Frame 2976: Packet, 690 bytes on wire (5520 bits), 690 bytes captured (5520 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:50.722919000 UTC UTC Arrival Time: Nov 21, 2017 01:00:50.722919000 UTC Epoch Arrival Time: 1511226050.722919000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 10.000 microseconds] [Time since reference or first frame: 44.857179000 seconds] Frame Number: 2976 Frame Length: 690 bytes (5520 bits) Capture Length: 690 bytes (5520 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 676 Identification: 0xd180 (53632) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x6458 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1452893, Ack: 1736, Len: 636 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 2662] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 636] Sequence Number: 1452893 (relative sequence number) Sequence Number (raw): 2948069274 [Next Sequence Number: 1453529 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa00c [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.314063000 seconds] [Time since previous frame in this TCP stream: 10.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 4716] [Bytes sent since last PSH flag: 2096] [Client Contiguous Streams: 1] [Server Contiguous Streams: 17] TCP payload (636 bytes) Hypertext Transfer Protocol File Data: 636 bytes Data (636 bytes) 0000 24 18 e8 ed 62 ed ff 83 c4 0c 5f 5e 5b c3 81 f9 $...b....._^[... 0010 ff ff ff 7f 77 15 ff 74 24 1c 51 ff 74 24 18 e8 ....w..t$.Q.t$.. 0020 d0 62 ed ff 83 c4 0c 5f 5e 5b c3 ff 74 24 1c 53 .b....._^[..t$.S 0030 57 ff 74 24 1c e8 0a 5e ed ff 83 c4 10 5f 5e 5b W.t$...^....._^[ 0040 c3 cc cc cc 8b 44 24 04 8b 40 08 c3 cc cc cc cc .....D$..@...... 0050 cc cc cc cc 8b 4c 24 04 8b 44 24 08 89 41 08 c3 .....L$..D$..A.. 0060 cc cc cc cc 8b 4c 24 04 8b 41 08 40 89 41 08 c3 .....L$..A.@.A.. 0070 cc cc cc cc 8b 4c 24 04 8b 41 08 48 89 41 08 c3 .....L$..A.H.A.. 0080 cc cc cc cc 8b 44 24 04 8a 40 0d c3 cc cc cc cc .....D$..@...... 0090 cc cc cc cc 8b 44 24 04 c6 40 0d 01 b0 01 c3 cc .....D$..@...... 00a0 cc cc cc cc 8b 44 24 04 c6 40 0d 00 32 c0 c3 cc .....D$..@..2... 00b0 cc cc cc cc 8b 44 24 04 80 78 0c 03 76 09 89 44 .....D$..x..v..D 00c0 24 04 e9 3d a4 eb ff c3 cc cc cc cc cc cc cc cc $..=............ 00d0 cc cc cc cc 53 55 56 ff 74 24 18 8b 74 24 14 ff ....SUV.t$..t$.. 00e0 74 24 18 56 e8 1b cb 00 00 8b 86 a4 00 00 00 8d t$.V............ 00f0 96 a4 00 00 00 8b 58 04 8b cb 83 c4 0c 8d 69 01 ......X.......i. 0100 8d 64 24 00 8a 01 41 84 c0 75 f9 ff 74 24 20 2b .d$...A..u..t$ + 0110 cd ff 74 24 20 6a 02 6a 00 51 53 52 56 ff 74 24 ..t$ j.j.QSRV.t$ 0120 34 e8 ee d9 ee ff 83 c4 24 33 c0 5e 5d 5b c3 cc 4.......$3.^][.. 0130 cc cc cc cc 56 57 68 c8 3d 4b 10 68 b0 36 15 10 ....VWh.=K.h.6.. 0140 68 2c 47 4b 10 68 d8 fd 66 10 e8 65 ed 00 00 ff h,GK.h..f..e.... 0150 35 44 6e 67 10 6a 01 ff 35 d8 fd 66 10 e8 f2 8b 5Dng.j..5..f.... 0160 f0 ff ff 35 40 6e 67 10 6a 01 ff 35 d8 fd 66 10 ...5@ng.j..5..f. 0170 e8 df 8b f0 ff ff 35 48 6e 67 10 6a 01 ff 35 d8 ......5Hng.j..5. 0180 fd 66 10 e8 cc 8b f0 ff ff 35 28 fa 66 10 6a 01 .f.......5(.f.j. 0190 ff 35 d8 fd 66 10 e8 b9 8b f0 ff 83 c4 40 e8 f1 .5..f........@.. 01a0 73 f1 ff 68 a0 3f 4b 10 68 b0 36 15 10 8b f0 b9 s..h.?K.h.6..... 01b0 1c 00 00 00 bf 60 fd 66 10 f3 a5 68 38 47 4b 10 .....`.f...h8GK. 01c0 68 d4 fd 66 10 c7 05 68 fd 66 10 d0 36 15 10 c7 h..f...h.f..6... 01d0 05 74 fd 66 10 b0 3d 15 10 c7 05 78 fd 66 10 c0 .t.f..=....x.f.. 01e0 41 15 10 c7 05 94 fd 66 10 c0 45 15 10 c7 05 90 A......f..E..... 01f0 fd 66 10 50 49 15 10 c7 05 b8 fd 66 10 70 60 15 .f.PI......f.p`. 0200 10 c7 05 98 fd 66 10 50 4c 15 10 c7 05 bc fd 66 .....f.PL......f 0210 10 00 4d 15 10 c7 05 c4 fd 66 10 f0 4e 15 10 c7 ..M......f..N... 0220 05 6c fd 66 10 20 4f 15 10 c7 05 70 fd 66 10 80 .l.f. O....p.f.. 0230 4f 15 10 c7 05 7c fd 66 10 e0 4f 15 10 c7 05 88 O....|.f..O..... 0240 fd 66 10 40 50 15 10 c7 05 8c fd 66 10 a0 50 15 .f.@P......f..P. 0250 10 c7 05 b0 fd 66 10 00 51 15 10 e8 54 ec 00 00 .....f..Q...T... 0260 ff 35 50 6e 67 10 6a 01 ff 35 d4 fd 66 10 e8 e1 .5Png.j..5..f... 0270 8a f0 ff ff 35 40 6e 67 10 6a 01 ff ....5@ng.j.. Data […]: 2418e8ed62edff83c40c5f5e5bc381f9ffffff7f7715ff74241c51ff742418e8d062edff83c40c5f5e5bc3ff74241c5357ff74241ce80a5eedff83c4105f5e5bc3cccccc8b4424048b4008c3cccccccccccccccc8b4c24048b442408894108c3cccccccc8b4c24048b410840894108c3ccc [Length: 636]