Frame 2167: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:50.188534000 UTC UTC Arrival Time: Nov 21, 2017 01:00:50.188534000 UTC Epoch Arrival Time: 1511226050.188534000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 2.000 microseconds] [Time since reference or first frame: 44.322794000 seconds] Frame Number: 2167 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xcf40 (53056) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x64fc [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1007605, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 1853] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 1007605 (relative sequence number) Sequence Number (raw): 2947623986 [Next Sequence Number: 1008653 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6ee9 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.779678000 seconds] [Time since previous frame in this TCP stream: 2.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2096] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 14] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 6c ff ff ff 89 46 08 5f 5e 5d 33 c0 5b c3 cc cc l....F._^]3.[... 0010 cc cc cc cc cc cc cc cc cc cc cc cc 56 6a 1c ff ............Vj.. 0020 15 20 12 65 10 8b f0 83 c4 04 85 f6 74 5a 8b 54 . .e........tZ.T 0030 24 0c 8b 4c 24 08 c7 46 14 80 5d 0e 10 c7 46 10 $..L$..F..]...F. 0040 e0 5d 0e 10 89 56 0c 89 4e 04 3b 51 0c 76 22 52 .]...V..N.;Q.v"R 0050 c6 46 18 00 ff 15 20 12 65 10 83 c4 04 89 46 08 .F.... .e.....F. 0060 85 c0 75 22 8b 46 14 56 ff d0 83 c4 04 33 c0 5e ..u".F.V.....3.^ 0070 c3 c6 46 18 01 8b 41 08 2b 41 0c ff 41 04 03 01 ..F...A.+A..A... 0080 89 46 08 29 51 0c 8b c6 5e c3 cc cc 83 ec 14 a1 .F.)Q...^....... 0090 c8 79 65 10 33 c4 89 44 24 10 8b 44 24 20 53 8b .ye.3..D$..D$ S. 00a0 58 04 55 8b 28 57 8b 7c 24 24 8b 07 0f b6 48 0c X.U.(W.|$$....H. 00b0 83 f9 07 0f 87 19 04 00 00 56 ff 24 8d 9c 63 0e .........V.$..c. 00c0 10 8b 03 6a 00 83 c0 07 50 ff 75 00 e8 1b e8 f2 ...j....P.u..... 00d0 ff 89 45 00 8b 0b 83 c4 0c 03 c8 a1 44 b1 62 10 ..E.........D.b. 00e0 89 01 66 a1 48 b1 62 10 5e 5f 66 89 41 04 83 03 ..f.H.b.^_f.A... 00f0 06 5d 33 c0 5b 8b 4c 24 10 33 cc e8 b8 53 23 00 .]3.[.L$.3...S#. 0100 83 c4 14 c3 8b 03 6a 00 83 c0 02 50 ff 75 00 e8 ......j....P.u.. 0110 d8 e7 f2 ff 89 45 00 8b 0b 83 c4 0c c6 04 08 27 .....E.........' 0120 ff 03 8b 07 8b 0b 8b 70 04 6a 00 83 fe 0f 7e 6c .......p.j....~l 0130 8d 41 10 50 ff 75 00 e8 b0 e7 f2 ff 89 45 00 8b .A.P.u.......E.. 0140 0f 8b 13 8b 09 03 d0 f3 0f 7e 01 66 0f d6 02 8b .........~.f.... 0150 41 08 89 42 08 0f b7 41 0c 66 89 42 0c 8a 41 0e A..B...A.f.B..A. 0160 88 42 0e 83 03 0f 8b 03 6a 00 83 c0 07 50 ff 75 .B......j....P.u 0170 00 e8 76 e7 f2 ff 89 45 00 8b 0b 03 c8 a1 4c b1 ..v....E......L. 0180 62 10 89 01 0f b7 05 50 b1 62 10 83 c4 18 66 89 b......P.b....f. 0190 41 04 83 03 06 be 16 00 00 00 eb 53 8d 41 01 03 A..........S.A.. 01a0 c6 50 ff 75 00 e8 42 e7 f2 ff 89 45 00 8b 0f 56 .P.u..B....E...V 01b0 ff 31 8b 0b 03 c8 51 e8 3a 55 23 00 01 33 8b 03 .1....Q.:U#..3.. 01c0 6a 00 83 c0 04 50 ff 75 00 e8 1e e7 f2 ff 89 45 j....P.u.......E 01d0 00 8b 0b 03 c8 66 a1 54 b1 62 10 66 89 01 a0 56 .....f.T.b.f...V 01e0 b1 62 10 88 41 02 83 03 03 83 c4 24 83 c6 04 4e .b..A......$...N 01f0 0f 84 db 02 00 00 8d 9b 00 00 00 00 8b 03 8b 4d ...............M 0200 00 2b c6 80 3c 08 20 7d 04 c6 04 08 3f 4e 75 ec .+..<. }....?Nu. 0210 5e 5f 5d 33 c0 5b 8b 4c 24 10 33 cc e8 97 52 23 ^_]3.[.L$.3...R# 0220 00 83 c4 14 c3 83 38 00 8b 03 6a 00 74 3f 83 c0 ......8...j.t?.. 0230 07 50 ff 75 00 e8 b2 e6 f2 ff 89 45 00 8b 0b 83 .P.u.......E.... 0240 c4 0c 03 c8 a1 58 b1 62 10 89 01 66 a1 5c b1 62 .....X.b...f.\.b 0250 10 5e 5f 66 89 41 04 83 03 06 5d 33 c0 5b 8b 4c .^_f.A....]3.[.L 0260 24 10 33 cc e8 4f 52 23 00 83 c4 14 c3 83 c0 08 $.3..OR#........ 0270 50 ff 75 00 e8 73 e6 f2 ff 89 45 00 8b 0b 03 c8 P.u..s....E..... 0280 a1 60 b1 62 10 83 c4 0c 89 01 66 a1 64 b1 62 10 .`.b......f.d.b. 0290 66 89 41 04 a0 66 b1 62 10 5e 5f 88 41 06 83 03 f.A..f.b.^_.A... 02a0 07 5d 33 c0 5b 8b 4c 24 10 33 cc e8 08 52 23 00 .]3.[.L$.3...R#. 02b0 83 c4 14 c3 8b 03 6a 00 83 c0 0e 50 ff 75 00 e8 ......j....P.u.. 02c0 28 e6 f2 ff 89 45 00 8b 0b f3 0f 7e 05 68 b1 62 (....E.....~.h.b 02d0 10 03 c8 83 c4 0c 66 0f d6 01 a1 70 b1 62 10 89 ......f....p.b.. 02e0 41 08 a0 74 b1 62 10 88 41 0c 83 03 0d 8b 07 ff A..t.b..A....... 02f0 30 8d 44 24 18 68 90 8a 54 10 50 e8 4c 7a 27 00 0.D$.h..T.P.Lz'. 0300 8b 0b 8b f0 41 6a 00 03 ce 51 ff 75 00 e8 da e5 ....Aj...Q.u.... 0310 f2 ff 56 8d 4c 24 30 51 89 45 00 8b 0b 03 c8 51 ..V.L$0Q.E.....Q 0320 e8 d1 53 23 00 01 33 8b 03 6a 00 83 c0 03 50 ff ..S#..3..j....P. 0330 75 00 e8 b5 e5 f2 ff 83 c4 30 eb 73 f2 0f 10 00 u........0.s.... 0340 a1 80 72 67 10 83 c0 21 50 f2 0f 11 44 24 18 e8 ..rg...!P...D$.. 0350 b8 07 f5 ff f2 0f 10 44 24 18 51 8b f8 f2 0f 11 .......D$.Q..... 0360 04 24 ff 35 80 72 67 10 68 b8 55 55 10 57 e8 d9 .$.5.rg.h.UU.W.. 0370 79 27 00 8b 0b 8b f0 41 6a 00 03 ce 51 ff 75 00 y'.....Aj...Q.u. 0380 e8 67 e5 f2 ff 89 45 00 8b 0b 56 03 c8 57 51 e8 .g....E...V..WQ. 0390 62 53 23 00 01 33 57 e8 80 dc f5 ff 8b 03 6a 00 bS#..3W.......j. 03a0 83 c0 03 50 ff 75 00 e8 40 e5 f2 ff 83 c4 3c 89 ...P.u..@.....<. 03b0 45 00 8b 0b 5e 03 c8 66 a1 8c 8e 62 10 5f 66 89 E...^..f...b._f. 03c0 01 83 03 02 5d 33 c0 5b 8b 4c 24 10 33 cc e8 e5 ....]3.[.L$.3... 03d0 50 23 00 83 c4 14 c3 8b 03 6a 00 83 c0 08 50 ff P#.......j....P. 03e0 75 00 e8 05 e5 f2 ff 89 45 00 8b 0b 03 c8 a1 78 u.......E......x 03f0 b1 62 10 83 c4 0c 89 01 66 a1 7c b1 62 10 66 89 .b......f.|.b.f. 0400 41 04 a0 7e b1 62 10 5e 5f 88 41 06 83 03 07 5d A..~.b.^_.A....] 0410 33 c0 5b 8b 4c 24 10 33 3.[.L$.3 Data […]: 6cffffff8946085f5e5d33c05bc3cccccccccccccccccccccccccccc566a1cff15201265108bf083c40485f6745a8b54240c8b4c2408c74614805d0e10c74610e05d0e1089560c894e043b510c762252c6461800ff152012651083c40489460885c075228b461456ffd083c40433c05ec3c [Length: 1048]