Frame 5151: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.793096000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.793096000 UTC Epoch Arrival Time: 1511226051.793096000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 4.008000 milliseconds] [Time since reference or first frame: 45.927356000 seconds] Frame Number: 5151 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd774 (55156) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5cc8 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2603185, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 4837] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 2603185 (relative sequence number) Sequence Number (raw): 2949219566 [Next Sequence Number: 2604233 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc48c [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.384240000 seconds] [Time since previous frame in this TCP stream: 4.008000 milliseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [TCP Analysis Flags] [Expert Info (Warning/Sequence): Previous segment(s) not captured (common at capture start)] [Previous segment(s) not captured (common at capture start)] [Severity level: Warning] [Group: Sequence] [Client Contiguous Streams: 1] [Server Contiguous Streams: 37] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 44 24 30 89 44 24 10 e8 44 ba 00 00 8b 00 89 44 D$0.D$..D......D 0010 24 18 85 c0 74 11 e8 55 ba 00 00 8b 00 eb 04 8b $...t..U........ 0020 44 24 30 89 44 24 10 83 7c 24 64 00 75 13 68 c8 D$0.D$..|$d.u.h. 0030 87 52 10 e8 d8 80 ff ff 83 c4 04 89 44 24 14 eb .R..........D$.. 0040 6c 68 96 00 00 00 83 cd ff ff 15 88 6b 65 10 83 lh..........ke.. 0050 c4 04 89 44 24 14 85 c0 74 53 be 96 00 00 00 8b ...D$...tS...... 0060 f8 8d 44 24 68 50 ff 74 24 68 56 57 ff 15 80 d2 ..D$hP.t$hVW.... 0070 3b 10 83 c4 10 83 f8 ff 7e 0f 3b c6 7d 06 3b e8 ;.......~.;.}.;. 0080 74 27 8b e8 46 03 f0 eb 03 83 c6 64 56 57 ff 15 t'..F......dVW.. 0090 90 6b 65 10 83 c4 08 85 c0 74 0e 8b f8 89 7c 24 .ke......t....|$ 00a0 14 81 fe 00 fa 00 00 7c b8 8b 7c 24 38 8b 54 24 .......|..|$8.T$ 00b0 20 8b 74 24 48 85 d2 74 4a 85 f6 75 37 8b 42 24 .t$H..tJ..u7.B$ 00c0 85 c0 74 30 39 70 04 75 0f 8b 4a 28 83 f9 01 7e ..t09p.u..J(...~ 00d0 07 8b 42 30 8b 44 88 f8 85 c0 74 18 8b 70 04 8b ..B0.D....t..p.. 00e0 68 1c 8b 40 20 89 44 24 60 8d 9a 80 01 00 00 e9 h..@ .D$`....... 00f0 8d 00 00 00 8b 6c 24 4c 8d 9a 80 01 00 00 e9 7e .....l$L.......~ 0100 00 00 00 85 ff 0f 84 72 00 00 00 85 f6 75 6e 8b .......r.....un. 0110 47 20 33 c9 85 c0 74 0a 39 48 48 0f 45 cf 89 4c G 3...t.9HH.E..L 0120 24 1c 33 c0 85 ff 74 0f 83 7f 04 01 74 09 8b 7f $.3...t.....t... 0130 14 40 83 f8 0a 7c ed 85 c9 75 15 85 ff 74 21 8b .@...|...u...t!. 0140 47 20 85 c0 74 0a 39 48 48 0f 45 cf 89 4c 24 1c G ..t.9HH.E..L$. 0150 85 ff 74 0c 83 7f 04 01 75 06 0f b7 6f 38 eb 04 ..t.....u...o8.. 0160 8b 6c 24 4c 85 ed 74 08 81 fd ff ff 00 00 75 11 .l$L..t.......u. 0170 57 e8 3a a9 ff ff 83 c4 04 8b e8 eb 04 8b 6c 24 W.:...........l$ 0180 4c 53 e8 29 0f 00 00 8b 44 24 40 89 03 8b 44 24 LS.)....D$@...D$ 0190 44 89 43 04 8b 44 24 18 89 43 08 8b 44 24 48 83 D.C..D$..C..D$H. 01a0 c4 04 89 43 0c 85 f6 74 06 56 e9 82 00 00 00 8b ...C...t.V...... 01b0 54 24 1c 85 d2 0f 84 81 00 00 00 8b f2 33 c0 90 T$...........3.. 01c0 8b 4e 1c 85 c9 75 05 8b 76 14 eb 3c 8b f1 8b 4e .N...u..v..<...N 01d0 04 83 f9 13 75 2c 48 79 2f 68 b0 85 52 10 56 3b ....u,Hy/h..R.V; 01e0 c9 0f 85 de 00 00 00 c7 46 04 01 00 00 00 e8 7d ........F......} 01f0 b0 ff ff 89 43 10 83 c4 08 c7 46 04 13 00 00 00 ....C.....F..... 0200 eb 1b 83 f9 14 75 01 40 85 f6 75 b4 8b 42 20 ff .....u.@..u..B . 0210 70 48 e8 f9 7e ff ff 83 c4 04 89 43 10 83 7b 10 pH..~......C..{. 0220 00 75 19 85 ff 74 15 8b 47 20 85 c0 74 0e ff 70 .u...t..G ..t..p 0230 48 e8 da 7e ff ff 89 43 10 83 c4 04 8b 44 24 50 H..~...C.....D$P 0240 89 6b 14 85 c0 74 0c 50 e8 c3 7e ff ff 83 c4 04 .k...t.P..~..... 0250 89 43 18 8b 44 24 54 85 c0 74 0c 50 e8 af 7e ff .C..D$T..t.P..~. 0260 ff 83 c4 04 89 43 1c 8b 44 24 58 85 c0 74 0c 50 .....C..D$X..t.P 0270 e8 9b 7e ff ff 83 c4 04 89 43 20 8b 44 24 5c 89 ..~......C .D$\. 0280 43 24 8b 44 24 60 89 43 28 8b 44 24 34 89 7b 30 C$.D$`.C(.D$4.{0 0290 89 43 2c e8 78 b6 00 00 3b d8 74 0f e8 6f b6 00 .C,.x...;.t..o.. 02a0 00 50 53 e8 a8 01 00 00 83 c4 08 8b 44 24 18 85 .PS.........D$.. 02b0 c0 74 1f 53 ff 74 24 14 ff d0 83 c4 08 5e 5d 5f .t.S.t$......^]_ 02c0 5b 83 c4 14 c3 e8 a6 af ff ff 83 c4 08 e9 48 ff [.............H. 02d0 ff ff 8b 7c 24 20 8b 74 24 2c 85 ff 74 2a 85 f6 ...|$ .t$,..t*.. 02e0 75 4a e8 69 b7 00 00 39 30 75 21 8b 37 85 f6 74 uJ.i...90u!.7..t 02f0 1b 83 7c 24 44 01 75 08 8b 76 54 8b 47 04 eb 24 ..|$D.u..vT.G..$ 0300 8b 76 58 8b 47 04 eb 1c 85 f6 75 20 e8 5f b5 00 .vX.G.....u ._.. 0310 00 8b 30 85 ff 74 06 89 7c 24 10 eb 0b e8 6e b5 ..0..t..|$....n. 0320 00 00 8b 00 89 44 24 10 85 f6 74 63 81 fe 90 bd .....D$...tc.... 0330 26 10 74 49 81 fe e0 c2 26 10 74 41 81 fe 70 c0 &.tI....&.tA..p. 0340 26 10 74 39 81 fe b0 c1 26 10 74 31 3b 35 bc d3 &.t9....&.t1;5.. 0350 3b 10 74 22 81 fe 30 bd 26 10 74 1a ff 74 24 14 ;.t"..0.&.t..t$. 0360 68 08 8b 54 10 ff 74 24 18 ff d6 83 c4 0c 5e 5d h..T..t$......^] 0370 5f 5b 83 c4 14 c3 ff 74 24 10 56 eb 04 6a 00 6a _[.....t$.V..j.j 0380 00 ff 74 24 1c 57 53 e8 34 09 00 00 83 c4 14 5e ..t$.WS.4......^ 0390 5d 5f 5b 83 c4 14 c3 cc cc cc cc cc cc cc cc cc ]_[............. 03a0 8b 4c 24 08 8b 44 24 14 83 f9 02 75 4c 85 c0 74 .L$..D$....uL..t 03b0 18 50 68 e4 87 52 10 6a 00 6a 00 6a 00 6a 00 50 .Ph..R.j.j.j.j.P 03c0 6a 00 6a 00 6a 03 51 eb 45 68 04 88 52 10 6a 00 j.j.j.Q.Eh..R.j. 03d0 6a 00 6a 00 6a 00 6a 00 6a 00 6a 00 6a 03 6a 02 j.j.j.j.j.j.j.j. 03e0 ff 74 24 2c ff 74 24 38 6a 00 6a 00 6a 00 6a 00 .t$,.t$8j.j.j.j. 03f0 e8 5b fb ff ff 83 c4 40 c3 50 ff 74 24 14 6a 00 .[.....@.P.t$.j. 0400 6a 00 6a 00 6a 00 50 6a 00 6a 00 6a 02 51 ff 74 j.j.j.Pj.j.j.Q.t 0410 24 30 ff 74 24 3c 6a 00 $0.t$