Frame 2831: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:50.623394000 UTC UTC Arrival Time: Nov 21, 2017 01:00:50.623394000 UTC Epoch Arrival Time: 1511226050.623394000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 14.000 microseconds] [Time since reference or first frame: 44.757654000 seconds] Frame Number: 2831 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xd112 (53522) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x6536 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1366545, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 2517] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 1366545 (relative sequence number) Sequence Number (raw): 2947982926 [Next Sequence Number: 1367069 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9f21 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.214538000 seconds] [Time since previous frame in this TCP stream: 14.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2096] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 15] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 6a 00 68 0c b0 62 10 ff 35 28 ff 66 10 e8 fe 06 j.h..b..5(.f.... 0010 ee ff 83 c4 0c c3 cc cc cc cc cc cc cc cc cc cc ................ 0020 83 ec 1c 8d 44 24 03 50 ff 35 2c ff 66 10 8d 44 ....D$.P.5,.f..D 0030 24 10 50 68 44 08 4b 10 ff 74 24 30 c6 44 24 17 $.PhD.K..t$0.D$. 0040 00 e8 fa 7e ee ff 83 c4 14 83 f8 ff 0f 84 46 01 ...~..........F. 0050 00 00 56 6a 0a 68 38 49 55 10 c7 44 24 1c 0a 00 ..Vj.h8IU..D$... 0060 00 00 e8 c9 1b ed ff 6a 00 6a 00 6a 00 89 44 24 .......j.j.j..D$ 0070 24 6a 00 8d 44 24 20 50 8d 44 24 2c 50 8d 44 24 $j..D$ P.D$,P.D$ 0080 2c 50 6a 00 c6 44 24 44 06 e8 02 25 ee ff 83 c4 ,Pj..D$D...%.... 0090 28 80 7c 24 1c 03 8b f0 76 0d 8d 44 24 10 50 e8 (.|$....v..D$.P. 00a0 7c 74 f0 ff 83 c4 04 83 fe ff 75 1a 6a 00 68 48 |t........u.j.hH 00b0 08 4b 10 ff 35 28 ff 66 10 e8 52 06 ee ff 83 c4 .K..5(.f..R..... 00c0 0c 5e 83 c4 1c c3 8b 44 24 08 85 c0 75 31 ff 74 .^.....D$...u1.t 00d0 24 0c e8 b9 ff ec ff 8b 40 04 50 68 74 08 4b 10 $.......@.Pht.K. 00e0 6a 02 6a 00 e8 57 26 ee ff 8b 44 24 3c 83 c4 14 j.j..W&...D$<... 00f0 c7 00 00 00 00 00 c6 40 0c 03 5e 83 c4 1c c3 80 .......@..^..... 0100 7c 24 07 00 74 71 f3 0f 7e 00 8b 74 24 28 66 0f |$..tq..~..t$(f. 0110 d6 06 f3 0f 7e 40 08 66 0f d6 46 08 83 78 08 01 ....~@.f..F..x.. 0120 76 26 80 7e 0c 03 76 0d 56 e8 22 f5 ec ff 8b 44 v&.~..v.V."....D 0130 24 0c 83 c4 04 ff 48 08 c7 46 08 01 00 00 00 c6 $.....H..F...... 0140 46 0d 00 5e 83 c4 1c c3 f7 40 10 fc ff ff ff 74 F..^.....@.....t 0150 0d 50 e8 e9 36 f0 ff 8b 44 24 0c 83 c4 04 50 e8 .P..6...D$....P. 0160 9c 64 f0 ff 83 c4 04 c7 46 08 01 00 00 00 c6 46 .d......F......F 0170 0d 00 5e 83 c4 1c c3 6a 00 50 e8 81 21 1e 00 68 ..^....j.P..!..h 0180 d0 72 55 10 ff 15 3c 75 67 10 8d 44 24 14 50 e8 .rU...