Frame 5131: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.780018000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.780018000 UTC Epoch Arrival Time: 1511226051.780018000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 54.000 microseconds] [Time since reference or first frame: 45.914278000 seconds] Frame Number: 5131 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xd764 (55140) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5ee4 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2594277, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 4817] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 2594277 (relative sequence number) Sequence Number (raw): 2949210658 [Next Sequence Number: 2594801 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x450e [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.371162000 seconds] [Time since previous frame in this TCP stream: 54.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 4716] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 35] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 40 18 85 c0 75 ed 83 7e 28 02 75 0f 56 57 ff 73 @...u..~(.u.VW.s 0010 20 6a 00 e8 f4 3e 00 00 83 c4 10 8b c6 5e 5d 5b j...>.......^][ 0020 5f c3 6a 00 ff 74 24 24 55 57 53 e8 ac e3 ff ff _.j..t$$UWS..... 0030 83 c4 14 5e 5d 5b 5f c3 cc cc cc cc 56 8b 74 24 ...^][_.....V.t$ 0040 08 57 85 f6 74 7f 8b 7c 24 10 85 ff 74 77 83 7e .W..t..|$...tw.~ 0050 04 01 75 71 53 8d 44 24 10 50 57 e8 9c 01 00 00 ..uqS.D$.PW..... 0060 8b d8 83 c4 08 85 db 74 48 55 ff 74 24 14 57 e8 .......tHU.t$.W. 0070 38 a6 ff ff 8b e8 55 56 ff 76 20 e8 9c fa ff ff 8.....UV.v ..... 0080 83 c4 14 89 44 24 14 85 ed 74 0e 55 ff 15 94 6b ....D$...t.U...k 0090 65 10 8b 44 24 18 83 c4 04 5d 85 c0 74 13 ff 74 e..D$....]..t..t 00a0 24 18 53 50 56 e8 72 fe ff ff 83 c4 10 5b 5f 5e $.SPV.r......[_^ 00b0 c3 ff 74 24 18 57 6a 00 56 e8 5e fe ff ff 83 c4 ..t$.Wj.V.^..... 00c0 10 5b 5f 5e c3 5f 33 c0 5e c3 cc cc 55 8b 6c 24 .[_^._3.^...U.l$ 00d0 08 85 ed 74 7d 8b 45 04 83 f8 12 74 75 57 8b 7c ...t}.E....tuW.| 00e0 24 10 39 7d 20 74 6a 83 f8 01 75 51 53 8b 5d 2c $.9} tj...uQS.], 00f0 85 db 74 48 56 8d a4 24 00 00 00 00 83 7b 28 02 ..tHV..$.....{(. 0100 75 0c 53 ff 75 20 e8 91 61 00 00 83 c4 08 8b 73 u.S.u ..a......s 0110 0c 89 7b 20 85 f6 74 1c 83 7e 04 12 74 16 39 7e ..{ ..t..~..t.9~ 0120 20 74 0a 57 56 e8 a2 ff ff ff 83 c4 08 8b 76 18 t.WV.........v. 0130 85 f6 75 ea 8b 5b 18 85 db 75 c1 5e 5b 8b 45 0c ..u..[...u.^[.E. 0140 85 c0 74 0a 57 50 e8 81 fd ff ff 83 c4 08 89 7d ..t.WP.........} 0150 20 5f 5d c3 cc cc cc cc cc cc cc cc 56 8b 74 24 _].........V.t$ 0160 0c 33 c9 85 f6 75 04 33 c0 5e c3 8b 54 24 08 89 .3...u.3.^..T$.. 0170 0e 85 d2 74 f2 8a 02 3c 3a 74 ec 84 c0 74 0d 3c ...t...<:t...t.< 0180 3a 74 09 8a 44 11 01 41 84 c0 75 f3 80 3c 11 00 :t..D..A..u..<.. 0190 57 8d 3c 11 74 5b 51 52 e8 0f a5 ff ff 83 c4 08 W.<.t[QR........ 01a0 89 06 85 c0 75 18 68 2c 84 52 10 50 50 6a 02 6a ....u.h,.R.PPj.j 01b0 02 e8 b6 24 00 00 83 c4 14 33 c0 5f 5e c3 8d 47 ...$.....3._^..G 01c0 01 50 e8 15 a2 ff ff 83 c4 04 85 c0 75 25 68 2c .P..........u%h, 01d0 84 52 10 e8 a4 0e 00 00 8b 06 83 c4 04 85 c0 74 .R.............t 01e0 10 50 ff 15 94 6b 65 10 83 c4 04 c7 06 00 00 00 .P...ke......... 01f0 00 33 c0 5f 5e c3 cc cc cc cc cc cc 8b 54 24 04 .3._^........T$. 0200 33 c9 85 d2 75 03 33 c0 c3 56 8b 74 3...u.3..V.t Data […]: 401885c075ed837e2802750f5657ff73206a00e8f43e000083c4108bc65e5d5b5fc36a00ff742424555753e8ace3ffff83c4145e5d5b5fc3cccccccc568b7424085785f6747f8b7c241085ff7477837e04017571538d4424105057e89c0100008bd883c40885db744855ff74241457e838a [Length: 524]