Frame 11857: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:54.890589000 UTC UTC Arrival Time: Nov 21, 2017 01:00:54.890589000 UTC Epoch Arrival Time: 1511226054.890589000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 120.000 microseconds] [Time since reference or first frame: 49.024849000 seconds] Frame Number: 11857 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xec44 (60484) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x4a04 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 6927233, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 11543] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 6927233 (relative sequence number) Sequence Number (raw): 2953543614 [Next Sequence Number: 6927757 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x446b [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 7.481733000 seconds] [Time since previous frame in this TCP stream: 120.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2620] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 100] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 7c 32 88 32 8c 32 90 32 9c 32 a0 32 a4 32 b0 32 |2.2.2.2.2.2.2.2 0010 b4 32 b8 32 c4 32 c8 32 cc 32 d8 32 dc 32 e0 32 .2.2.2.2.2.2.2.2 0020 ec 32 f0 32 f4 32 00 33 04 33 08 33 14 33 18 33 .2.2.2.3.3.3.3.3 0030 1c 33 28 33 2c 33 30 33 3c 33 40 33 44 33 50 33 .3(3,303<3@3D3P3 0040 54 33 58 33 64 33 68 33 6c 33 78 33 7c 33 80 33 T3X3d3h3l3x3|3.3 0050 8c 33 90 33 94 33 a0 33 a4 33 a8 33 b4 33 b8 33 .3.3.3.3.3.3.3.3 0060 bc 33 c8 33 cc 33 d0 33 dc 33 e0 33 e4 33 f0 33 .3.3.3.3.3.3.3.3 0070 f4 33 f8 33 04 34 08 34 0c 34 18 34 1c 34 20 34 .3.3.4.4.4.4.4 4 0080 2c 34 30 34 34 34 40 34 44 34 48 34 54 34 58 34 ,40444@4D4H4T4X4 0090 5c 34 68 34 6c 34 70 34 7c 34 80 34 84 34 90 34 \4h4l4p4|4.4.4.4 00a0 94 34 98 34 a4 34 a8 34 ac 34 b8 34 bc 34 c0 34 .4.4.4.4.4.4.4.4 00b0 cc 34 d0 34 d4 34 e0 34 e4 34 e8 34 f4 34 f8 34 .4.4.4.4.4.4.4.4 00c0 fc 34 08 35 0c 35 10 35 44 35 6c 35 94 35 bc 35 .4.5.5.5D5l5.5.5 00d0 d0 35 f8 35 20 36 34 36 5c 36 70 36 84 36 ac 36 .5.5 646\6p6.6.6 00e0 d4 36 fc 36 24 37 38 37 4c 37 74 37 88 37 9c 37 .6.6$787L7t7.7.7 00f0 a0 37 a4 37 b0 37 b4 37 d8 37 dc 37 ec 37 f0 37 .7.7.7.7.7.7.7.7 0100 f4 37 00 38 04 38 08 38 3c 38 50 38 64 38 78 38 .7.8.8.8<8P8d8x8 0110 7c 38 8c 38 90 38 94 38 a0 38 a4 38 b4 38 b8 38 |8.8.8.8.8.8.8.8 0120 c8 38 cc 38 dc 38 e0 38 f0 38 f4 38 04 39 08 39 .8.8.8.8.8.8.9.9 0130 18 39 1c 39 2c 39 30 39 40 39 44 39 7c 39 90 39 .9.9,909@9D9|9.9 0140 a4 39 b8 39 cc 39 e0 39 1c 3a 30 3a 34 3a 38 3a .9.9.9.9.:0:4:8: 0150 44 3a 48 3a 4c 3a 58 3a 5c 3a 60 3a 6c 3a 70 3a D:H:L:X:\:`:l:p: 0160 74 3a 80 3a 84 3a 88 3a 94 3a 98 3a 9c 3a a8 3a t:.:.:.:.:.:.:.: 0170 ac 3a b0 3a bc 3a c0 3a c4 3a f8 3a c8 3d f0 3d .:.:.:.:.:.:.=.= 0180 04 3e 94 3e a8 3e b0 3e 00 a0 54 00 28 00 00 00 .>.>.>.>..T.(... 0190 2c 33 40 33 48 33 54 33 5c 33 68 33 70 33 7c 33 ,3@3H3T3\3h3p3|3 01a0 84 33 b8 33 d8 33 ec 33 00 34 14 34 28 34 50 34 .3.3.3.3.4.4(4P4 01b0 00 30 55 00 9c 01 00 00 68 34 80 34 98 34 a4 34 .0U.....h4.4.4.4 01c0 bc 34 d4 34 e0 34 f8 34 10 35 1c 35 34 35 4c 35 .4.4.4.4.5.545L5 01d0 58 35 70 35 88 35 94 35 9c 35 a4 35 ac 35 c4 35 X5p5.5.5.5.5.5.5 01e0 d0 35 d8 35 e0 35 e8 35 00 36 0c 36 14 36 1c 36 .5.5.5.5.6.6.6.6 01f0 24 36 3c 36 48 36 50 36 58 36 60 36 78 36 84 36 $6<6H6P6X6`6x6.6 0200 8c 36 94 36 9c 36 b4 36 c0 36 c8 36 .6.6.6.6.6.6 Data […]: 7c3288328c3290329c32a032a432b032b432b832c432c832cc32d832dc32e032ec32f032f432003304330833143318331c3328332c3330333c3340334433503354335833643368336c3378337c3380338c3390339433a033a433a833b433b833bc33c833cc33d033dc33e033e433f033f43 [Length: 524]