Frame 1525: Packet, 690 bytes on wire (5520 bits), 690 bytes captured (5520 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:49.718380000 UTC UTC Arrival Time: Nov 21, 2017 01:00:49.718380000 UTC Epoch Arrival Time: 1511226049.718380000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 14.000 microseconds] [Time since reference or first frame: 43.852640000 seconds] Frame Number: 1525 Frame Length: 690 bytes (5520 bits) Capture Length: 690 bytes (5520 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 676 Identification: 0xcd69 (52585) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x686f [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 656937, Ack: 1736, Len: 636 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 1211] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 636] Sequence Number: 656937 (relative sequence number) Sequence Number (raw): 2947273318 [Next Sequence Number: 657573 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x103b [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.309524000 seconds] [Time since previous frame in this TCP stream: 14.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2096] [Bytes sent since last PSH flag: 2096] [Client Contiguous Streams: 1] [Server Contiguous Streams: 10] TCP payload (636 bytes) Hypertext Transfer Protocol File Data: 636 bytes Data (636 bytes) 0000 43 50 ff d6 83 c4 04 85 c0 75 ed 0f be 45 00 50 CP.......u...E.P 0010 ff d6 83 c4 04 85 c0 74 13 3b eb 76 0f 0f be 45 .......t.;.v...E 0020 ff 4d 50 ff d6 83 c4 04 85 c0 75 ed 8b c5 2b c3 .MP.......u...+. 0030 79 3a 8d 44 24 0c 68 88 ca 3c 10 50 e8 87 03 00 y:.D$.h..<.P.... 0040 00 8b 4c 24 7c 83 c4 08 85 c9 74 0d 8b 44 24 30 ..L$|.....t..D$0 0050 5e 5d 89 01 5b 83 c4 4c c3 ff 74 24 30 e8 b6 2f ^]..[..L..t$0../ 0060 00 00 83 c4 04 5e 5d 5b 83 c4 4c c3 57 45 8b fd .....^][..L.WE.. 0070 2b fb 8d 77 14 56 ff 15 94 d3 3b 10 56 6a 00 50 +..w.V....;.Vj.P 0080 89 44 24 28 e8 33 b0 28 00 57 53 ff 74 24 30 e8 .D$(.3.(.WS.t$0. 0090 2e b0 28 00 8b 4c 24 34 8b c1 2b c3 83 c0 14 03 ..(..L$4..+..... 00a0 c5 83 c4 1c 89 44 24 14 89 4c 24 20 e8 f7 2d 00 .....D$..L$ ..-. 00b0 00 89 44 24 38 c7 00 61 79 fe ff 8b 44 24 38 0f ..D$8..ay...D$8. 00c0 57 c0 c7 40 04 ff ff ff ff 8b 44 24 38 c7 40 10 W..@......D$8.@. 00d0 61 79 fe ff 8b 44 24 38 c7 40 14 ff ff ff ff 8b ay...D$8.@...... 00e0 44 24 38 c7 40 08 61 79 fe ff 8b 44 24 38 c7 40 D$8.@.ay...D$8.@ 00f0 0c ff ff ff ff 8b 44 24 38 c7 40 18 61 79 fe ff ......D$8.@.ay.. 0100 8b 44 24 38 c7 40 1c ff ff ff ff 8b 44 24 38 c7 .D$8.@......D$8. 0110 40 20 61 79 fe ff 8b 44 24 38 c7 40 24 ff ff ff @ ay...D$8.@$... 0120 ff 8b 44 24 38 c7 40 28 61 79 fe ff 8b 44 24 38 ..D$8.@(ay...D$8 0130 c7 40 2c ff ff ff ff 8b 44 24 38 f2 0f 11 40 30 .@,.....D$8...@0 0140 8b 44 24 38 c7 40 38 00 00 00 00 8b 44 24 38 c7 .D$8.@8.....D$8. 0150 40 44 00 00 00 00 8b 44 24 38 c7 80 cc 00 00 00 @D.....D$8...... 0160 00 00 00 00 8b 44 24 38 c7 80 d0 00 00 00 01 00 .....D$8........ 0170 00 00 e8 31 2d 00 00 89 44 24 3c c7 00 61 79 fe ...1-...D$<..ay. 0180 ff 8b 44 24 3c c7 40 04 ff ff ff ff 8b 44 24 3c ..D$<.@......D$< 0190 c7 40 10 61 79 fe ff 8b 44 24 3c c7 40 14 ff ff .@.ay...D$<.@... 01a0 ff ff 8b 44 24 3c c7 40 08 61 79 fe ff 8b 44 24 ...D$<.@.ay...D$ 01b0 3c c7 40 0c ff ff ff ff 8b 44 24 3c c7 40 18 61 <.@......D$<.@.a 01c0 79 fe ff 8b 44 24 3c c7 40 1c ff ff ff ff 8b 44 y...D$<.@......D 01d0 24 3c c7 40 20 61 79 fe ff 8b 44 24 3c c7 40 24 $<.@ ay...D$<.@$ 01e0 ff ff ff ff 8b 44 24 3c 0f 57 c0 c7 40 28 61 79 .....D$<.W..@(ay 01f0 fe ff 8b 44 24 3c c7 40 2c ff ff ff ff 8b 44 24 ...D$<.@,.....D$ 0200 3c f2 0f 11 40 30 8b 44 24 3c c7 40 38 00 00 00 <...@0.D$<.@8... 0210 00 8b 44 24 3c c7 40 44 00 00 00 00 8b 44 24 3c ..D$<.@D.....D$< 0220 c7 80 cc 00 00 00 00 00 00 00 8b 44 24 3c c7 80 ...........D$<.. 0230 d0 00 00 00 01 00 00 00 e8 1b 2c 00 00 89 44 24 ..........,...D$ 0240 40 c7 00 00 00 00 00 8b 44 24 40 5f c7 40 04 00 @.......D$@_.@.. 0250 00 00 00 8b 44 24 3c c7 40 10 00 00 00 00 8b 44 ....D$<.@......D 0260 24 3c c7 40 14 00 00 00 00 8b 44 24 3c c7 40 08 $<.@......D$<.@. 0270 00 00 00 00 8b 44 24 3c c7 40 0c 00 .....D$<.@.. Data […]: 4350ffd683c40485c075ed0fbe450050ffd683c40485c074133beb760f0fbe45ff4d50ffd683c40485c075ed8bc52bc3793a8d44240c6888ca3c1050e8870300008b4c247c83c40885c9740d8b4424305e5d89015b83c44cc3ff742430e8b62f000083c4045e5d5b83c44cc357458bfd2bf [Length: 636]