Frame 6104: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:52.199718000 UTC UTC Arrival Time: Nov 21, 2017 01:00:52.199718000 UTC Epoch Arrival Time: 1511226052.199718000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 92.000 microseconds] [Time since reference or first frame: 46.333978000 seconds] Frame Number: 6104 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xda18 (55832) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5a24 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 3109369, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 5790] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 3109369 (relative sequence number) Sequence Number (raw): 2949725750 [Next Sequence Number: 3110417 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x61ae [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.790862000 seconds] [Time since previous frame in this TCP stream: 92.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1572] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 43] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 54 4a f8 ff 83 c4 14 33 c0 5e c3 8b 76 2c 85 f6 TJ.....3.^..v,.. 0010 75 1a 56 68 3c f8 53 10 56 68 0a 02 00 00 6a 02 u.Vh<.S.Vh....j. 0020 e8 33 4a f8 ff 83 c4 14 33 c0 5e c3 ff 74 24 1c .3J.....3.^..t$. 0030 ff 74 24 1c ff 74 24 1c ff 74 24 1c ff 74 24 1c .t$..t$..t$..t$. 0040 56 e8 e2 00 00 00 8b c8 83 c4 18 85 c9 74 b8 89 V............t.. 0050 71 14 8b 46 20 89 41 20 8b 46 10 85 c0 75 0a 89 q..F .A .F...u.. 0060 4e 0c 89 4e 10 8b c1 5e c3 89 48 18 8b 46 10 89 N..N...^..H..F.. 0070 41 1c 89 4e 10 8b c1 5e c3 cc cc cc cc cc cc cc A..N...^........ 0080 cc cc cc cc cc cc cc cc 56 8b 74 24 08 85 f6 75 ........V.t$...u 0090 1a 56 68 c0 f7 53 10 56 68 09 02 00 00 6a 02 e8 .Vh..S.Vh....j.. 00a0 b4 49 f8 ff 83 c4 14 33 c0 5e c3 8b 76 30 85 f6 .I.....3.^..v0.. 00b0 75 1a 56 68 e4 f7 53 10 56 68 0a 02 00 00 6a 02 u.Vh..S.Vh....j. 00c0 e8 93 49 f8 ff 83 c4 14 33 c0 5e c3 ff 74 24 1c ..I.....3.^..t$. 00d0 ff 74 24 1c ff 74 24 1c ff 74 24 1c ff 74 24 1c .t$..t$..t$..t$. 00e0 56 e8 42 00 00 00 8b c8 83 c4 18 85 c9 74 b8 89 V.B..........t.. 00f0 71 14 8b 46 20 89 41 20 8b 46 10 85 c0 75 0a 89 q..F .A .F...u.. 0100 4e 0c 89 4e 10 8b c1 5e c3 89 48 18 8b 46 10 89 N..N...^..H..F.. 0110 41 1c 89 4e 10 8b c1 5e c3 cc cc cc cc cc cc cc A..N...^........ 0120 cc cc cc cc cc cc cc cc 55 8b 6c 24 0c 57 33 ff ........U.l$.W3. 0130 85 ed 75 05 5f 33 c0 5d c3 56 8b 74 24 10 85 f6 ..u._3.].V.t$... 0140 75 06 5e 5f 33 c0 5d c3 8b 46 20 85 c0 74 03 8b u.^_3.]..F ..t.. 0150 78 50 8b 4c 24 18 53 8d 41 ff 83 f8 05 77 7e ff xP.L$.S.A....w~. 0160 24 85 a4 72 2e 10 83 7e 30 00 75 12 57 6a 00 e8 $..r...~0.u.Wj.. 0170 74 a8 fe ff 8b 4c 24 24 83 c4 08 89 46 30 8b 5e t....L$$....F0.^ 0180 30 eb 1b 83 7e 3c 00 75 12 57 6a 00 e8 57 a8 fe 0...~<.u.Wj..W.. 0190 ff 8b 4c 24 24 83 c4 08 89 46 3c 8b 5e 3c 85 db ..L$$....F<.^<.. 01a0 74 3b ff 74 24 28 ff 74 24 28 ff 74 24 28 51 55 t;.t$(.t$(.t$(QU 01b0 57 e8 42 01 00 00 8b f8 83 c4 18 85 ff 74 1e 8b W.B..........t.. 01c0 46 20 57 55 53 89 47 20 e8 0b a2 fe ff 83 c4 0c F WUS.G ........ 01d0 85 c0 74 10 57 e8 0e 0c 00 00 83 c4 04 5b 5e 5f ..t.W........[^_ 01e0 33 c0 5d c3 5b 5e 8b c7 5f 5d c3 90 1e 72 2e 10 3.].[^.._]...r.. 01f0 1e 72 2e 10 1e 72 2e 10 3b 72 2e 10 3b 72 2e 10 .r...r..;r..;r.. 0200 95 72 2e 10 cc cc cc cc 68 e0 72 2e 10 ff 74 24 .r......h.r...t$ 0210 08 e8 b2 a6 fe ff 83 c4 08 c3 cc cc cc cc cc cc ................ 0220 cc cc cc cc cc cc cc cc 56 6a 4c ff 15 88 6b 65 ........VjL...ke 0230 10 8b f0 83 c4 04 85 f6 75 17 68 5c f9 53 10 50 ........u.h\.S.P 0240 50 6a 02 6a 02 e8 0e 48 f8 ff 83 c4 14 33 c0 5e Pj.j...H.....3.^ 0250 c3 57 6a 4c 6a 00 56 e8 90 42 03 00 8b 7c 24 18 .WjLj.V..B...|$. 0260 c7 46 04 11 00 00 00 8b 47 30 89 46 30 8b 47 08 .F......G0.F0.G. 0270 83 c4 0c 85 c0 74 0c 50 e8 4b c5 f7 ff 83 c4 04 .....t.P.K...... 0280 89 46 08 8b 47 34 85 c0 74 0c 50 e8 38 c5 f7 ff .F..G4..t.P.8... 0290 83 c4 04 89 46 34 8b 47 38 85 c0 74 0c 50 e8 25 ....F4.G8..t.P.% 02a0 c5 f7 ff 83 c4 04 89 46 38 8b 47 28 85 c0 74 0c .......F8.G(..t. 02b0 50 e8 12 c5 f7 ff 83 c4 04 89 46 28 8b 47 24 85 P.........F(.G$. 02c0 c0 74 0c 50 e8 ff c4 f7 ff 83 c4 04 89 46 24 8b .t.P.........F$. 02d0 47 40 5f 85 c0 74 0c 50 e8 eb c4 f7 ff 83 c4 04 G@_..t.P........ 02e0 89 46 40 8b c6 5e c3 cc 6a 00 e8 89 a6 fe ff 83 .F@..^..j....... 02f0 c4 04 c3 cc cc cc cc cc 56 6a 4c ff 15 88 6b 65 ........VjL...ke 0300 10 8b f0 83 c4 04 85 f6 75 17 68 a0 f7 53 10 50 ........u.h..S.P 0310 50 6a 02 6a 02 e8 3e 47 f8 ff 83 c4 14 33 c0 5e Pj.j..>G.....3.^ 0320 c3 53 57 6a 4c 6a 00 56 e8 bf 41 03 00 8b 7c 24 .SWjLj.V..A...|$ 0330 1c 8b 44 24 24 83 c4 0c c7 46 04 11 00 00 00 c7 ..D$$....F...... 0340 46 48 00 00 00 00 89 46 30 85 ff 75 36 ff 74 24 FH.....F0..u6.t$ 0350 14 e8 72 c4 f7 ff 89 46 08 8b 44 24 20 83 c4 04 ..r....F..D$ ... 0360 85 c0 74 0c 50 e8 5e c4 f7 ff 83 c4 04 89 46 34 ..t.P.^.......F4 0370 8b 44 24 20 85 c0 74 4b 50 e8 4a c4 f7 ff 83 c4 .D$ ..tKP.J..... 0380 04 eb 3d 6a ff ff 74 24 18 57 e8 39 a0 00 00 89 ..=j..t$.W.9.... 0390 46 08 8b 44 24 28 83 c4 0c 85 c0 74 0f 6a ff 50 F..D$(.....t.j.P 03a0 57 e8 22 a0 00 00 83 c4 0c 89 46 34 8b 44 24 20 W.".......F4.D$ 03b0 85 c0 74 0f 6a ff 50 57 e8 0b a0 00 00 83 c4 0c ..t.j.PW........ 03c0 89 46 38 8b 5c 24 24 85 db 74 34 53 e8 57 c4 f7 .F8.\$$..t4S.W.. 03d0 ff 83 c4 04 89 46 2c 85 ff 74 15 83 f8 05 7d 10 .....F,..t....}. 03e0 50 53 57 e8 e0 9f 00 00 83 c4 0c 89 46 28 eb 1d PSW.........F(.. 03f0 50 53 e8 a1 c6 f7 ff 83 c4 08 89 46 28 eb 0e c7 PS.........F(... 0400 46 2c 00 00 00 00 c7 46 28 00 00 00 00 5f 5b c7 F,.....F(...._[. 0410 46 40 00 00 00 00 c7 46 F@.....F Data […]: 544af8ff83c41433c05ec38b762c85f6751a56683cf8531056680a0200006a02e8334af8ff83c41433c05ec3ff74241cff74241cff74241cff74241cff74241c56e8e20000008bc883c41885c974b88971148b46208941208b461085c0750a894e0c894e108bc15ec38948188b461089411 [Length: 1048]