Frame 4171: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.359080000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.359080000 UTC Epoch Arrival Time: 1511226051.359080000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 44.000 microseconds] [Time since reference or first frame: 45.493340000 seconds] Frame Number: 4171 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xd4c8 (54472) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x6180 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2096477, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 3857] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 2096477 (relative sequence number) Sequence Number (raw): 2948712858 [Next Sequence Number: 2097001 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x4efb [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.950224000 seconds] [Time since previous frame in this TCP stream: 44.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 3144] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 24] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 31 e7 ff a3 7c eb 66 10 50 6a 00 6a 08 56 ff 74 1...|.f.Pj.j.V.t 0010 24 20 e8 ad a9 e3 ff 83 c4 14 8b f0 85 ed 74 0a $ ............t. 0020 57 ff 15 94 6b 65 10 83 c4 04 8b 4c 24 3c 5f 8b W...ke.....L$<_. 0030 c6 5e 5d 5b 33 cc e8 15 b7 12 00 83 c4 30 c3 cc .^][3........0.. 0040 cc cc cc cc 6a 01 68 bc 8a 54 10 ff 74 24 0c e8 ....j.h..T..t$.. 0050 70 fe ff ff 83 c4 0c c3 cc cc cc cc cc cc cc cc p............... 0060 cc cc cc cc 6a 00 68 fc ea 47 10 ff 74 24 0c e8 ....j.h..G..t$.. 0070 50 fe ff ff 83 c4 0c c3 cc cc cc cc cc cc cc cc P............... 0080 cc cc cc cc e9 db 3b e6 ff cc cc cc cc cc cc cc ......;......... 0090 cc cc cc cc e9 9b c1 e6 ff cc cc cc cc cc cc cc ................ 00a0 cc cc cc cc 6a 03 ff 74 24 08 e8 35 8e e3 ff 83 ....j..t$..5.... 00b0 c4 08 c3 cc 80 3d ec a0 66 10 00 74 03 33 c0 c3 .....=..f..t.3.. 00c0 8b 44 24 04 85 c0 74 f5 57 6a 01 68 bc 8a 54 10 .D$...t.Wj.h..T. 00d0 50 e8 ee fd ff ff 8b f8 83 c4 0c 85 ff 75 02 5f P............u._ 00e0 c3 56 ff 74 24 10 e8 e9 4a 08 00 8b f0 83 c4 04 .V.t$...J....... 00f0 85 f6 74 13 89 3e c7 46 04 a0 fc 1e 10 c7 46 08 ..t..>.F......F. 0100 c0 fc 1e 10 5e 5f c3 6a 03 57 e8 d5 8d e3 ff 83 ....^_.j.W...... 0110 c4 08 8b c6 5e 5f c3 cc cc cc cc cc cc cc cc cc ....^_.......... 0120 cc cc cc cc 53 56 8b 74 24 0c 33 db 85 f6 75 05 ....SV.t$.3...u. 0130 5e 33 c0 5b c3 57 56 e8 d8 2b 0a 00 8b f8 83 c4 ^3.[.WV..+...... 0140 04 85 ff 74 3d 39 1f 74 0f 6a 00 6a 00 56 e8 71 ...t=9.t.j.j.V.q 0150 3f 0a 00 83 c4 0c 8b d8 57 e8 a6 18 0a 00 83 c4 ?.......W....... 0160 04 85 db 74 1d 6a 00 68 fc ea 47 10 53 e8 52 fd ...t.j.h..G.S.R. 0170 ff ff 53 8b f8 ff 15 94 6b 65 10 83 c4 10 85 ff ..S.....ke...... 0180 75 1a 6a 00 68 fc ea 47 10 56 e8 35 fd ff ff 8b u.j.h..G.V.5.... 0190 f8 83 c4 0c 85 ff 75 04 5f 5e 5b c3 ff 74 24 14 ......u._^[..t$. 01a0 e8 9f 48 08 00 83 c4 04 85 c0 74 10 89 38 c7 40 ..H.......t..8.@ 01b0 04 b0 fc 1e 10 c7 40 08 c0 fc 1e 10 5f 5e 5b c3 ......@....._^[. 01c0 cc cc cc cc ff 74 24 04 e8 37 ca 07 00 83 c4 04 .....t$..7...... 01d0 b8 01 00 00 00 c3 cc cc cc cc cc cc cc cc cc cc ................ 01e0 cc cc cc cc 83 ec 34 8d 04 24 6a 34 6a 00 50 e8 ......4..$j4j.P. 01f0 94 b7 12 00 8b 44 24 44 83 c4 0c 85 c0 74 17 8d .....D$D.....t.. 0200 0c 24 51 50 e8 9b bd 07 00 83 c4 08 .$QP........ Data […]: 31e7ffa37ceb6610506a006a0856ff742420e8ada9e3ff83c4148bf085ed740a57ff15946b651083c4048b4c243c5f8bc65e5d5b33cce815b7120083c430c3cccccccccc6a0168bc8a5410ff74240ce870feffff83c40cc3cccccccccccccccccccccccc6a0068fcea4710ff74240ce850f [Length: 524]