Frame 2635: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:50.509075000 UTC UTC Arrival Time: Nov 21, 2017 01:00:50.509075000 UTC Epoch Arrival Time: 1511226050.509075000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 56.000 microseconds] [Time since reference or first frame: 44.643335000 seconds] Frame Number: 2635 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd087 (53383) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x63b5 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1257029, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 2321] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 1257029 (relative sequence number) Sequence Number (raw): 2947873410 [Next Sequence Number: 1258077 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x3970 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.100219000 seconds] [Time since previous frame in this TCP stream: 56.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2620] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 14] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 52 3b f0 74 17 6a 00 50 6a 00 56 57 e8 7b f8 ff R;.t.j.Pj.VW.{.. 0010 ff 83 c4 14 85 c0 0f 85 ed 01 00 00 6a 00 56 6a ............j.Vj 0020 00 56 6a 02 57 e8 22 fb ff ff 8b c8 83 c4 18 85 .Vj.W."......... 0030 c9 0f 84 d2 01 00 00 83 7c 24 18 00 5f 0f 95 c0 ........|$.._... 0040 5d c6 01 0f 5b 5e 8d 04 c5 b6 00 00 00 88 41 01 ]...[^........A. 0050 33 c0 c3 3b f0 74 17 6a 00 50 6a 00 56 57 e8 29 3..;.t.j.Pj.VW.) 0060 f8 ff ff 83 c4 14 85 c0 0f 85 9b 01 00 00 83 7c ...............| 0070 24 18 00 6a 00 56 74 3e 6a 18 6a 40 6a 21 57 e8 $..j.Vt>j.j@j!W. 0080 c8 fa ff ff 83 c4 18 85 c0 0f 84 7a 01 00 00 80 ...........z.... 0090 08 20 6a 00 56 6a 18 6a 40 6a 21 57 e8 ab fa ff . j.Vj.j@j!W.... 00a0 ff 83 c4 18 85 c0 0f 84 5d 01 00 00 80 08 38 5f ........].....8_ 00b0 5d 5b 33 c0 5e c3 68 ff 00 00 00 6a 40 6a 11 57 ][3.^.h....j@j.W 00c0 e8 87 fa ff ff 83 c4 18 85 c0 0f 84 39 01 00 00 ............9... 00d0 80 48 01 20 5f 5d 5b 33 c0 5e c3 ff 74 24 28 50 .H. _][3.^..t$(P 00e0 6a 00 53 6a 02 57 e8 61 fa ff ff 8b c8 83 c4 18 j.Sj.W.a........ 00f0 85 c9 0f 84 11 01 00 00 83 7c 24 18 00 c6 01 0f .........|$..... 0100 0f 95 c0 8d 04 c5 b6 00 00 00 88 41 01 85 ed 0f ...........A.... 0110 84 fe 00 00 00 83 fb 0c 0f 85 d4 00 00 00 8b ce ................ 0120 83 e1 3f 83 f9 01 75 17 8b de 81 e3 00 3f 00 00 ..?...u......?.. 0130 81 eb 00 02 00 00 f7 db 1b db 83 c3 03 eb 3c 8b ..............<. 0140 c6 25 00 3f 00 00 3d 00 01 00 00 74 23 6a 02 57 .%.?..=....t#j.W 0150 bb 01 00 00 00 e8 02 ec ff ff 83 c4 08 85 c0 0f ................ 0160 84 a4 00 00 00 88 18 ff 47 40 c6 40 01 95 eb 24 ........G@.@...$ 0170 33 db 83 f9 02 0f 94 c3 83 c3 02 6a 00 6a 0c 6a 3..........j.j.j 0180 00 53 6a 01 57 e8 c2 f9 ff ff 83 c4 18 85 c0 74 .Sj.W..........t 0190 78 c6 00 87 ff 74 24 20 56 6a 00 53 6a 01 57 e8 x....t$ Vj.Sj.W. 01a0 a8 f9 ff ff 83 c4 18 85 c0 74 5e c6 00 88 83 fb .........t^..... 01b0 01 75 1f 6a 02 57 e8 a1 eb ff ff 83 c4 08 85 c0 .u.j.W.......... 01c0 74 47 88 18 ff 47 40 5f 5d 5b c6 40 01 95 33 c0 tG...G@_][.@..3. 01d0 5e c3 6a 00 6a 0c 6a 00 53 6a 01 57 e8 6b f9 ff ^.j.j.j.Sj.W.k.. 01e0 ff 83 c4 18 85 c0 74 21 5f 5d 5b c6 00 87 33 c0 ......t!_][...3. 01f0 5e c3 ff 74 24 20 56 6a 00 53 6a 01 57 e8 4a f9 ^..t$ Vj.Sj.W.J. 0200 ff ff 83 c4 18 85 c0 75 07 8b 07 5f 5d 5b 5e c3 .......u..._][^. 0210 c6 00 88 5f 5d 5b 33 c0 5e c3 cc cc 8b 44 24 14 ..._][3.^....D$. 0220 56 8b 74 24 10 85 f6 75 04 84 c0 79 4f a8 40 74 V.t$...u...yO.@t 0230 4f 83 fe 3f 7f 1e 8a 86 88 bb 49 10 ff 74 24 1c O..?......I..t$. 0240 2c 48 0f b6 c0 50 ff 74 24 10 e8 7d f8 ff ff 83 ,H...P.t$..}.... 0250 c4 0c 5e c3 ff 74 24 14 56 ff 74 24 24 8b 74 24 ..^..t$.V.t$$.t$ 0260 14 6a 40 68 81 06 00 00 56 e8 de f8 ff ff 83 c4 .j@h....V....... 0270 18 85 c0 75 04 8b 06 5e c3 c6 00 c7 33 c0 5e c3 ...u...^....3.^. 0280 53 55 83 fe 3f bb 0c 00 00 00 8b ee 0f 4e de 57 SU..?........N.W 0290 8b 7c 24 14 81 e5 80 00 00 00 74 09 83 f8 3f 7f .|$.......t...?. 02a0 04 8b d8 eb 2e ff 74 24 28 50 6a 00 53 6a 02 57 ......t$(Pj.Sj.W 02b0 e8 97 f8 ff ff 8b c8 83 c4 18 85 c9 74 33 83 7c ............t3.| 02c0 24 18 00 c6 01 0f 0f 95 c0 8d 04 c5 b7 00 00 00 $............... 02d0 88 41 01 85 ed 74 24 ff 74 24 20 56 6a 00 53 68 .A...t$.t$ Vj.Sh 02e0 81 04 00 00 57 e8 62 f8 ff ff 83 c4 18 85 c0 75 ....W.b........u 02f0 07 8b 07 5f 5d 5b 5e c3 c6 00 89 5f 5d 5b 33 c0 ..._][^...._][3. 0300 5e c3 cc cc cc cc cc cc cc cc cc cc 8b 44 24 14 ^............D$. 0310 56 57 8b 7c 24 14 85 ff 0f 85 84 00 00 00 8b 74 VW.|$..........t 0320 24 0c 83 f8 3f 7f 19 57 6a 0c 57 50 6a 01 56 e8 $...?..Wj.WPj.V. 0330 18 f8 ff ff 83 c4 18 85 c0 74 31 c6 00 89 eb 3a .........t1....: 0340 ff 74 24 20 a8 40 74 10 68 bd 00 00 00 56 e8 79 .t$ .@t.h....V.y 0350 f7 ff ff 83 c4 0c eb 16 50 6a 00 6a 0c 6a 01 56 ........Pj.j.j.V 0360 e8 e7 f7 ff ff 83 c4 18 85 c0 75 0b 8b 06 85 c0 ..........u..... 0370 74 08 8b 06 5f 5e c3 c6 00 8b 6a 00 6a 0c 6a 00 t..._^....j.j.j. 0380 6a 00 6a 01 56 e8 c2 f7 ff ff 8b c8 83 c4 18 85 j.j.V........... 0390 c9 74 df 8a 44 24 10 c6 01 f7 08 41 01 5f 33 c0 .t..D$.....A._3. 03a0 5e c3 8b 4c 24 20 53 8b 5c 24 1c 3b f8 75 33 3b ^..L$ S.\$.;.u3; 03b0 d9 75 2f 8b 74 24 10 53 57 6a 00 6a 00 6a 01 56 .u/.t$.SWj.j.j.V 03c0 e8 87 f7 ff ff 8b c8 83 c4 18 85 c9 0f 84 95 00 ................ 03d0 00 00 8a 44 24 14 5b c6 01 f7 08 41 01 5f 33 c0 ...D$.[....A._3. 03e0 5e c3 8b 74 24 10 83 ff 3f 7f 2d 51 50 6a 00 57 ^..t$...?.-QPj.W 03f0 56 e8 96 f4 ff ff 83 c4 14 85 c0 75 6a 53 57 50 V..........ujSWP 0400 50 6a 01 56 e8 43 f7 ff ff 8b c8 83 c4 18 85 c9 Pj.V.C.......... 0410 75 c0 8b 06 5b 5f 5e c3 u...[_^. Data […]: 523bf074176a00506a005657e87bf8ffff83c41485c00f85ed0100006a00566a00566a0257e822fbffff8bc883c41885c90f84d2010000837c2418005f0f95c05dc6010f5b5e8d04c5b600000088410133c0c33bf074176a00506a005657e829f8ffff83c41485c00f859b010000837c241 [Length: 1048]