Frame 2416: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:50.366563000 UTC UTC Arrival Time: Nov 21, 2017 01:00:50.366563000 UTC Epoch Arrival Time: 1511226050.366563000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 1.473000 milliseconds] [Time since reference or first frame: 44.500823000 seconds] Frame Number: 2416 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xcfee (53230) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x644e [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1138605, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 2102] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 1138605 (relative sequence number) Sequence Number (raw): 2947754986 [Next Sequence Number: 1139653 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9467 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.957707000 seconds] [Time since previous frame in this TCP stream: 1.473000 milliseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1048] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 14] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 4c 24 54 8b 74 24 30 83 c4 08 80 7c 24 30 03 89 L$T.t$0....|$0.. 0010 01 76 0d 8d 44 24 24 50 e8 67 ef f3 ff 83 c4 04 .v..D$$P.g...... 0020 85 ed 74 09 55 e8 3a e0 f3 ff 83 c4 04 5f 8b c6 ..t.U.:......_.. 0030 5e 5d 5b 83 c4 24 c3 cc cc cc cc cc cc cc cc cc ^][..$.......... 0040 cc cc cc cc 83 ec 1c 53 55 56 8b 74 24 34 c7 44 .......SUV.t$4.D 0050 24 0c 00 00 00 00 8b 06 57 80 78 0c 06 74 61 80 $.......W.x..ta. 0060 78 0d 00 75 4a 83 78 08 01 76 44 ff 48 08 6a 18 x..uJ.x..vD.H.j. 0070 e8 df 0a f3 ff c7 40 10 00 00 00 00 8b 16 83 c4 ......@......... 0080 04 8b 0a 89 08 8b 4a 04 89 48 04 8b 0e 8a 49 0c ......J..H....I. 0090 88 48 0c c7 40 08 01 00 00 00 c6 40 0d 00 89 06 .H..@......@.... 00a0 80 78 0c 03 76 09 50 e8 08 70 f0 ff 83 c4 04 8b .x..v.P..p...... 00b0 06 80 78 0c 06 74 09 50 e8 67 c5 f1 ff 83 c4 04 ..x..t.P.g...... 00c0 8b 7c 24 30 8b 06 80 7f 0c 04 c7 44 24 20 00 00 .|$0.......D$ .. 00d0 00 00 c7 44 24 1c 94 8a 54 10 c6 44 24 28 06 0f ...D$...T..D$(.. 00e0 85 50 02 00 00 ff 70 04 ff 30 e8 a5 95 f0 ff 8b .P....p..0...... 00f0 0e 89 44 24 1c 8b 41 04 8b 4c 24 44 6a 00 89 01 ..D$..A..L$Dj... 0100 ff 37 89 44 24 28 e8 99 a1 f2 ff 8b 5c 24 44 8b .7.D$(......\$D. 0110 74 24 54 83 c4 10 80 7b 0c 04 8b eb 75 0f 85 f6 t$T....{....u... 0120 75 0b 56 ff 33 e8 7a a1 f2 ff 83 c4 08 6a 00 8d u.V.3.z......j.. 0130 44 24 3c 50 ff 37 e8 99 a8 f2 ff 83 c4 0c 85 c0 D$