Frame 1406: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:49.607728000 UTC UTC Arrival Time: Nov 21, 2017 01:00:49.607728000 UTC Epoch Arrival Time: 1511226049.607728000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 45.000 microseconds] [Time since reference or first frame: 43.741988000 seconds] Frame Number: 1406 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xcd0f (52495) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x672d [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 588405, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 1092] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 588405 (relative sequence number) Sequence Number (raw): 2947204786 [Next Sequence Number: 589453 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x99e8 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.198872000 seconds] [Time since previous frame in this TCP stream: 45.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 3144] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 8] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 73 0c 8a 0e 33 d2 80 f9 54 0f 87 6b 01 00 00 80 s...3...T..k.... 0010 f9 3a 0f 87 22 01 00 00 80 f9 20 0f 86 dc fe ff .:.."..... ..... 0020 ff 80 f9 34 0f 87 f9 00 00 00 80 f9 2f 0f 86 6a ...4......../..j 0030 fb 00 00 46 89 73 0c 8a 0e 33 d2 80 f9 54 0f 87 ...F.s...3...T.. 0040 a9 00 00 00 80 f9 43 0f 87 bd 03 00 00 80 f9 20 ......C........ 0050 0f 86 a7 fe ff ff 80 f9 35 77 7b 80 f9 2f 0f 86 ........5w{../.. 0060 39 fb 00 00 46 89 73 0c 8a 0e 80 f9 56 0f 87 18 9...F.s.....V... 0070 ff ff ff 80 f9 44 0f 87 e2 fe ff ff 80 f9 20 0f .....D........ . 0080 86 78 fe ff ff 80 f9 2f 0f 86 0f fb 00 00 80 f9 .x...../........ 0090 39 0f 87 82 fe ff ff 46 89 73 0c 8a 0e 0f b6 c1 9......F.s...... 00a0 f6 80 28 b0 3c 10 02 0f 85 8d 3a 00 00 80 f9 56 ..(.<.....:....V 00b0 0f 87 d5 fe ff ff 80 f9 44 0f 87 9f fe ff ff 80 ........D....... 00c0 f9 20 0f 86 35 fe ff ff 80 f9 2d 0f 84 18 02 00 . ..5.....-..... 00d0 00 e9 43 fe ff ff 80 f9 39 0f 86 5c 01 00 00 80 ..C.....9..\.... 00e0 f9 3a 0f 86 2b 69 00 00 e9 b0 fa 00 00 80 f9 67 .:..+i.........g 00f0 0f 86 89 00 00 00 80 f9 74 0f 87 e4 fe ff ff 80 ........t....... 0100 f9 6c 77 0e 80 f9 68 0f 87 90 fa 00 00 e9 10 fe .lw...h......... 0110 ff ff 80 f9 6d 0f 86 07 fe ff ff 80 f9 72 e9 f9 ....m........r.. 0120 fd ff ff 80 f9 35 0f 86 de 00 00 00 80 f9 39 0f .....5........9. 0130 87 de 68 00 00 e9 4e 01 00 00 80 f9 47 77 17 80 ..h...N.....Gw.. 0140 f9 44 0f 86 d1 fd ff ff 80 f9 46 0f 85 4c fa 00 .D........F..L.. 0150 00 e9 cc fd ff ff 80 f9 4c 77 0e 80 f9 48 0f 87 ........Lw...H.. 0160 39 fa 00 00 e9 b9 fd ff ff 80 f9 4d 0f 86 b0 fd 9..........M.... 0170 ff ff 80 f9 52 e9 a2 fd ff ff 80 f9 67 77 31 80 ....R.......gw1. 0180 f9 59 77 11 80 f9 57 0f 84 9e fd ff ff 80 f9 58 .Yw...W........X 0190 e9 87 fd ff ff 80 f9 64 77 08 80 f9 63 e9 7a fd .......dw...c.z. 01a0 ff ff 80 f9 66 0f 85 f2 f9 00 00 e9 72 fd ff ff ....f.......r... 01b0 80 f9 74 0f 87 2a fe ff ff 80 f9 6c 77 0e 80 f9 ..t..*.....lw... 01c0 68 0f 87 d6 f9 00 00 e9 56 fd ff ff 80 f9 6d 0f h.......V.....m. 01d0 86 4d fd ff ff 80 f9 72 e9 3f fd ff ff 46 89 73 .M.....r.?...F.s 01e0 0c 8a 0e 33 d2 80 f9 54 77 90 80 f9 43 0f 87 17 ...3...Tw...C... 01f0 02 00 00 80 f9 20 0f 86 01 fd ff ff 80 f9 35 77 ..... ........5w 0200 7e 80 f9 2f 0f 86 93 f9 00 00 46 89 73 0c 8a 0e ~../......F.s... 0210 33 d2 80 f9 56 77 5a 80 f9 44 0f 87 3e fd ff ff 3...VwZ..D..>... 0220 80 f9 20 0f 86 d4 fc ff ff 80 f9 2f 0f 86 6b f9 .. ......../..k. 0230 00 00 80 f9 39 0f 87 de fc ff ff 46 89 73 0c 8a ....9......F.s.. 0240 0e 33 d2 80 f9 56 0f 87 3f fd ff ff 80 f9 44 0f .3...V..?.....D. 0250 87 09 fd ff ff 80 f9 20 0f 86 9f fc ff ff 80 f9 ....... ........ 0260 2f 0f 86 36 f9 00 00 80 f9 39 76 60 e9 a8 fc ff /..6.....9v`.... 0270 ff 80 f9 68 0f 86 16 fd ff ff e9 4e fd ff ff 80 ...h.......N.... 0280 f9 39 0f 87 57 fe ff ff 46 89 73 0c 8a 0e 33 d2 .9..W...F.s...3. 0290 80 f9 56 0f 87 f2 fc ff ff 80 f9 44 0f 87 bc fc ..V........D.... 02a0 ff ff 80 f9 20 0f 86 52 fc ff ff 80 f9 2f 0f 86 .... ..R...../.. 02b0 e9 f8 00 00 80 f9 39 0f 87 5c fc ff ff 8a 4e 01 ......9..\....N. 02c0 46 8d 41 d0 3c 09 0f 87 56 fc ff ff 8a 4e 01 46 F.A.<...V....N.F 02d0 0f b6 c1 f6 80 28 b0 3c 10 02 0f 85 5a 38 00 00 .....(.<....Z8.. 02e0 80 f9 2d 0f 85 39 fc ff ff 8a 46 01 3c 2f 0f 86 ..-..9....F.