Frame 6099: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:52.199353000 UTC UTC Arrival Time: Nov 21, 2017 01:00:52.199353000 UTC Epoch Arrival Time: 1511226052.199353000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 47.000 microseconds] [Time since reference or first frame: 46.333613000 seconds] Frame Number: 6099 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xda15 (55829) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5c33 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 3107797, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 5785] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 3107797 (relative sequence number) Sequence Number (raw): 2949724178 [Next Sequence Number: 3108321 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6cdb [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.790497000 seconds] [Time since previous frame in this TCP stream: 47.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2096] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 43] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 6a 00 6a 00 6a 00 6a 00 e8 1f 4c f8 ff 83 c4 44 j.j.j.j...L....D 0010 c3 cc cc cc cc cc cc cc cc cc cc cc 8b 4c 24 04 .............L$. 0020 85 c9 74 19 8b 54 24 08 85 d2 74 11 8b 01 89 02 ..t..T$...t..... 0030 8b 41 04 89 42 04 8b 41 08 89 42 08 c3 68 2c f1 .A..B..A..B..h,. 0040 53 10 68 20 f0 53 10 6a 00 6a 00 6a 00 6a 00 68 S.h .S.j.j.j.j.h 0050 2c f1 53 10 6a 00 6a 00 6a 02 6a 01 6a 15 6a 00 ,.S.j.j.j.j.j.j. 0060 6a 00 6a 00 6a 00 6a 00 e8 bf 4b f8 ff 83 c4 44 j.j.j.j...K....D 0070 c3 cc cc cc cc cc cc cc cc cc cc cc 8b 4c 24 04 .............L$. 0080 85 c9 75 29 68 60 f1 53 10 68 20 f0 53 10 51 51 ..u)h`.S.h .S.QQ 0090 51 51 68 60 f1 53 10 51 51 6a 02 6a 01 6a 15 51 QQh`.S.QQj.j.j.Q 00a0 51 51 51 51 e8 83 4b f8 ff 83 c4 44 c3 8b 41 08 QQQQ..K....D..A. 00b0 89 41 04 8b 01 89 41 08 c3 cc cc cc 83 ec 10 53 .A....A........S 00c0 8b 5c 24 18 55 c7 44 24 08 00 00 00 00 c7 44 24 .\$.U.D$......D$ 00d0 0c 00 00 00 00 c7 44 24 10 00 00 00 00 85 db 0f ......D$........ 00e0 84 a9 03 00 00 8b 6c 24 20 85 ed 0f 84 9d 03 00 ......l$ ....... 00f0 00 83 7d 04 01 0f 85 93 03 00 00 83 7b 20 01 74 ..}.........{ .t 0100 16 68 34 f2 53 10 e8 01 e6 ff ff 83 c4 04 83 c8 .h4.S........... 0110 ff 5d 5b 83 c4 10 c3 57 68 70 58 2e 10 6a 00 e8 .][....WhpX..j.. 0120 18 35 01 00 8b f8 83 c4 08 89 7c 24 20 85 ff 75 .5........|$ ..u 0130 17 68 5c f2 53 10 e8 31 e5 ff ff 83 c4 04 83 c8 .h\.S..1........ 0140 ff 5f 5d 5b 83 c4 10 c3 8b 43 24 56 85 c0 0f 84 ._][.....C$V.... 0150 ef 00 00 00 33 ff 89 7c 24 1c 39 38 0f 84 dd 00 ....3..|$.98.... 0160 00 00 33 c9 eb 06 8d 9b 00 00 00 00 8b 34 01 68 ..3..........4.h 0170 80 f2 53 10 56 e8 b2 c9 f7 ff 83 c4 08 85 c0 75 ..S.V..........u 0180 12 68 94 8a 54 10 56 e8 a0 c9 f7 ff 83 c4 08 85 .h..T.V......... 0190 c0 74 0a 33 f6 c7 44 24 18 01 00 00 00 56 55 ff .t.3..D$.....VU. 01a0 75 20 e8 85 23 f8 ff 8b f0 83 c4 0c 85 f6 74 76 u ..#.........tv 01b0 56 e8 c6 ea ff ff 83 c4 04 85 c0 75 69 8b 43 04 V..........ui.C. 01c0 85 c0 74 0e 55 56 ff 73 08 ff d0 83 c4 0c 85 c0 ..t.UV.s........ 01d0 74 54 56 ff 73 1c e8 c1 fc ff ff 83 c4 08 83 7c tTV.s..........| 01e0 24 2c 00 8b f8 74 0d 55 56 ff 73 1c e8 9b fa ff $,...t.UV.s..... 01f0 ff 83 c4 0c 85 ff 75 0d 56 ff 74 24 28 e8 da 35 ......u.V.t$(..5 0200 01 00 83 c4 08 ff 76 0c e8 3f cc f7 ......v..?.. Data […]: 6a006a006a006a00e81f4cf8ff83c444c3cccccccccccccccccccccc8b4c240485c974198b54240885d274118b0189028b41048942048b4108894208c3682cf153106820f053106a006a006a006a00682cf153106a006a006a026a016a156a006a006a006a006a00e8bf4bf8ff83c444c3c [Length: 524]