Frame 977: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:49.263786000 UTC UTC Arrival Time: Nov 21, 2017 01:00:49.263786000 UTC Epoch Arrival Time: 1511226049.263786000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 2.058000 milliseconds] [Time since reference or first frame: 43.398046000 seconds] Frame Number: 977 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xcbe2 (52194) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x6a66 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 369373, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 663] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 369373 (relative sequence number) Sequence Number (raw): 2946985754 [Next Sequence Number: 369897 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x09a4 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 1.854930000 seconds] [Time since previous frame in this TCP stream: 2.058000 milliseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 524] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 6] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 30 9d ff ff 59 83 03 1c 5f 5e 33 c0 5b c3 83 7e 0...Y..._^3.[..~ 0010 08 01 75 f1 c6 46 0d 00 eb eb 8a 4e 0c 80 f9 01 ..u..F.....N.... 0020 75 0b 8b 00 3b 06 75 b3 33 c0 40 eb b0 80 f9 02 u...;.u.3.@..... 0030 75 99 66 0f 6e 00 f3 0f e6 c0 e9 a5 9d 34 00 56 u.f.n........4.V 0040 e8 2f 6f ff ff 59 eb a9 cc cc cc cc cc cc cc cc ./o..Y.......... 0050 cc cc cc cc 53 8b d9 56 57 8b 3b 8d 4b 48 8b 57 ....S..VW.;.KH.W 0060 04 8b 77 0c 8d 0c 91 03 f3 8b 01 85 c0 74 5b 8b ..w..........t[. 0070 00 8b 4f 08 8a 50 0c 33 ff 80 fa 01 74 2a 80 fa ..O..P.3....t*.. 0080 02 0f 84 39 a2 34 00 51 50 56 e8 25 05 00 00 83 ...9.4.QPV.%.... 0090 c4 0c 39 3e 74 03 33 ff 47 89 3e 5f c6 46 0c 03 ..9>t.3.G.>_.F.. 00a0 83 03 1c 5e 33 c0 5b c3 8a 51 0c 80 fa 01 75 08 ...^3.[..Q....u. 00b0 8b 00 3b 01 75 e0 eb e1 80 fa 02 75 ca 66 0f 6e ..;.u......u.f.n 00c0 00 f3 0f e6 c0 e9 d1 a1 34 00 e8 65 64 fd ff eb ........4..ed... 00d0 9e cc cc cc 53 8b d9 56 57 8b 3b 8b 57 08 8b 77 ....S..VW.;.W..w 00e0 0c 8d 04 93 03 f3 8b 48 48 85 c9 74 5b 8b 09 8b .......HH..t[... 00f0 47 04 33 ff 8a 50 0c 80 fa 01 74 27 80 fa 02 0f G.3..P....t'.... 0100 84 c8 9c 34 00 51 50 56 e8 a7 04 00 00 83 c4 0c ...4.QPV........ 0110 39 3e 74 1d 89 3e 5f c6 46 0c 03 83 03 1c 5e 33 9>t..>_.F.....^3 0120 c0 5b c3 8a 51 0c 80 fa 01 75 0b 8b 00 3b 01 75 .[..Q....u...;.u 0130 e3 33 ff 47 eb de 80 fa 02 75 ca 66 0f 6e 00 f3 .3.G.....u.f.n.. 0140 0f e6 c0 e9 60 9c 34 00 8d 48 48 e8 e4 63 fd ff ....`.4..HH..c.. 0150 8b 08 eb 9b 53 8b d9 56 8b 13 57 8b 42 04 8b 7a ....S..V..W.B..z 0160 0c 8b 74 18 04 8b 52 08 8a 46 0c 03 fb 3c 01 74 ..t...R..F...<.t 0170 57 3c 02 0f 84 9d a3 34 00 52 56 57 e8 33 04 00 W<.....4.RVW.3.. 0180 00 83 c4 0c 83 3f 00 75 50 33 c0 89 07 c6 47 0c .....?.uP3....G. 0190 03 ff 4e 08 75 26 f7 46 10 fc ff ff ff 75 3f 80 ..N.u&.F.....u?. 01a0 7e 0c 03 76 07 56 e8 a9 aa ff ff 59 56 e8 82 9b ~..v.V.....YV... 01b0 ff ff 59 83 03 1c 5f 5e 33 c0 5b c3 83 7e 08 01 ..Y..._^3.[..~.. 01c0 75 f1 c6 46 0d 00 eb eb 8a 42 0c 3c 01 0f 85 08 u..F.....B.<.... 01d0 a3 34 00 8b 06 3b 02 74 b0 33 c0 40 eb ad 56 e8 .4...;.t.3.@..V. 01e0 90 6d ff ff 59 eb b8 cc cc cc cc cc cc cc cc cc .m..Y........... 01f0 cc cc cc cc 56 8b f1 8b 16 ff 72 08 8b 42 04 ff ....V.....r..B.. 0200 74 30 04 8b 42 0c 03 c6 50 e8 66 03 t0..B...P.f. Data […]: 309dffff5983031c5f5e33c05bc3837e080175f1c6460d00ebeb8a4e0c80f901750b8b003b0675b333c040ebb080f9027599660f6e00f30fe6c0e9a59d340056e82f6fffff59eba9cccccccccccccccccccccccc538bd956578b3b8d4b488b57048b770c8d0c9103f38b0185c0745b8b008 [Length: 524]