Frame 3734: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.132240000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.132240000 UTC Epoch Arrival Time: 1511226051.132240000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 1.000 microseconds] [Time since reference or first frame: 45.266500000 seconds] Frame Number: 3734 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd38c (54156) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x60b0 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1851245, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 3420] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 1851245 (relative sequence number) Sequence Number (raw): 2948467626 [Next Sequence Number: 1852293 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xee69 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.723384000 seconds] [Time since previous frame in this TCP stream: 1.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2620] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 21] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 4a e7 ff 83 c4 10 bf 01 00 00 00 85 c0 75 1a 8b J............u.. 0010 44 24 14 8b 08 8a 41 0c 3c 03 74 04 3c 01 75 09 D$....A.<.t.<.u. 0020 39 19 0f 45 ef 89 6c 24 38 8d 44 24 14 50 8b 44 9..E..l$8.D$.P.D 0030 24 48 6a 0d 68 dc d8 4f 10 ff 30 e8 f4 49 e7 ff $Hj.h..O..0..I.. 0040 83 c4 10 85 c0 75 1a 8b 44 24 14 8b 08 8a 41 0c .....u..D$....A. 0050 3c 03 74 04 3c 01 75 09 39 19 0f 45 f7 89 74 24 <.t.<.u.9..E..t$ 0060 64 8b 4c 24 1c 8d 51 01 8a 01 41 84 c0 75 f9 8b d.L$..Q...A..u.. 0070 44 24 68 2b ca 89 8c 24 84 00 00 00 85 c0 74 0f D$h+...$......t. 0080 6a 00 50 e8 4c 0d 00 00 83 c4 08 8b f0 eb 02 33 j.P.L..........3 0090 f6 68 40 01 00 00 8d 84 24 e4 00 00 00 6a 00 50 .h@.....$....j.P 00a0 e8 d3 76 16 00 8d 44 24 48 50 8b 44 24 40 0f 57 ..v...D$HP.D$@.W 00b0 c0 66 0f d6 44 24 5c 89 5c 24 64 c7 44 24 5c 0c .f..D$\.\$d.D$\. 00c0 00 00 00 c7 44 24 64 01 00 00 00 89 5c 24 60 ff ....D$d.....\$`. 00d0 30 e8 0e c2 e7 ff 8d 44 24 50 50 8d 44 24 30 50 0......D$PP.D$0P 00e0 8b 44 24 4c ff 30 e8 29 c9 e7 ff 83 c4 20 85 c0 .D$L.0.)..... .. 00f0 0f 85 98 05 00 00 8b 1d 50 d1 3b 10 8d ac 24 e4 ........P.;...$. 0100 00 00 00 90 8d 44 24 3c 50 6a 00 8d 44 24 68 50 .....D$