Frame 4132: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.353613000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.353613000 UTC Epoch Arrival Time: 1511226051.353613000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 97.000 microseconds] [Time since reference or first frame: 45.487873000 seconds] Frame Number: 4132 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd4a9 (54441) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5f93 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2072897, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 3818] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 2072897 (relative sequence number) Sequence Number (raw): 2948689278 [Next Sequence Number: 2073945 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdf92 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.944757000 seconds] [Time since previous frame in this TCP stream: 97.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 4716] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 24] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 39 48 24 77 05 39 48 20 76 14 8b 50 1c 8b 48 18 9H$w.9H v..P..H. 0010 85 d2 75 04 85 c9 74 06 89 48 20 89 50 24 33 c0 ..u...t..H .P$3. 0020 33 d2 c3 83 7c 24 14 00 77 09 72 44 83 7c 24 10 3...|$..w.rD.|$. 0030 08 72 3d 8b 54 24 08 8b 4c 24 0c 8b 02 89 01 8b .r=.T$..L$...... 0040 42 04 89 41 04 b8 08 00 00 00 33 d2 c3 ff 74 24 B..A......3...t$ 0050 08 ff 15 90 d3 3b 10 83 c4 04 33 c0 33 d2 c3 8b .....;....3.3... 0060 44 24 08 c7 00 12 00 00 00 c7 40 04 00 00 00 00 D$........@..... 0070 83 c8 ff 0b d0 c3 8b ff 34 9f 1e 10 c2 9f 1e 10 ........4....... 0080 df 9f 1e 10 f6 9f 1e 10 23 a0 1e 10 4d a0 1e 10 ........#...M... 0090 ff 25 90 d3 3b 10 cc cc cc cc cc cc cc cc cc cc .%..;........... 00a0 8b 44 24 04 83 ec 08 8b 08 85 c9 75 3e 6a 04 51 .D$........u>j.Q 00b0 6a 08 8d 4c 24 0c 51 ff 70 08 8b 40 04 ff d0 83 j..L$.Q.p..@.... 00c0 c4 14 85 d2 7f 77 7c 04 85 c0 73 71 b9 14 00 00 .....w|...sq.... 00d0 00 33 c0 8b 54 24 10 85 d2 74 02 89 0a 8b 4c 24 .3..T$...t....L$ 00e0 14 85 c9 74 02 89 01 83 c4 08 c3 8b 50 0c 83 fa ...t........P... 00f0 03 77 d9 ff 24 95 48 a1 1e 10 33 c0 33 c9 eb d3 .w..$.H...3.3... 0100 b9 12 00 00 00 eb ca ff 74 24 14 ff 74 24 14 51 ........t$..t$.Q 0110 e8 8b ff ff ff 83 c4 0c 83 c4 08 c3 6a 04 6a 00 ............j.j. 0120 6a 08 8d 54 24 0c 52 ff 70 08 8b 40 04 51 ff d0 j..T$.R.p..@.Q.. 0130 83 c4 18 85 d2 7f 06 7c 93 85 c0 72 8f 8b 44 24 .......|...r..D$ 0140 04 8b 0c 24 eb 8d 8b ff fa a0 1e 10 1c a1 1e 10 ...$............ 0150 07 a1 1e 10 00 a1 1e 10 cc cc cc cc cc cc cc cc ................ 0160 8b 44 24 04 85 c0 74 48 8b 4c 24 08 85 c9 74 30 .D$...tH.L$...t0 0170 8b 54 24 18 83 fa ff 7c 27 7f 07 83 7c 24 14 ff .T$....|'...|$.. 0180 72 1e 6a 00 6a 01 52 ff 74 24 20 ff 74 24 20 ff r.j.j.R.t$ .t$ . 0190 74 24 20 6a 00 51 50 e8 24 01 00 00 83 c4 24 c3 t$ j.QP.$.....$. 01a0 6a 00 83 c0 0c 6a 12 50 e8 d3 ba ff ff 83 c4 0c j....j.P........ 01b0 33 c0 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc 3............... 01c0 ff 25 10 d4 3b 10 cc cc cc cc cc cc cc cc cc cc .%..;........... 01d0 ff 25 2c d4 3b 10 cc cc cc cc cc cc cc cc cc cc .%,.;........... 01e0 57 8b 7c 24 08 85 ff 75 04 33 c0 5f c3 83 7c 24 W.|$...u.3._..|$ 01f0 0c 00 53 55 0f 84 a4 00 00 00 8b 5c 24 24 83 fb ..SU.......\$$.. 0200 ff 0f 8c 97 00 00 00 8b 6c 24 20 7f 09 83 fd ff ........l$ ..... 0210 0f 82 88 00 00 00 56 6a 68 ff 15 94 d3 3b 10 8b ......Vjh....;.. 0220 f0 83 c4 04 85 f6 75 16 50 8d 47 0c 6a 0e 50 e8 ......u.P.G.j.P. 0230 4c ba ff ff 83 c4 0c 33 c0 5e 5d 5b 5f c3 8b 44 L......3.^][_..D 0240 24 18 89 46 04 8b 44 24 1c 89 46 48 8b 44 24 20 $..F..D$..FH.D$ 0250 89 46 4c 8b c5 0b c3 c7 06 00 00 00 00 75 05 83 .FL..........u.. 0260 cd ff 0b dd 8d 46 10 50 89 6e 50 89 5e 54 c7 46 .....F.P.nP.^T.F 0270 08 01 00 00 00 e8 e6 14 00 00 56 68 e0 a3 1e 10 ..........Vh.... 0280 57 e8 1a 05 00 00 83 c4 10 85 c0 75 0c 56 ff 15 W..........u.V.. 0290 90 d3 3b 10 83 c4 04 33 c0 5e 5d 5b 5f c3 6a 00 ..;....3.^][_.j. 02a0 8d 47 0c 6a 12 50 e8 d5 b9 ff ff 83 c4 0c 33 c0 .G.j.P........3. 02b0 5d 5b 5f c3 cc cc cc cc cc cc cc cc cc cc cc cc ][_............. 02c0 56 8b 74 24 0c 57 8b 7c 24 14 85 ff 75 1c 85 f6 V.t$.W.|$...u... 02d0 75 18 8b 44 24 0c 56 83 c0 0c 6a 12 50 e8 9e b9 u..D$.V...j.P... 02e0 ff ff 83 c4 0c 33 c0 5f 5e c3 53 6a 68 ff 15 94 .....3._^.Sjh... 02f0 d3 3b 10 8b d8 83 c4 04 85 db 75 19 50 8b 44 24 .;........u.P.D$ 0300 14 83 c0 0c 6a 0e 50 e8 74 b9 ff ff 83 c4 0c 33 ....j.P.t......3 0310 c0 5b 5f 5e c3 c7 03 00 00 00 00 85 f6 74 30 56 .[_^.........t0V 0320 ff 15 c8 d4 3b 10 83 c4 04 89 03 85 c0 75 20 50 ....;........u P 0330 8b 44 24 14 83 c0 0c 6a 0e 50 e8 41 b9 ff ff 53 .D$....j.P.A...S 0340 ff 15 90 d3 3b 10 83 c4 10 33 c0 5b 5f 5e c3 8b ....;....3.[_^.. 0350 44 24 1c 8b 4c 24 24 8b 54 24 28 89 43 48 8b 44 D$..L$$.T$(.CH.D 0360 24 20 89 43 4c 8b c1 0b c2 89 7b 04 75 05 83 c9 $ .CL.....{.u... 0370 ff 0b d1 83 3b 00 8b 44 24 2c 8b 74 24 30 89 4b ....;..D$,.t$0.K 0380 50 b9 01 00 00 00 0f 45 c1 89 53 54 89 43 08 85 P......E..ST.C.. 0390 f6 74 0c 8d 7b 10 b9 0e 00 00 00 f3 a5 eb 0c 8d .t..{........... 03a0 43 10 50 e8 b8 13 00 00 83 c4 04 53 68 e0 a3 1e C.P........Sh... 03b0 10 ff 74 24 18 e8 e6 03 00 00 83 c4 0c 85 c0 75 ..t$...........u 03c0 0c 53 ff 15 90 d3 3b 10 83 c4 04 33 c0 5b 5f 5e .S....;....3.[_^ 03d0 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ 03e0 83 ec 30 a1 c8 79 65 10 33 c4 89 44 24 2c 8b 44 ..0..ye.3..D$,.D 03f0 24 44 56 8b 74 24 38 57 8b 7c 24 40 83 f8 05 77 $DV.t$8W.|$@...w 0400 35 ff 24 85 1c a7 1e 10 8b 06 85 c0 74 3e 68 bc 5.$.........t>h. 0410 8a 54 10 50 ff 15 a0 d3 .T.P.... Data […]: 394824770539482076148b501c8b481885d2750485c9740689482089502433c033d2c3837c24140077097244837c241008723d8b5424088b4c240c8b0289018b4204894104b80800000033d2c3ff742408ff1590d33b1083c40433c033d2c38b442408c70012000000c740040000000083c [Length: 1048]