Frame 2855: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:50.639532000 UTC UTC Arrival Time: Nov 21, 2017 01:00:50.639532000 UTC Epoch Arrival Time: 1511226050.639532000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 49.000 microseconds] [Time since reference or first frame: 44.773792000 seconds] Frame Number: 2855 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd122 (53538) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x631a [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1379121, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 2541] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 1379121 (relative sequence number) Sequence Number (raw): 2947995502 [Next Sequence Number: 1380169 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7e27 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.230676000 seconds] [Time since previous frame in this TCP stream: 49.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2096] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 15] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 44 24 2c 68 50 e7 13 10 ff 30 e8 81 dd ee ff 8b D$,hP....0...... 0010 84 24 80 00 00 00 8b cd f7 d9 83 c4 1c 8d 04 88 .$.............. 0020 89 44 24 64 f6 47 0c 01 74 0b 33 c9 89 4c 24 10 .D$d.G..t.3..L$. 0030 8b 5f 08 eb 7a 8b 4c 24 10 85 c9 75 2c 50 e8 9d ._..z.L$...u,P.. 0040 34 f0 ff ff 77 04 8b 47 08 ff 70 04 68 b4 0c 4b 4...w..G..p.h..K 0050 10 6a 00 ff 35 28 ff 66 10 e8 52 d5 ed ff 83 c4 .j..5(.f..R..... 0060 18 5d 5f 5e 5b 83 c4 44 c3 51 e8 01 cf ec ff ff .]_^[..D.Q...... 0070 77 08 8b d8 53 e8 c6 4c ee ff 83 c4 0c 84 c0 75 w...S..L.......u 0080 26 ff 74 24 64 e8 56 34 f0 ff 6a 00 68 b8 0b 4b &.t$d.V4..j.h..K 0090 10 ff 35 28 ff 66 10 e8 54 d5 ed ff 83 c4 10 5d ..5(.f..T......] 00a0 5f 5e 5b 83 c4 44 c3 8b 4c 24 10 8b 44 24 64 8d _^[..D..L$..D$d. 00b0 54 24 14 c7 44 24 30 24 00 00 00 c7 44 24 34 00 T$..D$0$....D$4. 00c0 00 00 00 c7 44 24 38 00 00 00 00 c7 44 24 3c 00 ....D$8.....D$<. 00d0 00 00 00 89 4c 24 4c 89 54 24 40 89 6c 24 44 89 ....L$L.T$@.l$D. 00e0 44 24 48 c6 44 24 50 01 c6 44 24 1c 01 89 7c 24 D$H.D$P..D$...|$ 00f0 20 89 5c 24 24 8b 46 1c 89 44 24 28 89 4c 24 2c .\$$.F..D$(.L$, 0100 80 3f 01 75 16 f7 47 0c 00 00 20 00 74 0d 57 e8 .?.u..G... .t.W. 0110 5c a3 ff ff 83 c4 04 89 44 24 20 8d 44 24 1c 50 \.......D$ .D$.P 0120 8d 44 24 34 50 e8 06 fc ef ff ff 74 24 6c 8b f0 .D$4P......t$l.. 0130 e8 ab 33 f0 ff 83 c4 0c 83 fe ff 75 26 ff 77 04 ..3........u&.w. 0140 8b 47 08 ff 70 04 68 88 0c 4b 10 6a 00 ff 35 28 .G..p.h..K.j..5( 0150 ff 66 10 e8 58 d4 ed ff 83 c4 14 5d 5f 5e 5b 83 .f..X......]_^[. 0160 c4 44 c3 8b 44 24 14 85 c0 0f 84 f2 fe ff ff f3 .D..D$.......... 0170 0f 7e 00 8b 74 24 5c 66 0f d6 06 f3 0f 7e 40 08 .~..t$\f.....~@. 0180 66 0f d6 46 08 83 78 08 01 76 29 80 7e 0c 03 76 f..F..x..v).~..v 0190 0d 56 e8 99 c3 ec ff 8b 44 24 18 83 c4 04 ff 48 .V......D$.....H 01a0 08 5d 5f c7 46 08 01 00 00 00 c6 46 0d 00 5e 5b .]_.F......F..^[ 01b0 83 c4 44 c3 f7 40 10 fc ff ff ff 74 0d 50 e8 5d ..D..@.....t.P.] 01c0 05 f0 ff 8b 44 24 18 83 c4 04 50 e8 10 33 f0 ff ....D$....P..3.. 01d0 83 c4 04 c7 46 08 01 00 00 00 5d 5f c6 46 0d 00 ....F.....]_.F.. 01e0 5e 5b 83 c4 44 c3 e8 a5 f3 ed ff 50 68 d4 08 4b ^[..D......Ph..K 01f0 10 6a 01 6a 00 e8 26 f4 ed ff 83 c4 10 5b 83 c4 .j.j..&......[.. 0200 44 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc D............... 0210 6a 04 ff 74 24 18 ff 74 24 18 ff 74 24 18 ff 74 j..t$..t$..t$..t 0220 24 18 ff 74 24 18 e8 b5 bf ff ff 83 c4 18 c3 cc $..t$........... 0230 6a 02 ff 74 24 18 ff 74 24 18 ff 74 24 18 ff 74 j..t$..t$..t$..t 0240 24 18 ff 74 24 18 e8 95 bf ff ff 83 c4 18 c3 cc $..t$........... 0250 68 00 01 00 00 ff 74 24 18 ff 74 24 18 ff 74 24 h.....t$..t$..t$ 0260 18 ff 74 24 18 ff 74 24 18 e8 72 bf ff ff 83 c4 ..t$..t$..r..... 0270 18 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ 0280 68 00 04 00 00 ff 74 24 18 ff 74 24 18 ff 74 24 h.....t$..t$..t$ 0290 18 ff 74 24 18 ff 74 24 18 e8 42 bf ff ff 83 c4 ..t$..t$..B..... 02a0 18 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ 02b0 68 00 02 00 00 ff 74 24 18 ff 74 24 18 ff 74 24 h.....t$..t$..t$ 02c0 18 ff 74 24 18 ff 74 24 18 e8 12 bf ff ff 83 c4 ..t$..t$........ 02d0 18 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ 02e0 6a 01 ff 74 24 18 ff 74 24 18 ff 74 24 18 ff 74 j..t$..t$..t$..t 02f0 24 18 ff 74 24 18 e8 e5 be ff ff 83 c4 18 c3 cc $..t$........... 0300 68 00 00 04 00 ff 74 24 18 ff 74 24 18 ff 74 24 h.....t$..t$..t$ 0310 18 ff 74 24 18 ff 74 24 18 e8 c2 be ff ff 83 c4 ..t$..t$........ 0320 18 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ 0330 68 00 00 80 00 ff 74 24 18 ff 74 24 18 ff 74 24 h.....t$..t$..t$ 0340 18 ff 74 24 18 ff 74 24 18 e8 92 be ff ff 83 c4 ..t$..t$........ 0350 18 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ 0360 68 00 00 00 01 ff 74 24 18 ff 74 24 18 ff 74 24 h.....t$..t$..t$ 0370 18 ff 74 24 18 ff 74 24 18 e8 62 be ff ff 83 c4 ..t$..t$..b..... 0380 18 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ 0390 51 68 94 8a 54 10 ff 74 24 0c e8 81 4a ee ff 83 Qh..T..t$...J... 03a0 c4 08 83 f8 ff 74 61 8d 04 24 50 8b 44 24 18 6a .....ta..$P.D$.j 03b0 05 8b 48 04 68 a4 6a 55 10 50 8b 41 38 ff d0 83 ..H.h.jU.P.A8... 03c0 c4 04 50 e8 a8 7a ee ff 83 c4 10 83 f8 ff 74 2a ..P..z........t* 03d0 8b 04 24 8b 08 80 79 0c 06 75 1f 8b 41 04 8b 09 ..$...y..u..A... 03e0 85 c0 74 16 48 03 c1 3b c1 72 0f eb 03 8d 49 00 ..t.H..;.r....I. 03f0 80 38 5c 74 15 48 3b c1 73 f6 8b 44 24 0c c7 00 .8\t.H;.s..D$... 0400 00 00 00 00 c6 40 0c 03 59 c3 3b c1 76 ec 8b 44 .....@..Y.;.v..D 0410 24 0c c7 00 01 00 00 00 $....... Data […]: 44242c6850e71310ff30e881ddeeff8b8424800000008bcdf7d983c41c8d048889442464f6470c01740b33c9894c24108b5f08eb7a8b4c241085c9752c50e89d34f0ffff77048b4708ff700468b40c4b106a00ff3528ff6610e852d5edff83c4185d5f5e5b83c444c351e801cfecffff770 [Length: 1048]