Frame 5305: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.860047000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.860047000 UTC Epoch Arrival Time: 1511226051.860047000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 5.000 microseconds] [Time since reference or first frame: 45.994307000 seconds] Frame Number: 5305 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd7e5 (55269) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5c57 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2685453, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 4991] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 2685453 (relative sequence number) Sequence Number (raw): 2949301834 [Next Sequence Number: 2686501 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa6b2 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.451191000 seconds] [Time since previous frame in this TCP stream: 5.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 3144] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 38] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 60 ff ff ff 89 be d4 00 00 00 89 9e ac 00 00 00 `............... 0010 e8 1f 78 ff ff 83 38 00 74 4a 8b 46 24 85 c0 74 ..x...8.tJ.F$..t 0020 29 83 78 04 00 74 23 e8 e8 76 ff ff 8b 7e 24 8b ).x..t#..v...~$. 0030 d8 e8 fe 76 ff ff ff 77 1c ff 77 04 68 80 ab 52 ...v...w..w.h..R 0040 10 ff 30 8b 03 ff d0 83 c4 10 e8 c5 76 ff ff 8b ..0.........v... 0050 f8 e8 de 76 ff ff 68 74 b9 52 10 ff 30 8b 07 ff ...v..ht.R..0... 0060 d0 83 c4 08 8b 4e 24 8b 51 10 80 3a 00 75 50 83 .....N$.Q..:.uP. 0070 be 24 01 00 00 00 75 47 8b c2 2b 41 0c 3d f4 01 .$....uG..+A.=.. 0080 00 00 7e 3b 8b 41 14 2b c2 3d f4 01 00 00 7d 2f ..~;.A.+.=....}/ 0090 51 e8 5e 09 01 00 8b 4e 24 83 c4 04 8b 41 10 80 Q.^....N$....A.. 00a0 38 00 75 1b 68 fa 00 00 00 51 e8 95 08 01 00 83 8.u.h....Q...... 00b0 c4 08 85 c0 7f 09 56 e8 18 d7 00 00 83 c4 04 8b ......V......... 00c0 4e 24 8b 41 10 80 38 00 75 6f 83 be d4 00 00 00 N$.A..8.uo...... 00d0 00 74 0d 83 be ac 00 00 00 ff 0f 84 97 01 00 00 .t.............. 00e0 68 b8 a3 51 10 68 00 87 62 10 6a 00 6a 00 6a 00 h..Q.h..b.j.j.j. 00f0 6a 00 6a 00 6a 00 6a 00 6a 03 6a 3b 6a 01 6a 00 j.j.j.j.j.j;j.j. 0100 56 6a 00 6a 00 6a 00 c7 46 54 3b 00 00 00 e8 e1 Vj.j.j..FT;..... 0110 bc fe ff 83 c4 44 83 be 20 01 00 00 00 c7 46 0c .....D.. .....F. 0120 00 00 00 00 0f 85 4d 01 00 00 5f c7 86 d4 00 00 ......M..._..... 0130 00 01 00 00 00 5e 5d 5b c3 8b 44 24 14 39 41 38 .....^][..D$.9A8 0140 74 14 6a 00 6a 00 68 b8 b8 52 10 6a 5a 56 e8 01 t.j.j.h..R.jZV.. 0150 49 08 00 83 c4 14 83 be ac 00 00 00 ff 0f 84 14 I............... 0160 01 00 00 8b 4e 24 8b 41 10 83 c0 03 3b 41 14 0f ....N$.A....;A.. 0170 87 02 01 00 00 83 86 c8 00 00 00 03 83 41 10 03 .............A.. 0180 8b 46 24 83 40 20 03 8b 46 24 8b 40 10 80 38 25 .F$.@ ..F$.@..8% 0190 75 09 56 e8 bc d1 00 00 83 c4 04 8b 4e 24 8b 41 u.V.........N$.A 01a0 10 80 38 00 0f 85 cd 00 00 00 68 fa 00 00 00 51 ..8.......h....Q 01b0 e8 8f 07 01 00 83 c4 08 85 c0 0f 8f b7 00 00 00 ................ 01c0 56 e8 0e d6 00 00 83 c4 04 5f 5e 5d 5b c3 83 be V........_^][... 01d0 d4 00 00 00 00 74 09 83 be ac 00 00 00 ff 74 50 .....t........tP 01e0 68 b8 a7 51 10 68 00 87 62 10 6a 00 6a 00 6a 00 h..Q.h..b.j.j.j. 01f0 6a 00 6a 00 6a 00 6a 00 6a 03 6a 5f 6a 01 6a 00 j.j.j.j.j.j_j.j. 0200 56 6a 00 6a 00 6a 00 c7 46 54 5f 00 00 00 e8 e1 Vj.j.j..FT_..... 0210 bb fe ff 83 c4 44 83 be 20 01 00 00 00 c7 46 0c .....D.. .....F. 0220 00 00 00 00 75 0a c7 86 d4 00 00 00 01 00 00 00 ....u........... 0230 8b 46 24 c7 86 ac 00 00 00 ff ff ff ff c7 86 d4 .F$............. 0240 00 00 00 01 00 00 00 85 c0 74 2c 8b 48 28 85 c9 .........t,.H(.. 0250 74 12 ff 70 0c ff d1 8b 46 24 83 c4 04 c7 40 28 t..p....F$....@( 0260 00 00 00 00 8b 46 24 c7 40 10 94 8a 54 10 8b 4e .....F$.@...T..N 0270 24 8b 41 10 89 41 0c 5f 5e 5d 5b c3 cc cc cc cc $.A..A._^][..... 0280 cc cc cc cc 56 8b 74 24 08 57 83 be 24 01 00 00 ....V.t$.W..$... 0290 00 75 1a 8b 46 24 8b 48 14 2b 48 10 81 f9 fa 00 .u..F$.H.+H..... 02a0 00 00 7d 09 56 e8 aa a6 ff ff 83 c4 04 8b 46 24 ..}.V.........F$ 02b0 8b 78 10 8a 0f 84 c9 0f 84 a3 01 00 00 53 8d 9b .x...........S.. 02c0 00 00 00 00 80 f9 3c 75 0a 80 7f 01 2f 0f 84 8c ......