Frame 10066: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:53.719774000 UTC UTC Arrival Time: Nov 21, 2017 01:00:53.719774000 UTC Epoch Arrival Time: 1511226053.719774000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 1.114000 milliseconds] [Time since reference or first frame: 47.854034000 seconds] Frame Number: 10066 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xe5a4 (58788) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x50a4 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 5362045, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 9752] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 5362045 (relative sequence number) Sequence Number (raw): 2951978426 [Next Sequence Number: 5362569 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8f2e [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 6.310918000 seconds] [Time since previous frame in this TCP stream: 1.114000 milliseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 524] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 100] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 34 f9 00 0f 8e a8 09 96 18 98 0e e1 bb 0d 6a 7f 4.............j. 0010 2d 3d 6d 08 97 6c 64 91 01 5c 63 e6 f4 51 6b 6b -=m..ld..\c..Qkk 0020 62 61 6c 1c d8 30 65 85 4e 00 62 f2 ed 95 06 6c bal..0e.N.b....l 0030 7b a5 01 1b c1 f4 08 82 57 c4 0f f5 c6 d9 b0 65 {.......W......e 0040 50 e9 b7 12 ea b8 be 8b 7c 88 b9 fc df 1d dd 62 P.......|......b 0050 49 2d da 15 f3 7c d3 8c 65 4c d4 fb 58 61 b2 4d I-...|..eL..Xa.M 0060 ce 51 b5 3a 74 00 bc a3 e2 30 bb d4 41 a5 df 4a .Q.:t....0..A..J 0070 d7 95 d8 3d 6d c4 d1 a4 fb f4 d6 d3 6a e9 69 43 ...=m.......j.iC 0080 fc d9 6e 34 46 88 67 ad d0 b8 60 da 73 2d 04 44 ..n4F.g...`.s-.D 0090 e5 1d 03 33 5f 4c 0a aa c9 7c 0d dd 3c 71 05 50 ...3_L...|..jm..Zjz.... 0110 9d ff 09 93 27 ae 00 0a b1 9e 07 7d 44 93 0f f0 ....'......}D... 0120 d2 a3 08 87 68 f2 01 1e fe c2 06 69 5d 57 62 f7 ....h......i]Wb. 0130 cb 67 65 80 71 36 6c 19 e7 06 6b 6e 76 1b d4 fe .ge.q6l...knv... 0140 e0 2b d3 89 5a 7a da 10 cc 4a dd 67 6f df b9 f9 .+..Zz...J.go... 0150 f9 ef be 8e 43 be b7 17 d5 8e b0 60 e8 a3 d6 d6 ....C......`.... 0160 7e 93 d1 a1 c4 c2 d8 38 52 f2 df 4f f1 67 bb d1 ~......8R..O.g.. 0170 67 57 bc a6 dd 06 b5 3f 4b 36 b2 48 da 2b 0d d8 gW.....?K6.H.+.. 0180 4c 1b 0a af f6 4a 03 36 60 7a 04 41 c3 ef 60 df L....J.6`z.A..`. 0190 55 df 67 a8 ef 8e 6e 31 79 be 69 46 8c b3 61 cb U.g...n1y.iF..a. 01a0 1a 83 66 bc a0 d2 6f 25 36 e2 68 52 95 77 0c cc ..f...o%6.hR.w.. 01b0 03 47 0b bb b9 16 02 22 2f 26 05 55 be 3b ba c5 .G....."/&.U.;.. 01c0 28 0b bd b2 92 5a b4 2b 04 6a b3 5c a7 ff d7 c2 (....Z.+.j.\.... 01d0 31 cf d0 b5 8b 9e d9 2c 1d ae de 5b b0 c2 64 9b 1......,...[..d. 01e0 26 f2 63 ec 9c a3 6a 75 0a 93 6d 02 a9 06 09 9c &.c...ju..m..... 01f0 3f 36 0e eb 85 67 07 72 13 57 00 05 82 4a bf 95 ?6...g.r.W...J.. 0200 14 7a b8 e2 ae 2b b1 7b 38 1b b6 0c .z...+.{8... Data […]: 34f9000f8ea8099618980ee1bb0d6a7f2d3d6d08976c6491015c63e6f4516b6b62616c1cd83065854e0062f2ed95066c7ba5011bc1f4088257c40ff5c6d9b06550e9b712eab8be8b7c88b9fcdf1ddd62492dda15f37cd38c654cd4fb5861b24dce51b53a7400bca3e230bbd441a5df4ad79 [Length: 524]