Frame 2413: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:50.365011000 UTC UTC Arrival Time: Nov 21, 2017 01:00:50.365011000 UTC Epoch Arrival Time: 1511226050.365011000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 83.000 microseconds] [Time since reference or first frame: 44.499271000 seconds] Frame Number: 2413 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xcfed (53229) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x665b [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1138081, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 2099] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 1138081 (relative sequence number) Sequence Number (raw): 2947754462 [Next Sequence Number: 1138605 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb119 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.956155000 seconds] [Time since previous frame in this TCP stream: 83.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1048] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 14] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 3b 4c 24 48 7d 34 8b 74 24 44 8b 54 24 40 8b 04 ;L$H}4.t$D.T$@.. 0010 ce 8b 4c ce 04 03 d0 89 54 24 38 2b c8 74 23 6a ..L.....T$8+.t#j 0020 00 8d 44 24 18 50 51 52 e8 73 af 0b 00 8b 4c 24 ..D$.PQR.s....L$ 0030 24 83 c4 10 89 44 24 38 eb 0e c7 44 24 38 94 8a $....D$8...D$8.. 0040 54 10 33 c9 89 4c 24 14 85 ed 75 32 89 6c 24 10 T.3..L$...u2.l$. 0050 8b f1 83 f9 4e 73 0d bb 4e 00 00 00 55 8d 43 01 ....Ns..N...U.C. 0060 50 55 eb 45 8b d9 81 f9 7f ff ff 7f 73 06 8d 99 PU.E........s... 0070 80 00 00 00 6a 00 8d 43 01 50 6a 00 eb 2b 8d 34 ....j..C.Pj..+.4 0080 39 3b f3 72 32 8d 9e 80 00 00 00 81 fb ff ff ff 9;.r2........... 0090 7f 72 0f 68 bc 73 55 10 6a 01 e8 31 a3 f1 ff 83 .r.h.sU.j..1.... 00a0 c4 08 6a 00 8d 43 01 50 55 e8 92 ea f0 ff 8b 4c ..j..C.PU......L 00b0 24 20 8b e8 83 c4 0c 8b 7c 24 38 8b 44 24 10 51 $ ......|$8.D$.Q 00c0 03 c5 57 50 e8 81 58 21 00 8b d6 8b 74 24 24 83 ..WP..X!....t$$. 00d0 c4 0c 83 7c 24 14 00 8b ce 89 54 24 10 89 4c 24 ...|$.....T$..L$ 00e0 38 74 28 57 e8 87 e1 f3 ff 8b 54 24 14 83 c4 04 8t(W......T$.... 00f0 8b ce eb 17 8b 74 24 18 8b 4c 24 38 8b 54 24 10 .....t$..L$8.T$. 0100 8a 26 46 88 64 24 3c 89 74 24 18 3b 74 24 20 0f .&F.d$<.t$.;t$ . 0110 82 0b fe ff ff 85 ed 75 32 8b fe 33 c0 2b f9 89 .......u2..3.+.. 0120 44 24 10 83 ff 4e 73 0b b8 4e 00 00 00 55 40 50 D$...Ns..N...U@P 0130 55 eb 46 8b c7 81 ff 7f ff ff 7f 73 06 8d 87 80 U.F........s.... 0140 00 00 00 6a 00 40 50 6a 00 eb 2e 8b fa 2b f9 03 ...j.@Pj.....+.. 0150 fe 3b fb 72 36 8d 9f 80 00 00 00 81 fb ff ff ff .;.r6........... 0160 7f 72 0f 68 bc 73 55 10 6a 01 e8 61 a2 f1 ff 83 .r.h.sU.j..a.... 0170 c4 08 6a 00 8d 43 01 50 55 e8 c2 e9 f0 ff 8b 54 ..j..C.PU......T 0180 24 1c 8b 4c 24 44 8b e8 83 c4 0c 2b f1 56 51 8d $..L$D.....+.VQ. 0190 04 2a 50 e8 b2 57 21 00 83 c4 0c 85 ed 74 04 c6 .*P..W!......t.. 01a0 04 2f 00 68 cc a0 49 10 e8 03 a0 f1 ff 8b f0 56 ./.h..I........V 01b0 8d 44 24 2c 50 57 55 e8 e4 94 24 00 83 c4 14 83 .D$,PWU...$..... 01c0 f8 ff 75 1d 56 e8 a6 e0 f3 ff 55 68 84 63 55 10 ..u.V.....Uh.cU. 01d0 68 d8 a0 49 10 6a 01 6a 00 e8 d2 a1 f1 ff 83 c4 h..I.j.j........ 01e0 18 56 e8 89 e0 f3 ff 83 c4 04 80 7c 24 30 06 74 .V.........|$0.t 01f0 0d 8d 44 24 24 50 e8 35 c6 f1 ff 83 c4 04 ff 74 ..D$$P.5.......t 0200 24 28 ff 74 24 28 e8 95 96 f0 ff 8b $(.t$(...... Data […]: 3b4c24487d348b7424448b5424408b04ce8b4cce0403d0895424382bc874236a008d442418505152e873af0b008b4c242483c41089442438eb0ec7442438948a541033c9894c241485ed7532896c24108bf183f94e730dbb4e000000558d43015055eb458bd981f97fffff7f73068d99800 [Length: 524]