Frame 5358: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.870867000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.870867000 UTC Epoch Arrival Time: 1511226051.870867000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 2.000 microseconds] [Time since reference or first frame: 46.005127000 seconds] Frame Number: 5358 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd80a (55306) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5c32 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2715321, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 5044] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 2715321 (relative sequence number) Sequence Number (raw): 2949331702 [Next Sequence Number: 2716369 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1fc5 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.462011000 seconds] [Time since previous frame in this TCP stream: 2.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2096] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 39] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 58 ff ff ff 80 78 04 6c 0f 85 4e ff ff ff 8a 40 X....x.l..N....@ 0010 05 3c 20 74 10 3c 09 72 04 3c 0a 76 08 3c 0d 0f .< t.<.r.<.v.<.. 0020 85 37 ff ff ff 56 e8 8d 3a 00 00 83 c4 04 83 7e .7...V..:......~ 0030 54 20 0f 85 24 ff ff ff 56 e8 8a 35 ff ff 83 c4 T ..$...V..5.... 0040 04 5f 5e 5b c3 cc cc cc 83 ec 14 56 8b 74 24 1c ._^[.......V.t$. 0050 33 c0 8b 4e 24 89 44 24 0c 8b 41 10 57 33 ff 80 3..N$.D$..A.W3.. 0060 38 3c c7 44 24 14 64 00 00 00 89 4c 24 18 0f 85 8<.D$.d....L$... 0070 79 05 00 00 80 78 01 3f 0f 85 6f 05 00 00 83 86 y....x.?..o..... 0080 c8 00 00 00 02 53 8b 9e ac 00 00 00 c7 86 ac 00 .....S.......... 0090 00 00 02 00 00 00 83 41 10 02 8b 46 24 89 5c 24 .......A...F$.\$ 00a0 0c 83 40 20 02 8b 46 24 8b 40 10 80 38 25 75 09 ..@ ..F$.@..8%u. 00b0 56 e8 f2 5d 00 00 83 c4 04 8b 4e 24 8b 41 10 80 V..]......N$.A.. 00c0 38 00 75 1b 68 fa 00 00 00 51 e8 c9 93 00 00 83 8.u.h....Q...... 00d0 c4 08 85 c0 7f 09 56 e8 4c 62 00 00 83 c4 04 39 ......V.Lb.....9 00e0 be 24 01 00 00 75 27 8b 4e 24 8b 51 10 8b c2 2b .$...u'.N$.Q...+ 00f0 41 0c 3d f4 01 00 00 7e 15 8b 41 14 2b c2 3d f4 A.=....~..A.+.=. 0100 01 00 00 7d 09 56 e8 dd 6c 00 00 83 c4 04 55 56 ...}.V..l.....UV 0110 e8 e3 04 00 00 8b e8 83 c4 04 89 6c 24 28 85 ed ...........l$(.. 0120 0f 84 5a 04 00 00 8b 4e 24 8b 51 10 80 3a 3f 0f ..Z....N$.Q..:?. 0130 85 a0 00 00 00 80 7a 01 3e 0f 85 96 00 00 00 39 ......z.>......9 0140 4c 24 20 74 10 68 d0 b0 52 10 6a 5a 56 e8 f6 31 L$ t.h..R.jZV..1 0150 ff ff 83 c4 0c 8b 46 24 83 86 c8 00 00 00 02 83 ......F$........ 0160 40 10 02 8b 46 24 83 40 20 02 8b 46 24 8b 40 10 @...F$.@ ..F$.@. 0170 80 38 25 75 09 56 e8 2d 5d 00 00 83 c4 04 8b 4e .8%u.V.-]......N 0180 24 8b 41 10 80 38 00 75 1b 68 fa 00 00 00 51 e8 $.A..8.u.h....Q. 0190 04 93 00 00 83 c4 08 85 c0 7f 09 56 e8 87 61 00 ...........V..a. 01a0 00 83 c4 04 8b 06 85 c0 0f 84 2e 04 00 00 39 be ..............9. 01b0 d4 00 00 00 0f 85 22 04 00 00 8b 40 4c 85 c0 0f ......"....@L... 01c0 84 17 04 00 00 6a 00 55 ff 76 04 ff d0 83 c4 0c .....j.U.v...... 01d0 e9 07 04 00 00 6a 64 ff 15 8c 6b 65 10 8b e8 83 .....jd...ke.... 01e0 c4 04 85 ed 75 18 50 56 e8 eb 7f 00 00 83 c4 08 ....u.PV........ 01f0 89 9e ac 00 00 00 5d 5b 5f 5e 83 c4 14 c3 8b 46 ......][_^.....F 0200 24 8b 40 10 0f b6 00 3d 00 01 00 00 7d 14 83 f8 $.@....=....}... 0210 20 74 23 83 f8 09 7c 05 83 f8 0a 7e 19 83 f8 0d t#...|....~.... 0220 74 14 ff 74 24 28 68 0c b1 52 10 6a 41 56 e8 85 t..t$(h..R.jAV.. 0230 31 ff ff 83 c4 10 56 e8 7c 6c 00 00 8d 44 24 18 1.....V.|l...D$. 0240 50 56 e8 21 7b 00 00 83 c4 0c 8b d8 81 fb 00 01 PV.!{........... 0250 00 00 7d 60 83 fb 09 7c 05 83 fb 0a 7e 7b 83 fb ..}`...|....~{.. 0260 0d 74 76 83 fb 20 7d 71 81 ff 80 96 98 00 76 10 .tv.. }q......v. 0270 f7 86 68 01 00 00 00 00 08 00 0f 84 c1 02 00 00 ..h............. 0280 c6 04 2f 00 83 fb 3f 0f 84 b7 01 00 00 ff 74 24 ../...?.......t$ 0290 28 68 40 b1 52 10 6a 2f 56 e8 1a 31 ff ff 8b 5c (h@.R.j/V..1...\ 02a0 24 20 83 c4 10 55 ff 15 94 6b 65 10 83 c4 04 e9 $ ...U...ke..... 02b0 28 03 00 00 81 fb ff d7 00 00 7e 1d 81 fb 00 e0 (.........~..... 02c0 00 00 7c 08 81 fb fd ff 00 00 7e 0d 8d 83 00 00 ..|.......~..... 02d0 ff ff 3d ff ff 0f 00 77 8f 83 fb 3f 75 10 8b 46 ..=....w...?u..F 02e0 24 8b 40 10 80 78 01 3e 0f 84 7a ff ff ff 8b 4c $.@..x.>..z....L 02f0 24 1c 8d 47 05 3b c1 72 1b 03 c9 51 55 89 4c 24 $..G.;.r...QU.L$ 0300 24 ff 15 90 6b 65 10 83 c4 08 85 c0 0f 84 0b 02 $...ke.......... 0310 00 00 8b e8 8b 44 24 18 40 89 44 24 18 83 f8 32 .....D$.@.D$...2 0320 7e 4e 83 be 24 01 00 00 00 75 1a 8b 46 24 8b 48 ~N..$....u..F$.H 0330 14 2b 48 10 81 f9 fa 00 00 00 7d 09 56 e8 66 31 .+H.......}.V.f1 0340 ff ff 83 c4 04 83 be ac 00 00 00 ff 0f 84 1c 02 ................ 0350 00 00 33 c0 89 44 24 18 81 ff 80 96 98 00 76 10 ..3..D$.......v. 0360 f7 86 68 01 00 00 00 00 08 00 0f 84 d1 01 00 00 ..h............. 0370 83 7c 24 14 01 75 06 88 1c 2f 47 eb 0f 8d 04 2f .|$..u.../G..../ 0380 53 50 e8 21 79 00 00 83 c4 08 03 f8 8b 4e 24 8b SP.!y........N$. 0390 41 10 80 38 0a 75 0f ff 41 1c 8b 46 24 c7 40 20 A..8.u..A..F$.@ 03a0 01 00 00 00 eb 03 ff 41 20 8b 4e 24 8b 44 24 14 .......A .N$.D$. 03b0 01 41 10 8b 46 24 8b 40 10 80 38 25 75 09 56 e8 .A..F$.@..8%u.V. 03c0 e4 5a 00 00 83 c4 04 8d 44 24 14 50 56 e8 96 79 .Z......D$.PV..y 03d0 00 00 8b d8 83 c4 08 85 db 0f 85 6d fe ff ff 39 ...........m...9 03e0 86 24 01 00 00 75 4a 8b 4e 24 8b 51 10 8b c2 2b .$...uJ.N$.Q...+ 03f0 41 0c 3d f4 01 00 00 7e 15 8b 41 14 2b c2 3d f4 A.=....~..A.+.=. 0400 01 00 00 7d 09 56 e8 dd 69 00 00 83 c4 04 83 be ...}.V..i....... 0410 24 01 00 00 00 75 1a 8b $....u.. Data […]: 58ffffff8078046c0f854effffff8a40053c2074103c0972043c0a76083c0d0f8537ffffff56e88d3a000083c404837e54200f8524ffffff56e88a35ffff83c4045f5e5bc3cccccc83ec14568b74241c33c08b4e248944240c8b41105733ff80383cc744241464000000894c24180f85790 [Length: 1048]