Frame 970: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:49.261501000 UTC UTC Arrival Time: Nov 21, 2017 01:00:49.261501000 UTC Epoch Arrival Time: 1511226049.261501000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 120.000 microseconds] [Time since reference or first frame: 43.395761000 seconds] Frame Number: 970 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xcbdd (52189) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x6a6b [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 365705, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 656] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 365705 (relative sequence number) Sequence Number (raw): 2946982086 [Next Sequence Number: 366229 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x44d2 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 1.852645000 seconds] [Time since previous frame in this TCP stream: 120.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 524] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 6] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 4f 48 8b 50 04 8b 58 0c 8b 70 08 8d 0c 91 03 df OH.P..X..p...... 0010 8b 01 03 f7 85 c0 74 2e 8b 00 56 50 53 e8 76 05 ......t...VPS.v. 0020 00 00 33 c0 83 c4 0c 39 03 0f 94 c0 89 03 80 7e ..3....9.......~ 0030 0c 03 77 09 83 07 1c 5f 5e 33 c0 5b c3 56 e8 65 ..w...._^3.[.V.e 0040 ba ff ff 59 eb ee e8 3d 73 fd ff eb cb cc cc cc ...Y...=s....... 0050 cc cc cc cc cc cc cc cc 56 8b f1 57 8b 16 8b 7a ........V..W...z 0060 08 8b 42 04 03 fe 57 ff 74 30 04 8b 42 0c 03 c6 ..B...W.t0..B... 0070 50 e8 52 13 00 00 83 c4 0c 80 7f 0c 03 0f 87 fa P.R............. 0080 60 34 00 83 06 1c 5f 33 c0 5e c3 cc cc cc cc cc `4...._3.^...... 0090 cc cc cc cc cc cc cc cc 55 8b ec 8b 45 0c 83 ec ........U...E... 00a0 10 ff 30 8b 45 08 ff 30 8d 45 f0 50 e8 e7 04 00 ..0.E..0.E.P.... 00b0 00 83 c4 0c 83 f8 ff 74 0a 33 c0 39 45 f0 0f 94 .......t.3.9E... 00c0 c0 c9 c3 33 c0 40 c9 c3 53 56 57 8b f9 8b 37 8d ...3.@..SVW...7. 00d0 4f 48 8b 56 08 8b 5e 0c 8d 0c 91 03 df 8b 01 85 OH.V..^......... 00e0 c0 74 31 8b 08 8b 76 04 51 03 f7 56 53 e8 a6 04 .t1...v.Q..VS... 00f0 00 00 33 c0 83 c4 0c 39 03 0f 94 c0 89 03 80 7e ..3....9.......~ 0100 0c 03 76 07 56 e8 9e b9 ff ff 59 83 07 1c 5f 5e ..v.V.....Y..._^ 0110 33 c0 5b c3 e8 6f 72 fd ff eb c8 cc cc cc cc cc 3.[..or......... 0120 cc cc cc cc cc cc cc cc 53 56 57 8b f9 8b 1f 8d ........SVW..... 0130 4f 48 8b 53 04 8b 73 08 8d 0c 91 03 f7 8b 01 85 OH.S..s......... 0140 c0 74 2a 8b 00 56 50 8b 43 0c 03 c7 50 e8 46 04 .t*..VP.C...P.F. 0150 00 00 83 c4 0c 80 7e 0c 03 77 09 83 07 1c 5f 5e ......~..w...._^ 0160 33 c0 5b c3 56 e8 3e b9 ff ff 59 eb ee e8 16 72 3.[.V.>...Y....r 0170 fd ff eb cf cc cc cc cc 53 56 57 8b f9 8b 1f 8d ........SVW..... 0180 4f 48 8b 53 08 8b 73 0c 8d 0c 91 03 f7 8b 01 85 OH.S..s......... 0190 c0 74 21 8b 00 50 ff 73 04 56 e8 f9 03 00 00 33 .t!..P.s.V.....3 01a0 c0 83 c4 0c 39 06 0f 94 c0 89 06 83 07 1c 5f 5e ....9........._^ 01b0 33 c0 5b c3 e8 cf 71 fd ff eb d8 cc cc cc cc cc 3.[...q......... 01c0 cc cc cc cc cc cc cc cc 56 8b f1 57 8b 3e 8d 4e ........V..W.>.N 01d0 48 8b 57 08 8d 0c 91 8b 01 85 c0 0f 84 80 ad 34 H.W............4 01e0 00 8b 00 50 8b 47 0c ff 77 04 03 c6 50 e8 a6 03 ...P.G..w...P... 01f0 00 00 83 06 1c 83 c4 0c 33 c0 5f 5e c3 cc cc cc ........3._^.... 0200 cc cc cc cc cc cc cc cc 53 55 8b e9 ........SU.. Data […]: 4f488b50048b580c8b70088d0c9103df8b0103f785c0742e8b00565053e87605000033c083c40c39030f94c08903807e0c03770983071c5f5e33c05bc356e865baffff59ebeee83d73fdffebcbcccccccccccccccccccccc568bf1578b168b7a088b420403fe57ff7430048b420c03c650e [Length: 524]