Frame 2369: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:50.339464000 UTC UTC Arrival Time: Nov 21, 2017 01:00:50.339464000 UTC Epoch Arrival Time: 1511226050.339464000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 53.000 microseconds] [Time since reference or first frame: 44.473724000 seconds] Frame Number: 2369 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xcfcd (53197) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x646f [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1116073, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 2055] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 1116073 (relative sequence number) Sequence Number (raw): 2947732454 [Next Sequence Number: 1117121 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x23c0 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.930608000 seconds] [Time since previous frame in this TCP stream: 53.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1572] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 14] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 50 ff 74 24 3c ff 74 24 44 ff 37 e8 d4 a3 15 00 P.t$<.t$D.7..... 0010 66 83 f8 ff 75 2b 68 e8 96 49 10 6a 00 53 e8 f5 f...u+h..I.j.S.. 0020 13 00 00 57 e8 3f 38 f4 ff 8b 44 24 48 83 c4 10 ...W.?8...D$H... 0030 c7 00 00 00 00 00 5e 5f c6 40 0c 03 5b 83 c4 24 ......^_.@..[..$ 0040 c3 8d 77 08 56 ff 37 33 c0 66 89 47 0a e8 f2 a3 ..w.V.73.f.G.... 0050 15 00 66 83 3e 00 7e 2b 57 e8 ca 11 00 00 83 c4 ..f.>.~+W....... 0060 04 85 c0 75 25 57 e8 fd 37 f4 ff 8b 44 24 3c 83 ...u%W..7...D$<. 0070 c4 04 c7 00 00 00 00 00 5e 5f c6 40 0c 03 5b 83 ........^_.@..[. 0080 c4 24 c3 c7 47 04 00 00 00 00 ff 35 78 89 65 10 .$..G......5x.e. 0090 89 5f 20 57 ff 74 24 40 c7 47 18 00 00 00 00 e8 ._ W.t$@.G...... 00a0 64 26 f6 ff 83 c4 0c 5e 5f 5b 83 c4 24 c3 cc cc d&.....^_[..$... 00b0 cc cc cc cc cc cc cc cc 83 ec 24 8d 44 24 18 50 ..........$.D$.P 00c0 8d 44 24 10 50 8d 44 24 24 50 8d 44 24 1c 50 8d .D$.P.D$$P.D$.P. 00d0 44 24 30 50 8d 44 24 28 50 8d 44 24 1c 50 8d 44 D$0P.D$(P.D$.P.D 00e0 24 1c 50 8d 44 24 28 50 68 f4 96 49 10 ff 74 24 $.P.D$(Ph..I..t$ 00f0 50 c7 44 24 2c 00 00 00 00 c7 44 24 30 00 00 00 P.D$,.....D$0... 0100 00 e8 a2 50 f2 ff 83 c4 2c 83 f8 ff 0f 84 82 01 ...P....,....... 0110 00 00 53 ff 35 80 89 65 10 8d 44 24 10 ff 35 7c ..S.5..e..D$..5| 0120 89 65 10 6a 02 6a 00 68 04 92 49 10 6a ff 50 e8 .e.j.j.h..I.j.P. 0130 04 77 f5 ff 8b d8 83 c4 1c 85 db 75 0f 8b 44 24 .w.........u..D$ 0140 30 89 18 c6 40 0c 03 5b 83 c4 24 c3 57 6a 24 6a 0...@..[..$.Wj$j 0150 01 e8 42 6f f0 ff 83 c4 08 8b f8 57 ff 73 04 6a ..Bo.......W.s.j 0160 03 e8 6c a2 15 00 0f b7 c0 66 83 f8 fe 75 19 57 ..l......f...u.W 0170 e8 f3 36 f4 ff 68 90 92 49 10 6a 02 6a 00 e8 25 ..6..h..I.j.j..% 0180 f8 f1 ff e9 8c 00 00 00 66 83 f8 ff 75 2a 68 b4 ........f...u*h. 0190 92 49 10 6a 00 53 e8 7d 12 00 00 57 e8 c7 36 f4 .I.j.S.}...W..6. 01a0 ff 8b 44 24 44 83 c4 10 c7 00 00 00 00 00 5f c6 ..D$D........._. 01b0 40 0c 03 5b 83 c4 24 c3 8b 4c 24 14 8b c1 f7 d8 @..[..$..L$..... 01c0 1b c0 83 e0 fd 50 51 8b 4c 24 20 8b c1 f7 d8 1b .....PQ.L$ ..... 01d0 c0 83 e0 fd 50 51 8b 4c 24 2c 8b c1 f7 d8 1b c0 ....PQ.L$,...... 01e0 83 e0 fd 50 51 8b 4c 24 20 8b c1 f7 d8 1b c0 83 ...PQ.L$ ....... 01f0 e0 fd 50 51 ff 37 e8 9d a2 15 00 66 83 f8 ff 75 ..PQ.7.....f...u 0200 2a 68 fc 96 49 10 6a 00 53 e8 0a 12 00 00 57 e8 *h..I.j.S.....W. 0210 54 36 f4 ff 8b 44 24 44 83 c4 10 c7 00 00 00 00 T6...D$D........ 0220 00 5f c6 40 0c 03 5b 83 c4 24 c3 56 8d 77 08 56 ._.@..[..$.V.w.V 0230 ff 37 33 c0 66 89 47 0a e8 07 a2 15 00 66 83 3e .73.f.G......f.> 0240 00 5e 7e 2a 57 e8 de 0f 00 00 83 c4 04 85 c0 75 .^~*W..........u 0250 24 57 e8 11 36 f4 ff 8b 44 24 38 83 c4 04 c7 00 $W..6...D$8..... 0260 00 00 00 00 5f c6 40 0c 03 5b 83 c4 24 c3 c7 47 ...._.@..[..$..G 0270 04 00 00 00 00 ff 35 78 89 65 10 89 5f 20 57 ff ......5x.e.._ W. 0280 74 24 3c c7 47 18 00 00 00 00 e8 79 24 f6 ff 83 t$<.G......y$... 0290 c4 0c 5f 5b 83 c4 24 c3 83 ec 1c 8d 44 24 14 50 .._[..$.....D$.P 02a0 8d 44 24 04 50 8d 44 24 20 50 8d 44 24 10 50 8d .D$.P.D$ P.D$.P. 02b0 44 24 1c 50 8d 44 24 1c 50 8d 44 24 28 50 68 3c D$.P.D$.P.D$(Ph< 02c0 97 49 10 ff 74 24 40 c7 44 24 2c 00 00 00 00 c7 .I..t$@.D$,..... 02d0 44 24 28 00 00 00 00 c7 44 24 24 00 00 00 00 c7 D$(.....D$$..... 02e0 44 24 30 00 00 00 00 e8 bc 4e f2 ff 83 c4 24 83 D$0......N....$. 02f0 f8 ff 0f 84 70 01 00 00 53 ff 35 80 89 65 10 8d ....p...S.5..e.. 0300 44 24 18 ff 35 7c 89 65 10 6a 02 6a 00 68 04 92 D$..5|.e.j.j.h.. 0310 49 10 6a ff 50 e8 1e 75 f5 ff 8b d8 83 c4 1c 85 I.j.P..u........ 0320 db 75 0f 8b 44 24 28 89 18 c6 40 0c 03 5b 83 c4 .u..D$(...@..[.. 0330 1c c3 57 6a 24 6a 01 e8 5c 6d f0 ff 83 c4 08 8b ..Wj$j..\m...... 0340 f8 57 ff 73 04 6a 03 e8 86 a0 15 00 0f b7 c0 66 .W.s.j.........f 0350 83 f8 fe 75 16 57 e8 0d 35 f4 ff 68 90 92 49 10 ...u.W..5..h..I. 0360 6a 02 6a 00 e8 3f f6 f1 ff eb 7d 66 83 f8 ff 75 j.j..?....}f...u 0370 2a 68 b4 92 49 10 6a 00 53 e8 9a 10 00 00 57 e8 *h..I.j.S.....W. 0380 e4 34 f4 ff 8b 44 24 3c 83 c4 10 c7 00 00 00 00 .4...D$<........ 0390 00 5f c6 40 0c 03 5b 83 c4 1c c3 8b 4c 24 08 8b ._.@..[.....L$.. 03a0 c1 f7 d8 1b c0 83 e0 fd 50 51 8b 4c 24 14 8b c1 ........PQ.L$... 03b0 f7 d8 1b c0 83 e0 fd 50 51 8b 4c 24 20 8b c1 f7 .......PQ.L$ ... 03c0 d8 1b c0 83 e0 fd 50 51 ff 37 e8 ff a0 15 00 66 ......PQ.7.....f 03d0 83 f8 ff 75 2a 68 b8 97 49 10 6a 00 53 e8 36 10 ...u*h..I.j.S.6. 03e0 00 00 57 e8 80 34 f4 ff 8b 44 24 3c 83 c4 10 c7 ..W..4...D$<.... 03f0 00 00 00 00 00 5f c6 40 0c 03 5b 83 c4 1c c3 56 ....._.@..[....V 0400 8d 77 08 56 ff 37 33 c0 66 89 47 0a e8 33 a0 15 .w.V.73.f.G..3.. 0410 00 66 83 3e 00 5e 7e 2a .f.>.^~* Data […]: 50ff74243cff742444ff37e8d4a315006683f8ff752b68e89649106a0053e8f513000057e83f38f4ff8b44244883c410c700000000005e5fc6400c035b83c424c38d770856ff3733c06689470ae8f2a3150066833e007e2b57e8ca11000083c40485c0752557e8fd37f4ff8b44243c83c40 [Length: 1048]