Frame 2494: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:50.403121000 UTC UTC Arrival Time: Nov 21, 2017 01:00:50.403121000 UTC Epoch Arrival Time: 1511226050.403121000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 4.000 microseconds] [Time since reference or first frame: 44.537381000 seconds] Frame Number: 2494 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd024 (53284) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x6418 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1179477, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 2180] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 1179477 (relative sequence number) Sequence Number (raw): 2947795858 [Next Sequence Number: 1180525 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x53c2 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 2.994265000 seconds] [Time since previous frame in this TCP stream: 4.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1572] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 14] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 3a 4e 01 75 1a 83 f8 fe 74 1c 8a 4a 02 3a 4e 02 :N.u....t..J.:N. 0010 75 0d 83 f8 ff 74 0f 8a 42 03 3a 46 03 74 07 1b u....t..B.:F.t.. 0020 c0 83 c8 01 eb 02 33 c0 85 c0 75 55 38 44 2f 02 ......3...uU8D/. 0030 74 51 8b 44 24 18 8b 4c 24 10 8b 40 34 2b cb 0f tQ.D$..L$..@4+.. 0040 af c8 51 03 c7 57 50 ff 15 d0 d3 3b 10 83 c4 0c ..Q..WP....;.... 0050 5e 8b 4c 24 20 8b c1 c1 e8 08 55 ff 74 24 1c 88 ^.L$ .....U.t$.. 0060 07 8d 47 02 50 88 4f 01 e8 29 b7 20 00 8b 44 24 ..G.P.O..). ..D$ 0070 20 83 c4 0c c6 44 2f 02 00 ff 40 30 5f 5d 5b 59 ....D/...@0_][Y 0080 c3 78 af 8b 44 24 18 43 03 78 34 3b 5c 24 10 0f .x..D$.C.x4;\$.. 0090 8c 38 ff ff ff eb b9 cc cc cc cc cc 8b 44 24 04 .8...........D$. 00a0 83 f8 0d 77 11 ff 24 85 30 ff 10 10 8b 44 24 08 ...w..$.0....D$. 00b0 c7 00 00 00 00 00 b8 fd ff ff ff c3 e8 0b fd 00 ................ 00c0 00 8b 4c 24 08 89 01 33 c0 c3 8b 44 24 08 c7 00 ..L$...3...D$... 00d0 0a 00 00 00 33 c0 c3 8b 44 24 08 c7 00 00 00 00 ....3...D$...... 00e0 00 33 c0 c3 8b 4c 24 08 a1 c0 18 65 10 89 01 33 .3...L$....e...3 00f0 c0 c3 8b 44 24 08 c7 00 fa 00 00 00 33 c0 c3 8b ...D$.......3... 0100 44 24 08 c7 00 80 96 98 00 33 c0 c3 8b 44 24 08 D$.......3...D$. 0110 c7 00 01 00 00 00 33 c0 c3 8d 49 00 20 ff 10 10 ......3...I. ... 0120 de fe 10 10 f8 fe 10 10 de fe 10 10 13 ff 10 10 ................ 0130 20 ff 10 10 20 ff 10 10 13 ff 10 10 eb fe 10 10 ... ........... 0140 20 ff 10 10 c0 fe 10 10 d0 fe 10 10 c0 fe 10 10 ............... 0150 06 ff 10 10 cc cc cc cc cc cc cc cc 81 ec 1c 01 ................ 0160 00 00 a1 c8 79 65 10 33 c4 89 84 24 18 01 00 00 ....ye.3...$.... 0170 8b 84 24 28 01 00 00 8b 94 24 38 01 00 00 53 8b ..$(.....$8...S. 0180 9c 24 24 01 00 00 32 c9 32 ed 55 8b ac 24 2c 01 .$$...2.2.U..$,. 0190 00 00 89 44 24 2c 56 8b b4 24 3c 01 00 00 33 c0 ...D$,V..$<...3. 01a0 88 4c 24 1e 88 6c 24 13 88 4c 24 1f 88 6c 24 12 .L$..l$..L$..l$. 01b0 8b 4c 24 30 89 44 24 64 8d 04 0e 89 74 24 2c 8b .L$0.D$d....t$,. 01c0 f0 89 44 24 54 8d 46 ff 57 8b bc 24 3c 01 00 00 ..D$T.F.W..$<... 01d0 89 5c 24 10 89 6c 24 38 89 54 24 24 c7 44 24 44 .\$..l$8.T$$.D$D 01e0 00 00 00 00 c7 44 24 48 00 00 00 00 c7 44 24 64 .....D$H.....D$d 01f0 00 00 00 00 89 74 24 18 c7 44 24 4c 00 00 00 00 .....t$..D$L.... 0200 c7 44 24 60 00 00 00 00 89 44 24 50 85 db 75 2a .D$`.....D$P..u* 0210 85 ed 75 26 85 c9 75 22 81 ff 19 fc ff ff 75 1a ..u&..u"......u. 0220 39 7c 24 30 75 14 51 51 51 51 51 51 51 e8 6a 11 9|$0u.QQQQQQQ.j. 0230 00 00 83 c4 1c e9 38 0e 00 00 8b 84 24 44 01 00 ......8.....$D.. 0240 00 a9 6f 5a 0f e2 74 0a b8 fd ff ff ff e9 20 0e ..oZ..t....... . 0250 00 00 85 db 0f 84 13 0e 00 00 85 c9 0f 84 0b 0e ................ 0260 00 00 8b 8c 24 4c 01 00 00 85 d2 75 08 85 c9 0f ....$L.....u.... 0270 8f f8 0d 00 00 85 c9 79 0a b8 f1 ff ff ff e9 ef .......y........ 0280 0d 00 00 85 ff 79 0a b8 e0 ff ff ff e9 e1 0d 00 .....y.......... 0290 00 8b 4c 24 30 85 c9 0f 88 c9 0d 00 00 3b cf 0f ..L$0........;.. 02a0 8f c1 0d 00 00 8b 0b 81 f9 45 52 43 50 74 18 b8 .........ERCPt.. 02b0 fc ff ff ff ba e3 ff ff ff 81 f9 50 43 52 45 0f ...........PCRE. 02c0 44 c2 e9 ab 0d 00 00 f6 43 0c 01 75 0a b8 e4 ff D.......C..u.... 02d0 ff ff e9 9b 0d 00 00 8b 4b 08 c1 e9 0b 83 e1 01 ........K....... 02e0 89 4c 24 2c 89 8c 24 bc 00 00 00 a9 00 00 00 08 .L$,..$......... 02f0 74 07 b8 02 00 00 00 eb 06 c1 e8 0f 83 e0 01 85 t............... 0300 c9 8b 8c 24 44 01 00 00 89 84 24 f8 00 00 00 0f ...$D.....$..... 0310 84 82 00 00 00 f7 c1 00 20 00 00 75 7a 8d 44 24 ........ ..uz.D$ 0320 3c 50 57 ff 74 24 3c e8 e0 9e 02 00 83 c4 0c 85