Frame 6817: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:52.481656000 UTC UTC Arrival Time: Nov 21, 2017 01:00:52.481656000 UTC Epoch Arrival Time: 1511226052.481656000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 46.000 microseconds] [Time since reference or first frame: 46.615916000 seconds] Frame Number: 6817 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xdc15 (56341) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5a33 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 3495557, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 6503] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 3495557 (relative sequence number) Sequence Number (raw): 2950111938 [Next Sequence Number: 3496081 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xbbaa [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.072800000 seconds] [Time since previous frame in this TCP stream: 46.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1572] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 52] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 5b 83 c4 1c c3 cc cc cc cc cc cc cc 83 ec 1c 53 [..............S 0010 55 56 57 8b 3a 89 4c 24 28 8b 4f 04 33 c0 8b 2c UVW.:.L$(.O.3.., 0020 11 40 89 54 24 10 89 7c 24 24 85 ed 74 11 8b 4d .@.T$..|$$..t..M 0030 00 33 db ff 49 08 75 0d 89 41 08 8b f1 eb 15 8b .3..I.u..A...... 0040 4c 11 04 eb ec 8a 41 0d 8b f3 84 c0 74 09 83 79 L.....A.....t..y 0050 08 01 75 03 88 59 0d 8b 4f 08 8d 42 48 8d 04 88 ..u..Y..O..BH... 0060 89 44 24 20 8b 00 85 c0 75 17 8b d1 8b 4c 24 20 .D$ ....u....L$ 0070 e8 17 b1 cd ff 8b 08 8b 54 24 10 89 4c 24 1c eb ........T$..L$.. 0080 06 8b 00 89 44 24 1c 0f b6 47 35 48 74 59 48 74 ....D$...G5HtYHt 0090 42 48 48 74 31 83 e8 04 8b c3 89 44 24 14 74 20 BHHt1......D$.t 00a0 8b 0d 54 74 67 10 8b 57 20 83 c1 48 8d 0c 91 8b ..Ttg..W ..H.... 00b0 01 85 c0 75 07 53 e8 91 91 00 00 59 8b 00 eb 30 ...u.S.....Y...0 00c0 89 5c 24 18 eb 2e 8b 47 20 8b 44 10 04 89 44 24 .\$....G .D...D$ 00d0 14 eb 1d 8b 4f 20 03 ca 8b c1 83 c8 01 89 4c 24 ....O ........L$ 00e0 18 89 44 24 14 eb 0d 8b c3 89 44 24 14 8b 47 20 ..D$......D$..G 00f0 89 44 24 18 85 ed 75 0e 68 d4 bf 62 10 6a 01 e8 .D$...u.h..b.j.. 0100 e8 a9 cd ff 59 59 8b 45 00 8a 48 0c 84 c9 74 13 ....YY.E..H...t. 0110 80 f9 03 75 04 39 18 74 0a 80 f9 06 75 7c 39 58 ...u.9.t....u|9X 0120 04 75 77 80 78 0d 00 75 44 83 78 08 01 76 3e ff .uw.x..uD.x..v>. 0130 48 08 6a 18 e8 43 13 cf ff 89 58 10 8b 55 00 59 H.j..C....X..U.Y 0140 8b 0a 89 08 8b 4a 04 89 48 04 8b 4d 00 8a 49 0c .....J..H..M..I. 0150 88 48 0c c7 40 08 01 00 00 00 88 58 0d 89 45 00 .H..@......X..E. 0160 80 78 0c 03 76 07 50 e8 70 78 cc ff 59 8b 45 00 .x..v.P.px..Y.E. 0170 80 78 0c 03 76 07 50 e8 30 f7 cf ff 59 ff 35 08 .x..v.P.0...Y.5. 0180 e2 66 10 ff 75 00 e8 21 8b ce ff 68 b8 56 55 10 .f..u..!...h.VU. 0190 6a 02 e8 55 a9 cd ff 83 c4 10 8b 6d 00 80 7d 0c j..U.......m..}. 01a0 05 0f 84 8b 00 00 00 68 3c b5 62 10 6a 02 e8 39 .......h<.b.j..9 01b0 a9 cd ff 8b 44 24 1c 59 59 85 c0 74 51 a8 01 74 ....D$.YY..tQ..t 01c0 11 83 e0 fe 80 78 0c 03 76 44 50 e8 dc f6 cf ff .....x..vDP..... 01d0 eb 30 ff 48 08 75 2e f7 40 10 fc ff ff ff 74 0b .0.H.u..@.....t. 01e0 50 e8 e6 b9 cf ff 8b 44 24 18 59 80 78 0c 03 76 P......D$.Y.x..v 01f0 0b 50 e8 b5 f6 cf ff 8b 44 24 18 59 50 e8 8a e7 .P......D$.YP... 0200 cf ff 59 eb 09 83 78 08 01 75 03 88 ..Y...x..u.. Data […]: 5b83c41cc3cccccccccccccc83ec1c535556578b3a894c24288b4f0433c08b2c114089542410897c242485ed74118b4d0033dbff4908750d8941088bf1eb158b4c1104ebec8a410d8bf384c0740983790801750388590d8b4f088d42488d0488894424208b0085c075178bd18b4c2420e81 [Length: 524]