Frame 1622: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:49.782782000 UTC UTC Arrival Time: Nov 21, 2017 01:00:49.782782000 UTC Epoch Arrival Time: 1511226049.782782000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 73.000 microseconds] [Time since reference or first frame: 43.917042000 seconds] Frame Number: 1622 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xcdae (52654) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x689a [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 704733, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 1308] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 704733 (relative sequence number) Sequence Number (raw): 2947321114 [Next Sequence Number: 705257 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x5ce2 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.373926000 seconds] [Time since previous frame in this TCP stream: 73.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1048] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 10] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 58 d1 47 10 6a 02 e8 99 c7 10 00 83 c4 18 e8 01 X.G.j........... 0010 c8 10 00 e9 4c 15 2c 00 cc cc cc cc cc cc cc cc ....L.,......... 0020 cc cc cc cc 83 ec 34 8d 04 24 50 8d 44 24 08 50 ......4..$P.D$.P 0030 8d 44 24 1c 50 8d 44 24 24 50 8d 44 24 20 50 68 .D$.P.D$$P.D$ Ph 0040 2c d2 47 10 ff 74 24 50 c7 44 24 20 04 02 00 00 ,.G..t$P.D$ .... 0050 c7 44 24 1c 00 00 00 00 e8 17 98 f8 ff 83 c4 1c .D$............. 0060 83 f8 ff 0f 84 37 02 00 00 8b 44 24 04 3d 00 02 .....7....D$.=.. 0070 00 00 7c 07 3d 0a 02 00 00 7e 27 3d 00 01 00 00 ..|.=....~'=.... 0080 7c 07 3d 14 01 00 00 7e 19 3d 00 04 00 00 74 12 |.=....~.=....t. 0090 8b 44 24 3c c7 00 00 00 00 00 c6 40 0c 03 83 c4 .D$<.......@.... 00a0 34 c3 56 ff 74 24 14 e8 48 0f 00 00 8b f0 83 c4 4.V.t$..H....... 00b0 04 85 f6 0f 84 bd 00 00 00 8a 46 0c 3c 04 75 04 ..........F.<.u. 00c0 8b 06 eb 14 3c 05 0f 85 aa 00 00 00 8b 46 04 56 ....<........F.V 00d0 8b 40 38 ff d0 83 c4 04 85 c0 0f 84 96 00 00 00 .@8............. 00e0 8a 46 0c 3c 04 75 04 8b 0e eb 16 3c 05 75 10 8b .F.<.u.....<.u.. 00f0 46 04 56 8b 40 38 ff d0 83 c4 04 8b c8 eb 02 33 F.V.@8.........3 0100 c9 8d 44 24 0c 50 8b 44 24 1c 40 50 ff 74 24 24 ..D$.P.D$.@P.t$$ 0110 51 e8 ae c7 f8 ff 83 c4 10 85 c0 75 59 8b 44 24 Q..........uY.D$ 0120 0c 8b 54 24 40 8b 08 8b 01 89 02 8b 41 04 89 42 ..T$@.......A..B 0130 04 8b 44 24 0c 8b 00 8a 40 0c 88 42 0c c7 42 08 ..D$....@..B..B. 0140 01 00 00 00 c6 42 0d 00 3c 03 76 09 52 e8 32 0e .....B..<.v.R.2. 0150 f7 ff 83 c4 04 68 00 00 00 02 6a 01 ff 74 24 0c .....h....j..t$. 0160 8d 44 24 4c ff 74 24 14 50 e8 c6 0f 00 00 83 c4 .D$L.t$.P....... 0170 14 5e 83 c4 34 c3 8b 44 24 04 33 f6 85 c0 0f 84 .^..4..D$.3..... 0180 fc 00 00 00 8b 00 8a 48 0c 80 f9 01 74 67 80 f9 .......H....tg.. 0190 04 75 64 8d 4c 24 20 51 6a 06 68 ac 6a 55 10 ff .ud.L$ Qj.h.jU.. 01a0 30 e8 1e c7 f8 ff 83 c4 10 85 c0 75 4a 8b 44 24 0..........uJ.D$ 01b0 20 8b 00 80 78 0c 01 74 3c f3 0f 7e 00 66 0f d6 ...x..t<..~.f.. 01c0 44 24 28 f3 0f 7e 40 08 66 0f d6 44 24 30 80 7c D$(..~@.f..D$0.| 01d0 24 34 03 76 0d 8d 44 24 28 50 e8 a5 0d f7 ff 83 $4.v..D$(P...... 01e0 c4 04 8d 44 24 28 50 e8 c8 4f f8 ff 8b 74 24 2c ...D$(P..O...t$, 01f0 83 c4 04 eb 02 8b 30 8b 44 24 04 8b 00 80 78 0c ......0.D$....x. 0200 04 75 7d 8d 4c 24 24 51 6a 08 68 38 .u}.L$$Qj.h8 Data […]: 58d147106a02e899c7100083c418e801c81000e94c152c00cccccccccccccccccccccccc83ec348d0424508d442408508d44241c508d442424508d44242050682cd24710ff742450c744242004020000c744241c00000000e81798f8ff83c41c83f8ff0f84370200008b4424043d0002000 [Length: 524]