Frame 7640: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:52.819912000 UTC UTC Arrival Time: Nov 21, 2017 01:00:52.819912000 UTC Epoch Arrival Time: 1511226052.819912000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 7.000 microseconds] [Time since reference or first frame: 46.954172000 seconds] Frame Number: 7640 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xde5a (56922) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x57ee [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 3919473, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 7326] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 3919473 (relative sequence number) Sequence Number (raw): 2950535854 [Next Sequence Number: 3919997 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb775 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.411056000 seconds] [Time since previous frame in this TCP stream: 7.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 5240] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 61] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 24 6c 50 56 c7 44 24 74 00 00 00 00 ff d1 8b 44 $lPV.D$t.......D 0010 24 74 83 c4 10 e9 15 c3 c8 ff 47 2b fb 8d 43 ff $t........G+..C. 0020 03 c7 4f b9 06 00 00 00 a3 f4 6d 67 10 89 3d e8 ..O.......mg..=. 0030 6d 67 10 e8 88 0e cb ff a1 e8 6d 67 10 8b 0d 38 mg........mg...8 0040 6e 67 10 48 50 a1 f0 6d 67 10 40 50 85 c9 0f 84 ng.HP..mg.@P.... 0050 c8 c2 c8 ff 8b 75 08 8d 44 24 70 50 56 c7 44 24 .....u..D$pPV.D$ 0060 78 00 00 00 00 ff d1 8b 44 24 78 83 c4 10 e9 bc x.......D$x..... 0070 c2 c8 ff 8b 75 08 8d 44 24 74 50 56 c7 44 24 7c ....u..D$tPV.D$| 0080 00 00 00 00 ff d1 8b 44 24 7c 83 c4 10 e9 9d c2 .......D$|...... 0090 c8 ff 80 3f 0a 0f 85 95 e9 c8 ff 47 89 3d f4 6d ...?.......G.=.m 00a0 67 10 e9 89 e9 c8 ff 3c 0d 0f 84 17 ee c8 ff e9 g......<........ 00b0 50 e9 c8 ff 3c 41 72 08 3c 5a 0f 86 f8 ec c8 ff P.......... 0120 83 7e 0c 00 0f 84 ba c8 c7 ff ff 76 0c ff 15 f0 .~.........v.... 0130 d3 3b 10 8b d8 33 c0 3b df 0f 44 d8 59 89 5c 24 .;...3.;..D.Y.\$ 0140 10 e9 9e c8 c7 ff 83 25 2c 6e 67 10 00 6a 00 89 .......%,ng..j.. 0150 3d 24 6e 67 10 89 1d 28 6e 67 10 e8 f0 68 fa ff =$ng...(ng...h.. 0160 a1 34 6e 67 10 59 85 c0 0f 84 da c8 c7 ff ff 35 .4ng.Y.........5 0170 28 6e 67 10 ff 35 24 6e 67 10 68 30 6e 67 10 68 (ng..5$ng.h0ng.h 0180 2c 6e 67 10 ff d0 83 c4 10 83 f8 ff 75 1d ff 35 ,ng.........u..5 0190 3c 6e 67 10 ff 15 b8 7c 65 10 59 50 68 a8 e8 62 . 0200 ff 8b 43 04 8b 77 e0 83 c0 20 50 e8 ..C..w... P. Data […]: 246c5056c744247400000000ffd18b44247483c410e915c3c8ff472bfb8d43ff03c74fb906000000a3f46d6710893de86d6710e8880ecbffa1e86d67108b0d386e67104850a1f06d6710405085c90f84c8c2c8ff8b75088d4424705056c744247800000000ffd18b44247883c410e9bcc2c [Length: 524]