Frame 3653: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.088505000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.088505000 UTC Epoch Arrival Time: 1511226051.088505000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 198.000 microseconds] [Time since reference or first frame: 45.222765000 seconds] Frame Number: 3653 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd352 (54098) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x60ea [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1810897, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 3339] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 1810897 (relative sequence number) Sequence Number (raw): 2948427278 [Next Sequence Number: 1811945 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa0ec [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.679649000 seconds] [Time since previous frame in this TCP stream: 198.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1048] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 21] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 7c 5f e7 ff 83 c4 0c 89 2b 5d c6 43 0c 03 5b 8b |_......+].C..[. 0010 4c 24 48 33 cc e8 c2 12 17 00 83 c4 4c c3 56 68 L$H3........L.Vh 0020 bc 8a 54 10 ff 74 24 20 ff 15 a0 d3 3b 10 8b f0 ..T..t$ ....;... 0030 83 c4 08 85 f6 75 1b ff 74 24 1c 68 fc cb 4f 10 .....u..t$.h..O. 0040 6a 02 50 e8 38 5f e7 ff 83 c4 10 89 2b e9 00 03 j.P.8_......+... 0050 00 00 8b 4c 24 10 83 f9 02 7d 50 56 ff 15 e4 d2 ...L$....}PV.... 0060 3b 10 8d 4c 24 34 51 50 ff 15 10 d4 3b 10 ff 74 ;..L$4QP....;..t 0070 24 50 8b 44 24 28 05 1e 04 00 00 50 6a 01 e8 1d $P.D$(.....Pj... 0080 91 ea ff 8b 4c 24 5c 81 c1 1e 04 00 00 03 4c 24 ....L$\.......L$ 0090 30 8b e8 51 6a 00 55 89 44 24 44 89 6c 24 30 e8 0..Qj.U.D$D.l$0. 00a0 70 14 17 00 8b 4c 24 34 83 c4 24 33 d2 39 54 24 p....L$4..$3.9T$ 00b0 0c 8d 44 24 0c 0f 44 c2 50 51 56 e8 00 03 00 00 ..D$..D.PQV..... 00c0 83 c4 0c 3d ff 00 00 00 74 22 56 ff 15 14 d4 3b ...=....t"V....; 00d0 10 83 c4 04 85 ed 74 09 55 e8 62 9d e9 ff 83 c4 ......t.U.b..... 00e0 04 c7 03 00 00 00 00 e9 66 02 00 00 33 c9 39 4c ........f...3.9L 00f0 24 0c 8d 44 24 0c 0f 44 c1 50 ff 74 24 14 56 e8 $..D$..D.P.t$.V. 0100 bc 02 00 00 83 c4 0c 3d d8 00 00 00 75 bc 57 90 .......=....u.W. 0110 33 c9 39 4c 24 10 8d 44 24 10 0f 44 c1 50 ff 74 3.9L$..D$..D.P.t 0120 24 18 56 e8 28 04 00 00 8b f8 83 c4 0c 81 ff d9 $.V.(........... 0130 00 00 00 0f 84 dc 01 00 00 81 ff ed 00 00 00 74 ...............t 0140 1c 33 c0 39 44 24 10 8d 4c 24 10 0f 44 c8 51 57 .3.9D$..L$..D.QW 0150 ff 74 24 1c 56 e8 36 02 00 00 83 c4 10 81 c7 26 .t$.V.6........& 0160 ff ff ff 83 ff 13 0f 87 04 01 00 00 0f b6 87 08 ................ 0170 a4 1a 10 ff 24 85 f8 a3 1a 10 80 7c 24 1b 00 75 ....$......|$..u 0180 8f 33 c9 39 4c 24 10 8d 44 24 10 0f 44 c1 50 ff .3.9L$..D$..D.P. 0190 74 24 18 c6 44 24 23 01 56 e8 c2 02 00 00 8b 4c t$..D$#.V......L 01a0 24 28 83 c4 0c f6 c1 01 74 05 41 89 4c 24 1c 8d $(......t.A.L$.. 01b0 41 1c c1 f8 08 80 c1 1c a2 2a 3c 65 10 88 0d 2b A........*