Frame 2351: Packet, 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:50.318294000 UTC UTC Arrival Time: Nov 21, 2017 01:00:50.318294000 UTC Epoch Arrival Time: 1511226050.318294000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 6.000 microseconds] [Time since reference or first frame: 44.452554000 seconds] Frame Number: 2351 Frame Length: 1514 bytes (12112 bits) Capture Length: 1514 bytes (12112 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xcfbf (53183) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x62e1 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1106005, Ack: 1736, Len: 1460 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 2037] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 1106005 (relative sequence number) Sequence Number (raw): 2947722386 [Next Sequence Number: 1107465 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2398 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.909438000 seconds] [Time since previous frame in this TCP stream: 6.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2920] [Bytes sent since last PSH flag: 2920] [Client Contiguous Streams: 1] [Server Contiguous Streams: 14] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 1460 bytes Data (1460 bytes) 0000 50 68 20 26 10 10 68 5c 73 67 10 e8 5c 08 f3 ff Ph &..h\sg..\... 0010 83 c4 10 8b 4c 24 04 41 89 4c 24 04 3b ce 7c 9f ....L$.A.L$.;.|. 0020 5e 83 c4 08 c3 cc cc cc cc cc cc cc 6a 01 ff 74 ^...........j..t 0030 24 18 ff 74 24 18 ff 74 24 18 ff 74 24 18 ff 74 $..t$..t$..t$..t 0040 24 18 e8 15 46 00 00 83 c4 18 c3 cc 6a 00 ff 74 $...F.......j..t 0050 24 18 ff 74 24 18 ff 74 24 18 ff 74 24 18 ff 74 $..t$..t$..t$..t 0060 24 18 e8 45 3c 00 00 83 c4 18 c3 cc 6a 01 ff 74 $..E<.......j..t 0070 24 18 ff 74 24 18 ff 74 24 18 ff 74 24 18 ff 74 $..t$..t$..t$..t 0080 24 18 e8 25 3c 00 00 83 c4 18 c3 cc 81 ec 20 02 $..%<......... . 0090 00 00 a1 c8 79 65 10 33 c4 89 84 24 1c 02 00 00 ....ye.3...$.... 00a0 56 8b b4 24 2c 02 00 00 8d 44 24 0c 50 68 54 50 V..$,....D$.PhTP 00b0 55 10 ff b4 24 30 02 00 00 e8 3e 78 f2 ff 83 c4 U...$0....>x.... 00c0 0c 83 f8 ff 0f 84 f1 01 00 00 57 ff 35 78 89 65 ..........W.5x.e 00d0 10 8d 44 24 14 6a 01 6a 00 68 f8 91 49 10 6a ff ..D$.j.j.h..I.j. 00e0 50 e8 a6 9e f5 ff 8b f8 83 c4 18 85 ff 0f 84 bd P............... 00f0 01 00 00 8d 44 24 08 50 6a 02 8d 44 24 14 50 8b ....D$.Pj..D$.P. 0100 47 20 6a 1f ff 70 04 e8 80 ca 15 00 0f b7 c0 66 G j..p.........f 0110 85 c0 74 0a 66 83 f8 01 0f 85 92 01 00 00 8b 44 ..t.f..........D 0120 24 0c 66 85 c0 0f 84 85 01 00 00 0f b7 c0 40 53 $.f...........@S 0130 50 e8 76 89 f3 ff 83 c4 04 8b d8 8d 44 24 0c 50 P.v.........D$.P 0140 ff 74 24 14 53 ff 37 e8 34 ca 15 00 0f b7 c0 66 .t$.S.7.4......f 0150 85 c0 0f 84 03 01 00 00 66 83 f8 01 0f 84 f9 00 ........f....... 0160 00 00 8b 47 20 8d 4c 24 18 51 68 ff 01 00 00 8d ...G .L$.Qh..... 0170 4c 24 30 51 8d 4c 24 28 51 8d 4c 24 30 51 ff 37 L$0Q.L$(Q.L$0Q.7 0180 ff 70 04 ff 30 e8 c6 c9 15 00 6a 05 8d 44 24 24 .p..0.....j..D$$ 0190 68 b8 93 49 10 50 ff 15 d4 d3 3b 10 83 c4 0c 85 h..I.P....;..... 01a0 c0 75 72 ff 37 0f b7 44 24 14 68 c0 93 49 10 40 .ur.7..D$.h..I.@ 01b0 50 53 e8 f5 1d f2 ff 83 c4 10 6a fd 53 ff 37 e8 PS........j.S.7. 01c0 f8 c9 15 00 66 85 c0 74 3d 68 cc 93 49 10 ff 37 ....f..t=h..I..7 01d0 ff 77 20 e8 94 39 00 00 83 c4 0c c7 06 00 00 00 .w ..9.......... 01e0 00 53 c6 46 0c 03 e8 d1 5d f4 ff 83 c4 04 5b 5f .S.F....].....[_ 01f0 5e 8b 8c 24 1c 02 00 00 33 cc e8 59 d2 21 00 81 ^..$....3..Y.!.. 0200 c4 20 02 00 00 c3 8b cb 8d 51 01 90 8a 01 41 84 . .......Q....A. 0210 c0 75 f9 eb 52 8d 44 24 20 50 8d 44 24 2c 50 68 .u..R.D$ P.D$,Ph 0220 dc 91 49 10 6a 02 6a 00 e8 cf 1e f2 ff 83 c4 14 ..I.j.j......... 0230 c7 06 00 00 00 00 53 c6 46 0c 03 e8 7c 5d f4 ff ......S.F...|].. 0240 83 c4 04 5b 5f 5e 8b 8c 24 1c 02 00 00 33 cc e8 ...[_^..$....3.. 0250 04 d2 21 00 81 c4 20 02 00 00 c3 8b cb 8d 51 01 ..!... .......Q. 0260 8a 01 41 84 c0 75 f9 2b ca 89 4e 04 79 0f 68 bc ..A..u.+..N.y.h. 0270 73 55 10 6a 01 e8 a2 1e f2 ff 83 c4 08 ff 76 04 sU.j..........v. 0280 53 e8 66 13 f1 ff 83 c4 08 c6 46 0c 06 53 89 06 S.f.......F..S.. 0290 e8 27 5d f4 ff 83 c4 04 5b 5f 5e 8b 8c 24 1c 02 .'].....[_^..$.. 02a0 00 00 33 cc e8 af d1 21 00 81 c4 20 02 00 00 c3 ..3....!... .... 02b0 c7 06 00 00 00 00 c6 46 0c 03 5f 8b 8c 24 20 02 .......F.._..$ . 02c0 00 00 5e 33 cc e8 8e d1 21 00 81 c4 20 02 00 00 ..^3....!... ... 02d0 c3 cc cc cc cc cc cc cc cc cc cc cc 81 ec 40 01 ..............@. 02e0 00 00 a1 c8 79 65 10 33 c4 89 84 24 3c 01 00 00 ....ye.3...$<... 02f0 56 8b b4 24 4c 01 00 00 8d 44 24 0c 50 8d 44 24 V..$L....D$.P.D$ 0300 14 50 68 18 ec 47 10 ff b4 24 54 01 00 00 c7 44 .Ph..G...$T....D 0310 24 14 00 00 00 00 c7 44 24 18 00 00 00 00 e8 d9 $......D$....... 0320 75 f2 ff 83 c4 10 83 f8 ff 0f 84 ba 00 00 00 8b u............... 0330 44 24 0c 53 0f b7 d8 66 83 f8 02 74 3a 66 83 f8 D$.S...f...t:f.. 0340 01 74 34 98 50 68 e0 93 49 10 6a 02 6a 00 e8 a9 .t4.Ph..I.j.j... 0350 1d f2 ff 83 c4 10 c7 06 00 00 00 00 5b c6 46 0c ............[.F. 0360 03 5e 8b 8c 24 3c 01 00 00 33 cc e8 e8 d0 21 00 .^..$<...3....!. 0370 81 c4 40 01 00 00 c3 57 ff 35 80 89 65 10 8d 44 ..@....W.5..e..D 0380 24 1c ff 35 7c 89 65 10 6a 02 6a 00 68 04 92 49 $..5|.e.j.j.h..I 0390 10 6a ff 50 e8 f3 9b f5 ff 8b f8 83 c4 1c 85 ff .j.P............ 03a0 74 3b 8d 44 24 10 50 68 c8 00 00 00 8d 84 24 88 t;.D$.Ph......$. 03b0 00 00 00 50 8d 44 24 18 50 6a 64 8d 44 24 30 50 ...P.D$.Pjd.D$0P 03c0 53 ff 37 e8 7c c7 15 00 66 85 c0 74 32 68 f8 93 S.7.|...f..t2h.. 03d0 49 10 6a 00 57 e8 92 37 00 00 83 c4 0c 5f c7 06 I.j.W..7....._.. 03e0 00 00 00 00 c6 46 0c 03 5b 5e 8b 8c 24 3c 01 00 .....F..[^..$<.. 03f0 00 33 cc e8 60 d0 21 00 81 c4 40 01 00 00 c3 66 .3..`.!...@....f 0400 83 7c 24 0c 00 74 d6 66 83 7c 24 10 00 74 ce 6a .|$..t.f.|$..t.j 0410 00 56 e8 25 be f0 ff 6a 01 8d 44 24 28 50 6a 07 .V.%...j..D$(Pj. 0420 68 08 94 49 10 56 e8 d1 b1 f0 ff 6a 01 8d 84 24 h..I.V.....j...$ 0430 a0 00 00 00 50 6a 0c 68 10 94 49 10 56 e8 ba b1 ....Pj.h..I.V... 0440 f0 ff 8b 8c 24 78 01 00 00 83 c4 30 5f 5b 5e 33 ....$x.....0_[^3 0450 cc e8 02 d0 21 00 81 c4 40 01 00 00 c3 cc cc cc ....!...@....... 0460 cc cc cc cc cc cc cc cc cc cc cc cc 83 ec 10 8d ................ 0470 44 24 08 50 8d 44 24 10 50 8d 44 24 0c 50 8d 44 D$.P.D$.P.D$.P.D 0480 24 0c 50 68 1c 94 49 10 ff 74 24 28 e8 6b 74 f2 $.Ph..I..t$(.kt. 0490 ff 83 c4 18 83 f8 ff 0f 84 83 01 00 00 53 ff 35 .............S.5 04a0 80 89 65 10 8d 44 24 08 ff 35 7c 89 65 10 6a 02 ..e..D$..5|.e.j. 04b0 6a 00 68 04 92 49 10 6a ff 50 e8 cd 9a f5 ff 8b j.h..I.j.P...... 04c0 d8 83 c4 1c 85 db 75 0f 8b 44 24 1c 89 18 c6 40 ......u..D$....@ 04d0 0c 03 5b 83 c4 10 c3 57 6a 24 6a 01 e8 0b 93 f0 ..[....Wj$j..... 04e0 ff 83 c4 08 8b f8 57 ff 73 04 6a 03 e8 35 c6 15 ......W.s.j..5.. 04f0 00 0f b7 c0 66 83 f8 fe 75 2b 68 90 92 49 10 6a ....f...u+h..I.j 0500 02 6a 00 e8 f4 1b f2 ff 57 e8 ae 5a f4 ff 8b 44 .j......W..Z...D 0510 24 30 83 c4 10 c7 00 00 00 00 00 5f c6 40 0c 03 $0........._.@.. 0520 5b 83 c4 10 c3 66 83 f8 ff 75 0f 68 b4 92 49 10 [....f...u.h..I. 0530 6a 00 53 e8 34 36 00 00 eb ce 6a 00 6a 04 8d 44 j.S.46....j.j..D 0540 24 24 50 6a 08 ff 73 04 e8 3f c6 15 00 66 85 c0 $$Pj..s..?...f.. 0550 75 1d 8b 44 24 1c 83 e0 10 89 47 0c 74 18 ff 35 u..D$.....G.t..5 0560 b0 ff 66 10 6a 06 ff 37 e8 55 c6 15 00 eb 07 c7 ..f.j..7.U...... 0570 47 0c 00 00 00 00 6a fd ff 74 24 10 ff 37 e8 d3 G.....j..t$..7.. 0580 c5 15 00 0f b7 c0 66 85 c0 74 27 66 83 f8 01 74 ......f..t'f...t 0590 21 66 83 f8 64 74 1b 68 24 94 49 10 ff 37 53 e8 !f..dt.h$.I..7S. 05a0 c8 35 00 00 83 c4 0c 6a 01 ff 37 e8 c4 c5 15 00 .5.....j..7..... 05b0 eb 20 56 8d . V. Data […]: 506820261010685c736710e85c08f3ff83c4108b4c240441894c24043bce7c9f5e83c408c3cccccccccccccc6a01ff742418ff742418ff742418ff742418ff742418e81546000083c418c3cc6a00ff742418ff742418ff742418ff742418ff742418e8453c000083c418c3cc6a01ff74241 [Length: 1460]