Frame 2209: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:50.228770000 UTC UTC Arrival Time: Nov 21, 2017 01:00:50.228770000 UTC Epoch Arrival Time: 1511226050.228770000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 87.000 microseconds] [Time since reference or first frame: 44.363030000 seconds] Frame Number: 2209 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xcf5d (53085) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x64df [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1029089, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 1895] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 1029089 (relative sequence number) Sequence Number (raw): 2947645470 [Next Sequence Number: 1030137 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb0db [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.819914000 seconds] [Time since previous frame in this TCP stream: 87.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2620] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 14] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 5c 24 48 55 56 8b 74 24 48 57 8b 7c 24 48 89 7c \$HUV.t$HW.|$H.| 0010 24 18 89 5c 24 24 85 f6 0f 84 01 01 00 00 8b 36 $..\$$.........6 0020 85 f6 0f 84 f7 00 00 00 8b 06 85 c0 0f 84 ed 00 ................ 0030 00 00 85 ff 0f 84 e5 00 00 00 83 3f 00 0f 84 dc ...........?.... 0040 00 00 00 8b 6f 14 85 ed 0f 84 d1 00 00 00 83 7e ....o..........~ 0050 0c 05 0f 8d df 00 00 00 8b 80 a8 00 00 00 6a 06 ..............j. 0060 c7 80 08 02 00 00 de 07 00 00 8b 06 68 e0 13 49 ............h..I 0070 10 8b 80 a8 00 00 00 05 01 02 00 00 50 e8 4e f0 ............P.N. 0080 f3 ff 8b 06 68 01 02 00 00 ff 35 a8 11 49 10 ff ....h.....5..I.. 0090 b0 a8 00 00 00 e8 36 f0 f3 ff 8b 06 83 c4 18 8b ......6......... 00a0 80 a8 00 00 00 83 b8 0c 02 00 00 00 74 71 6a 06 ............tqj. 00b0 8d 44 24 30 0f 57 c0 68 e0 13 49 10 c7 44 24 3c .D$0.W.h..I..D$< 00c0 00 00 00 00 50 c7 44 24 34 00 00 00 00 66 0f d6 ....P.D$4....f.. 00d0 44 24 38 c7 44 24 40 de 07 00 00 e8 f0 ef f3 ff D$8.D$@......... 00e0 6a 01 ff 35 a8 11 49 10 ff 15 34 12 65 10 83 c4 j..5..I...4.e... 00f0 14 89 44 24 28 85 c0 74 26 50 68 e8 13 49 10 e8 ..D$(..t&Ph..I.. 0100 9c 05 00 00 8d 44 24 30 50 8b 06 8b 80 a8 00 00 .....D$0P....... 0110 00 ff b0 0c 02 00 00 e8 d4 e6 f3 ff 83 c4 10 5f ..............._ 0120 5e 5d b8 01 00 00 00 5b 8b 4c 24 30 33 cc e8 99 ^].....[.L$03... 0130 ff 22 00 83 c4 34 c3 8b 6d 10 89 6c 24 10 85 ed ."...4..m..l$... 0140 74 dd 8b 46 50 6a 06 c7 80 08 02 00 00 00 00 00 t..FPj.......... 0150 00 8b 46 50 68 d8 13 49 10 c6 00 00 8b 46 50 05 ..FPh..I.....FP. 0160 01 02 00 00 50 e8 66 ef f3 ff 8b 46 50 83 c4 0c ....P.f....FP... 0170 8b 80 0c 02 00 00 85 c0 74 09 50 e8 30 a1 f1 ff ........t.P.0... 0180 83 c4 04 8b 06 6a 06 8b 80 a8 00 00 00 68 d8 13 .....j.......h.. 0190 49 10 c7 80 08 02 00 00 00 00 00 00 8b 06 8b 80 I............... 01a0 a8 00 00 00 c6 00 00 8b 06 8b 80 a8 00 00 00 05 ................ 01b0 01 02 00 00 50 e8 16 ef f3 ff 8b 06 83 c4 0c 8b ....P........... 01c0 80 a8 00 00 00 8b 80 0c 02 00 00 85 c0 74 09 50 .............t.P 01d0 e8 db a0 f1 ff 83 c4 04 8b 46 04 6a 01 6a 00 6a .........F.j.j.j 01e0 0f 89 44 24 44 c7 44 24 48 01 00 00 00 8b 06 6a ..D$D.D$H......j 01f0 08 8b 88 14 03 00 00 8d 54 24 48 52 6a 1c 50 8b ........T$HRj.P. 0200 81 c0 00 00 00 ff d0 83 c4 1c 83 f8 01 0f 85 1b ................ 0210 01 00 00 8b 06 6a 06 8b 80 a8 00 00 00 8b 88 08 .....j.......... 0220 02 00 00 8b 46 50 85 c9 75 40 89 88 08 02 00 00 ....FP..u@...... 0230 8b 46 50 68 d8 13 49 10 88 08 8b 46 50 05 01 02 .FPh..I....FP... 0240 00 00 50 e8 88 ee f3 ff 8b 46 50 83 c4 0c 8b 80 ..P......FP..... 0250 0c 02 00 00 85 c0 0f 84 c3 fe ff ff 50 e8 4e a0 ............P.N. 0260 f1 ff 83 c4 04 e9 b5 fe ff ff 89 88 08 02 00 00 ................ 0270 8b 06 8b 80 a8 00 00 00 05 01 02 00 00 50 8b 46 .............P.F 0280 50 05 01 02 00 00 50 e8 44 ee f3 ff 8b 06 68 01 P.....P.D.....h. 0290 02 00 00 ff b0 a8 00 00 00 ff 76 50 e8 2f ee f3 ..........vP./.. 02a0 ff 8b 46 50 83 c4 18 83 b8 0c 02 00 00 00 0f 84 ..FP............ 02b0 6b fe ff ff 8b 0e c7 44 24 34 00 00 00 00 c7 44 k......D$4.....D 02c0 24 28 00 00 00 00 0f 57 c0 66 0f d6 44 24 2c 8b $(.....W.f..D$,. 02d0 81 a8 00 00 00 6a 06 8b 80 08 02 00 00 89 44 24 .....j........D$ 02e0 38 8b 81 a8 00 00 00 05 01 02 00 00 50 8d 44 24 8...........P.D$ 02f0 34 50 e8 d9 ed f3 ff 8b 06 6a 01 ff b0 a8 00 00 4P.......j...... 0300 00 ff 15 34 12 65 10 83 c4 14 89 44 24 28 85 c0 ...4.e.....D$(.. 0310 0f 84 09 fe ff ff 50 68 e8 13 49 10 e8 7f 03 00 ......Ph..I..... 0320 00 8d 44 24 30 50 8b 46 50 e9 e3 fd ff ff 83 7e ..D$0P.FP......~ 0330 28 00 0f 57 c0 0f 94 c0 88 45 24 8b 46 30 66 0f (..W.....E$.F0f. 0340 d6 00 66 0f d6 40 08 66 0f d6 40 10 8b 45 04 ff ..f..@.f..@..E.. 0350 37 8b 40 04 55 ff d0 8b d0 83 c4 08 85 d2 0f 85 7.@.U........... 0360 4a 02 00 00 38 45 14 0f 85 41 02 00 00 8b 47 0c J...8E...A....G. 0370 89 44 24 20 8b 47 08 89 44 24 14 38 55 24 0f 85 .D$ .G..D$.8U$.. 0380 2a 01 00 00 8b 07 85 c0 74 08 8b 88 0c 03 00 00 *.......t....... 0390 eb 02 33 c9 8b 47 14 51 50 8b 40 3c ff d0 8b 4f ..3..G.QP.@<...O 03a0 14 8b 45 0c 89 01 8b 4f 14 8b 45 1c 89 41 04 c7 ..E....O..E..A.. 03b0 45 0c 00 00 00 00 c7 45 1c 00 00 00 00 8b 07 8b E......E........ 03c0 4f 14 ff b0 0c 03 00 00 8b 80 d0 02 00 00 0f b6 O............... 03d0 40 34 50 ff 75 28 8b 41 30 ff 75 10 ff 31 ff 71 @4P.u(.A0.u..1.q 03e0 04 ff d0 83 c4 20 85 c0 0f 85 31 fd ff ff 33 db ..... ....1...3. 03f0 39 5c 24 14 0f 86 c7 00 00 00 33 d2 89 54 24 1c 9\$.......3..T$. 0400 8b ef 8b 46 28 80 7c d8 04 01 8d 0c d8 0f 85 7f ...F(.|......... 0410 00 00 00 8b 45 14 8b 00 ....E... Data […]: 5c244855568b742448578b7c2448897c2418895c242485f60f84010100008b3685f60f84f70000008b0685c00f84ed00000085ff0f84e5000000833f000f84dc0000008b6f1485ed0f84d1000000837e0c050f8ddf0000008b80a80000006a06c78008020000de0700008b0668e01349108 [Length: 1048]