Frame 2698: Packet, 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:50.533935000 UTC UTC Arrival Time: Nov 21, 2017 01:00:50.533935000 UTC Epoch Arrival Time: 1511226050.533935000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 48.000 microseconds] [Time since reference or first frame: 44.668195000 seconds] Frame Number: 2698 Frame Length: 1514 bytes (12112 bits) Capture Length: 1514 bytes (12112 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xd0b5 (53429) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x61eb [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1294233, Ack: 1736, Len: 1460 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 2384] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 1294233 (relative sequence number) Sequence Number (raw): 2947910614 [Next Sequence Number: 1295693 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x34e9 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.125079000 seconds] [Time since previous frame in this TCP stream: 48.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 3032] [Bytes sent since last PSH flag: 1460] [Client Contiguous Streams: 1] [Server Contiguous Streams: 15] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 1460 bytes Data (1460 bytes) 0000 6a 00 68 8b 00 00 00 6a 00 6a 09 6a 20 56 e8 55 j.h....j.j.j V.U 0010 49 ff ff 83 c4 50 6a 04 68 8b 00 00 00 6a 00 6a I....Pj.h....j.j 0020 02 6a 20 56 e8 3f 49 ff ff 83 c4 18 83 3e 00 75 .j V.?I......>.u 0030 3a 6a 0c 68 8b 00 00 00 6a 00 6a 00 6a 01 56 e8 :j.h....j.j.j.V. 0040 b4 69 ff ff 83 c4 18 85 c0 74 20 6a 02 c6 00 ff .i.......t j.... 0050 80 48 01 30 56 e8 ae 5b ff ff 83 c4 08 85 c0 74 .H.0V..[.......t 0060 0a c6 00 01 ff 46 40 c6 40 01 c3 5f 5e c3 cc cc .....F@.@.._^... 0070 cc cc cc cc cc cc cc cc 51 8b 42 0c 53 55 8b 6c ........Q.B.SU.l 0080 24 10 56 8b f1 57 8b 7a 14 89 44 24 10 3b f5 0f $.V..W.z..D$.;.. 0090 83 35 02 00 00 8d 49 00 3b f8 0f 83 1d 02 00 00 .5....I.;....... 00a0 0f b6 0e 46 81 f9 c0 00 00 00 0f 82 c6 00 00 00 ...F............ 00b0 f6 c1 20 75 14 0f b6 06 83 e1 1f 83 e0 3f c1 e1 .. u.........?.. 00c0 06 0b c8 46 e9 ad 00 00 00 0f b6 16 0f b6 46 01 ...F..........F. 00d0 83 e2 3f 83 e0 3f f6 c1 10 75 15 83 e1 0f c1 e1 ..?..?...u...... 00e0 06 0b ca c1 e1 06 0b c8 83 c6 02 e9 86 00 00 00 ................ 00f0 f6 c1 08 75 1e 83 e1 07 c1 e1 06 0b ca c1 e1 06 ...u............ 0100 0b c8 0f b6 46 02 c1 e1 06 83 e0 3f 0b c8 83 c6 ....F......?.... 0110 03 eb 63 f6 c1 04 75 2a 83 e1 03 c1 e1 06 0b ca ..c...u*........ 0120 c1 e1 06 0b c8 0f b6 46 02 c1 e1 06 83 e0 3f 0b .......F......?. 0130 c8 0f b6 46 03 c1 e1 06 83 e0 3f 0b c8 83 c6 04 ...F......?..... 0140 eb 34 83 e1 01 c1 e1 06 0b ca c1 e1 06 0b c8 0f .4.............. 0150 b6 46 02 c1 e1 06 83 e0 3f 0b c8 0f b6 46 03 c1 .F......?....F.. 0160 e1 06 83 e0 3f 0b c8 0f b6 46 04 c1 e1 06 83 e0 ....?....F...... 0170 3f 0b c8 83 c6 05 0f b6 1f 47 81 fb c0 00 00 00 ?........G...... 0180 0f 82 c6 00 00 00 f6 c3 20 75 14 0f b6 07 83 e3 ........ u...... 0190 1f 83 e0 3f c1 e3 06 0b d8 47 e9 ad 00 00 00 0f ...?.....G...... 01a0 b6 17 0f b6 47 01 83 e2 3f 83 e0 3f f6 c3 10 75 ....G...?..?...u 01b0 15 83 e3 0f c1 e3 06 0b da c1 e3 06 0b d8 83 c7 ................ 01c0 02 e9 86 00 00 00 f6 c3 08 75 1e 83 e3 07 c1 e3 .........u...... 01d0 06 0b da c1 e3 06 0b d8 0f b6 47 02 c1 e3 06 83 ..........G..... 01e0 e0 3f 0b d8 83 c7 03 eb 63 f6 c3 04 75 2a 83 e3 .?......c...u*.. 01f0 03 c1 e3 06 0b da c1 e3 06 0b d8 0f b6 47 02 c1 .............G.. 0200 e3 06 83 e0 3f 0b d8 0f b6 47 03 c1 e3 06 83 e0 ....?....G...... 0210 3f 0b d8 83 c7 04 eb 34 83 e3 01 c1 e3 06 0b da ?......4........ 0220 c1 e3 06 0b d8 0f b6 47 02 c1 e3 06 83 e0 3f 0b .......G......?. 0230 d8 0f b6 47 03 c1 e3 06 83 e0 3f 0b d8 0f b6 47 ...G......?....G 0240 04 c1 e3 06 83 e0 3f 0b d8 83 c7 05 8b c3 99 83 ......?......... 0250 e2 7f 03 c2 c1 f8 07 0f b6 90 08 e0 49 10 8b c3 ............I... 0260 c1 e2 07 25 7f 00 00 80 79 05 48 83 c8 80 40 03 ...%....y.H...@. 0270 d0 0f b7 14 55 08 02 4a 10 3b cb 74 29 8b 04 d5 ....U..J.;.t)... 0280 8c c9 49 10 03 c3 3b c8 74 1c 0f b6 04 d5 8b c9 ..I...;.t....... 0290 49 10 8d 04 85 48 c8 49 10 8b 10 3b ca 72 14 83 I....H.I...;.r.. 02a0 c0 04 3b ca 75 f3 3b f5 73 20 8b 44 24 10 e9 e5 ..;.u.;.s .D$... 02b0 fd ff ff 5f 5e 5d 33 c0 5b 59 c2 04 00 5f 5e 5d ..._^]3.[Y..._^] 02c0 b8 01 00 00 00 5b 59 c2 04 00 8b c7 5f 5e 5d 5b .....[Y....._^][ 02d0 59 c2 04 00 cc cc cc cc 51 53 8b 5c 24 0c 55 8b Y.......QS.\$.U. 02e0 6c 24 18 33 c0 56 57 8b 3b 89 44 24 18 89 44 24 l$.3.VW.;.D$..D$ 02f0 10 39 44 24 1c 74 2c 55 53 e8 ba a9 ff ff 83 c4 .9D$.t,US....... 0300 08 85 c0 74 1e 55 53 e8 2c ab ff ff 8b c8 c1 e9 ...t.US.,....... 0310 08 03 cd 83 c4 08 25 ff 00 00 00 89 4c 24 10 89 ......%.....L$.. 0320 44 24 18 8b 74 24 24 83 7e 04 ff 75 61 8b 06 83 D$..t$$.~..ua... 0330 f8 04 7c 1c f7 d8 83 3f 00 75 4c 50 68 8a 00 00 ..|....?.uLPh... 0340 00 6a 00 6a 01 57 e8 ed 63 ff ff 83 c4 14 eb 37 .j.j.W..c......7 0350 83 f8 02 7c 1b f7 d8 83 3f 00 75 2b 50 68 8a 00 ...|....?.u+Ph.. 0360 00 00 6a 00 6a 01 6a 00 57 e8 5a 6d ff ff eb 14 ..j.j.j.W.Zm.... 0370 f7 d8 50 68 8a 00 00 00 6a 00 6a 01 6a 21 57 e8 ..Ph....j.j.j!W. 0380 e4 45 ff ff 83 c4 18 c7 46 04 03 00 00 00 83 bb .E......F....... 0390 04 01 00 00 00 b8 01 00 00 00 89 44 24 1c 74 19 ...........D$.t. 03a0 8a 45 00 3c c0 72 12 0f b6 c0 83 e0 3f 0f b6 80 .E.<.r......?... 03b0 08 bd 49 10 40 89 44 24 1c 8b 54 24 18 ff 0e 85 ..I.@.D$..T$.... 03c0 d2 74 1b 39 6c 24 10 75 15 8a 4d 00 8b 46 08 0a .t.9l$.u..M..F.. 03d0 ca 88 4c 30 0c 8b 46 08 88 54 30 10 eb 12 8b 4e ..L0..F..T0....N 03e0 08 8a 45 00 88 44 31 0c 8b 46 08 c6 44 30 10 00 ..E..D1..F..D0.. 03f0 ff 46 08 8b 46 08 83 f8 04 7d 18 8b 0e 85 c9 74 .F..F....}.....t 0400 12 83 f8 02 0f 85 fc 01 00 00 83 f9 01 0f 85 f3 ................ 0410 01 00 00 8b 0e 83 f9 04 7c 5c 8b 5e 04 33 d2 f7 ........|\.^.3.. 0420 d9 33 ed 89 54 24 24 39 17 0f 85 fa 00 00 00 81 .3..T$$9........ 0430 fb 8b 00 00 00 75 05 8d 6b 8d eb 1d 8d 43 fc 83 .....u..k....C.. 0440 f8 03 77 15 ba 01 00 00 00 8d 2c 9d f8 ff ff ff ..w.......,..... 0450 bb 8b 00 00 00 89 54 24 24 51 68 8a 00 00 00 85 ......T$$Qh..... 0460 d2 b8 0c 00 00 00 0f 45 d8 55 53 57 e8 c7 62 ff .......E.USW..b. 0470 ff 83 c4 14 eb 65 83 f9 02 0f 8c 8b 00 00 00 8b .....e.......... 0480 5e 04 33 d2 f7 d9 33 ed 89 54 24 24 39 17 0f 85 ^.3...3..T$$9... 0490 95 00 00 00 81 fb 8b 00 00 00 75 05 8d 6b 8d eb ..........u..k.. 04a0 1d 8d 43 fc 83 f8 03 77 15 ba 01 00 00 00 8d 2c ..C....w......., 04b0 9d f8 ff ff ff bb 8b 00 00 00 89 54 24 24 51 68 ...........T$$Qh 04c0 8a 00 00 00 85 d2 b8 0c 00 00 00 55 0f 45 d8 53 ...........U.E.S 04d0 6a 00 57 e8 f0 6b ff ff 83 c4 18 85 c0 75 4a 39 j.W..k.......uJ9 04e0 44 24 24 74 44 83 fb 0c 75 3f 55 68 8b 00 00 00 D$$tD...u?Uh.... 04f0 50 53 6a 01 57 e8 fe 64 ff ff 8b 6c 24 38 83 c4 PSj.W..d...l$8.. 0500 18 85 c0 74 28 c6 00 89 eb 23 83 f9 01 7c 1e f7 ...t(....#...|.. 0510 d9 51 68 8a 00 00 00 6a 00 ff 76 04 6a 21 57 e8 .Qh....j..v.j!W. 0520 44 44 ff ff 83 c4 18 eb 04 8b 6c 24 20 8b 46 08 DD........l$ .F. 0530 33 c9 83 7e 04 01 0f 94 c1 8d 0c 4d 01 00 00 00 3..~.......M.... 0540 89 4e 04 48 74 57 48 74 2d 83 e8 02 0f 85 a9 00 .N.HtWHt-....... 0550 00 00 8b 46 10 85 c0 74 14 50 6a 40 6a 00 51 6a ...F...t.Pj@j.Qj 0560 00 51 6a 66 57 e8 9e 47 ff ff 83 c4 20 8b 46 0c .QjfW..G.... .F. 0570 0b 46 10 50 eb 50 0f b7 46 10 66 85 c0 74 14 50 .F.P.P..F.f..t.P 0580 6a 40 6a 00 51 6a 00 51 6a 66 57 e8 78 47 ff ff j@j.Qj.QjfW.xG.. 0590 83 c4 20 0f b7 4e 0c 0f b7 46 10 eb 26 8a 46 10 .. ..N...F..&.F. 05a0 84 c0 74 17 0f b6 c0 50 6a 40 6a 00 51 6a 00 51 ..t....Pj@j.Qj.Q 05b0 6a 66 57 e8 jfW. Data […]: 6a00688b0000006a006a096a2056e85549ffff83c4506a04688b0000006a006a026a2056e83f49ffff83c418833e00753a6a0c688b0000006a006a006a0156e8b469ffff83c41885c074206a02c600ff8048013056e8ae5bffff83c40885c0740ac60001ff4640c64001c35f5ec3ccccccc [Length: 1460]