Frame 1387: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:49.592998000 UTC UTC Arrival Time: Nov 21, 2017 01:00:49.592998000 UTC Epoch Arrival Time: 1511226049.592998000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 5.000 microseconds] [Time since reference or first frame: 43.727258000 seconds] Frame Number: 1387 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xccff (52479) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x6949 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 578449, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 1073] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 578449 (relative sequence number) Sequence Number (raw): 2947194830 [Next Sequence Number: 578973 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8f72 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.184142000 seconds] [Time since previous frame in this TCP stream: 5.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2096] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 7] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 53 89 45 68 89 55 6c ff 76 2c ff 76 28 e8 7e e6 S.Eh.Ul.v,.v(.~. 0010 29 00 89 45 70 89 55 74 5b eb 0e 8d 7d 48 b9 18 )..Ep.Ut[...}H.. 0020 00 00 00 8b f0 f3 a5 8b f0 6a 00 55 c7 85 bc 00 .........j.U.... 0030 00 00 01 00 00 00 c7 85 c4 00 00 00 00 00 00 00 ................ 0040 e8 ab 66 01 00 8b 54 24 18 83 c4 08 83 7a 44 01 ..f...T$.....zD. 0050 75 3d 83 7d 44 00 75 37 8b 06 0b 46 04 75 30 8b u=.}D.u7...F.u0. 0060 4e 08 0b 4e 0c 75 28 8b 4e 10 0b 4e 14 75 20 8b N..N.u(.N..N.u . 0070 42 38 99 29 85 a8 00 00 00 8b 45 38 19 95 ac 00 B8.)......E8.... 0080 00 00 99 01 85 a8 00 00 00 11 95 ac 00 00 00 55 ...............U 0090 e8 9b 7c 01 00 83 c4 04 c7 85 bc 00 00 00 00 00 ..|............. 00a0 00 00 5f 5e 8b c5 5d c3 cc cc cc cc cc cc cc cc .._^..]......... 00b0 53 55 56 57 ff 74 24 14 be 01 00 00 00 e8 ce 60 SUVW.t$........` 00c0 01 00 8b e8 8b 44 24 1c 83 c9 ff 83 78 3c 00 6a .....D$.....x<.j 00d0 60 8d 7d 48 6a 00 57 0f 45 f1 e8 75 e2 29 00 8b `.}Hj.W.E..u.).. 00e0 c6 99 83 c4 10 8b d8 8b 44 24 18 8b f2 ff 70 04 ........D$....p. 00f0 ff 30 56 53 e8 97 e5 29 00 f7 d8 83 d2 00 f7 da .0VS...)........ 0100 89 07 89 57 04 8b 7c 24 18 56 53 ff 77 0c ff 77 ...W..|$.VS.w..w 0110 08 e8 7a e5 29 00 f7 d8 56 83 d2 00 f7 da 53 89 ..z.)...V.....S. 0120 45 50 89 55 54 ff 77 14 ff 77 10 e8 60 e5 29 00 EP.UT.w..w..`.). 0130 f7 d8 56 83 d2 00 f7 da 53 89 45 58 89 55 5c ff ..V.....S.EX.U\. 0140 77 1c ff 77 18 e8 46 e5 29 00 f7 d8 56 83 d2 00 w..w..F.)...V... 0150 f7 da 53 89 45 60 89 55 64 ff 77 24 ff 77 20 e8 ..S.E`.Ud.w$.w . 0160 2c e5 29 00 f7 d8 56 83 d2 00 f7 da 53 89 45 68 ,.)...V.....S.Eh 0170 89 55 6c ff 77 2c ff 77 28 e8 12 e5 29 00 f7 d8 .Ul.w,.w(...)... 0180 83 d2 00 f7 da 6a 00 55 89 45 70 89 55 74 c7 85 .....j.U.Ep.Ut.. 0190 bc 00 00 00 01 00 00 00 c7 85 c4 00 00 00 00 00 ................ 01a0 00 00 e8 49 65 01 00 8b 5c 24 1c 83 c4 08 83 7b ...Ie...\$.....{ 01b0 44 01 75 3d 83 7d 44 00 75 37 8b 07 0b 47 04 75 D.u=.}D.u7...G.u 01c0 30 8b 47 08 0b 47 0c 75 28 8b 47 10 0b 47 14 75 0.G..G.u(.G..G.u 01d0 20 8b 43 38 99 29 85 a8 00 00 00 8b 45 38 19 95 .C8.)......E8.. 01e0 ac 00 00 00 99 01 85 a8 00 00 00 11 95 ac 00 00 ................ 01f0 00 83 7b 44 00 75 3d 83 7d 44 01 75 37 8b 07 0b ..{D.u=.}D.u7... 0200 47 04 75 30 8b 4f 08 0b 4f 0c 75 28 G.u0.O..O.u( Data […]: 5389456889556cff762cff7628e87ee629008945708955745beb0e8d7d48b9180000008bf0f3a58bf06a0055c785bc00000001000000c785c400000000000000e8ab6601008b54241883c408837a4401753d837d440075378b060b460475308b4e080b4e0c75288b4e100b4e1475208b423 [Length: 524]