Frame 7994: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:52.948827000 UTC UTC Arrival Time: Nov 21, 2017 01:00:52.948827000 UTC Epoch Arrival Time: 1511226052.948827000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 69.000 microseconds] [Time since reference or first frame: 47.083087000 seconds] Frame Number: 7994 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xdf63 (57187) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x54d9 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 4119117, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 7680] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 4119117 (relative sequence number) Sequence Number (raw): 2950735498 [Next Sequence Number: 4120165 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xfd59 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.539971000 seconds] [Time since previous frame in this TCP stream: 69.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2620] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 69] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 69 6d 65 20 2d 20 51 75 69 6e 74 61 6e 61 20 52 ime - Quintana R 0010 6f 6f 50 48 50 32 01 56 45 00 00 00 00 00 00 00 ooPHP2.VE....... 0020 00 00 00 00 00 00 00 00 00 04 00 00 00 04 00 00 ................ 0030 00 00 00 00 00 05 00 00 00 04 00 00 00 0c 80 00 ................ 0040 00 00 93 1e 2c 3c f6 98 ec 48 47 5b 92 70 57 25 ....,<...HG[.pW% 0050 a9 70 01 02 03 02 03 ff ff c1 40 00 00 ff ff c1 .p........@..... 0060 44 00 04 ff ff c0 b8 00 08 ff ff c7 c0 00 08 4c D..............L 0070 4d 54 00 43 4d 54 00 56 45 54 00 00 00 00 00 00 MT.CMT.VET...... 0080 00 00 00 54 5a 69 66 32 00 00 00 00 00 00 00 00 ...TZif2........ 0090 00 00 00 00 00 00 00 00 00 00 04 00 00 00 04 00 ................ 00a0 00 00 00 00 00 00 06 00 00 00 04 00 00 00 0c f8 ................ 00b0 00 00 00 00 00 00 00 ff ff ff ff 69 87 1a 40 ff ...........i..@. 00c0 ff ff ff 93 1e 2c 3c ff ff ff ff f6 98 ec 48 00 .....,<.......H. 00d0 00 00 00 47 5b 92 70 00 00 00 00 57 25 a9 70 00 ...G[.p....W%.p. 00e0 01 02 03 02 03 ff ff c1 40 00 00 ff ff c1 44 00 ........@.....D. 00f0 04 ff ff c0 b8 00 08 ff ff c7 c0 00 08 4c 4d 54 .............LMT 0100 00 43 4d 54 00 56 45 54 00 00 00 00 00 00 00 00 .CMT.VET........ 0110 00 0a 56 45 54 34 0a 00 99 59 d0 00 ac 86 aa 00 ..VET4...Y...... 0120 00 00 00 50 48 50 32 00 3f 3f 00 00 00 00 00 00 ...PHP2.??...... 0130 00 00 00 00 00 00 00 00 00 00 08 00 00 00 08 00 ................ 0140 00 00 00 00 00 00 3d 00 00 00 08 00 00 00 16 80 ......=......... 0150 00 00 00 a2 92 8f 30 b6 7b 52 40 b7 1a c9 b0 b8 ......0.{R@..... 0160 1e 8f 40 b8 d4 70 30 ba 17 7d c0 ba b5 a3 b0 bb ..@..p0..}...... 0170 f8 b1 40 bc 96 d7 30 bd d9 e4 c0 be 78 0a b0 bf ..@...0.....x... 0180 bb 18 40 c0 5a 8f b0 c1 9d 9d 40 c2 3b c3 30 c3 ..@.Z.....@.;.0. 0190 7e d0 c0 c4 1c f6 b0 c5 60 04 40 c5 fe 2a 30 c7 ~.......`.@..*0. 01a0 41 37 c0 c7 e0 af 30 c8 81 94 40 ca 4d a1 b0 ca A7....0...@.M... 01b0 ee 86 c0 ce 4d ff 30 ce b0 ed c0 d3 29 35 b0 d4 ....M.0.....)5.. 01c0 43 64 c0 f4 3d 08 30 f4 9f f6 c0 f5 05 6c 30 f6 Cd..=.0......l0. 01d0 32 10 40 f6 e6 9f b0 f8 13 43 c0 f8 c7 d3 30 f9 2.@......C....0. 01e0 f4 77 40 fa d3 36 b0 fb c3 35 c0 fc bc 53 30 fd .w@..6...5...S0. 01f0 ac 52 40 fe 9c 35 30 ff 8c 34 40 07 a3 4a b0 08 .R@..50..4@..J.. 0200 24 6f a0 23 94 b5 b0 24 10 94 a0 25 37 f2 b0 25 $o.#...$...%7..% 0210 f0 76 a0 27 21 0f 30 27 d0 58 a0 29 00 ff 40 29 .v.'!.0'.X.)..@) 0220 b0 3a a0 2a e0 d3 30 2b 99 57 20 37 f6 c6 b0 38 .:.*..0+.W 7...8 0230 bf 2a b0 40 bb f1 30 40 d5 0b c0 47 77 09 b0 47 .*.@..0@...Gw..G 0240 dc 7f 20 01 02 03 02 03 02 03 02 03 02 03 02 03 .. ............. 0250 02 03 02 03 02 03 02 03 02 03 02 03 02 03 02 03 ................ 0260 02 03 02 03 02 03 02 03 02 03 02 03 02 05 04 05 ................ 0270 04 05 04 05 04 06 04 05 04 05 03 05 06 05 04 05 ................ 0280 ff ff c2 54 00 00 ff ff c3 d0 00 04 ff ff c7 c0 ...T............ 0290 00 08 ff ff d5 d0 01 0c ff ff e3 e0 01 0c ff ff ................ 02a0 d5 d0 00 08 ff ff c7 c0 00 11 ff ff d5 d0 00 08 ................ 02b0 4c 4d 54 00 43 4d 54 00 41 52 54 00 41 52 53 54 LMT.CMT.ART.ARST 02c0 00 57 41 52 54 00 00 00 00 00 00 00 00 00 00 00 .WART........... 02d0 00 00 00 00 00 00 54 5a 69 66 32 00 00 00 00 00 ......TZif2..... 02e0 00 00 00 00 00 00 00 00 00 00 00 00 00 08 00 00 ................ 02f0 00 08 00 00 00 00 00 00 00 3e 00 00 00 08 00 00 .........>...... 0300 00 16 f8 00 00 00 00 00 00 00 ff ff ff ff 72 9c ..............r. 0310 af 2c ff ff ff ff a2 92 8f 30 ff ff ff ff b6 7b .,.......0.....{ 0320 52 40 ff ff ff ff b7 1a c9 b0 ff ff ff ff b8 1e R@.............. 0330 8f 40 ff ff ff ff b8 d4 70 30 ff ff ff ff ba 17 .@......p0...... 0340 7d c0 ff ff ff ff ba b5 a3 b0 ff ff ff ff bb f8 }............... 0350 b1 40 ff ff ff ff bc 96 d7 30 ff ff ff ff bd d9 .@.......0...... 0360 e4 c0 ff ff ff ff be 78 0a b0 ff ff ff ff bf bb .......x........ 0370 18 40 ff ff ff ff c0 5a 8f b0 ff ff ff ff c1 9d .@.....Z........ 0380 9d 40 ff ff ff ff c2 3b c3 30 ff ff ff ff c3 7e .@.....;.0.....~ 0390 d0 c0 ff ff ff ff c4 1c f6 b0 ff ff ff ff c5 60 ...............` 03a0 04 40 ff ff ff ff c5 fe 2a 30 ff ff ff ff c7 41 .@......*0.....A 03b0 37 c0 ff ff ff ff c7 e0 af 30 ff ff ff ff c8 81 7........0...... 03c0 94 40 ff ff ff ff ca 4d a1 b0 ff ff ff ff ca ee .@.....M........ 03d0 86 c0 ff ff ff ff ce 4d ff 30 ff ff ff ff ce b0 .......M.0...... 03e0 ed c0 ff ff ff ff d3 29 35 b0 ff ff ff ff d4 43 .......)5......C 03f0 64 c0 ff ff ff ff f4 3d 08 30 ff ff ff ff f4 9f d......=.0...... 0400 f6 c0 ff ff ff ff f5 05 6c 30 ff ff ff ff f6 32 ........l0.....2 0410 10 40 ff ff ff ff f6 e6 .@...... Data […]: 696d65202d205175696e74616e6120526f6f504850320156450000000000000000000000000000000004000000040000000000000005000000040000000c80000000931e2c3cf698ec48475b92705725a9700102030203ffffc1400000ffffc1440004ffffc0b80008ffffc7c000084c4d5 [Length: 1048]