Frame 2339: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:50.317290000 UTC UTC Arrival Time: Nov 21, 2017 01:00:50.317290000 UTC Epoch Arrival Time: 1511226050.317290000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 61.000 microseconds] [Time since reference or first frame: 44.451550000 seconds] Frame Number: 2339 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xcfb6 (53174) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x6692 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1098257, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 2025] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 1098257 (relative sequence number) Sequence Number (raw): 2947714638 [Next Sequence Number: 1098781 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7ce7 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.908434000 seconds] [Time since previous frame in this TCP stream: 61.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1572] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 14] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 56 8b 74 24 2c 57 8b 7c 24 34 8b 07 8b 58 10 8b V.t$,W.|$4...X.. 0010 68 0c 53 55 68 48 6a 49 10 e8 c2 be ff ff ff b7 h.SUhHjI........ 0020 a8 00 00 00 ff b7 0c 03 00 00 56 ff 37 e8 ce bf ..........V.7... 0030 ff ff 83 c4 1c 83 f8 01 0f 85 ff 00 00 00 8b 87 ................ 0040 14 03 00 00 6a 06 8b 80 bc 00 00 00 57 ff d0 8b ....j.......W... 0050 87 a8 00 00 00 6a 06 c7 80 08 02 00 00 d6 07 00 .....j.......... 0060 00 8b 87 a8 00 00 00 05 01 02 00 00 68 e0 13 49 ............h..I 0070 10 50 e8 29 e2 f2 ff 68 01 02 00 00 ff 35 ac 11 .P.)...h.....5.. 0080 49 10 ff b7 a8 00 00 00 e8 13 e2 f2 ff 8b 87 a8 I............... 0090 00 00 00 83 c4 20 83 b8 0c 02 00 00 00 74 6f 6a ..... .......toj 00a0 06 8d 44 24 20 68 e0 13 49 10 0f 57 c0 c7 44 24 ..D$ h..I..W..D$ 00b0 2c 00 00 00 00 50 c7 44 24 24 00 00 00 00 66 0f ,....P.D$$....f. 00c0 d6 44 24 28 c7 44 24 30 d6 07 00 00 e8 cf e1 f2 .D$(.D$0........ 00d0 ff 6a 01 ff 35 ac 11 49 10 ff 15 34 12 65 10 83 .j..5..I...4.e.. 00e0 c4 14 89 44 24 18 85 c0 74 24 50 68 e8 13 49 10 ...D$...t$Ph..I. 00f0 e8 eb bd ff ff 8d 44 24 20 50 8b 87 a8 00 00 00 ......D$ P...... 0100 ff b0 0c 02 00 00 e8 b5 d8 f2 ff 83 c4 10 ff 35 ...............5 0110 ac 11 49 10 68 08 8b 54 10 6a 02 6a 00 e8 1e 3e ..I.h..T.j.j...> 0120 f2 ff 83 c4 10 5f 5e 5d b8 01 00 00 00 5b 8b 4c ....._^].....[.L 0130 24 18 33 cc e8 63 f1 21 00 83 c4 1c c3 8b 16 3b $.3..c.!.......; 0140 da 72 e2 ff b7 a8 00 00 00 8b 07 ff b7 0c 03 00 .r.............. 0150 00 8b 08 52 55 50 8b 81 b0 00 00 00 ff d0 83 c4 ...RUP.......... 0160 14 83 f8 01 0f 84 d4 fe ff ff 80 3d e0 01 67 10 ...........=..g. 0170 00 8b 1d fc 88 65 10 0f 84 9e 00 00 00 85 db 0f .....e.......... 0180 84 96 00 00 00 8b 06 8b 0d 84 16 65 10 8b 15 c0 ...........e.... 0190 16 65 10 83 c0 04 89 44 24 14 89 54 24 10 3b 4b .e.....D$..T$.;K 01a0 08 74 43 8b 03 8b 54 24 14 01 14 c8 8b 54 24 10 .tC...T$.....T$. 01b0 83 54 c8 04 00 8b 43 04 83 3c 88 00 74 22 80 7b .T....C..<..t".{ 01c0 0c 00 75 1c 6a 00 ff 74 24 18 c6 43 0c 01 8b 04 ..u.j..t$..C.... 01d0 88 51 53 ff d0 8b 54 24 20 83 c4 10 c6 43 0c 00 .QS...T$ ....C.. 01e0 8b 0d 84 16 65 10 3b 53 08 74 36 8b 03 83 04 d0 ....e.;S.t6..... 01f0 01 83 54 d0 04 00 8b 43 04 83 3c 90 00 74 1c 80 ..T....C..<..t.. 0200 7b 0c 00 75 16 6a 00 6a 01 52 c6 43 {..u.j.j.R.C Data […]: 568b74242c578b7c24348b078b58108b680c535568486a4910e8c2beffffffb7a8000000ffb70c03000056ff37e8cebfffff83c41c83f8010f85ff0000008b87140300006a068b80bc00000057ffd08b87a80000006a06c78008020000d60700008b87a8000000050102000068e01349105 [Length: 524]