Frame 4061: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.309359000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.309359000 UTC Epoch Arrival Time: 1511226051.309359000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 91.000 microseconds] [Time since reference or first frame: 45.443619000 seconds] Frame Number: 4061 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd476 (54390) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5fc6 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2034121, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 3747] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 2034121 (relative sequence number) Sequence Number (raw): 2948650502 [Next Sequence Number: 2035169 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8cfb [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.900503000 seconds] [Time since previous frame in this TCP stream: 91.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2096] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 24] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 24 44 83 c4 14 8d 4e 01 8a 06 46 84 c0 75 f9 2b $D....N...F..u.+ 0010 f1 eb 0f 8b 44 24 10 8b 00 8b 08 8b 70 04 89 4c ....D$......p..L 0020 24 30 8b 44 24 1c 85 c0 74 11 50 e8 18 36 e6 ff $0.D$...t.P..6.. 0030 83 c4 04 c7 44 24 1c 00 00 00 00 8b 44 24 10 6a ....D$......D$.j 0040 00 8b 00 6a 00 56 ff 74 24 3c ff 70 04 ff 30 ff ...j.V.t$<.p..0. 0050 74 24 64 e8 90 db ff ff 83 c4 1c 85 c0 78 2a 43 t$d..........x*C 0060 3b 5c 24 38 0f 8c ce fe ff ff eb 36 8b 44 24 40 ;\$8.......6.D$@ 0070 03 c1 50 68 03 01 00 00 68 a8 18 50 10 6a 02 6a ..Ph....h..P.j.j 0080 00 e8 02 f7 e3 ff 83 c4 14 80 7f 0c 03 76 09 57 .............v.W 0090 e8 d3 44 e6 ff 83 c4 04 c6 47 0c 03 c7 07 00 00 ..D......G...... 00a0 00 00 5b 8b 8c 24 50 01 00 00 5e 5f 5d 33 cc e8 ..[..$P...^_]3.. 00b0 30 aa 13 00 81 c4 48 01 00 00 c3 cc cc cc cc cc 0.....H......... 00c0 cc cc cc cc cc cc cc cc 6a 01 ff 74 24 18 ff 74 ........j..t$..t 00d0 24 18 ff 74 24 18 ff 74 24 18 ff 74 24 18 e8 35 $..t$..t$..t$..5 00e0 fc ff ff 83 c4 18 c3 cc 6a 02 ff 74 24 18 ff 74 ........j..t$..t 00f0 24 18 ff 74 24 18 ff 74 24 18 ff 74 24 18 e8 15 $..t$..t$..t$... 0100 fc ff ff 83 c4 18 c3 cc 83 ec 14 8b 44 24 24 c7 ............D$$. 0110 44 24 04 00 00 00 00 c7 04 24 00 00 00 00 c7 44 D$.......$.....D 0120 24 0c 00 00 00 00 c7 44 24 08 00 00 00 00 85 c0 $......D$....... 0130 75 12 8b 44 24 1c c7 00 00 00 00 00 c6 40 0c 03 u..D$........@.. 0140 83 c4 14 c3 57 50 e8 dd b2 e7 ff 8b 78 10 83 c4 ....WP......x... 0150 04 85 ff 75 24 68 5c 18 50 10 6a 02 6a 00 e8 25 ...u$h\.P.j.j..% 0160 f6 e3 ff 8b 44 24 2c 83 c4 0c c7 00 00 00 00 00 ....D$,......... 0170 c6 40 0c 03 5f 83 c4 14 c3 8d 44 24 0c 50 8d 44 .@.._.....D$.P.D 0180 24 14 50 8d 44 24 0c 50 8d 44 24 14 50 8d 44 24 $.P.D$.P.D$.P.D$ 0190 24 50 8d 44 24 3c 50 68 d4 18 50 10 ff 74 24 38 $P.D$