Frame 6941: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:52.542470000 UTC UTC Arrival Time: Nov 21, 2017 01:00:52.542470000 UTC Epoch Arrival Time: 1511226052.542470000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 4.000 microseconds] [Time since reference or first frame: 46.676730000 seconds] Frame Number: 6941 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xdc6f (56431) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x57cd [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 3564201, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 6627] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 3564201 (relative sequence number) Sequence Number (raw): 2950180582 [Next Sequence Number: 3565249 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6e2d [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.133614000 seconds] [Time since previous frame in this TCP stream: 4.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 5764] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 53] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 7e 0a 80 f9 61 7c 6e 80 f9 66 7f 69 47 40 89 44 ~...a|n..f.iG@.D 0010 24 10 eb ce 83 fa 0a 75 5c 8a 08 33 d2 80 f9 2e $......u\..3.... 0020 75 09 83 fa 01 0f 8c 02 01 00 00 80 f9 65 74 05 u............et. 0030 80 f9 45 75 36 6a 02 59 3b d1 7d 2f 8d 48 01 8a ..Eu6j.Y;.}/.H.. 0040 11 80 fa 2d 74 05 80 fa 2b 75 07 8b c1 89 44 24 ...-t...+u....D$ 0050 10 41 8a 09 80 f9 30 7c 12 80 f9 39 0f 8e cb 00 .A....0|...9.... 0060 00 00 8b 54 24 14 83 fa 0a 75 0a 83 ff 0b 7c 32 ...T$....u....|2 0070 e9 b8 00 00 00 83 ff 08 7c 28 75 06 80 78 f8 37 ........|(u..x.7 0080 7e 20 8d 44 24 10 50 56 e8 0b dd d0 ff dd 5c 24 ~ .D$.PV......\$ 0090 20 f2 0f 10 44 24 20 59 59 6a 02 58 8a d8 8b 44 ...D$ YYj.X...D 00a0 24 10 80 fb 01 0f 85 99 00 00 00 83 ff 0a 75 4f $.............uO 00b0 6a 02 b9 cc a3 54 10 83 c0 f6 5b 8a 10 3a 11 75 j....T....[..:.u 00c0 1a 84 d2 74 10 8a 50 01 3a 51 01 75 0e 03 c3 03 ...t..P.:Q.u.... 00d0 cb 84 d2 75 e6 33 db 8b c3 eb 07 1b c0 83 c8 01 ...u.3.......... 00e0 33 db 85 c0 78 1b 75 05 80 3e 2d 74 14 53 56 e8 3...x.u..>-t.SV. 00f0 54 5e cf ff dd 5c 24 48 59 59 6a 02 58 eb 54 33 T^...\$HYYj.X.T3 0100 db 8b 44 24 14 50 53 56 ff 15 b8 d3 3b 10 89 44 ..D$.PSV....;..D 0110 24 4c 83 c4 0c b0 01 eb 3a 80 f9 2e 75 33 8a 40 $L......:...u3.@ 0120 01 3c 30 7c 2c 3c 39 7f 28 8b 74 24 18 8d 44 24 .<0|,<9.(.t$..D$ 0130 10 50 56 e8 10 5e cf ff dd 5c 24 20 f2 0f 10 44 .PV..^...\$ ...D 0140 24 20 59 59 6a 02 f2 0f 11 44 24 44 58 33 db eb $ YYj....D$DX3.. 0150 02 8a c3 88 44 24 4c 84 c0 75 09 89 5c 24 40 c6 ....D$L..u..\$@. 0160 44 24 4c 01 8d 74 24 40 89 75 10 eb 32 8d 7c 24 D$L..t$@.u..2.|$ 0170 40 a5 a5 a5 a5 80 7c 24 4c 03 76 0b 8d 44 24 40 @.....|$L.v..D$@ 0180 50 e8 32 6c cb ff 59 8d 44 24 40 6a 0a 50 e8 75 P.2l..Y.D$@j.P.u 0190 ae cc ff 80 7c 24 54 01 59 59 74 c8 8b 75 10 33 ....|$T.YYt..u.3 01a0 d2 42 e9 f0 f9 ff ff c7 03 01 00 00 00 c6 43 0c .B............C. 01b0 01 e9 4e 01 00 00 33 c0 89 03 eb f1 68 0c f1 62 ..N...3.....h..b 01c0 10 6a 01 e8 00 9d cc ff 59 59 83 c8 ff e9 34 01 .j......YY....4. 01d0 00 00 f2 0f 10 07 f2 0f 10 0e e9 13 01 00 00 f2 ................ 01e0 0f 10 07 66 0f 6e 0e e9 02 01 00 00 66 0f 6e 07 ...f.n......f.n. 01f0 f3 0f e6 c0 eb e0 8b 36 85 f6 0f 88 e2 00 00 00 .......6........ 0200 8b 4d 0c 33 ff 8b 09 47 85 f6 75 0a 8b 45 08 89 .M.3...G..u..E.. 0210 38 e9 9d 00 00 00 85 c9 75 0a 8b 45 08 89 08 e9 8.......u..E.... 0220 8f 00 00 00 83 fe 01 0f 8c 81 00 00 00 bb 00 00 ................ 0230 00 80 8b c6 99 f7 7c 24 28 85 d2 74 44 8b c1 f7 ......|$(..tD... 0240 ef 4e 8b f8 03 c3 89 54 24 24 83 d2 00 89 7c 24 .N.....T$$....|$ 0250 20 85 d2 77 07 72 52 83 f8 ff 76 4d df 6c 24 20 ..w.rR...vM.l$ 0260 66 0f 6e c1 66 0f 6e ce f3 0f e6 c0 dd 5c 24 28 f.n.f.n......\$( 0270 f3 0f e6 c9 e8 33 55 fc ff f2 0f 59 44 24 28 eb .....3U....YD$(. 0280 76 8b f0 8b c1 99 52 50 52 50 e8 e9 54 fc ff 8b v.....RPRP..T... 0290 c8 03 c3 89 54 24 1c 83 d2 00 89 4c 24 18 85 d2 ....T$.....L$... 02a0 77 17 72 05 83 f8 ff 77 10 83 fe 01 7d 84 8b 45 w.r....w....}..E 02b0 08 89 38 c6 40 0c 01 eb 4b df 6c 24 18 66 0f 6e ..8.@...K.l$.f.n 02c0 ce f3 0f e6 c9 dd 5c 24 28 f2 0f 10 44 24 28 e8 ......\$(...D$(. 02d0 d8 54 fc ff 66 0f 6e cf f3 0f e6 c9 f2 0f 59 c1 .T..f.n.......Y. 02e0 eb 15 66 0f 6e 07 f3 0f e6 c0 66 0f 6e ce f3 0f ..f.n.....f.n... 02f0 e6 c9 e8 b5 54 fc ff 8b 45 08 6a 02 59 88 48 0c ....T...E.j.Y.H. 0300 f2 0f 11 00 33 c0 5f 5e 5b 8b e5 5d c3 cc cc cc ....3._^[..].... 0310 cc cc cc cc cc cc cc cc 55 8b ec 83 e4 f8 83 ec ........U....... 0320 3c 53 8b 5d 10 56 8b 75 0c 57 8a 46 0c 3c 01 75