Frame 9125: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:53.387603000 UTC UTC Arrival Time: Nov 21, 2017 01:00:53.387603000 UTC Epoch Arrival Time: 1511226053.387603000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 46.000 microseconds] [Time since reference or first frame: 47.521863000 seconds] Frame Number: 9125 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xe2ba (58042) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5182 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 4768353, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 8811] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 4768353 (relative sequence number) Sequence Number (raw): 2951384734 [Next Sequence Number: 4769401 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xffa2 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.978747000 seconds] [Time since previous frame in this TCP stream: 46.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 5764] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 94] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 67 72 65 61 74 65 72 2d 74 68 61 6e 2d 73 69 67 greater-than-sig 0010 6e 00 00 00 71 75 65 73 74 69 6f 6e 2d 6d 61 72 n...question-mar 0020 6b 00 00 00 63 6f 6d 6d 65 72 63 69 61 6c 2d 61 k...commercial-a 0030 74 00 00 00 6c 65 66 74 2d 73 71 75 61 72 65 2d t...left-square- 0040 62 72 61 63 6b 65 74 00 62 61 63 6b 73 6c 61 73 bracket.backslas 0050 68 00 00 00 72 65 76 65 72 73 65 2d 73 6f 6c 69 h...reverse-soli 0060 64 75 73 00 72 69 67 68 74 2d 73 71 75 61 72 65 dus.right-square 0070 2d 62 72 61 63 6b 65 74 00 00 00 00 63 69 72 63 -bracket....circ 0080 75 6d 66 6c 65 78 00 00 63 69 72 63 75 6d 66 6c umflex..circumfl 0090 65 78 2d 61 63 63 65 6e 74 00 00 00 75 6e 64 65 ex-accent...unde 00a0 72 73 63 6f 72 65 00 00 6c 6f 77 2d 6c 69 6e 65 rscore..low-line 00b0 00 00 00 00 67 72 61 76 65 2d 61 63 63 65 6e 74 ....grave-accent 00c0 00 00 00 00 6c 65 66 74 2d 62 72 61 63 65 00 00 ....left-brace.. 00d0 6c 65 66 74 2d 63 75 72 6c 79 2d 62 72 61 63 6b left-curly-brack 00e0 65 74 00 00 76 65 72 74 69 63 61 6c 2d 6c 69 6e et..vertical-lin 00f0 65 00 00 00 72 69 67 68 74 2d 62 72 61 63 65 00 e...right-brace. 0100 72 69 67 68 74 2d 63 75 72 6c 79 2d 62 72 61 63 right-curly-brac 0110 6b 65 74 00 74 69 6c 64 65 00 00 00 44 45 4c 00 ket.tilde...DEL. 0120 5b 3a 3c 3a 5d 5d 00 00 5b 3a 3e 3a 5d 5d 00 00 [:<:]]..[:>:]].. 0130 00 00 00 00 34 c3 47 10 40 c3 47 10 01 00 00 00 ....4.G.@.G..... 0140 54 c3 47 10 60 c3 47 10 02 00 00 00 7c c3 47 10 T.G.`.G.....|.G. 0150 88 c3 47 10 03 00 00 00 a4 c3 47 10 b4 c3 47 10 ..G.......G...G. 0160 04 00 00 00 d0 c3 47 10 dc c3 47 10 05 00 00 00 ......G...G..... 0170 f4 c3 47 10 00 c4 47 10 06 00 00 00 18 c4 47 10 ..G...G.......G. 0180 24 c4 47 10 07 00 00 00 44 c4 47 10 50 c4 47 10 $.G.....D.G.P.G. 0190 08 00 00 00 6c c4 47 10 78 c4 47 10 09 00 00 00 ....l.G.x.G..... 01a0 94 c4 47 10 a0 c4 47 10 0a 00 00 00 b4 c4 47 10 ..G...G.......G. 01b0 c0 c4 47 10 0b 00 00 00 dc c4 47 10 e8 c4 47 10 ..G.......G...G. 01c0 0c 00 00 00 00 c5 47 10 0c c5 47 10 0d 00 00 00 ......G...G..... 01d0 1c c5 47 10 28 c5 47 10 0e 00 00 00 4c c5 47 10 ..G.(.G.....L.G. 01e0 58 c5 47 10 0f 00 00 00 70 c5 47 10 7c c5 47 10 X.G.....p.G.|.G. 01f0 10 00 00 00 a0 c5 47 10 ac c5 47 10 ff ff ff ff ......G...G..... 0200 94 8a 54 10 d0 c5 47 10 32 31 34 37 34 38 33 36 ..T...G.21474836 0210 34 38 00 00 52 45 47 5f 4f 4b 41 59 00 00 00 00 48..REG_OKAY.... 0220 6e 6f 20 65 72 72 6f 72 73 20 64 65 74 65 63 74 no errors detect 0230 65 64 00 00 52 45 47 5f 4e 4f 4d 41 54 43 48 00 ed..REG_NOMATCH. 0240 72 65 67 65 78 65 63 28 29 20 66 61 69 6c 65 64 regexec() failed 0250 20 74 6f 20 6d 61 74 63 68 00 00 00 52 45 47 5f to match...REG_ 0260 42 41 44 50 41 54 00 00 69 6e 76 61 6c 69 64 20 BADPAT..invalid 0270 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 regular expressi 0280 6f 6e 00 00 52 45 47 5f 45 43 4f 4c 4c 41 54 45 on..REG_ECOLLATE 0290 00 00 00 00 69 6e 76 61 6c 69 64 20 63 6f 6c 6c ....invalid coll 02a0 61 74 69 6e 67 20 65 6c 65 6d 65 6e 74 00 00 00 ating element... 02b0 52 45 47 5f 45 43 54 59 50 45 00 00 69 6e 76 61 REG_ECTYPE..inva 02c0 6c 69 64 20 63 68 61 72 61 63 74 65 72 20 63 6c lid character cl 02d0 61 73 73 00 52 45 47 5f 45 45 53 43 41 50 45 00 ass.REG_EESCAPE. 02e0 74 72 61 69 6c 69 6e 67 20 62 61 63 6b 73 6c 61 trailing backsla 02f0 73 68 20 28 5c 29 00 00 52 45 47 5f 45 53 55 42 sh (\)..REG_ESUB 0300 52 45 47 00 69 6e 76 61 6c 69 64 20 62 61 63 6b REG.invalid back 0310 72 65 66 65 72 65 6e 63 65 20 6e 75 6d 62 65 72 reference number 0320 00 00 00 00 52 45 47 5f 45 42 52 41 43 4b 00 00 ....REG_EBRACK.. 0330 62 72 61 63 6b 65 74 73 20 28 5b 20 5d 29 20 6e brackets ([ ]) n 0340 6f 74 20 62 61 6c 61 6e 63 65 64 00 52 45 47 5f ot balanced.REG_ 0350 45 50 41 52 45 4e 00 00 70 61 72 65 6e 74 68 65 EPAREN..parenthe 0360 73 65 73 20 6e 6f 74 20 62 61 6c 61 6e 63 65 64 ses not balanced 0370 00 00 00 00 52 45 47 5f 45 42 52 41 43 45 00 00 ....REG_EBRACE.. 0380 62 72 61 63 65 73 20 6e 6f 74 20 62 61 6c 61 6e braces not balan 0390 63 65 64 00 52 45 47 5f 42 41 44 42 52 00 00 00 ced.REG_BADBR... 03a0 69 6e 76 61 6c 69 64 20 72 65 70 65 74 69 74 69 invalid repetiti 03b0 6f 6e 20 63 6f 75 6e 74 28 73 29 00 52 45 47 5f on count(s).REG_ 03c0 45 52 41 4e 47 45 00 00 69 6e 76 61 6c 69 64 20 ERANGE..invalid 03d0 63 68 61 72 61 63 74 65 72 20 72 61 6e 67 65 00 character range. 03e0 52 45 47 5f 45 53 50 41 43 45 00 00 6f 75 74 20 REG_ESPACE..out 03f0 6f 66 20 6d 65 6d 6f 72 79 00 00 00 52 45 47 5f of memory...REG_ 0400 42 41 44 52 50 54 00 00 72 65 70 65 74 69 74 69 BADRPT..repetiti 0410 6f 6e 2d 6f 70 65 72 61 on-opera Data […]: 677265617465722d7468616e2d7369676e0000007175657374696f6e2d6d61726b000000636f6d6d65726369616c2d61740000006c6566742d7371756172652d627261636b6574006261636b736c617368000000726576657273652d736f6c696475730072696768742d7371756172652d6 [Length: 1048]