Frame 2626: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:50.492084000 UTC UTC Arrival Time: Nov 21, 2017 01:00:50.492084000 UTC Epoch Arrival Time: 1511226050.492084000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 47.000 microseconds] [Time since reference or first frame: 44.626344000 seconds] Frame Number: 2626 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xd081 (53377) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x65c7 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1252313, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 2312] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 1252313 (relative sequence number) Sequence Number (raw): 2947868694 [Next Sequence Number: 1252837 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8588 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.083228000 seconds] [Time since previous frame in this TCP stream: 47.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1572] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 14] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 75 09 5f c7 06 02 00 00 00 5e c3 8b 46 24 89 01 u._......^..F$.. 0010 89 4e 24 89 79 04 5f 8d 41 08 5e c3 cc cc cc cc .N$.y._.A.^..... 0020 cc cc cc cc cc cc cc cc 56 8b 74 24 08 57 8b 4e ........V.t$.W.N 0030 28 8b 7c 24 10 8b 41 04 8d 14 38 81 fa f8 07 00 (.|$..A...8..... 0040 00 77 0b 83 c0 08 5f 03 c1 89 51 04 5e c3 68 00 .w...._...Q.^.h. 0050 08 00 00 ff 15 c4 18 65 10 8b c8 83 c4 04 85 c9 .......e........ 0060 75 09 5f c7 06 02 00 00 00 5e c3 8b 46 28 89 01 u._......^..F(.. 0070 89 4e 28 89 79 04 5f 8d 41 08 5e c3 cc cc cc cc .N(.y._.A.^..... 0080 cc cc cc cc cc cc cc cc 56 8b 74 24 08 33 d2 8b ........V.t$.3.. 0090 46 24 8d 9b 00 00 00 00 8b 08 89 10 8b d0 8b c1 F$.............. 00a0 85 c9 75 f4 89 56 24 5e c3 cc cc cc cc cc cc cc ..u..V$^........ 00b0 cc cc cc cc cc cc cc cc 8b 4c 24 04 8b 44 24 08 .........L$..D$. 00c0 89 41 04 8b 44 24 10 89 41 2c 8b 44 24 14 89 41 .A..D$..A,.D$..A 00d0 30 8b 44 24 18 89 41 34 8b 44 24 1c 89 41 38 c3 0.D$..A4.D$..A8. 00e0 cc cc cc cc cc cc cc cc 8b 4c 24 04 8b 54 24 08 .........L$..T$. 00f0 c7 01 00 00 00 00 8b 42 40 89 41 08 8b 42 14 85 .......B@.A..B.. 0100 c0 74 06 89 08 89 4a 14 c3 89 4a 08 89 4a 14 c3 .t....J...J..J.. 0110 cc cc cc cc cc cc cc cc 8b 4c 24 04 8b 44 24 0c .........L$..D$. 0120 89 41 08 8b 44 24 08 c7 01 00 00 00 00 8b 50 18 .A..D$........P. 0130 85 d2 74 06 89 0a 89 48 18 c3 89 48 0c 89 48 18 ..t....H...H..H. 0140 c3 cc cc cc cc cc cc cc 8b 44 24 08 85 c0 75 03 .........D$...u. 0150 33 c0 c3 8b 4c 24 0c 83 f9 01 75 14 83 f8 20 74 3...L$....u... t 0160 ef 83 f8 25 74 ea 83 f8 26 74 e5 83 f8 27 74 e0 ...%t...&t...'t. 0170 ff 74 24 10 51 6a 00 6a 01 50 ff 74 24 18 e8 a5 .t$.Qj.j.P.t$... 0180 eb ff ff 83 c4 18 c3 cc 83 ec 10 33 c9 53 b8 01 ...........3.S.. 0190 00 00 00 0f a2 56 8d 74 24 08 89 06 89 5e 04 89 .....V.t$....^.. 01a0 4e 08 89 56 0c 8b 4c 24 14 8b c1 c1 e8 1a 83 e0 N..V..L$........ 01b0 01 c1 e9 0f 83 e1 01 5e a3 d8 18 65 10 89 0d dc .......^...e.... 01c0 18 65 10 5b 83 c4 10 c3 8b 44 24 04 83 f8 15 77 .e.[.....D$....w 01d0 31 ff 24 85 a0 1c 12 10 b0 84 c3 b0 85 c3 b0 82 1.$............. 01e0 c3 b0 83 c3 b0 87 c3 b0 86 c3 b0 8c c3 b0 8d c3 ................ 01f0 b0 8f c3 b0 8e c3 b0 80 c3 b0 81 c3 b0 8a c3 b0 ................ 0200 8b c3 32 c0 c3 8d 49 00 70 1c 12 10 ..2...I.p... Data […]: 75095fc706020000005ec38b46248901894e248979045f8d41085ec3cccccccccccccccccccccccc568b742408578b4e288b7c24108b41048d143881faf8070000770b83c0085f03c18951045ec36800080000ff15c41865108bc883c40485c975095fc706020000005ec38b46288901894 [Length: 524]