Frame 2670: Packet, 690 bytes on wire (5520 bits), 690 bytes captured (5520 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:50.531990000 UTC UTC Arrival Time: Nov 21, 2017 01:00:50.531990000 UTC Epoch Arrival Time: 1511226050.531990000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 52.000 microseconds] [Time since reference or first frame: 44.666250000 seconds] Frame Number: 2670 Frame Length: 690 bytes (5520 bits) Capture Length: 690 bytes (5520 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 676 Identification: 0xd0a1 (53409) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x6537 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1278925, Ack: 1736, Len: 636 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 2356] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 636] Sequence Number: 1278925 (relative sequence number) Sequence Number (raw): 2947895306 [Next Sequence Number: 1279561 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x5e1e [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.123134000 seconds] [Time since previous frame in this TCP stream: 52.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2096] [Bytes sent since last PSH flag: 2096] [Client Contiguous Streams: 1] [Server Contiguous Streams: 15] TCP payload (636 bytes) Hypertext Transfer Protocol File Data: 636 bytes Data (636 bytes) 0000 3e 00 75 1d 6a 0c 68 8b 00 00 00 6a 00 6a 00 6a >.u.j.h....j.j.j 0010 01 56 e8 ad a5 ff ff 83 c4 18 85 c0 74 03 c6 00 .V..........t... 0020 8f 6a 20 6a 40 6a 00 6a 03 6a 00 6a 00 68 65 02 .j j@j.j.j.j.he. 0030 00 00 56 e8 9c 88 ff ff 6a 01 56 e8 84 8d ff ff ..V.....j.V..... 0040 6a 00 68 8a 00 00 00 6a 00 6a 01 6a 21 56 8b f8 j.h....j.j.j!V.. 0050 e8 df 84 ff ff 83 c4 40 6a 01 6a 40 6a 00 6a 0a .......@j.j@j.j. 0060 6a 00 6a 0a 6a 60 56 e8 68 88 ff ff 6a 1f 6a 40 j.j.j`V.h...j.j@ 0070 6a 00 6a 03 6a 00 6a 03 6a 65 56 e8 54 88 ff ff j.j.j.j.jeV.T... 0080 83 c4 40 6a 03 6a 40 6a 00 6a 03 6a 04 56 e8 41 ..@j.j@j.j.j.V.A 0090 8e ff ff 6a 06 6a 40 6a 00 6a 03 6a 00 6a 03 6a ...j.j@j.j.j.j.j 00a0 68 56 8b d8 e8 2b 88 ff ff 6a 3f 6a 40 6a 00 6a hV...+...j?j@j.j 00b0 01 6a 00 6a 01 6a 65 56 e8 17 88 ff ff 83 c4 58 .j.j.jeV.......X 00c0 6a 00 6a 01 6a 00 6a 03 6a 00 6a 03 6a 66 56 e8 j.j.j.j.j.j.jfV. 00d0 00 88 ff ff ff b5 90 00 00 00 68 83 00 00 00 6a ..........h....j 00e0 00 6a 01 6a 21 56 e8 49 84 ff ff 83 c4 38 83 3e .j.j!V.I.....8.> 00f0 00 75 3a 6a 0c 68 8b 00 00 00 6a 00 6a 00 6a 01 .u:j.h....j.j.j. 0100 56 e8 be a4 ff ff 83 c4 18 85 c0 74 20 6a 02 c6 V..........t j.. 0110 00 ff 80 48 01 30 56 e8 b8 96 ff ff 83 c4 08 85 ...H.0V......... 0120 c0 74 0a c6 00 01 ff 46 40 c6 40 01 c3 56 e8 11 .t.....F@.@..V.. 0130 8c ff ff 83 c4 04 85 db 74 13 85 c0 74 0f 8b 4b ........t...t..K 0140 08 83 e1 fd 83 c9 01 89 4b 08 89 43 0c 6a 00 6a ........K..C.j.j 0150 40 6a 00 6a 01 6a 20 56 e8 d7 83 ff ff 83 c4 18 @j.j.j V........ 0160 83 3e 00 75 3a 6a 0c 68 8b 00 00 00 6a 00 6a 00 .>.u:j.h....j.j. 0170 6a 01 56 e8 4c a4 ff ff 83 c4 18 85 c0 74 20 6a j.V.L........t j 0180 02 c6 00 ff 80 48 01 30 56 e8 46 96 ff ff 83 c4 .....H.0V.F..... 0190 08 85 c0 74 0a c6 00 01 ff 46 40 c6 40 01 c3 56 ...t.....F@.@..V 01a0 e8 9f 8b ff ff 83 c4 04 85 ff 74 13 85 c0 74 0f ..........t...t. 01b0 8b 4f 08 83 e1 fd 83 c9 01 89 4f 08 89 47 0c b8 .O........O..G.. 01c0 08 bd 49 10 2d c0 00 00 00 50 68 83 00 00 00 6a ..I.-....Ph....j 01d0 00 6a 03 6a 21 56 e8 59 83 ff ff 6a 00 6a 40 6a .j.j!V.Y...j.j@j 01e0 00 6a 01 6a 20 56 e8 49 83 ff ff 6a 00 6a 03 6a .j.j V.I...j.j.j 01f0 00 6a 0a 6a 00 6a 0a 6a 60 56 e8 d5 86 ff ff 83 .j.j.j.j`V...... 0200 c4 50 83 3e 00 75 3a 6a 0c 68 8b 00 00 00 6a 00 .P.>.u:j.h....j. 0210 6a 00 6a 01 56 e8 aa a3 ff ff 83 c4 18 85 c0 74 j.j.V..........t 0220 20 6a 02 c6 00 ff 80 48 01 30 56 e8 a4 95 ff ff j.....H.0V..... 0230 83 c4 08 85 c0 74 0a c6 00 01 ff 46 40 c6 40 01 .....t.....F@.@. 0240 c3 5f 5e 5d 5b c3 cc cc cc cc cc cc cc cc cc cc ._^][........... 0250 cc cc cc cc 8b 44 24 04 56 8b 30 83 3e 00 75 1d .....D$.V.0.>.u. 0260 6a 0c 68 8b 00 00 00 6a 00 6a 00 6a 01 56 e8 51 j.h....j.j.j.V.Q 0270 a3 ff ff 83 c4 18 85 c0 74 03 c6 00 ........t... Data […]: 3e00751d6a0c688b0000006a006a006a0156e8ada5ffff83c41885c07403c6008f6a206a406a006a036a006a00686502000056e89c88ffff6a0156e8848dffff6a00688a0000006a006a016a21568bf8e8df84ffff83c4406a016a406a006a0a6a006a0a6a6056e86888ffff6a1f6a406a0 [Length: 636]