Frame 2470: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:50.383084000 UTC UTC Arrival Time: Nov 21, 2017 01:00:50.383084000 UTC Epoch Arrival Time: 1511226050.383084000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 84.000 microseconds] [Time since reference or first frame: 44.517344000 seconds] Frame Number: 2470 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xd016 (53270) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x6632 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1168473, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 2156] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 1168473 (relative sequence number) Sequence Number (raw): 2947784854 [Next Sequence Number: 1168997 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6e8e [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.974228000 seconds] [Time since previous frame in this TCP stream: 84.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2620] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 14] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 24 7c 85 d2 75 3e 83 f9 ff 75 1a 8b 74 24 10 8b $|..u>...u..t$.. 0010 44 24 28 04 62 88 06 8b 5c 24 0c 46 89 74 24 10 D$(.b...\$.F.t$. 0020 e9 85 fc ff ff 83 f9 01 75 3e 8b 74 24 10 8b 44 ........u>.t$..D 0030 24 28 04 66 88 06 8b 5c 24 0c 46 89 74 24 10 e9 $(.f...\$.F.t$.. 0040 66 fc ff ff 83 fa 01 75 1f 83 f9 ff 75 1a 8b 74 f......u....u..t 0050 24 10 8b 44 24 28 04 64 88 06 8b 5c 24 0c 46 89 $..D$(.d...\$.F. 0060 74 24 10 e9 42 fc ff ff 8b 74 24 10 8b 44 24 28 t$..B....t$..D$( 0070 04 68 88 06 8b c2 c1 f8 08 88 46 01 33 c0 83 f9 .h........F.3... 0080 ff 0f 44 c8 8b c1 88 56 02 c1 f8 08 88 46 03 88 ..D....V.....F.. 0090 4e 04 83 c6 05 89 8c 24 8c 00 00 00 89 74 24 10 N......$.....t$. 00a0 8b 5c 24 0c e9 01 fc ff ff 0f b6 c2 83 e8 1e 74 .\$............t 00b0 28 48 74 1e 48 74 0c c7 44 24 24 00 00 00 00 33 (Ht.Ht..D$$....3 00c0 f6 eb 1f c7 44 24 24 27 00 00 00 be 27 00 00 00 ....D$$'....'... 00d0 eb 10 be 1a 00 00 00 eb 05 be 0d 00 00 00 89 74 ...............t 00e0 24 24 83 7c 24 58 00 74 4c 8a 47 ff 8d 4f ff 24 $$.|$X.tL.G..O.$ 00f0 c0 3c 80 75 40 8a 01 24 c0 3c 80 75 0a 8a 41 ff .<.u@..$.<.u..A. 0100 49 24 c0 3c 80 74 f6 8b c7 2b c1 50 89 44 24 38 I$.<.t...+.P.D$8 0110 51 8d 84 24 34 01 00 00 50 e8 74 e1 20 00 8b 4c Q..$4...P.t. ..L 0120 24 40 8a 54 24 5f 83 c4 0c 81 c9 00 00 00 10 89 $@.T$_.......... 0130 4c 24 34 eb 2a 0f b6 4f ff 89 4c 24 34 80 fa 1e L$4.*..O..L$4... 0140 77 1d 83 7c 24 7c 01 7e 16 8b 44 24 14 89 4c 24 w..|$|.~..D$..L$ 0150 78 8b 40 68 0b 84 24 a4 00 00 00 89 44 24 68 8b x.@h..$.....D$h. 0160 44 24 2c 80 fa 10 74 12 80 fa 0f 74 0d c7 44 24 D$,...t....t..D$ 0170 3c ff ff ff ff 83 ca ff eb 0c 0f b6 50 01 0f b6 <...........P... 0180 40 02 89 44 24 3c 8b c7 8b 7c 24 2c 89 7c 24 10 @..D$<...|$,.|$. 0190 8b 7c 24 18 89 54 24 30 85 ff 0f 84 83 f8 ff ff .|$..T$0........ 01a0 01 74 24 28 8b 74 24 7c 85 f6 75 78 8b 44 24 28 .t$(.t$|..ux.D$( 01b0 8b df 83 fb ff 75 4c 04 21 8b 5c 24 2c 8d 73 01 .....uL.!.\$,.s. 01c0 88 03 8b 5c 24 3c 83 7c 24 58 00 0f 84 ca 01 00 ...\$<.|$X...... 01d0 00 f7 c1 00 00 00 10 0f 84 be 01 00 00 83 e1 07 ................ 01e0 51 8d 84 24 30 01 00 00 50 56 89 4c 24 40 e8 9f Q..$0...PV.L$@.. 01f0 e0 20 00 8b 54 24 3c 83 c4 0c 03 74 24 34 e9 9b . ..T$<....t$4.. 0200 01 00 00 83 fb 01 75 04 04 25 eb ad ......u..%.. Data […]: 247c85d2753e83f9ff751a8b7424108b442428046288068b5c240c4689742410e985fcffff83f901753e8b7424108b442428046688068b5c240c4689742410e966fcffff83fa01751f83f9ff751a8b7424108b442428046488068b5c240c4689742410e942fcffff8b7424108b442428046 [Length: 524]