Frame 1739: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:49.903590000 UTC UTC Arrival Time: Nov 21, 2017 01:00:49.903590000 UTC Epoch Arrival Time: 1511226049.903590000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 5.000 microseconds] [Time since reference or first frame: 44.037850000 seconds] Frame Number: 1739 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xce0f (52751) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x662d [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 781761, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 1425] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 781761 (relative sequence number) Sequence Number (raw): 2947398142 [Next Sequence Number: 782809 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdc64 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.494734000 seconds] [Time since previous frame in this TCP stream: 5.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2096] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 12] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 7e 42 10 66 0f d6 84 24 c8 00 00 00 f3 0f 7e 42 ~B.f...$......~B 0010 18 8b 42 6c 66 0f d6 84 24 d0 00 00 00 f3 0f 7e ..Blf...$......~ 0020 84 24 d8 00 00 00 66 0f d6 84 24 98 00 00 00 f3 .$....f...$..... 0030 0f 7e 84 24 e0 00 00 00 8b ac 24 d4 00 00 00 8b .~.$......$..... 0040 b4 24 d0 00 00 00 8b bc 24 c4 00 00 00 8b 8c 24 .$......$......$ 0050 c0 00 00 00 8b 94 24 bc 00 00 00 66 0f d6 84 24 ......$....f...$ 0060 a0 00 00 00 f3 0f 7e 84 24 e8 00 00 00 89 9c 24 ......~.$......$ 0070 88 00 00 00 66 0f d6 84 24 a8 00 00 00 f3 0f 7e ....f...$......~ 0080 84 24 f0 00 00 00 66 0f d6 84 24 b0 00 00 00 8b .$....f...$..... 0090 9c 24 b4 00 00 00 89 5c 24 30 8b 9c 24 b0 00 00 .$.....\$0..$... 00a0 00 89 9c 24 80 00 00 00 8b 9c 24 ac 00 00 00 89 ...$......$..... 00b0 5c 24 38 8b 9c 24 a8 00 00 00 89 9c 24 90 00 00 \$8..$......$... 00c0 00 8b 9c 24 a4 00 00 00 89 44 24 10 8b 84 24 cc ...$.....D$...$. 00d0 00 00 00 89 5c 24 34 8b 9c 24 a0 00 00 00 89 44 ....\$4..$.....D 00e0 24 50 8b 84 24 c8 00 00 00 89 9c 24 84 00 00 00 $P..$......$.... 00f0 8b 9c 24 9c 00 00 00 89 44 24 20 8b 84 24 b8 00 ..$.....D$ ..$.. 0100 00 00 89 5c 24 7c 8b 9c 24 98 00 00 00 c7 44 24 ...\$|..$.....D$ 0110 64 00 00 00 00 89 6c 24 60 89 74 24 54 89 7c 24 d.....l$`.t$T.|$ 0120 58 89 4c 24 68 89 54 24 40 89 44 24 2c 89 5c 24 X.L$h.T$@.D$,.\$ 0130 28 33 d8 8b 44 24 7c 33 c2 89 44 24 14 8b 84 24 (3..D$|3..D$...$ 0140 84 00 00 00 33 c1 89 44 24 18 8b 44 24 34 33 c7 ....3..D$..D$43. 0150 89 44 24 1c 8b 44 24 38 33 44 24 50 8b 94 24 90 .D$..D$83D$P..$. 0160 00 00 00 33 54 24 20 8b 8c 24 80 00 00 00 89 44 ...3T$ ..$.....D 0170 24 3c 33 ce 0f b6 fa 8b c1 c1 e0 08 0b f8 8b 44 $<3............D 0180 24 18 0f b6 c0 c1 e7 08 0b f8 c1 e7 08 0f b6 c3 $............... 0190 0b f8 89 7c 24 4c 8b f9 81 e7 00 ff ff ff c1 e7 ...|$L.......... 01a0 08 8b c2 25 00 ff 00 00 0b f8 c1 e7 08 c1 eb 08 ...%............ 01b0 0f b6 c3 0b f8 8b 44 24 18 25 00 ff 00 00 0b f8 ......D$.%...... 01c0 89 7c 24 6c 8b 7c 24 18 8b 74 24 30 81 e7 00 00 .|$l.|$..t$0.... 01d0 ff 00 8b c3 25 00 ff 00 00 0b f8 8b c1 25 00 00 ....%........%.. 01e0 ff ff c1 e0 08 c1 ef 08 0b f8 8b c2 25 00 00 ff ............%... 01f0 00 0b f8 8b 44 24 18 25 ff ff 00 ff 0b c3 c1 e8 ....D$.%........ 0200 08 81 e2 ff 00 00 ff 0b c2 8b 54 24 14 c1 e8 08 ..........T$.... 0210 33 f5 81 e1 00 00 00 ff 0b c1 8b 4c 24 3c 89 44 3..........L$<.D 0220 24 18 0f b6 e9 8b c6 c1 e0 08 0b e8 8b 44 24 1c $............D$. 0230 0f b6 c0 c1 e5 08 0b e8 89 7c 24 5c c1 e5 08 0f .........|$\.... 0240 b6 c2 0b e8 8b c1 25 00 ff 00 00 8b de c1 ea 08 ......%......... 0250 81 e3 00 ff ff ff c1 e3 08 0b d8 0f b6 c2 c1 e3 ................ 0260 08 0b d8 8b 44 24 1c 25 00 ff 00 00 0b d8 8b 44 ....D$.%.......D 0270 24 1c 25 00 00 ff 00 8b fa 81 e7 00 ff 00 00 0b $.%............. 0280 f8 8b c6 25 00 00 ff ff c1 e0 08 c1 ef 08 0b f8 ...%............ 0290 8b c1 25 00 00 ff 00 0b f8 8b 44 24 1c 25 ff ff ..%.......D$.%.. 02a0 00 ff 0b c2 8b 54 24 64 c1 e8 08 81 e1 ff 00 00 .....T$d........ 02b0 ff 0b c1 c1 e8 08 81 e6 00 00 00 ff 0b c6 8b 74 ...............t 02c0 24 10 89 44 24 1c 8b 44 24 24 89 7c 24 3c 8b 14 $..D$..D$$.|$<.. 02d0 90 89 54 24 14 03 54 24 4c 8b 7c 24 10 8b ca c1 ..T$..T$L.|$.... 02e0 e9 10 81 e1 ff 00 00 00 8b c2 8b b4 8e 00 08 00 ................ 02f0 00 8b 4c 24 10 c1 e8 08 25 ff 00 00 00 33 b4 81 ..L$....%....3.. 0300 00 04 00 00 8b c2 c1 e8 18 33 b4 81 00 0c 00 00 .........3...... 0310 0f b6 c2 8b 54 24 6c 33 34 81 8b 44 24 24 8b 4c ....T$l34..D$$.L 0320 24 64 33 74 88 04 03 d6 8b ca c1 e9 10 81 e1 ff $d3t............ 0330 00 00 00 8b c2 8b 8c 8f 00 08 00 00 c1 e8 08 25 ...............% 0340 ff 00 00 00 33 8c 87 00 04 00 00 8b c2 c1 e8 18 ....3........... 0350 33 8c 87 00 0c 00 00 0f b6 c2 8b d7 33 0c 82 8b 3...........3... 0360 44 24 14 33 c1 89 44 24 14 8b 54 24 5c 03 d0 8b D$.3..D$..T$\... 0370 ca c1 e9 10 81 e1 ff 00 00 00 8b c2 8b 8c 8f 00 ................ 0380 08 00 00 c1 e8 08 25 ff 00 00 00 33 8c 87 00 04 ......%....3.... 0390 00 00 8b c2 c1 e8 18 33 8c 87 00 0c 00 00 0f b6 .......3........ 03a0 c2 8b d7 33 0c 82 8b 54 24 18 33 f1 03 d6 8b ca ...3...T$.3..... 03b0 c1 e9 10 81 e1 ff 00 00 00 8b c2 8b 8c 8f 00 08 ................ 03c0 00 00 c1 e8 08 25 ff 00 00 00 33 8c 87 00 04 00 .....%....3..... 03d0 00 8b c2 c1 e8 18 33 8c 87 00 0c 00 00 0f b6 c2 ......3......... 03e0 8b d7 33 0c 82 8b 44 24 14 33 c1 89 44 24 14 8d ..3...D$.3..D$.. 03f0 14 28 8b ca c1 e9 10 81 e1 ff 00 00 00 8b c2 8b .(.............. 0400 8c 8f 00 08 00 00 c1 e8 08 25 ff 00 00 00 33 8c .........%....3. 0410 87 00 04 00 00 8b c2 c1 ........ Data […]: 7e4210660fd68424c8000000f30f7e42188b426c660fd68424d0000000f30f7e8424d8000000660fd6842498000000f30f7e8424e00000008bac24d40000008bb424d00000008bbc24c40000008b8c24c00000008b9424bc000000660fd68424a0000000f30f7e8424e8000000899c24880 [Length: 1048]