Frame 5186: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.801886000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.801886000 UTC Epoch Arrival Time: 1511226051.801886000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 73.000 microseconds] [Time since reference or first frame: 45.936146000 seconds] Frame Number: 5186 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd78b (55179) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5cb1 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2621001, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 4872] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 2621001 (relative sequence number) Sequence Number (raw): 2949237382 [Next Sequence Number: 2622049 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xbdc6 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.393030000 seconds] [Time since previous frame in this TCP stream: 73.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1572] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 37] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 50 e8 d2 3b ff ff 83 c0 0a 83 c4 04 3b f8 0f 8c P..;........;... 0010 5d 01 00 00 8b 46 24 8b 50 0c 8b f2 8a 02 42 84 ]....F$.P.....B. 0020 c0 75 f9 2b d6 8d 7b ff 8a 47 01 47 84 c0 75 f8 .u.+..{..G.G..u. 0030 8b ca c1 e9 02 f3 a5 8b ca 83 e1 03 f3 a4 8d 7b ...............{ 0040 ff 8d a4 24 00 00 00 00 8a 47 01 8d 7f 01 84 c0 ...$.....G...... 0050 75 f6 66 a1 b8 72 55 10 8b 74 24 20 66 89 07 8b u.f..rU..t$ f... 0060 7c 24 10 ff 76 08 e8 6d 3b ff ff 83 c0 0a 83 c4 |$..v..m;....... 0070 04 3b f8 0f 8c 1b 01 00 00 8b 56 08 8b f2 8a 02 .;........V..... 0080 42 84 c0 75 f9 2b d6 8d 7b ff 8a 47 01 47 84 c0 B..u.+..{..G.G.. 0090 75 f8 8b ca c1 e9 02 f3 a5 8b ca 83 e1 03 f3 a4 u............... 00a0 8b 74 24 20 83 7e 18 00 0f 84 8d 00 00 00 8d 7b .t$ .~.........{ 00b0 ff 8d a4 24 00 00 00 00 8a 47 01 8d 7f 01 84 c0 ...$.....G...... 00c0 75 f6 eb 6e 56 e8 7e 6f ff ff 83 c4 04 85 c0 75 u..nV.~o.......u 00d0 6a 8d 4b ff 8d 64 24 00 8a 41 01 8d 49 01 84 c0 j.K..d$..A..I... 00e0 75 f6 a1 04 c1 51 10 89 01 66 a1 08 c1 51 10 66 u....Q...f...Q.f 00f0 89 41 04 83 7e 18 00 74 42 8d 7b ff 8a 47 01 8d .A..~..tB.{..G.. 0100 7f 01 84 c0 75 f6 eb 2a 8d 7b ff 8a 47 01 8d 7f ....u..*.{..G... 0110 01 84 c0 75 f6 a1 28 e0 48 10 89 07 83 7e 18 00 ...u..(.H....~.. 0120 74 19 8d 7b ff 8d 49 00 8a 47 01 8d 7f 01 84 c0 t..{..I..G...... 0130 75 f6 66 a1 a0 72 55 10 66 89 07 8b 76 18 89 74 u.f..rU.f...v..t 0140 24 20 85 f6 0f 85 62 fe ff ff 39 74 24 24 0f 84 $ ....b...9t$$.. 0150 8d 00 00 00 4b 8d 49 00 8a 43 01 43 84 c0 75 f8 ....K.I..C.C..u. 0160 66 a1 3c 73 55 10 8b fb 5d 66 89 07 5f 5b 5e 59 f..D$.+....~B. 01a0 7c 2b ff 2e 74 3b 4b 90 8a 43 01 8d 5b 01 84 c0 |+..t;K..C..[... 01b0 75 f6 eb 1e 2b c5 83 f8 04 7e 26 80 7c 2b ff 2e u...+....~&.|+.. 01c0 74 1f 4b eb 03 8d 49 00 8a 43 01 8d 5b 01 84 c0 t.K...I..C..[... 01d0 75 f6 a1 28 8a 52 10 89 03 a0 2c 8a 52 10 88 43 u..(.R....,.R..C 01e0 04 5d 5f 5b 5e 59 c3 90 fa fc 26 10 10 fe 26 10 .]_[^Y....&...&. 01f0 cc fd 26 10 d9 fd 26 10 43 fe 26 10 00 01 02 03 ..&...&.C.&..... 0200 03 04 04 04 01 01 01 01 01 04 04 04 04 01 04 04 ................ 0210 01 cc cc cc cc cc cc cc 8b 44 24 04 56 33 f6 33 .........D$.V3.3 0220 d2 33 c9 85 c0 74 22 81 78 1c 34 12 cd ab 8b 70 .3...t".x.4....p 0230 04 8b 08 74 09 81 78 1c 35 12 cd ab 75 0b 2b c1 ...t..x.5...u.+. 0240 48 3d f8 00 00 00 0f 46 d1 8b 44 24 0c 85 c0 74 H=.....F..D$...t 0250 2a 50 68 e4 87 52 10 6a 00 6a 00 6a 00 6a 00 50 *Ph..R.j.j.j.j.P 0260 6a 00 6a 00 6a 03 6a 02 6a 17 6a 00 52 51 56 6a j.j.j.j.j.j.RQVj 0270 00 e8 42 b7 ff ff 83 c4 44 5e c3 68 04 88 52 10 ..B.....D^.h..R. 0280 6a 00 6a 00 6a 00 6a 00 6a 00 6a 00 6a 00 6a 03 j.j.j.j.j.j.j.j. 0290 6a 02 6a 17 6a 00 52 51 56 6a 00 e8 18 b7 ff ff j.j.j.RQVj...... 02a0 83 c4 40 5e c3 cc cc cc 83 ec 44 a1 c8 79 65 10 ..@^......D..ye. 02b0 33 c4 89 44 24 40 53 8b 5c 24 54 56 8b 74 24 54 3..D$@S.\$TV.t$T 02c0 57 8b 7c 24 54 85 ff 75 6a 33 c9 33 d2 85 f6 74 W.|$T..uj3.3...t 02d0 23 8b 46 1c 8b 7e 04 8b 16 3d 34 12 cd ab 74 07 #.F..~...=4...t. 02e0 3d 35 12 cd ab 75 0d 2b f2 8d 46 ff 3d f8 00 00 =5...u.+..F.=... 02f0 00 0f 46 ca 6a 00 6a 00 53 68 ac 88 52 10 6a 00 ..F.j.j.Sh..R.j. 0300 6a 00 6a 00 53 53 6a 00 6a 00 6a 02 6a 01 6a 17 j.j.SSj.j.j.j.j. 0310 6a 00 51 52 57 6a 00 e8 9c b6 ff ff 83 c4 4c 33 j.QRWj........L3 0320 c0 5f 5e 5b 8b 4c 24 40 33 cc e8 35 b3 0a 00 83 ._^[.L$@3..5.... 0330 c4 44 c3 8b 07 48 55 83 f8 03 0f 87 f8 02 00 00 .D...HU......... 0340 ff 24 85 68 03 27 10 6a 00 6a 00 53 68 d8 88 52 .$.h.'.j.j.Sh..R 0350 10 6a 01 6a 00 56 e8 1d e4 ff ff 83 c4 1c 33 c0 .j.j.V........3. 0360 5d 5f 5e 5b 8b 4c 24 40 33 cc e8 f5 b2 0a 00 83 ]_^[.L$@3....... 0370 c4 44 c3 8b 6e 3c 6a 32 8d 44 24 20 50 ff 77 18 .D..n