Frame 4528: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.517156000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.517156000 UTC Epoch Arrival Time: 1511226051.517156000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 23.000 microseconds] [Time since reference or first frame: 45.651416000 seconds] Frame Number: 4528 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xd5bd (54717) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x608b [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2273065, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 4214] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 2273065 (relative sequence number) Sequence Number (raw): 2948889446 [Next Sequence Number: 2273589 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9f60 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.108300000 seconds] [Time since previous frame in this TCP stream: 23.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 524] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 26] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 68 ac e0 50 10 68 60 eb 50 10 68 b8 e3 50 10 81 h..P.h`.P.h..P.. 0010 c1 09 1a 00 00 03 c1 50 68 9c e0 50 10 ff 74 24 .......Ph..P..t$ 0020 18 68 b8 e0 50 10 68 e8 d8 50 10 ff 74 24 28 68 .h..P.h..P..t$(h 0030 d8 d8 50 10 68 0c 03 51 10 50 ff 74 24 40 e8 b5 ..P.h..Q.P.t$@.. 0040 5e e0 ff 8b 4c 24 40 83 c4 34 89 01 c3 cc cc cc ^...L$@..4...... 0050 cc cc cc cc cc cc cc cc 8b 44 24 04 f7 80 d4 00 .........D$..... 0060 00 00 00 01 00 00 75 0f 8b 80 b0 00 00 00 89 44 ......u........D 0070 24 04 e9 21 8a e3 ff 8b 80 d0 00 00 00 8d 0c 40 $..!...........@ 0080 a1 70 e7 66 10 8b 04 88 89 44 24 04 e9 07 8a e3 .p.f.....D$..... 0090 ff cc cc cc cc cc cc cc 8b 44 24 04 8b 40 28 83 .........D$..@(. 00a0 c0 20 c3 cc cc cc cc cc 6a 00 ff 74 24 0c ff 74 . ......j..t$..t 00b0 24 0c e8 31 15 01 00 83 c4 0c c3 cc cc cc cc cc $..1............ 00c0 cc cc cc cc cc cc cc cc 55 8d 6c 24 90 81 ec 94 ........U.l$.... 00d0 00 00 00 a1 c8 79 65 10 33 c5 89 45 6c 8b 45 7c .....ye.3..El.E| 00e0 53 8b 5d 78 56 57 89 5d 20 89 45 1c c7 45 28 00 S.]xVW.] .E..E(. 00f0 00 00 00 85 db 0f 84 f5 01 00 00 8b 4b 04 85 c9 ............K... 0100 0f 84 ea 01 00 00 8b 35 30 d4 3b 10 68 04 fd 50 .......50.;.h..P 0110 10 51 ff d6 83 c4 08 85 c0 0f 84 4e 01 00 00 68 .Q.........N...h 0120 d0 6d 55 10 ff 73 04 ff d6 83 c4 08 85 c0 0f 85 .mU..s.......... 0130 39 01 00 00 8b 53 04 8b ca 8d 71 01 8a 01 41 84 9....S....q...A. 0140 c0 75 f9 6a 00 8d 45 24 50 6a 00 6a 00 2b ce 6a .u.j..E$Pj.j.+.j 0150 00 51 52 e8 40 a6 ff ff 83 c4 1c 85 c0 0f 85 0a .QR.@........... 0160 01 00 00 8b 45 24 f6 80 d4 00 00 00 60 0f 85 80 ....E$......`... 0170 00 00 00 f7 80 a4 00 00 00 00 00 f0 00 0f 84 ea ................ 0180 00 00 00 c7 03 03 00 00 00 8b 45 24 89 43 0c c7 ..........E$.C.. 0190 43 2c 40 ae 21 10 c7 43 34 00 00 00 00 c7 43 30 C,@.!..C4.....C0 01a0 80 ae 21 10 c7 43 10 00 00 00 00 8b 45 24 6a 00 ..!..C......E$j. 01b0 f7 80 d4 00 00 00 00 01 00 00 6a 00 74 13 8b 80 ..........j.t... 01c0 d0 00 00 00 8d 0c 40 a1 70 e7 66 10 ff 34 88 eb ......@.p.f..4.. 01d0 06 ff b0 b0 00 00 00 e8 7c 44 e4 ff 0f 57 c0 66 ........|D...W.f 01e0 0f d6 43 14 66 0f d6 43 1c 83 c4 0c 66 0f d6 43 ..C.f..C....f..C 01f0 24 eb 7a 68 54 f3 50 10 ff 73 04 8d 45 28 68 38 $.zhT.P..s..E(h8 0200 d3 50 10 68 00 10 00 00 b9 0f 00 00 .P.h........ Data […]: 68ace050106860eb501068b8e3501081c1091a000003c150689ce05010ff74241868b8e0501068e8d85010ff74242868d8d85010680c03511050ff742440e8b55ee0ff8b4c244083c4348901c3cccccccccccccccccccccc8b442404f780d400000000010000750f8b80b00000008944240 [Length: 524]