Frame 3313: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:50.910856000 UTC UTC Arrival Time: Nov 21, 2017 01:00:50.910856000 UTC Epoch Arrival Time: 1511226050.910856000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 34.000 microseconds] [Time since reference or first frame: 45.045116000 seconds] Frame Number: 3313 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd266 (53862) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x61d6 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1629593, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 2999] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 1629593 (relative sequence number) Sequence Number (raw): 2948245974 [Next Sequence Number: 1630641 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1c76 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.502000000 seconds] [Time since previous frame in this TCP stream: 34.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 3144] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 18] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 41 84 c0 75 f9 8b 74 24 1c 2b ca 89 4e 04 79 0f A..u..t$.+..N.y. 0010 68 bc 73 55 10 6a 01 e8 bc 23 ea ff 83 c4 08 89 h.sU.j...#...... 0020 3e 5f c6 46 0c 06 5e 83 c4 0c c3 cc cc cc cc cc >_.F..^......... 0030 cc cc cc cc cc cc cc cc 83 ec 18 8d 04 24 56 57 .............$VW 0040 50 8d 44 24 10 50 68 e8 48 55 10 ff 74 24 30 33 P.D$.Ph.HU..t$03 0050 ff 33 f6 e8 60 7b ea ff 83 c4 10 83 f8 ff 0f 84 .3..`{.......... 0060 54 01 00 00 8b 44 24 08 85 c0 0f 84 79 01 00 00 T....D$.....y... 0070 8b 4c 24 0c 80 39 3d 0f 84 6c 01 00 00 50 51 e8 .L$..9=..l...PQ. 0080 24 18 e9 ff ff 74 24 10 89 44 24 1c ff 74 24 18 $....t$..D$..t$. 0090 e8 13 18 e9 ff 6a 3d 50 89 44 24 30 ff 15 d8 d3 .....j=P.D$0.... 00a0 3b 10 8b d0 83 c4 18 85 d2 74 06 c6 02 00 8d 77 ;........t.....w 00b0 01 53 8b 5c 24 1c 8b cb 55 8d 69 01 8a 01 41 84 .S.\$...U.i...A. 00c0 c0 75 f9 2b cd 89 4c 24 24 85 f6 74 0e 8b 44 24 .u.+..L$$..t..D$ 00d0 10 48 8d 7a 01 3b c8 7c 02 8b fa 6a 00 6a 00 8d .H.z.;.|...j.j.. 00e0 41 01 50 53 68 c4 ec 66 10 e8 0a b0 ea ff a1 60 A.PSh..f.......` 00f0 d4 3b 10 8b 1d d4 d3 3b 10 c7 44 24 30 00 00 00 .;.....;..D$0... 0100 00 8b 30 83 c4 14 85 f6 74 39 8b 4c 24 24 8b 06 ..0.....t9.L$$.. 0110 85 c0 74 2f 51 ff 74 24 24 50 ff d3 8b 4c 24 30 ..t/Q.t$$P...L$0 0120 83 c4 0c 85 c0 75 08 8b 06 80 3c 01 3d 74 07 83 .....u....<.=t.. 0130 c6 04 75 da eb 0d 50 e8 ec dd ea ff 83 c4 04 89 ..u...P......... 0140 44 24 1c 57 ff 74 24 24 ff 15 10 d1 3b 10 85 c0 D$.W.t$$....;... 0150 74 6c b8 94 8a 54 10 85 ff 0f 45 c7 50 ff 74 24 tl...T....E.P.t$ 0160 24 ff 15 4c d3 3b 10 83 c4 08 85 c0 75 50 6a 02 $..L.;......uPj. 0170 50 6a 10 8d 44 24 24 50 8b 44 24 34 40 50 ff 74 Pj..D$$P.D$4@P.t 0180 24 34 68 c4 ec 66 10 e8 7c 42 eb ff ff 74 24 40 $4h..f..|B...t$@ 0190 68 68 54 4c 10 ff 74 24 44 ff d3 83 c4 28 85 c0 hhTL..t$D....(.. 01a0 75 06 ff 15 c0 d4 3b 10 8b 44 24 30 5d c7 00 01 u.....;..D$0]... 01b0 00 00 00 5b c6 40 0c 03 5f 5e 83 c4 18 c3 ff 74 ...[.@.._^.....t 01c0 24 18 e8 b1 60 ec ff ff 74 24 24 e8 a8 60 ec ff $...`...t$$..`.. 01d0 8b 44 24 38 83 c4 08 c7 00 00 00 00 00 5d 5b 5f .D$8.........][_ 01e0 c6 40 0c 03 5e 83 c4 18 c3 68 7c 57 4c 10 6a 02 .@..^....h|WL.j. 01f0 6a 00 e8 c1 21 ea ff 8b 44 24 34 83 c4 0c 89 30 j...!...D$4....0 0200 5f c6 40 0c 03 5e 83 c4 18 c3 cc cc cc cc cc cc _.@..^.......... 0210 cc cc cc cc cc cc cc cc 55 8b ec 83 e4 f8 83 ec ........U....... 0220 5c 53 56 57 8d 44 24 20 50 8d 44 24 54 50 8d 44 \SVW.D$ P.D$TP.D 0230 24 4c 50 68 98 57 4c 10 ff 75 08 c7 44 24 58 00 $LPh.WL..u..D$X. 0240 00 00 00 66 c7 44 24 28 00 00 c7 44 24 64 00 00 ...f.D$(...D$d.. 0250 00 00 c7 44 24 4c 00 00 00 00 c7 44 24 68 01 00 ...D$L.....D$h.. 0260 00 00 c7 44 24 2c 00 00 00 00 c7 44 24 34 00 00 ...D$,.....D$4.. 0270 00 00 e8 41 79 ea ff 83 c4 14 83 f8 ff 0f 84 15 ...Ay........... 0280 08 00 00 a1 34 57 67 10 85 c0 75 1c 6a 07 68 f4 ....4Wg...u.j.h. 0290 6b 55 10 e8 80 87 1a 00 83 c4 08 84 c0 0f 84 f5 kU.............. 02a0 07 00 00 a1 34 57 67 10 8d 4c 24 18 51 6a 05 68 ....4Wg..L$.Qj.h 02b0 a8 0d 63 10 ff 30 e8 4d a9 ea ff 83 c4 10 83 f8 ..c..0.M........ 02c0 ff 75 22 8d 44 24 18 50 6a 05 68 a8 0d 63 10 68 .u".D$.Pj.h..c.h 02d0 04 72 67 10 e8 2f a9 ea ff 83 c4 10 83 f8 ff 0f .rg../.......... 02e0 84 b3 07 00 00 8b 44 24 18 8b 00 80 78 0c 04 0f ......D$....x... 02f0 85 a3 07 00 00 ff 30 e8 fc 9e ed ff 6a 00 8d 48 ......0.....j..H 0300 01 51 6a 04 89 44 24 50 e8 cb 52 ed ff 8b 4c 24 .Qj..D$P..R...L$ 0310 28 6a 00 8b 09 8b d8 ff 31 89 5c 24 64 e8 96 21 (j......1.\$d..! 0320 eb ff 6a 00 8d 44 24 4c 50 8b 44 24 38 8b 00 ff ..j..D$LP.D$8... 0330 30 e8 b2 28 eb ff 83 c4 24 85 c0 0f 85 af 00 00 0..(....$....... 0340 00 8b fb eb 03 8d 49 00 8b 44 24 30 8b 30 80 7e ......I..D$0.0.~ 0350 0c 06 74 43 f3 0f 7e 06 66 0f d6 44 24 58 f3 0f ..tC..~.f..D$X.. 0360 7e 46 08 66 0f d6 44 24 60 8a 44 24 64 3c 03 76 ~F.f..D$`.D$d<.v 0370 11 8d 44 24 58 50 e8 4d ef e8 ff 8a 44 24 68 83 ..D$XP.M....D$h. 0380 c4 04 3c 06 74 0d 8d 44 24 58 50 e8 a8 44 ea ff ..<.t..D$XP..D.. 0390 83 c4 04 8d 74 24 58 ff 36 e8 8a db ea ff 89 07 ....t$X.6....... 03a0 8b 44 24 34 83 c4 04 83 c7 04 3b 30 74 14 80 7c .D$4......;0t..| 03b0 24 64 03 76 0d 8d 44 24 58 50 e8 d9 6d ec ff 83 $d.v..D$XP..m... 03c0 c4 04 8b 44 24 18 6a 00 8b 00 ff 30 e8 c7 25 eb ...D$.j....0..%. 03d0 ff 6a 00 8d 44 24 3c 50 8b 44 24 28 8b 00 ff 30 .j..D$