Frame 11612: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:54.778865000 UTC UTC Arrival Time: Nov 21, 2017 01:00:54.778865000 UTC Epoch Arrival Time: 1511226054.778865000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 73.000 microseconds] [Time since reference or first frame: 48.913125000 seconds] Frame Number: 11612 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xeb96 (60310) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x48a6 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 6799901, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 11298] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 6799901 (relative sequence number) Sequence Number (raw): 2953416282 [Next Sequence Number: 6800949 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x48df [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 7.370009000 seconds] [Time since previous frame in this TCP stream: 73.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1048] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 100] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 2a 37 7d 37 c4 37 05 39 4a 39 64 39 d7 3a e9 3a *7}7.7.9J9d9.:.: 0010 41 3c d5 3c dc 3c 30 3d a5 3d 62 3e 7c 3e 8b 3e A<.<.<0=.=b>|>.> 0020 b4 3e 0a 3f 11 3f 34 3f 7c 3f 99 3f c1 3f f2 3f .>.?.?4?|?.?.?.? 0030 00 80 1e 00 58 00 00 00 1f 30 61 30 9b 30 02 31 ....X....0a0.0.1 0040 3c 31 ac 32 bb 33 f4 33 35 34 3d 34 67 34 7f 34 <1.2.3.354=4g4.4 0050 8f 34 17 35 25 35 47 35 56 35 81 35 90 35 9d 35 .4.5%5G5V5.5.5.5 0060 b9 35 01 36 07 37 27 37 74 37 b0 37 f9 38 7b 39 .5.6.7'7t7.7.8{9 0070 65 3b 71 3b 77 3b 8c 3b 67 3c 14 3e cf 3e dc 3e e;q;w;.;g<.>.>.> 0080 ea 3e fa 3e 08 3f 18 3f 00 90 1e 00 7c 00 00 00 .>.>.?.?....|... 0090 33 32 45 32 82 35 d1 35 07 36 0d 36 24 36 52 36 32E2.5.5.6.6$6R6 00a0 38 37 68 37 6c 37 70 37 74 37 78 37 7c 37 f2 37 87h7l7p7t7x7|7.7 00b0 1b 38 74 38 0e 3a 28 3a 2c 3a 30 3a 34 3a 38 3a .8t8.:(:,:0:4:8: 00c0 3c 3a 6a 3a c7 3a cd 3a ef 3a 81 3b 54 3c 58 3c <:j:.:.:.:.;T.?.?.?.?.?.? 0100 30 3f 6b 3f 00 a0 1e 00 90 00 00 00 53 30 78 30 0?k?........S0x0 0110 7c 30 80 30 84 30 88 30 8c 30 92 30 f6 30 48 31 |0.0.0.0.0.0.0H1 0120 4c 31 50 31 54 31 c2 31 d2 31 1b 32 7c 32 90 32 L1P1T1.1.1.2|2.2 0130 ef 32 22 33 42 33 ad 33 c4 33 e4 33 04 34 0f 34 .2"3B3.3.3.3.4.4 0140 16 34 2d 34 68 34 f8 34 15 35 27 35 3b 35 95 35 .4-4h4.4.5'5;5.5 0150 04 36 10 36 22 36 e1 36 fa 36 1c 37 20 37 24 37 .6.6"6.6.6.7 7$7 0160 28 37 2c 37 30 37 74 37 90 37 ad 37 14 38 a8 39 (7,707t7.7.7.8.9 0170 0d 3a 28 3a 44 3b 40 3c fb 3c 20 3d 24 3d 28 3d .:(:D;@<.< =$=(= 0180 2c 3d 30 3d 34 3d 42 3d a0 3d 02 3f 35 3f 6b 3f ,=0=4=B=.=.?5?k? 0190 a4 3f 00 00 00 b0 1e 00 30 00 00 00 ff 30 10 31 .?......0....0.1 01a0 14 31 18 31 1c 31 20 31 24 31 6e 38 d4 38 c1 39 .1.1.1 1$1n8.8.9 01b0 fc 39 97 3a b8 3d f0 3d 34 3e 96 3f ab 3f c0 3f .9.:.=.=4>.?.?.? 01c0 d5 3f 00 00 00 c0 1e 00 b4 00 00 00 02 30 0f 30 .?...........0.0 01d0 1a 30 2f 30 3a 30 67 30 6f 30 7c 30 8f 30 99 30 .0/0:0g0o0|0.0.0 01e0 9f 30 b2 30 bb 30 eb 30 f5 30 fd 30 2b 31 35 31 .0.0.0.0.0.0+151 01f0 3d 31 cb 31 dd 31 8a 32 e6 32 32 33 3a 33 41 33 =1.1.1.2.223:3A3 0200 56 33 63 33 76 33 af 33 b6 33 f2 33 08 34 13 34 V3c3v3.3.3.3.4.4 0210 1a 34 3e 34 47 34 4e 34 62 34 74 34 8d 34 94 34 .4>4G4N4b4t4.4.4 0220 ba 34 fb 34 19 35 3a 35 77 35 97 35 a0 35 de 35 .4.4.5:5w5.5.5.5 0230 f0 35 9c 36 05 38 0d 38 1c 38 6a 39 e1 39 01 3a .5.6.8.8.8j9.9.: 0240 12 3a 38 3a 65 3a c9 3a d6 3a e9 3a f7 3a 10 3b .:8:e:.:.:.:.:.; 0250 17 3b 1d 3b bc 3b c6 3b e1 3b f7 3b 1d 3c 3f 3c .;.;.;.;.;.;.j>.>"? 0270 75 3f b7 3f f2 3f 00 00 00 d0 1e 00 ac 00 00 00 u?.?.?.......... 0280 1b 30 6e 30 c8 30 13 31 66 31 a8 31 e8 31 33 32 .0n0.0.1f1.1.132 0290 86 32 c8 32 08 33 53 33 a6 33 e8 33 22 34 4b 34 .2.2.3S3.3.3"4K4 02a0 9e 34 f2 34 1b 35 6e 35 c2 35 eb 35 3e 36 91 36 .4.4.5n5.5.5>6.6 02b0 98 36 a7 36 b3 36 c2 36 dc 36 f8 36 ff 36 26 37 .6.6.6.6.6.6.6&7 02c0 2d 37 5b 37 66 37 76 37 b1 37 b8 37 d2 37 d7 37 -7[7f7v7.7.7.7.7 02d0 e1 37 e6 37 f0 37 f7 37 01 38 08 38 12 38 19 38 .7.7.7.7.8.8.8.8 02e0 2e 38 42 38 53 38 64 38 75 38 83 38 a1 38 ab 38 .8B8S8d8u8.8.8.8 02f0 d2 38 d9 38 e4 38 e9 38 01 39 12 39 38 39 44 39 .8.8.8.8.9.989D9 0300 56 39 5b 39 67 39 6c 39 78 39 7d 39 89 39 8e 39 V9[9g9l9x9}9.9.9 0310 a0 39 d6 39 e2 39 e8 39 f2 39 fd 39 9f 3a 18 3d .9.9.9.9.9.9.:.= 0320 5c 3f ee 3f 00 e0 1e 00 d0 00 00 00 08 30 12 30 \?.?.........0.0 0330 19 30 45 30 4b 30 55 30 60 30 7c 30 92 30 e5 30 .0E0K0U0`0|0.0.0 0340 fd 30 30 31 35 31 90 31 ef 31 02 32 18 32 22 32 .00151.1.1.2.2"2 0350 66 32 90 32 f1 32 28 33 89 33 c0 33 34 34 47 34 f2.2.2(3.3.344G4 0360 5a 34 78 34 9e 34 dc 34 e0 34 e4 34 e8 34 ec 34 Z4x4.4.4.4.4.4.4 0370 f0 34 0b 35 1e 35 36 35 43 35 59 35 b9 35 d4 35 .4.5.565C5Y5.5.5 0380 08 36 b1 36 c7 39 f3 39 05 3a 0a 3a 1a 3a 28 3a .6.6.9.9.:.:.:(: 0390 50 3a a5 3a ac 3a d8 3a dc 3a 35 3c 3b 3c 42 3c P:.:.:.:.:5<;.>(> 03d0 39 3e 41 3e 83 3e 97 3e a7 3e b7 3e d1 3e e3 3e 9>A>.>.>.>.>.>.> 03e0 ea 3e 04 3f 16 3f 1d 3f 30 3f 56 3f 92 3f be 3f .>.?.?.?0?V?.?.? 03f0 e2 3f f2 3f 00 f0 1e 00 48 01 00 00 02 30 1c 30 .?.?....H....0.0 0400 2e 30 35 30 4f 30 61 30 68 30 7b 30 90 30 bd 30 .050O0a0h0{0.0.0 0410 d8 30 e0 30 ee 30 f6 30 .0.0.0.0 Data […]: 2a377d37c43705394a396439d73ae93a413cd53cdc3c303da53d623e7c3e8b3eb43e0a3f113f343f7c3f993fc13ff23f00801e00580000001f3061309b3002313c31ac32bb33f43335343d3467347f348f341735253547355635813590359d35b9350136073727377437b037f9387b39653 [Length: 1048]