Frame 3993: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.272338000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.272338000 UTC Epoch Arrival Time: 1511226051.272338000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 42.000 microseconds] [Time since reference or first frame: 45.406598000 seconds] Frame Number: 3993 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd446 (54342) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5ff6 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1995345, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 3679] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 1995345 (relative sequence number) Sequence Number (raw): 2948611726 [Next Sequence Number: 1996393 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x10e4 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.863482000 seconds] [Time since previous frame in this TCP stream: 42.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1048] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 24] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 50 ff 36 e8 88 d6 e3 ff 89 06 83 c4 0c 8b 06 03 P.6............. 0010 46 04 57 ff 74 24 14 50 e8 7d 44 14 00 83 c4 0c F.W.t$.P.}D..... 0020 83 3e 00 89 5e 04 75 1b 6a 00 6a 4f c7 46 04 00 .>..^.u.j.jO.F.. 0030 00 00 00 bb 02 00 00 00 c7 46 08 4e 00 00 00 6a .........F.N...j 0040 00 eb 30 83 c3 02 3b 5e 08 72 32 8d 83 80 00 00 ..0...;^.r2..... 0050 00 89 46 08 3d ff ff ff 7f 72 0f 68 bc 73 55 10 ..F.=....r.h.sU. 0060 6a 01 e8 b9 8e e4 ff 83 c4 08 8b 46 08 6a 00 40 j..........F.j.@ 0070 50 ff 36 e8 18 d6 e3 ff 89 06 83 c4 0c 8b 0e 8b P.6............. 0080 46 04 ba 22 3b 00 00 66 89 14 01 8b 4c 24 34 5f F..";..f....L$4_ 0090 89 5e 04 5e 5d 5b 33 cc e8 bf 41 14 00 83 c4 28 .^.^][3...A....( 00a0 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ 00b0 83 ec 30 a1 c8 79 65 10 33 c4 89 44 24 2c 56 8b ..0..ye.3..D$,V. 00c0 74 24 38 57 8b 7c 24 40 c6 44 24 0a 00 8b 47 04 t$8W.|$@.D$...G. 00d0 83 78 48 00 74 4e 57 e8 74 67 e3 ff 83 c4 04 3b .xH.tNW.tg.....; 00e0 05 d8 f8 66 10 75 3d 8d 44 24 0c 50 57 e8 8e fe ...f.u=.D$.PW... 00f0 fc ff 83 c4 08 89 44 24 10 85 c0 75 1b 6a 16 68 ......D$...u.j.h 0100 1c 6c 4f 10 c7 44 24 14 16 00 00 00 e8 df 82 e3 .lO..D$......... 0110 ff 83 c4 08 89 44 24 10 c6 44 24 0b 01 c6 44 24 .....D$..D$...D$ 0120 0a 01 eb 1a 8d 44 24 0c 50 8d 44 24 14 50 57 e8 .....D$.P.D$.PW. 0130 4c cc e4 ff 83 c4 0c 85 c0 0f 94 44 24 0b 83 3e L..........D$..> 0140 00 75 1b 6a 00 6a 4f c7 46 04 00 00 00 00 bf 02 .u.j.jO.F....... 0150 00 00 00 c7 46 08 4e 00 00 00 6a 00 eb 33 8b 7e ....F.N...j..3.~ 0160 04 83 c7 02 3b 7e 08 72 32 8d 87 80 00 00 00 89 ....;~.r2....... 0170 46 08 3d ff ff ff 7f 72 0f 68 bc 73 55 10 6a 01 F.=....r.h.sU.j. 0180 e8 9b 8d e4 ff 83 c4 08 8b 46 08 6a 00 40 50 ff .........F.j.@P. 0190 36 e8 fa d4 e3 ff 89 06 83 c4 0c 8b 4e 04 8b 06 6...........N... 01a0 ba 4f 3a 00 00 53 66 89 14 01 8b 5c 24 10 55 89 .O:..Sf....\$.U. 01b0 7e 04 8d 6c 24 3b c6 44 24 3b 00 85 db 79 31 f7 ~..l$;.D$;...y1. 01c0 db b8 cd cc cc cc f7 e3 c1 ea 03 8a c2 c0 e0 02 ................ 01d0 4d 8d 0c 10 02 c9 2a d9 80 c3 30 88 5d 00 8b da M.....*...0.]... 01e0 85 db 75 dd 4d c6 45 00 2d eb 28 eb 03 8d 49 00 ..u.M.E.-.(...I. 01f0 b8 cd cc cc cc f7 e3 c1 ea 03 8a c2 c0 e0 02 4d ...............M 0200 8d 0c 10 02 c9 2a d9 80 c3 30 88 5d 00 8b da 85 .....*...0.].... 0210 db 75 dd 83 3e 00 75 3d 8d 7c 24 3b 2b fd c7 46 .u..>.u=.|$;+..F 0220 04 00 00 00 00 83 ff 4e 73 10 b8 4e 00 00 00 89 .......Ns..N.... 0230 46 08 6a 00 40 50 6a 00 eb 4e 8b c7 81 ff 7f ff F.j.@Pj..N...... 0240 ff 7f 73 06 8d 87 80 00 00 00 89 46 08 6a 00 40 ..s........F.j.@ 0250 50 6a 00 eb 33 2b fd 8d 7c 3c 3b 3b 7e 08 72 32 Pj..3+..|<;;~.r2 0260 8d 87 80 00 00 00 89 46 08 3d ff ff ff 7f 72 0f .......F.=....r. 0270 68 bc 73 55 10 6a 01 e8 a4 8c e4 ff 83 c4 08 8b h.sU.j.......... 0280 46 08 6a 00 40 50 ff 36 e8 03 d4 e3 ff 89 06 83 F.j.@P.6........ 0290 c4 0c 8d 44 24 3b 2b c5 50 8b 46 04 03 06 55 50 ...D$;+.P.F...UP 02a0 e8 f5 41 14 00 83 c4 0c 83 3e 00 5d 89 7e 04 5b ..A......>.].~.[ 02b0 75 1b 6a 00 6a 4f c7 46 04 00 00 00 00 bf 02 00 u.j.jO.F........ 02c0 00 00 c7 46 08 4e 00 00 00 6a 00 eb 30 83 c7 02 ...F.N...j..0... 02d0 3b 7e 08 72 32 8d 87 80 00 00 00 89 46 08 3d ff ;~.r2.......F.=. 02e0 ff ff 7f 72 0f 68 bc 73 55 10 6a 01 e8 2f 8c e4 ...r.h.sU.j../.. 02f0 ff 83 c4 08 8b 46 08 6a 00 40 50 ff 36 e8 8e d3 .....F.j.@P.6... 0300 e3 ff 89 06 83 c4 0c 8b 4e 04 8b 06 ba 3a 22 00 ........N....:". 0310 00 66 89 14 01 83 3e 00 89 7e 04 75 3b 8b 7c 24 .f....>..~.u;.|$ 0320 0c c7 46 04 00 00 00 00 83 ff 4e 73 10 b8 4e 00 ..F.......Ns..N. 0330 00 00 89 46 08 6a 00 40 50 6a 00 eb 4c 8b c7 81 ...F.j.@Pj..L... 0340 ff 7f ff ff 7f 73 06 8d 87 80 00 00 00 89 46 08 .....s........F. 0350 6a 00 40 50 6a 00 eb 31 03 7c 24 0c 3b 7e 08 72 j.@Pj..1.|$.;~.r 0360 32 8d 87 80 00 00 00 89 46 08 3d ff ff ff 7f 72 2.......F.=....r 0370 0f 68 bc 73 55 10 6a 01 e8 a3 8b e4 ff 83 c4 08 .h.sU.j......... 0380 8b 46 08 6a 00 40 50 ff 36 e8 02 d3 e3 ff 89 06 .F.j.@P.6....... 0390 83 c4 0c ff 74 24 0c 8b 46 04 ff 74 24 14 03 06 ....t$..F..t$... 03a0 50 e8 f4 40 14 00 83 c4 0c 83 3e 00 89 7e 04 75 P..@......>..~.u 03b0 1b 6a 00 6a 4f c7 46 04 00 00 00 00 bf 02 00 00 .j.jO.F......... 03c0 00 c7 46 08 4e 00 00 00 6a 00 eb 30 83 c7 02 3b ..F.N...j..0...; 03d0 7e 08 72 32 8d 87 80 00 00 00 89 46 08 3d ff ff ~.r2.......F.=.. 03e0 ff 7f 72 0f 68 bc 73 55 10 6a 01 e8 30 8b e4 ff ..r.h.sU.j..0... 03f0 83 c4 08 8b 46 08 6a 00 40 50 ff 36 e8 8f d2 e3 ....F.j.@P.6.... 0400 ff 89 06 83 c4 0c 80 7c 24 0b 00 8b 56 04 8b 0e .......|$...V... 0410 b8 22 3a 00 00 66 89 04 .":..f.. Data […]: 50ff36e888d6e3ff890683c40c8b0603460457ff74241450e87d44140083c40c833e00895e04751b6a006a4fc7460400000000bb02000000c746084e0000006a00eb3083c3023b5e0872328d83800000008946083dffffff7f720f68bc7355106a01e8b98ee4ff83c4088b46086a004050f [Length: 1048]