Frame 4948: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.708602000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.708602000 UTC Epoch Arrival Time: 1511226051.708602000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 55.000 microseconds] [Time since reference or first frame: 45.842862000 seconds] Frame Number: 4948 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xd6e7 (55015) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5f61 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2499433, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 4634] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 2499433 (relative sequence number) Sequence Number (raw): 2949115814 [Next Sequence Number: 2499957 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa34c [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.299746000 seconds] [Time since previous frame in this TCP stream: 55.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1572] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 33] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 22 6d c6 e4 c7 85 34 f5 ff ff 3f 13 c1 48 c7 85 "m....4...?..H.. 0010 38 f5 ff ff dc 86 0f c7 c7 85 3c f5 ff ff ee c9 8.........<..... 0020 f9 07 c7 85 40 f5 ff ff 0f 1f 04 41 c7 85 44 f5 ....@......A..D. 0030 ff ff a4 79 47 40 c7 85 48 f5 ff ff 17 6e 88 5d ...yG@..H....n.] 0040 c7 85 4c f5 ff ff eb 51 5f 32 c7 85 50 f5 ff ff ..L....Q_2..P... 0050 d1 c0 9b d5 c7 85 54 f5 ff ff 8f c1 bc f2 c7 85 ......T......... 0060 58 f5 ff ff 64 35 11 41 c7 85 5c f5 ff ff 34 78 X...d5.A..\...4x 0070 7b 25 c7 85 60 f5 ff ff 60 9c 2a 60 c7 85 64 f5 {%..`...`.*`..d. 0080 ff ff a3 e8 f8 df c7 85 68 f5 ff ff 1b 6c 63 1f ........h....lc. 0090 c7 85 6c f5 ff ff c2 b4 12 0e c7 85 70 f5 ff ff ..l.........p... 00a0 9e 32 e1 02 c7 85 74 f5 ff ff d1 4f 66 af c7 85 .2....t....Of... 00b0 78 f5 ff ff 15 81 d1 ca c7 85 7c f5 ff ff e0 95 x.........|..... 00c0 23 6b c7 85 80 f5 ff ff e1 92 3e 33 c7 85 84 f5 #k........>3.... 00d0 ff ff 62 0b 24 3b c7 85 88 f5 ff ff 22 b9 be ee ..b.$;......"... 00e0 c7 85 8c f5 ff ff 0e a2 b2 85 c7 85 90 f5 ff ff ................ 00f0 99 0d ba e6 c7 85 94 f5 ff ff 8c 0c 72 de c7 85 ............r... 0100 98 f5 ff ff 28 f7 a2 2d c7 85 9c f5 ff ff 45 78 ....(..-......Ex 0110 12 d0 c7 85 a0 f5 ff ff fd 94 b7 95 c7 85 a4 f5 ................ 0120 ff ff 62 08 7d 64 c7 85 a8 f5 ff ff f0 f5 cc e7 ..b.}d.......... 0130 c7 85 ac f5 ff ff 6f a3 49 54 c7 85 b0 f5 ff ff ......o.IT...... 0140 fa 48 7d 87 c7 85 b4 f5 ff ff 27 fd 9d c3 c7 85 .H}.......'..... 0150 b8 f5 ff ff 1e 8d 3e f3 c7 85 bc f5 ff ff 41 63 ......>.......Ac 0160 47 0a c7 85 c0 f5 ff ff 74 ff 2e 99 c7 85 c4 f5 G.......t....... 0170 ff ff ab 6e 6f 3a c7 85 c8 f5 ff ff 37 fd f8 f4 ...no:......7... 0180 c7 85 cc f5 ff ff 60 dc 12 a8 c7 85 d0 f5 ff ff ......`......... 0190 f8 dd eb a1 c7 85 d4 f5 ff ff 4c e1 1b 99 c7 85 ..........L..... 01a0 d8 f5 ff ff 0d 6b 6e db c7 85 dc f5 ff ff 10 55 .....kn........U 01b0 7b c6 c7 85 e0 f5 ff ff 37 2c 67 6d c7 85 e4 f5 {.......7,gm.... 01c0 ff ff 3b d4 65 27 c7 85 e8 f5 ff ff 04 e8 d0 dc ..;.e'.......... 01d0 c7 85 ec f5 ff ff c7 0d 29 f1 c7 85 f0 f5 ff ff ........)....... 01e0 a3 ff 00 cc c7 85 f4 f5 ff ff 92 0f 39 b5 c7 85 ............9... 01f0 f8 f5 ff ff 0b ed 0f 69 c7 85 fc f5 ff ff fb 9f .......i........ 0200 7b 66 c7 85 00 f6 ff ff 9c 7d db ce {f.......}.. Data […]: 226dc6e4c78534f5ffff3f13c148c78538f5ffffdc860fc7c7853cf5ffffeec9f907c78540f5ffff0f1f0441c78544f5ffffa4794740c78548f5ffff176e885dc7854cf5ffffeb515f32c78550f5ffffd1c09bd5c78554f5ffff8fc1bcf2c78558f5ffff64351141c7855cf5ffff34787b2 [Length: 524]