Frame 4842: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.653719000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.653719000 UTC Epoch Arrival Time: 1511226051.653719000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 76.000 microseconds] [Time since reference or first frame: 45.787979000 seconds] Frame Number: 4842 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd69b (54939) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5da1 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2437601, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 4528] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 2437601 (relative sequence number) Sequence Number (raw): 2949053982 [Next Sequence Number: 2438649 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6b34 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.244863000 seconds] [Time since previous frame in this TCP stream: 76.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 4192] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 31] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 74 24 50 e8 68 27 de ff 83 c4 2c 83 f8 ff 74 e0 t$P.h'....,...t. 0010 ff 35 7c a6 66 10 8d 44 24 24 6a 01 6a 00 68 34 .5|.f..D$$j.j.h4 0020 79 4c 10 6a ff 50 e8 d5 4d e1 ff 8b f0 83 c4 18 yL.j.P..M....... 0030 85 f6 74 ae 6a 00 ff 74 24 38 e8 61 7d 02 00 83 ..t.j..t$8.a}... 0040 c4 08 85 c0 74 29 68 44 de 51 10 68 08 8b 54 10 ....t)hD.Q.h..T. 0050 6a 02 6a 00 e8 17 cf dd ff 8b 44 24 3c 83 c4 10 j.j.......D$<... 0060 c7 00 00 00 00 00 c6 40 0c 03 5e 83 c4 20 c3 8b .......@..^.. .. 0070 36 85 f6 0f 84 69 ff ff ff 8b 44 24 04 85 c0 75 6....i....D$...u 0080 3f ff 74 24 08 ff 74 24 38 ff 74 24 14 56 e8 0d ?.t$..t$8.t$.V.. 0090 c2 0a 00 83 c4 10 83 f8 ff 0f 84 43 ff ff ff 56 ...........C...V 00a0 e8 8b ac 0a 00 83 c4 04 83 f8 ff 75 32 8b 44 24 ...........u2.D$ 00b0 2c 5e c7 00 00 00 00 00 c6 40 0c 03 83 c4 20 c3 ,^.......@.... . 00c0 50 ff 74 24 0c ff 74 24 3c ff 74 24 18 56 e8 3d P.t$..t$<.t$.V.= 00d0 ce 0a 00 83 c4 14 83 f8 ff 0f 84 03 ff ff ff 8b ................ 00e0 44 24 2c 5e c7 00 01 00 00 00 c6 40 0c 03 83 c4 D$,^.......@.... 00f0 20 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc ............... 0100 68 94 de 51 10 68 60 f4 2e 10 ff 74 24 1c ff 74 h..Q.h`....t$..t 0110 24 1c ff 74 24 1c ff 74 24 1c ff 74 24 1c e8 ad $..t$..t$..t$... 0120 13 00 00 83 c4 1c c3 cc cc cc cc cc cc cc cc cc ................ 0130 68 00 df 2e 10 ff 74 24 18 ff 74 24 18 ff 74 24 h.....t$..t$..t$ 0140 18 ff 74 24 18 ff 74 24 18 e8 92 14 00 00 83 c4 ..t$..t$........ 0150 18 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ 0160 83 ec 10 8d 44 24 04 56 8b 74 24 24 50 8d 44 24 ....D$.V.t$$P.D$ 0170 08 50 8d 44 24 14 50 8d 44 24 30 50 85 f6 74 49 .P.D$.P.D$0P..tI 0180 68 f8 4f 55 10 ff 74 24 2c e8 e2 25 de ff 83 c4 h.OU..t$,..%.... 0190 18 83 f8 ff 74 2e 56 e8 74 8a e1 ff 8b 70 10 83 ....t.V.t....p.. 01a0 c4 04 85 f6 75 62 68 e0 dd 51 10 6a 02 56 e8 bd ....ubh..Q.j.V.. 01b0 cd dd ff 83 c4 0c 8b 44 24 1c c7 00 00 00 00 00 .......D$....... 01c0 c6 40 0c 03 5e 83 c4 10 c3 8d 44 24 20 50 68 9c .@..^.....D$ Ph. 01d0 ea 47 10 ff 74 24 30 e8 94 25 de ff 83 c4 1c 83 .G..t$0..%...... 01e0 f8 ff 74 e0 ff 35 7c a6 66 10 8d 44 24 14 6a 01 ..t..5|.f..D$.j. 01f0 6a 00 68 34 79 4c 10 6a ff 50 e8 01 4c e1 ff 8b j.h4yL.j.P..L... 0200 f0 83 c4 18 85 f6 74 ae 6a 00 ff 74 24 28 e8 8d ......t.j..t$(.. 0210 7b 02 00 83 c4 08 85 c0 74 29 68 94 de 51 10 68 {.......t)h..Q.h 0220 08 8b 54 10 6a 02 6a 00 e8 43 cd dd ff 8b 44 24 ..T.j.j..C....D$ 0230 2c 83 c4 10 c7 00 00 00 00 00 c6 40 0c 03 5e 83 ,..........@..^. 0240 c4 10 c3 8b 06 85 c0 0f 84 69 ff ff ff ff 74 24 .........i....t$ 0250 04 ff 74 24 28 50 e8 35 d1 0a 00 83 c4 0c 83 f8 ..t$(P.5........ 0260 ff 0f 84 4f ff ff ff 8b 44 24 1c 5e c7 00 01 00 ...O....D$.^.... 0270 00 00 c6 40 0c 03 83 c4 10 c3 cc cc cc cc cc cc ...@............ 0280 8b 44 24 10 85 c0 74 2f 50 e8 82 89 e1 ff 8b 40 .D$...t/P......@ 0290 10 83 c4 04 85 c0 75 5c 68 e0 dd 51 10 6a 02 50 ......u\h..Q.j.P 02a0 e8 cb cc dd ff 83 c4 0c 8b 44 24 08 c7 00 00 00 .........D$..... 02b0 00 00 c6 40 0c 03 c3 8d 44 24 10 50 68 54 50 55 ...@....D$.PhTPU 02c0 10 ff 74 24 0c e8 a6 24 de ff 83 c4 0c 83 f8 ff ..t$...$........ 02d0 74 e4 ff 35 7c a6 66 10 8d 44 24 14 6a 01 6a 00 t..5|.f..D$.j.j. 02e0 68 34 79 4c 10 6a ff 50 e8 13 4b e1 ff 83 c4 18 h4yL.j.P..K..... 02f0 85 c0 74 b4 8b 00 85 c0 74 ae 50 e8 10 b2 0a 00 ..t.....t.P..... 0300 83 c4 04 83 f8 ff 74 a0 8b 44 24 08 c7 00 01 00 ......t..D$..... 0310 00 00 c6 40 0c 03 c3 cc cc cc cc cc cc cc cc cc ...@............ 0320 68 10 d9 2e 10 ff 74 24 18 ff 74 24 18 ff 74 24 h.....t$..t$..t$ 0330 18 ff 74 24 18 ff 74 24 18 e8 a2 12 00 00 83 c4 ..t$..t$........ 0340 18 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ 0350 6a 00 68 70 f8 2e 10 ff 74 24 1c ff 74 24 1c ff j.hp....t$..t$.. 0360 74 24 1c ff 74 24 1c ff 74 24 1c e8 60 11 00 00 t$..t$..t$..`... 0370 83 c4 1c c3 cc cc cc cc cc cc cc cc cc cc cc cc ................ 0380 6a 00 68 70 05 2f 10 ff 74 24 1c ff 74 24 1c ff j.hp./..t$..t$.. 0390 74 24 1c ff 74 24 1c ff 74 24 1c e8 30 11 00 00 t$..t$..t$..0... 03a0 83 c4 1c c3 cc cc cc cc cc cc cc cc cc cc cc cc ................ 03b0 6a 00 68 80 04 2f 10 ff 74 24 1c ff 74 24 1c ff j.h../..t$..t$.. 03c0 74 24 1c ff 74 24 1c ff 74 24 1c e8 00 11 00 00 t$..t$..t$...... 03d0 83 c4 1c c3 cc cc cc cc cc cc cc cc cc cc cc cc ................ 03e0 83 ec 1c 83 7c 24 2c 00 8d 44 24 0c 50 8d 44 24 ....|$,..D$.P.D$ 03f0 04 50 8d 44 24 18 50 8d 44 24 10 50 8d 44 24 24 .P.D$.P.D$.P.D$$ 0400 50 8d 44 24 1c c7 44 24 1c 00 00 00 00 c7 44 24 P.D$..D$......D$ 0410 18 00 00 00 00 c7 44 24 ......D$ Data […]: 742450e86827deff83c42c83f8ff74e0ff357ca666108d4424246a016a006834794c106aff50e8d54de1ff8bf083c41885f674ae6a00ff742438e8617d020083c40885c074296844de511068088b54106a026a00e817cfddff8b44243c83c410c70000000000c6400c035e83c420c38b368 [Length: 1048]