Frame 2803: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:50.600089000 UTC UTC Arrival Time: Nov 21, 2017 01:00:50.600089000 UTC Epoch Arrival Time: 1511226050.600089000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 6.000 microseconds] [Time since reference or first frame: 44.734349000 seconds] Frame Number: 2803 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd100 (53504) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x633c [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1351349, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 2489] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 1351349 (relative sequence number) Sequence Number (raw): 2947967730 [Next Sequence Number: 1352397 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0422 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.191233000 seconds] [Time since previous frame in this TCP stream: 6.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 12576] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 15] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 4b 01 02 80 4b 04 01 8b 7c 24 10 85 d2 74 0d 80 K...K...|$...t.. 0010 4b 18 04 80 4b 1c 0e e9 8d 00 00 00 80 4b 14 01 K...K........K.. 0020 e9 84 00 00 00 80 4b 01 3c 8b 7c 24 10 85 d2 74 ......K.<.|$...t 0030 0a 80 4b 18 04 80 4b 1c 04 eb 6e 80 4b 10 20 eb ..K...K...n.K. . 0040 68 51 55 6a 40 53 e8 a1 fa ff ff 83 c4 10 eb 55 hQUj@S.........U 0050 51 55 6a 40 53 e8 f2 f9 ff ff 83 c4 10 eb 46 51 QUj@S.........FQ 0060 55 6a 00 53 e8 83 fa ff ff 83 c4 10 eb 37 51 55 Uj.S.........7QU 0070 6a 00 53 e8 d4 f9 ff ff 83 c4 10 eb 28 51 55 68 j.S.........(QUh 0080 a0 00 00 00 53 e8 62 fa ff ff 83 c4 10 eb 16 51 ....S.b........Q 0090 55 68 a0 00 00 00 53 e8 b0 f9 ff ff 83 c4 10 eb Uh....S......... 00a0 04 8b 6c 24 1c 8b 7c 24 10 8b 44 24 20 0f b6 48 ..l$..|$..D$ ..H 00b0 01 0f b6 40 02 c1 e1 08 0b c8 8b 44 24 20 03 c1 ...@.......D$ .. 00c0 89 44 24 20 80 38 77 75 0d 8b 54 24 18 8b 4c 24 .D$ .8wu..T$..L$ 00d0 14 e9 b6 fa ff ff 8b c7 5f 5e 5d 5b 8b 4c 24 24 ........_^][.L$$ 00e0 33 cc e8 11 15 1e 00 83 c4 28 c3 5f 5e 5d 33 c0 3........(._^]3. 00f0 5b 8b 4c 24 24 33 cc e8 fc 14 1e 00 83 c4 28 c3 [.L$$3........(. 0100 5f 5e 5d b8 02 00 00 00 5b 8b 4c 24 24 33 cc e8 _^].....[.L$$3.. 0110 e4 14 1e 00 83 c4 28 c3 b8 03 00 00 00 8b 4c 24 ......(.......L$ 0120 34 5f 5e 5d 5b 33 cc e8 cc 14 1e 00 83 c4 28 c3 4_^][3........(. 0130 5f 9e 13 10 3c 99 13 10 b5 9d 13 10 c4 9d 13 10 _...<........... 0140 d3 9d 13 10 e2 9d 13 10 f1 9d 13 10 03 9e 13 10 ................ 0150 cb 9c 13 10 99 9d 13 10 73 9d 13 10 48 9d 13 10 ........s...H... 0160 5f 9d 13 10 15 9a 13 10 39 9a 13 10 45 9d 13 10 _.......9...E... 0170 33 9a 13 10 42 9a 13 10 5c 9d 13 10 56 9a 13 10 3...B...\...V... 0180 53 9a 13 10 4b 9a 13 10 82 9b 13 10 6d 9b 13 10 S...K.......m... 0190 56 9b 13 10 86 99 13 10 37 9d 13 10 74 9e 13 10 V.......7...t... 01a0 3f 99 13 10 90 99 13 10 b0 99 13 10 f4 99 13 10 ?............... 01b0 8c 9e 13 10 00 00 00 00 01 01 02 03 04 05 06 07 ................ 01c0 00 00 00 00 08 09 00 0a 00 09 00 00 00 00 00 00 ................ 01d0 00 0b 0c 00 00 0d 0d 0b 0b 0d 0d 0e 0e 0f 0d 0b ................ 01e0 0d 0e 10 10 0c 0c 10 10 11 11 12 10 0c 10 11 00 ................ 01f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0200 00 00 00 00 00 00 00 00 00 13 13 01 01 13 13 14 ................ 0210 14 15 13 01 13 14 20 20 20 20 20 20 20 20 20 20 ...... 0220 20 20 16 17 18 00 00 00 00 00 19 1a 1b 1b 1b 1b .............. 0230 00 1c 1d 1d 1d 1c 1c 1c 1c 1c 1c 00 1c 1c 1c 1c ................ 0240 00 00 00 00 00 00 1e 1e 1e 00 00 00 00 00 00 00 ................ 0250 00 00 00 00 00 1f 8b ff b4 9a 13 10 ce 9a 13 10 ................ 0260 e8 9a 13 10 02 9b 13 10 1c 9b 13 10 39 9b 13 10 ............9... 0270 96 9a 13 10 74 9a 13 10 5f 9e 13 10 00 01 02 03 ....t..._....... 0280 04 05 08 08 08 08 08 06 08 07 08 06 9a 9c 13 10 ................ 0290 a8 9c 13 10 15 9e 13 10 00 00 02 02 00 00 01 01 ................ 02a0 00 02 00 01 cc cc cc cc cc cc cc cc 8b 54 24 08 .............T$. 02b0 53 56 8b 74 24 0c 57 85 d2 79 0f 80 3e 00 8b d6 SV.t$.W..y..>... 02c0 74 06 42 80 3a 00 75 fa 2b d6 8b c6 85 d2 0f 8e t.B.:.u.+....... 02d0 cd 01 00 00 8a 18 4a 80 fb 80 0f 82 b8 01 00 00 ......J......... 02e0 80 fb c0 0f 82 72 02 00 00 80 fb fe 0f 83 58 02 .....r........X. 02f0 00 00 0f b6 cb 83 e1 3f 8a b9 08 bd 49 10 0f b6 .......?....I... 0300 ff 3b d7 0f 8c 30 02 00 00 8a 68 01 40 8a cd 80 .;...0....h.@... 0310 e1 c0 2b d7 80 f9 80 0f 85 0a 02 00 00 4f 83 ff ..+..........O.. 0320 04 0f 87 6c 01 00 00 ff 24 bd e0 a2 13 10 f6 c3 ...l....$....... 0330 3e 0f 85 5c 01 00 00 8b 4c 24 18 2b c6 5f 48 5e >..\....L$.+._H^ 0340 89 01 b8 0f 00 00 00 5b c3 8a 48 01 40 80 e1 c0 .......[..H.@... 0350 80 f9 80 0f 85 4e 01 00 00 80 fb e0 75 1d f6 c5 .....N......u... 0360 20 0f 85 2c 01 00 00 8b 4c 24 18 2b c6 5f 83 e8 ..,....L$.+._.. 0370 02 5e 89 01 b8 10 00 00 00 5b c3 80 fb ed 0f 85 .^.......[...... 0380 0f 01 00 00 80 fd a0 0f 82 06 01 00 00 8b 4c 24 ..............L$ 0390 18 2b c6 5f 83 e8 02 5e 89 01 b8 0e 00 00 00 5b .+._...^.......[ 03a0 c3 8a 48 01 40 80 e1 c0 80 f9 80 0f 85 f6 00 00 ..H.@........... 03b0 00 8a 48 01 40 80 e1 c0 80 f9 80 0f 85 fa 00 00 ..H.@........... 03c0 00 80 fb f0 75 1d f6 c5 30 0f 85 c4 00 00 00 8b ....u...0....... 03d0 4c 24 18 2b c6 5f 83 e8 03 5e 89 01 b8 11 00 00 L$.+._...^...... 03e0 00 5b c3 80 fb f4 77 0f 0f 85 a5 00 00 00 80 fd .[....w......... 03f0 8f 0f 86 9c 00 00 00 8b 4c 24 18 2b c6 5f 83 e8 ........L$.+._.. 0400 03 5e 89 01 b8 0d 00 00 00 5b c3 8a 48 01 40 80 .^.......[..H.@. 0410 e1 c0 80 f9 80 0f 85 8c ........ Data […]: 4b0102804b04018b7c241085d2740d804b1804804b1c0ee98d000000804b1401e984000000804b013c8b7c241085d2740a804b1804804b1c04eb6e804b1020eb6851556a4053e8a1faffff83c410eb5551556a4053e8f2f9ffff83c410eb4651556a0053e883faffff83c410eb3751556a0 [Length: 1048]