Frame 9788: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:53.621993000 UTC UTC Arrival Time: Nov 21, 2017 01:00:53.621993000 UTC Epoch Arrival Time: 1511226053.621993000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 6.000 microseconds] [Time since reference or first frame: 47.756253000 seconds] Frame Number: 9788 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xe4d6 (58582) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x4f66 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 5201177, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 9474] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 5201177 (relative sequence number) Sequence Number (raw): 2951817558 [Next Sequence Number: 5202225 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf425 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 6.213137000 seconds] [Time since previous frame in this TCP stream: 6.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 3144] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 100] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 54 1b 4f 10 0e 00 00 00 ac 21 00 00 00 00 00 00 T.O......!...... 0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0020 01 00 00 00 c8 45 4f 10 06 00 00 00 38 03 00 00 .....EO.....8... 0030 d0 45 4f 10 10 00 00 00 50 2a 4f 10 0e 00 00 00 .EO.....P*O..... 0040 a8 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .".............. 0050 00 00 00 00 00 00 00 00 08 1f 4f 10 04 00 00 00 ..........O..... 0060 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 '............... 0070 00 00 00 00 00 00 00 00 98 1a 4f 10 05 00 00 00 ..........O..... 0080 73 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 s............... 0090 00 00 00 00 00 00 00 00 d0 5a 4f 10 02 00 00 00 .........ZO..... 00a0 18 21 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .!.............. 00b0 00 00 00 00 00 00 00 00 fc 35 4f 10 02 00 00 00 .........5O..... 00c0 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <............... 00d0 00 00 00 00 00 00 00 00 e4 45 4f 10 0e 00 00 00 .........EO..... 00e0 c7 21 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .!.............. 00f0 00 00 00 00 00 00 00 00 54 36 4f 10 0f 00 00 00 ........T6O..... 0100 58 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00 X).............. 0110 00 00 00 00 00 00 00 00 01 00 00 00 04 46 4f 10 .............FO. 0120 0d 00 00 00 38 03 00 00 1c 46 4f 10 10 00 00 00 ....8....FO..... 0130 e0 38 4f 10 06 00 00 00 6c 29 00 00 00 00 00 00 .8O.....l)...... 0140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0150 80 5e 4f 10 05 00 00 00 12 01 00 00 00 00 00 00 .^O............. 0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0170 60 45 4f 10 04 00 00 00 ac 2a 00 00 00 00 00 00 `EO......*...... 0180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0190 00 00 00 00 14 46 4f 10 05 00 00 00 00 00 00 00 .....FO......... 01a0 3c 46 4f 10 08 00 00 00 00 00 00 00 48 46 4f 10