Frame 2694: Packet, 1214 bytes on wire (9712 bits), 1214 bytes captured (9712 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:50.533574000 UTC UTC Arrival Time: Nov 21, 2017 01:00:50.533574000 UTC Epoch Arrival Time: 1511226050.533574000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 2.000 microseconds] [Time since reference or first frame: 44.667834000 seconds] Frame Number: 2694 Frame Length: 1214 bytes (9712 bits) Capture Length: 1214 bytes (9712 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1200 Identification: 0xd0b2 (53426) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x631a [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1291501, Ack: 1736, Len: 1160 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 2380] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1160] Sequence Number: 1291501 (relative sequence number) Sequence Number (raw): 2947907882 [Next Sequence Number: 1292661 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x955f [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.124718000 seconds] [Time since previous frame in this TCP stream: 2.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2620] [Bytes sent since last PSH flag: 2620] [Client Contiguous Streams: 1] [Server Contiguous Streams: 15] TCP payload (1160 bytes) Hypertext Transfer Protocol File Data: 1160 bytes Data (1160 bytes) 0000 68 1f 20 00 00 6a 40 6a 00 6a 01 6a 00 6a 00 68 h. ..j@j.j.j.j.h 0010 62 02 00 00 56 e8 9a 57 ff ff 83 c4 40 83 3e 00 b...V..W....@.>. 0020 0f 85 a2 00 00 00 83 7e 4c 00 74 0f 6a 00 56 e8 .......~L.t.j.V. 0030 40 73 ff ff 83 c4 08 85 c0 75 4e 6a 00 e8 72 68 @s.......uNj..rh 0040 ff ff 6a 09 56 8d 58 10 e8 67 66 ff ff 83 c4 0c ..j.V.X..gf..... 0050 85 c0 74 35 6a 00 6a 0c 6a 00 6a 03 c6 00 08 83 ..t5j.j.j.j..... 0060 46 40 08 6a 00 66 c7 40 01 95 0f 6a 03 88 58 03 F@.j.f.@...j..X. 0070 68 66 02 00 00 c7 40 04 c0 0f b6 c0 56 c6 40 08 hf....@.....V.@. 0080 95 e8 2e 57 ff ff 83 c4 20 83 3e 00 75 3a 6a 0c ...W.... .>.u:j. 0090 68 8b 00 00 00 6a 00 6a 00 6a 01 56 e8 03 74 ff h....j.j.j.V..t. 00a0 ff 83 c4 18 85 c0 74 20 6a 02 c6 00 ff 80 48 01 ......t j.....H. 00b0 30 56 e8 fd 65 ff ff 83 c4 08 85 c0 74 0a c6 00 0V..e.......t... 00c0 01 ff 46 40 c6 40 01 c3 5f 5e 5b c3 cc cc cc cc ..F@.@.._^[..... 00d0 cc cc cc cc 53 56 57 8b 7c 24 10 8b 37 83 3e 00 ....SVW.|$..7.>. 00e0 75 1d 6a 0c 68 8b 00 00 00 6a 00 6a 00 6a 01 56 u.j.h....j.j.j.V 00f0 e8 af 73 ff ff 83 c4 18 85 c0 74 03 c6 00 8f 6a ..s.......t....j 0100 09 6a 40 6a 00 6a 01 6a 00 6a 00 68 62 02 00 00 .j@j.j.j.j.hb... 0110 56 e8 9e 56 ff ff 6a 00 6a 00 6a 00 6a 00 6a 03 V..V..j.j.j.j.j. 0120 6a 20 56 e8 1c 5f ff ff 6a 20 6a 40 6a 00 6a 01 j V.._..j j@j.j. 0130 6a 00 6a 00 68 62 02 00 00 56 e8 75 56 ff ff 83 j.j.hb...V.uV... 0140 c4 5c 83 3e 00 75 45 83 7e 4c 00 74 0f 6a 00 56 .\.>.uE.~L.t.j.V 0150 e8 1f 72 ff ff 83 c4 08 85 c0 75 30 6a 00 e8 51 ..r.......u0j..Q 0160 67 ff ff 6a 08 56 8d 58 10 e8 46 65 ff ff 83 c4 g..j.V.X..Fe.... 0170 0c 85 c0 74 17 c6 00 07 83 46 40 07 66 c7 40 01 ...t.....F@.f.@. 0180 95 0f 88 58 03 c7 40 04 c0 08 c1 95 68 a0 00 00 ...X..@.....h... 0190 00 6a 40 6a 00 6a 01 6a 00 6a 00 68 62 02 00 00 .j@j.j.j.j.hb... 01a0 56 e8 0e 56 ff ff 83 c4 20 83 bf 04 01 00 00 00 V..V.... ....... 01b0 0f 84 78 02 00 00 83 3e 00 75 45 83 7e 4c 00 74 ..x....>.uE.~L.t 01c0 0f 6a 00 56 e8 ab 71 ff ff 83 c4 08 85 c0 75 30 .j.V..q.......u0 01d0 6a 00 e8 dd 66 ff ff 6a 08 56 8d 58 10 e8 d2 64 j...f..j.V.X...d 01e0 ff ff 83 c4 0c 85 c0 74 17 c6 00 07 83 46 40 07 .......t.....F@. 01f0 66 c7 40 01 95 0f 88 58 03 c7 40 04 c0 08 c1 95 f.@....X..@..... 0200 68 80 16 00 00 6a 40 6a 00 6a 01 6a 00 6a 00 68 h....j@j.j.j.j.h 0210 62 02 00 00 56 e8 9a 55 ff ff 83 c4 20 83 3e 00 b...V..U.... .>. 0220 75 45 83 7e 4c 00 74 0f 6a 00 56 e8 44 71 ff ff uE.~L.t.j.V.Dq.. 0230 83 c4 08 85 c0 75 30 6a 00 e8 76 66 ff ff 6a 08 .....u0j..vf..j. 0240 56 8d 58 10 e8 6b 64 ff ff 83 c4 0c 85 c0 74 17 V.X..kd.......t. 0250 c6 00 07 83 46 40 07 66 c7 40 01 95 0f 88 58 03 ....F@.f.@....X. 0260 c7 40 04 c0 08 c1 95 68 0e 18 00 00 6a 40 6a 00 .@.....h....j@j. 0270 6a 01 6a 00 6a 00 68 62 02 00 00 56 e8 33 55 ff j.j.j.hb...V.3U. 0280 ff 83 c4 20 83 3e 00 75 45 83 7e 4c 00 74 0f 6a ... .>.uE.~L.t.j 0290 00 56 e8 dd 70 ff ff 83 c4 08 85 c0 75 30 6a 00 .V..p.......u0j. 02a0 e8 0f 66 ff ff 6a 08 56 8d 58 10 e8 04 64 ff ff ..f..j.V.X...d.. 02b0 83 c4 0c 85 c0 74 17 c6 00 07 83 46 40 07 66 c7 .....t.....F@.f. 02c0 40 01 95 0f 88 58 03 c7 40 04 c0 08 c1 95 68 00 @....X..@.....h. 02d0 20 00 00 6a 40 6a 00 6a 01 6a 00 6a 01 6a 62 56 ..j@j.j.j.j.jbV 02e0 e8 cf 54 ff ff 6a 0a 6a 40 6a 00 6a 01 6a 00 6a ..T..j.j@j.j.j.j 02f0 00 68 62 04 00 00 56 e8 b8 54 ff ff 83 c4 40 83 .hb...V..T....@. 0300 3e 00 75 45 83 7e 4c 00 74 0f 6a 00 56 e8 62 70 >.uE.~L.t.j.V.bp 0310 ff ff 83 c4 08 85 c0 75 30 6a 05 e8 94 65 ff ff .......u0j...e.. 0320 6a 08 56 8d 58 10 e8 89 63 ff ff 83 c4 0c 85 c0 j.V.X...c....... 0330 74 17 c6 00 07 83 46 40 07 66 c7 40 01 95 0f 88 t.....F@.f.@.... 0340 58 03 c7 40 04 c0 08 c1 95 6a 2f 6a 40 6a 00 6a X..@.....j/j@j.j 0350 01 6a 00 6a 00 68 62 02 00 00 56 e8 54 54 ff ff .j.j.hb...V.TT.. 0360 83 c4 20 83 3e 00 75 45 83 7e 4c 00 74 0f 6a 00 .. .>.uE.~L.t.j. 0370 56 e8 fe 6f ff ff 83 c4 08 85 c0 75 30 6a 00 e8 V..o.......u0j.. 0380 30 65 ff ff 6a 08 56 8d 58 10 e8 25 63 ff ff 83 0e..j.V.X..%c... 0390 c4 0c 85 c0 74 17 c6 00 07 83 46 40 07 66 c7 40 ....t.....F@.f.@ 03a0 01 95 0f 88 58 03 c7 40 04 c0 08 c1 95 6a 5f 6a ....X..@.....j_j 03b0 40 6a 00 6a 01 6a 00 6a 00 68 62 02 00 00 56 e8 @j.j.j.j.hb...V. 03c0 f0 53 ff ff 83 c4 20 83 3e 00 75 45 83 7e 4c 00 .S.... .>.uE.~L. 03d0 74 0f 6a 00 56 e8 9a 6f ff ff 83 c4 08 85 c0 75 t.j.V..o.......u 03e0 30 6a 00 e8 cc 64 ff ff 6a 08 56 8d 58 10 e8 c1 0j...d..j.V.X... 03f0 62 ff ff 83 c4 0c 85 c0 74 17 c6 00 07 83 46 40 b.......t.....F@ 0400 07 66 c7 40 01 95 0f 88 58 03 c7 40 04 c0 08 c1 .f.@....X..@.... 0410 95 68 00 10 00 00 6a 40 6a 00 6a 01 6a 00 6a 00 .h....j@j.j.j.j. 0420 68 62 02 00 00 56 e8 89 53 ff ff 83 c4 20 83 3e hb...V..S.... .> 0430 00 0f 85 a2 00 00 00 83 7e 4c 00 74 0f 6a 00 56 ........~L.t.j.V 0440 e8 2f 6f ff ff 83 c4 08 85 c0 75 4e 6a 00 e8 61 ./o.......uNj..a 0450 64 ff ff 6a 09 56 8d 58 10 e8 56 62 ff ff 83 c4 d..j.V.X..Vb.... 0460 0c 85 c0 74 35 6a 00 6a 0c 6a 00 6a 03 c6 00 08 ...t5j.j.j.j.... 0470 83 46 40 08 6a 00 66 c7 40 01 95 0f 6a 03 88 58 .F@.j.f.@...j..X 0480 03 68 66 02 00 00 c7 40 .hf....@ Data […]: 681f2000006a406a006a016a006a00686202000056e89a57ffff83c440833e000f85a2000000837e4c00740f6a0056e84073ffff83c40885c0754e6a00e87268ffff6a09568d5810e86766ffff83c40c85c074356a006a0c6a006a03c60008834640086a0066c74001950f6a03885803686 [Length: 1160]