Frame 2726: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:50.553946000 UTC UTC Arrival Time: Nov 21, 2017 01:00:50.553946000 UTC Epoch Arrival Time: 1511226050.553946000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 79.000 microseconds] [Time since reference or first frame: 44.688206000 seconds] Frame Number: 2726 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd0c7 (53447) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x6375 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1309953, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 2412] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 1309953 (relative sequence number) Sequence Number (raw): 2947926334 [Next Sequence Number: 1311001 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x79ef [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.145090000 seconds] [Time since previous frame in this TCP stream: 79.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1572] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 15] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 24 1c 57 8b 7c 24 1c c7 44 24 10 00 00 00 00 83 $.W.|$..D$...... 0010 7f 60 00 8b 2f c7 44 24 14 00 00 00 00 74 2b 8b .`../.D$.....t+. 0020 47 14 2b 47 04 80 3c 30 00 74 1f 8b 47 18 53 51 G.+G..<0.t..G.SQ 0030 56 57 c7 44 24 20 01 00 00 00 89 44 24 24 e8 0d VW.D$ .....D$$.. 0040 5f 00 00 8b 4c 24 34 83 c4 10 3b f1 0f 83 77 05 _...L$4...;...w. 0050 00 00 8a 16 0f b6 c2 48 3d a0 00 00 00 0f 87 c3 .......H=....... 0060 05 00 00 0f b6 80 44 02 13 10 ff 24 85 f0 01 13 ......D....$.... 0070 10 8b 43 08 85 c0 74 05 83 c0 04 eb 03 8d 43 0c ..C...t.......C. 0080 50 8d 46 01 50 52 57 e8 b4 e1 ff ff 83 c4 10 8b P.F.PRW......... 0090 f0 e9 23 05 00 00 83 7d 00 00 74 04 33 c9 eb 0d ..#....}..t.3... 00a0 6a 14 55 e8 58 1e ff ff 83 c4 08 8b c8 83 7d 00 j.U.X.........}. 00b0 00 0f 85 6f 05 00 00 0f 57 c0 66 0f d6 01 66 0f ...o....W.f...f. 00c0 d6 41 08 c7 41 10 00 00 00 00 8b 43 08 89 01 89 .A..A......C.... 00d0 71 10 89 4b 08 ff 77 20 68 8b 00 00 00 6a 00 6a q..K..w h....j.j 00e0 03 6a 20 55 e8 17 0b ff ff 6a 01 57 e8 bf 64 ff .j U.....j.W..d. 00f0 ff 6a 00 6a 0a ff 77 20 68 8b 00 00 00 6a 20 55 .j.j..w h....j U 0100 e8 fb 0a ff ff 6a 00 6a 03 6a fc 68 82 00 00 00 .....j.j.j.h.... 0110 6a 20 55 e8 e8 0a ff ff 83 c4 50 46 e9 98 04 00 j U.......PF.... 0120 00 83 7f 50 00 8b 43 08 0f 85 46 ff ff ff 85 c0 ...P..C...F..... 0130 74 16 83 c0 04 50 51 56 57 e8 02 fd ff ff 83 c4 t....PQVW....... 0140 10 8b f0 e9 71 04 00 00 8d 43 0c 50 51 56 57 e8 ....q....C.PQVW. 0150 ec fc ff ff 83 c4 10 8b f0 e9 5b 04 00 00 8a 46 ..........[....F 0160 21 3c 62 0f 82 08 ff ff ff 3c 6d 0f 87 00 ff ff !