Frame 5689: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:52.008757000 UTC UTC Arrival Time: Nov 21, 2017 01:00:52.008757000 UTC Epoch Arrival Time: 1511226052.008757000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 51.000 microseconds] [Time since reference or first frame: 46.143017000 seconds] Frame Number: 5689 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xd8e9 (55529) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5d5f [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2885621, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 5375] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 2885621 (relative sequence number) Sequence Number (raw): 2949502002 [Next Sequence Number: 2886145 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1dd5 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.599901000 seconds] [Time since previous frame in this TCP stream: 51.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1048] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 40] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 50 10 68 a8 3f 4c 10 57 e8 ef 62 fb ff 8b d8 83 P.h.?L.W..b..... 0010 c4 0c 85 db 74 53 55 53 e8 1f 08 fe ff 83 c4 08 ....tSUS........ 0020 89 44 24 20 85 c0 75 23 8b 46 10 8b 4c 24 14 53 .D$ ..u#.F..L$.S 0030 8b 04 01 68 d0 6d 53 10 68 45 06 00 00 ff 70 0c ...h.mS.hE....p. 0040 56 e8 f6 f4 ff ff 83 c4 14 eb 14 50 57 e8 7a 7e V..........PW.z~ 0050 fb ff ff 74 24 28 ff 15 94 6b 65 10 83 c4 0c 53 ...t$(...ke....S 0060 ff 15 94 6b 65 10 83 c4 04 ff 74 24 1c ff 15 94 ...ke.....t$.... 0070 6b 65 10 83 c4 04 8b 7f 18 85 ff 0f 85 2e ff ff ke.............. 0080 ff 8b 5c 24 14 55 ff 15 94 6b 65 10 83 c4 04 8b ..\$.U...ke..... 0090 44 24 30 3b 46 08 7d 29 8b 46 10 8b 04 03 8b 48 D$0;F.}).F.....H 00a0 08 85 c9 74 1c 83 78 18 01 7f 16 51 e8 7b 52 fb ...t..x....Q.{R. 00b0 ff 8b 46 10 83 c4 04 8b 04 03 c7 40 08 00 00 00 ..F........@.... 00c0 00 8b 6c 24 10 55 ff 15 94 6b 65 10 83 c4 04 33 ..l$.U...ke....3 00d0 c0 5e 5f 5d 5b 83 c4 14 c3 8d 49 00 34 04 2b 10 .^_][.....I.4.+. 00e0 77 04 2b 10 a8 04 2b 10 00 01 00 00 00 00 02 02 w.+...+......... 00f0 00 00 8b ff 42 05 2b 10 e5 04 2b 10 0d 05 2b 10 ....B.+...+...+. 0100 05 05 2b 10 00 01 00 00 00 00 00 00 00 02 02 02 ..+............. 0110 00 02 02 02 02 03 02 02 00 cc cc cc 53 8b 5c 24 ............S.\$ 0120 0c 56 57 33 ff 85 db 0f 84 b8 00 00 00 83 7b 04 .VW3..........{. 0130 12 0f 84 ae 00 00 00 8b 74 24 10 85 f6 0f 84 a2 ........t$...... 0140 00 00 00 55 39 7b 0c 74 7b ff 36 e8 ec 09 00 00 ...U9{.t{.6..... 0150 8b e8 83 c4 04 85 ed 75 08 5d 5f 5e 83 c8 ff 5b .......u.]_^...[ 0160 c3 8b 46 44 89 45 44 ff 76 40 e8 5d 30 fb ff 89 ..FD.ED.v@.]0... 0170 45 40 ff 76 3c 55 e8 91 0f 00 00 ff 73 0c ff 36 E@.v