Frame 5849: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:52.081226000 UTC UTC Arrival Time: Nov 21, 2017 01:00:52.081226000 UTC Epoch Arrival Time: 1511226052.081226000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 5.000 microseconds] [Time since reference or first frame: 46.215486000 seconds] Frame Number: 5849 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd95d (55645) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5adf [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2970509, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 5535] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 2970509 (relative sequence number) Sequence Number (raw): 2949586890 [Next Sequence Number: 2971557 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xfbf6 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.672370000 seconds] [Time since previous frame in this TCP stream: 5.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 3668] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 40] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 68 b0 24 4b 10 ff 76 08 e8 67 e3 f9 ff 83 c4 08 h.$K..v..g...... 0010 85 c0 0f 85 0f 01 00 00 68 84 81 53 10 ff 76 08 ........h..S..v. 0020 e8 4f e3 f9 ff 83 c4 08 85 c0 0f 85 f7 00 00 00 .O.............. 0030 68 9c 81 53 10 ff 76 08 e8 37 e3 f9 ff 83 c4 08 h..S..v..7...... 0040 85 c0 0f 85 df 00 00 00 68 90 8b 53 10 56 50 50 ........h..S.VPP 0050 68 e0 0b 00 00 53 e8 d9 d2 ff ff 83 c4 18 8b 44 h....S.........D 0060 24 38 85 ed 74 19 68 c0 85 53 10 6a 00 55 50 6a $8..t.h..S.j.UPj 0070 00 68 d9 0b 00 00 53 e8 38 d2 ff ff 83 c4 1c 83 .h....S.8....... 0080 7c 24 1c 00 75 0b 83 7c 24 14 00 0f 84 4b 0a 00 |$..u..|$....K.. 0090 00 ff 74 24 18 ff 74 24 28 6a 0e 53 e8 a3 ce ff ..t$..t$(j.S.... 00a0 ff 83 c4 10 85 c0 0f 84 30 0a 00 00 8b 6c 24 10 ........0....l$. 00b0 8b 54 24 20 89 45 0c 89 55 04 8b 43 1c 55 83 c0 .T$ .E..U..C.U.. 00c0 14 6a 0a 50 e8 9b ef fe ff 83 c4 0c 8b c5 5f 5e .j.P.........._^ 00d0 5d 5b 83 c4 1c c3 85 ff 0f 85 6e fd ff ff 57 68 ][........n...Wh 00e0 a4 6a 55 10 ff 74 24 40 57 68 dc 0b 00 00 55 e8 .jU..t$@Wh....U. 00f0 a0 d8 ff ff 83 c4 18 5f 5e 5d 33 c0 5b 83 c4 1c ......._^]3.[... 0100 c3 ff 35 6c 6e 65 10 ff 70 08 e8 65 e2 f9 ff 83 ..5lne..p..e.... 0110 c4 08 85 c0 74 11 56 6a 00 68 db 0b 00 00 53 e8 ....t.Vj.h....S. 0120 30 d6 ff ff 83 c4 10 8b 76 18 85 f6 0f 85 93 fe 0.......v....... 0130 ff ff e9 27 ff ff ff 8d 44 24 24 50 33 f6 6a 16 ...'....D$$P3.j. 0140 89 74 24 20 e8 6b 53 04 00 8b 5c 24 38 83 c4 04 .t$ .kS...\$8... 0150 50 57 56 53 e8 cb de ff ff 83 c4 14 85 c0 0f 85 PWVS............ 0160 78 09 00 00 39 74 24 40 74 08 8b 73 70 e9 80 00 x...9t$@t..sp... 0170 00 00 68 b4 f4 4f 10 ff 74 24 3c e8 f4 b4 ff ff ..h..O..t$<..... 0180 8b f8 83 c4 08 85 ff 74 56 57 53 e8 94 b2 ff ff .......tVWS..... 0190 8b d8 68 e8 85 53 10 53 e8 d7 e1 f9 ff 83 c4 10 ..h..S.S........ 01a0 85 c0 74 09 8b 5c 24 30 8b 73 70 eb 45 68 f4 85 ..t..\$0.sp.Eh.. 01b0 53 10 53 e8 bc e1 f9 ff 83 c4 08 85 c0 75 2f 50 S.S..........u/P 01c0 50 50 53 8b 5c 24 40 68 00 86 53 10 50 57 50 68 PPS.\$@h..S.PWPh 01d0 dd 0b 00 00 53 e8 2a da ff ff 83 c4 28 eb 13 8b ....S.*.....(... 01e0 7c 24 34 f6 47 18 01 74 0d 8b 73 70 eb 08 8b 5c |$4.G..t..sp...\ 01f0 24 30 8b 7c 24 34 ff 74 24 40 ff 74 24 3c 56 ff $0.|$4.t$@.t$