Frame 3838: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.178610000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.178610000 UTC Epoch Arrival Time: 1511226051.178610000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 3.000 microseconds] [Time since reference or first frame: 45.312870000 seconds] Frame Number: 3838 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd3d9 (54233) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x6063 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1909409, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 3524] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 1909409 (relative sequence number) Sequence Number (raw): 2948525790 [Next Sequence Number: 1910457 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0331 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.769754000 seconds] [Time since previous frame in this TCP stream: 3.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 3668] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 22] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 24 18 ff 74 24 18 e8 05 00 00 00 83 c4 18 c3 cc $..t$........... 0010 83 ec 24 8b 44 24 30 53 33 c9 55 33 db 56 c7 44 ..$.D$0S3.U3.V.D 0020 24 2c 00 00 00 00 c7 44 24 24 00 00 00 00 c7 44 $,.....D$$.....D 0030 24 14 00 00 00 00 89 4c 24 28 88 4c 24 0f 85 c0 $......L$(.L$... 0040 74 02 8b 18 8b 6c 24 34 57 ff 74 24 3c 55 e8 4d t....l$4W.t$.l$. 02f0 74 0a 80 7f ff 2d 0f 84 8b fe ff ff 8b 44 24 44 t....-.......D$D 0300 33 db c6 44 24 13 00 89 5c 24 18 85 c0 0f 84 74 3..D$...\$.....t 0310 fe ff ff 8b fe 2b fa 81 ff ff 03 00 00 7c 1e 53 .....+.......|.S 0320 8d 87 00 04 00 00 50 52 e8 13 23 e5 ff 8b d0 8b ......PR..#..... 0330 44 24 50 83 c4 0c 89 54 24 14 8d 34 17 c6 06 3e D$P....T$..4...> 0340 46 50 88 1e 2b f2 56 52 e8 43 11 00 00 83 c4 0c FP..+.VR.C...... 0350 85 c0 74 11 8b 4c 24 14 56 51 55 e8 ea 90 15 00 ..t..L$.VQU..... 0360 83 c4 0c 03 ee 8b 54 24 14 8b 7c 24 1c 8b f2 e9 ......T$..|$.... 0370 0f fe ff ff 83 7c 24 20 00 0f 85 08 fe ff ff 80 .....|$ ........ 0380 fd 22 0f 84 ff fd ff ff 80 7f ff 3f 0f 85 f5 fd .".........?.... 0390 ff ff 33 db 89 5c 24 18 8b f2 e9 e8 fd ff ff 8b ..3..\$......... 03a0 44 24 24 83 c0 02 3b f8 0f 82 d9 fd ff ff 80 7f D$$...;......... 03b0 ff 2d 0f 85 cf fd ff ff 80 7f fe 2d 0f 85 c5 fd .-.........-.... 03c0 ff ff 33 db 89 5c 24 18 8b f2 e9 b8 fd ff ff 83 ..3..\$......... 03d0 fb 04 0f 84 af fd ff ff 83 fb 02 75 1f 80 7f ff ...........u.... 03e0 5c 74 26 3a e9 75 08 32 ed 88 6c 24 11 eb 5c 80 \t&:.u.2..l$..\. 03f0 fd 5c 74 57 8a e9 88 6c 24 11 eb 4f 85 db 75 09 .\tW...l$..O..u. 0400 88 4d 00 45 e9 7e fd ff ff 83 7c 24 44 00 74 3b .M.E.~....|$D.t; 0410 83 fb 01 75 36 8b fe 2b ...u6..+ Data […]: 2418ff742418e80500000083c418c3cc83ec248b4424305333c95533db56c744242c00000000c744242400000000c744241400000000894c2428884c240f85c074028b188b6c243457ff74243c55e84dd3e4ff8a088944242c8bf8894424248b44244c32ed83c408884c2412886c2411c74 [Length: 1048]