Frame 4840: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.653638000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.653638000 UTC Epoch Arrival Time: 1511226051.653638000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 67.000 microseconds] [Time since reference or first frame: 45.787898000 seconds] Frame Number: 4840 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xd699 (54937) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5faf [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2436553, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 4526] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 2436553 (relative sequence number) Sequence Number (raw): 2949052934 [Next Sequence Number: 2437077 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xe9d8 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.244782000 seconds] [Time since previous frame in this TCP stream: 67.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2620] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 31] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 6a 02 6a 00 e8 7f d3 dd ff 8b 44 24 3c 83 c4 10 j.j.......D$<... 0010 c7 00 00 00 00 00 c6 40 0c 03 5e 83 c4 20 c3 8b .......@..^.. .. 0020 06 85 c0 0f 84 69 ff ff ff ff 74 24 04 ff 74 24 .....i....t$..t$ 0030 0c ff 74 24 3c ff 74 24 18 50 e8 29 ca 0a 00 83 ..t$<.t$.P.).... 0040 c4 14 83 f8 ff 0f 84 47 ff ff ff 8b 44 24 2c 5e .......G....D$,^ 0050 c7 00 01 00 00 00 c6 40 0c 03 83 c4 20 c3 cc cc .......@.... ... 0060 cc cc cc cc cc cc cc cc 68 44 de 51 10 68 d0 f1 ........hD.Q.h.. 0070 2e 10 ff 74 24 1c ff 74 24 1c ff 74 24 1c ff 74 ...t$..t$..t$..t 0080 24 1c ff 74 24 1c e8 5d 18 00 00 83 c4 1c c3 cc $..t$..]........ 0090 cc cc cc cc cc cc cc cc 68 d0 dd 2e 10 ff 74 24 ........h.....t$ 00a0 18 ff 74 24 18 ff 74 24 18 ff 74 24 18 ff 74 24 ..t$..t$..t$..t$ 00b0 18 e8 42 19 00 00 83 c4 18 c3 cc cc cc cc cc cc ..B............. 00c0 cc cc cc cc cc cc cc cc 68 a0 df 2e 10 ff 74 24 ........h.....t$ 00d0 18 ff 74 24 18 ff 74 24 18 ff 74 24 18 ff 74 24 ..t$..t$..t$..t$ 00e0 18 e8 12 19 00 00 83 c4 18 c3 cc cc cc cc cc cc ................ 00f0 cc cc cc cc cc cc cc cc 83 ec 18 8d 44 24 08 56 ............D$.V 0100 8b 74 24 2c 50 8d 44 24 08 50 8d 44 24 18 50 8d .t$,P.D$.P.D$.P. 0110 44 24 38 50 8d 44 24 24 50 8d 44 24 1c 50 85 f6 D$8P.D$$P.D$.P.. 0120 74 49 68 5c de 51 10 ff 74 24 3c e8 58 2a de ff tIh\.Q..t$<.X*.. 0130 83 c4 20 83 f8 ff 74 2e 56 e8 ea 8e e1 ff 8b 70 .. ...t.V......p 0140 10 83 c4 04 85 f6 75 62 68 e0 dd 51 10 6a 02 56 ......ubh..Q.j.V 0150 e8 33 d2 dd ff 83 c4 0c 8b 44 24 24 c7 00 00 00 .3.......D$$.... 0160 00 00 c6 40 0c 03 5e 83 c4 18 c3 8d 44 24 30 50 ...@..^.....D$0P 0170 68 64 de 51 10 ff 74 24 40 e8 0a 2a de ff 83 c4 hd.Q..t$@..*.... 0180 24 83 f8 ff 74 e0 ff 35 7c a6 66 10 8d 44 24 1c $...t..5|.f..D$. 0190 6a 01 6a 00 68 34 79 4c 10 6a ff 50 e8 77 50 e1 j.j.h4yL.j.P.wP. 01a0 ff 8b f0 83 c4 18 85 f6 74 ae 6a 00 ff 74 24 30 ........t.j..t$0 01b0 e8 03 80 02 00 83 c4 08 85 c0 74 29 68 44 de 51 ..........t)hD.Q 01c0 10 68 08 8b 54 10 6a 02 6a 00 e8 b9 d1 dd ff 8b .h..T.j.j....... 01d0 44 24 34 83 c4 10 c7 00 00 00 00 00 c6 40 0c 03 D$4..........@.. 01e0 5e 83 c4 18 c3 8b 06 85 c0 0f 84 69 ff ff ff ff ^..........i.... 01f0 74 24 04 ff 74 24 30 ff 74 24 10 50 e8 b7 c4 0a t$..t$0.t$.P.... 0200 00 83 c4 10 83 f8 ff 0f 84 4b ff ff .........K.. Data […]: 6a026a00e87fd3ddff8b44243c83c410c70000000000c6400c035e83c420c38b0685c00f8469ffffffff742404ff74240cff74243cff74241850e829ca0a0083c41483f8ff0f8447ffffff8b44242c5ec70001000000c6400c0383c420c3cccccccccccccccccccc6844de511068d0f12e1 [Length: 524]