t$.+..N.y.h.sU.j 0270 01 e8 82 b2 fa ff 83 c4 08 ff 76 04 57 e8 46 a7 ..........v.W.F. 0280 f9 ff 83 c4 08 89 06 5f c6 46 0c 06 5e c3 cc cc ......._.F..^... 0290 cc cc cc cc cc cc cc cc 6a 00 ff 74 24 18 ff 74 ........j..t$..t 02a0 24 18 ff 74 24 18 ff 74 24 18 ff 74 24 18 e8 15 $..t$..t$..t$... 02b0 6a 00 00 83 c4 18 c3 cc 6a 01 ff 74 24 18 ff 74 j.......j..t$..t 02c0 24 18 ff 74 24 18 ff 74 24 18 ff 74 24 18 e8 f5 $..t$..t$..t$... 02d0 69 00 00 83 c4 18 c3 cc 55 8b ec 83 e4 c0 83 ec i.......U....... 02e0 74 8d 44 24 6c 53 56 57 50 8d 44 24 74 50 8d 44 t.D$lSVWP.D$tP.D 02f0 24 54 50 68 08 1f 3c 10 ff 75 08 e8 d8 09 fb ff $TPh..<..u...... 0300 83 c4 14 83 f8 ff 75 14 8b 45 0c c7 00 00 00 00 ......u..E...... 0310 00 c6 40 0c 03 5f 5e 5b 8b e5 5d c3 e8 37 e5 01 ..@.._^[..]..7.. 0320 00 8b d8 e8 c0 10 00 00 89 43 40 c7 83 d0 00 00 .........C@..... 0330 00 03 00 00 00 8b 44 24 4c 99 52 50 53 e8 16 00 ......D$L.RPS... 0340 02 00 e8 11 e5 01 00 8b 75 0c 6a 00 56 8b f8 e8 ........u.j.V... 0350 c4 52 f9 ff f2 0f 10 05 b8 20 3c 10 f2 0f 5e 05 .R....... <...^. 0360 90 20 3c 10 83 c4 14 8d 44 24 68 50 8d 44 24 5c . <.....D$hP.D$\ 0370 50 8d 44 24 58 50 8d 44 24 6c 50 50 6a 01 83 ec P.D$XP.D$lPPj... 0380 18 f2 0f 11 44 24 10 f2 0f 10 84 24 a0 00 00 00 ....D$.....$.... 0390 f2 0f 11 44 24 08 f2 0f 10 84 24 a8 00 00 00 f2 ...D$.....$..... 03a0 0f 11 04 24 53 e8 7e 6e 00 00 83 c4 34 83 f8 ff ...$S.~n....4... 03b0 74 77 83 f8 01 74 5f 8b 44 24 50 89 87 a8 00 00 tw...t_.D$P..... 03c0 00 8b 44 24 54 89 87 ac 00 00 00 8d 44 24 48 50 ..D$T.......D$HP 03d0 57 e8 62 e6 01 00 50 6a 08 68 0c 1f 3c 10 56 e8 W.b...Pj.h..<.V. 03e0 b4 42 f9 ff 8b 44 24 70 89 87 a8 00 00 00 8b 44 .B...D$p.......D 03f0 24 74 89 87 ac 00 00 00 8d 44 24 60 50 57 e8 35 $t.......D$`PW.5 0400 e6 01 00 50 6a 07 68 14 1f 3c 10 56 e8 87 42 f9 ...Pj.h..<.V..B. 0410 ff 83 c4 30 eb 34 6a 01 ...0.4j. Data […]: 5657ff742420e86d71feff8b74241c8be8ff751456e89e96fbff56e85871feff83c4108bd8e82ee801008943108b75108bf8b936000000f3a58b45108b403c85c0741050ff15c8d43b108b4b1083c40489413c8b45108b484085c974068b43108948405f5e5d5bc368948a5410ff742408e [Length: 1048]