Frame 6915: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:52.528681000 UTC UTC Arrival Time: Nov 21, 2017 01:00:52.528681000 UTC Epoch Arrival Time: 1511226052.528681000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 96.000 microseconds] [Time since reference or first frame: 46.662941000 seconds] Frame Number: 6915 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xdc5e (56414) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x59ea [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 3550053, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 6601] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 3550053 (relative sequence number) Sequence Number (raw): 2950166434 [Next Sequence Number: 3550577 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xda93 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.119825000 seconds] [Time since previous frame in this TCP stream: 96.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 3144] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 53] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 4d fc 5f 5e c6 43 0c 06 33 cd 5b e8 38 89 fc ff M._^.C..3.[.8... 0010 c9 c3 cc cc cc cc cc cc cc cc cc cc 55 8b ec 83 ............U... 0020 ec 14 8d 45 f0 53 56 57 8b da 50 8b 43 04 40 50 ...E.SVW..P.C.@P 0030 ff 33 8b f9 e8 f3 13 cb ff 83 c4 0c 85 c0 75 17 .3............u. 0040 ff 75 f4 ff 75 f0 e8 c1 01 cc ff 89 07 8b 45 f4 .u..u.........E. 0050 59 59 89 47 04 eb 44 ff 73 04 ff 33 ff 15 30 75 YY.G..D.s..3..0u 0060 67 10 8b f0 59 59 85 f6 75 18 ff 33 ff 15 c0 d3 g...YY..u..3.... 0070 3b 10 8b f0 59 85 f6 75 09 8b cf e8 bc 6b d1 ff ;...Y..u.....k.. 0080 eb 19 56 ff 15 c8 d4 3b 10 59 89 07 8d 4e 01 8a ..V....;.Y...N.. 0090 06 46 84 c0 75 f9 2b f1 89 77 04 5f 5e 5b c9 c3 .F..u.+..w._^[.. 00a0 cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 51 ............U..Q 00b0 56 8d 45 fc 50 be 84 6e 67 10 56 e8 7c 6f cd ff V.E.P..ng.V.|o.. 00c0 8b 45 fc 56 8b 00 a3 80 6e 67 10 e8 6c 32 cb ff .E.V....ng..l2.. 00d0 83 c4 0c 5e c9 c3 cc cc cc cc cc cc 83 ec 1c 53 ...^...........S 00e0 55 56 57 8b f1 81 fa 05 01 00 00 74 3d 81 fa 0c UVW........t=... 00f0 01 00 00 0f 8e 37 02 00 00 81 fa 0e 01 00 00 7e .....7.........~ 0100 15 81 fa 0f 01 00 00 0f 85 23 02 00 00 c6 46 0c .........#....F. 0110 00 e9 33 02 00 00 33 c0 81 fa 0d 01 00 00 0f 94 ..3...3......... 0120 c0 c6 46 0c 03 e9 1d 02 00 00 8b 44 24 34 8b 7c ..F........D$4.| 0130 24 30 33 c9 8b d8 c7 44 24 18 0a 00 00 00 8b e9 $03....D$....... 0140 0f 57 c0 85 c0 0f 84 e5 01 00 00 89 4c 24 1c 8a .W..........L$.. 0150 07 3c 20 74 14 3c 09 74 10 3c 0a 74 0c 3c 0d 74 .< t.<.t.<.t.<.t 0160 08 3c 0b 74 04 3c 0c 75 04 47 4b eb e2 8a 07 8b .<.t.<.u.GK..... 0170 cf 89 5c 24 20 89 4c 24 14 3c 2d 74 04 3c 2b 75 ..\$ .L$.<-t.<+u 0180 07 8d 4f 01 89 4c 24 14 8a 11 80 fa 30 0f 8c 00 ..O..L$.....0... 0190 01 00 00 80 fa 39 0f 8f f7 00 00 00 83 fb 02 7e .....9.........~ 01a0 1f 3c 30 75 1b 8a 47 01 3c 78 74 04 3c 58 75 10 .<0u..G.