Frame 5308: Packet, 690 bytes on wire (5520 bits), 690 bytes captured (5520 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.860175000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.860175000 UTC Epoch Arrival Time: 1511226051.860175000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 14.000 microseconds] [Time since reference or first frame: 45.994435000 seconds] Frame Number: 5308 Frame Length: 690 bytes (5520 bits) Capture Length: 690 bytes (5520 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 676 Identification: 0xd7e7 (55271) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5df1 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2687961, Ack: 1736, Len: 636 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 4994] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 636] Sequence Number: 2687961 (relative sequence number) Sequence Number (raw): 2949304342 [Next Sequence Number: 2688597 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x837c [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.451319000 seconds] [Time since previous frame in this TCP stream: 14.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 3668] [Bytes sent since last PSH flag: 2096] [Client Contiguous Streams: 1] [Server Contiguous Streams: 38] TCP payload (636 bytes) Hypertext Transfer Protocol File Data: 636 bytes Data (636 bytes) 0000 24 0c c7 03 00 00 00 00 8b 4e 24 8b 41 10 8a 10 $........N$.A... 0010 80 fa 23 0f 85 07 01 00 00 80 78 01 52 75 7e 80 ..#.......x.Ru~. 0020 78 02 45 75 78 80 78 03 51 75 72 80 78 04 55 75 x.Eux.x.Qur.x.Uu 0030 6c 80 78 05 49 75 66 80 78 06 52 75 60 80 78 07 l.x.Iuf.x.Ru`.x. 0040 45 75 5a 80 78 08 44 75 54 83 86 c8 00 00 00 09 EuZ.x.DuT....... 0050 83 41 10 09 8b 46 24 83 40 20 09 8b 46 24 8b 40 .A...F$.@ ..F$.@ 0060 10 80 38 25 75 09 56 e8 1c c9 00 00 83 c4 04 8b ..8%u.V......... 0070 4e 24 8b 41 10 80 38 00 75 1b 68 fa 00 00 00 51 N$.A..8.u.h....Q 0080 e8 f3 fe 00 00 83 c4 08 85 c0 7f 09 56 e8 76 cd ............V.v. 0090 00 00 83 c4 04 5e b8 02 00 00 00 5b c3 80 fa 23 .....^.....[...# 00a0 75 7e 80 78 01 49 75 78 80 78 02 4d 75 72 80 78 u~.x.Iux.x.Mur.x 00b0 03 50 75 6c 80 78 04 4c 75 66 80 78 05 49 75 60 .Pul.x.Luf.x.Iu` 00c0 80 78 06 45 75 5a 80 78 07 44 75 54 83 86 c8 00 .x.EuZ.x.DuT.... 00d0 00 00 08 83 41 10 08 8b 46 24 83 40 20 08 8b 46 ....A...F$.@ ..F 00e0 24 8b 40 10 80 38 25 75 09 56 e8 99 c8 00 00 83 $.@..8%u.V...... 00f0 c4 04 8b 4e 24 8b 41 10 80 38 00 75 1b 68 fa 00 ...N$.A..8.u.h.. 0100 00 00 51 e8 70 fe 00 00 83 c4 08 85 c0 7f 09 56 ..Q.p..........V 0110 e8 f3 cc 00 00 83 c4 04 5e b8 03 00 00 00 5b c3 ........^.....[. 0120 57 bf 01 00 00 00 80 fa 23 0f 85 b4 00 00 00 80 W.......#....... 0130 78 01 46 0f 85 aa 00 00 00 80 78 02 49 0f 85 a0 x.F.......x.I... 0140 00 00 00 80 78 03 58 0f 85 96 00 00 00 80 78 04 ....x.X.......x. 0150 45 0f 85 8c 00 00 00 80 78 05 44 0f 85 82 00 00 E.......x.D..... 0160 00 83 86 c8 00 00 00 06 83 41 10 06 8b 46 24 83 .........A...F$. 0170 40 20 06 8b 46 24 8b 40 10 80 38 25 75 09 56 e8 @ ..F$.@..8%u.V. 0180 04 c8 00 00 83 c4 04 8b 4e 24 8b 41 10 80 38 00 ........N$.A..8. 0190 75 1b 68 fa 00 00 00 51 e8 db fd 00 00 83 c4 08 u.h....Q........ 01a0 85 c0 7f 09 56 e8 5e cc 00 00 83 c4 04 8b 46 24 ....V.^.......F$ 01b0 bf 04 00 00 00 8b 40 10 8a 00 3c 20 74 1c 3c 09 ......@...< t.<. 01c0 72 04 3c 0a 76 14 3c 0d 74 10 68 ec b3 52 10 6a r.<.v.<.t.h..R.j 01d0 41 56 e8 51 9c ff ff 83 c4 0c 56 e8 b8 d7 00 00 AV.Q......V..... 01e0 83 c4 04 83 7e 24 00 74 11 6a 00 6a 00 6a 00 56 ....~$.t.j.j.j.V 01f0 e8 43 b3 ff ff 83 c4 10 eb 02 33 c0 c7 86 ac 00 .C........3..... 0200 00 00 03 00 00 00 85 c0 75 17 68 0c b4 52 10 ff ........u.h..R.. 0210 76 54 56 e8 10 9c ff ff 83 c4 0c 8b c7 5f 5e 5b vTV.........._^[ 0220 c3 89 03 8b c7 5f 5e 5b c3 cc cc cc cc cc cc cc ....._^[........ 0230 cc cc cc cc cc cc cc cc 56 8b 74 24 08 85 f6 75 ........V.t$...u 0240 04 33 c0 5e c3 56 e8 fd 33 fe ff 50 56 e8 c6 86 .3.^.V..3..PV... 0250 ff ff 8b f0 83 c4 0c 85 f6 74 e6 57 56 e8 76 95 .........t.WV.v. 0260 ff ff 56 e8 b0 01 00 00 83 c4 08 83 7e 0c 00 75 ..V.........~..u 0270 1e ff 76 08 33 ff e8 cd 54 fe ff 83 ..v.3...T... Data […]: 240cc703000000008b4e248b41108a1080fa230f850701000080780152757e80780245757880780351757280780455756c80780549756680780652756080780745755a8078084475548386c800000009834110098b4624834020098b46248b4010803825750956e81cc9000083c4048b4e2 [Length: 636]