Frame 3157: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:50.831766000 UTC UTC Arrival Time: Nov 21, 2017 01:00:50.831766000 UTC Epoch Arrival Time: 1511226050.831766000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 71.000 microseconds] [Time since reference or first frame: 44.966026000 seconds] Frame Number: 3157 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xd1fc (53756) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x644c [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1548897, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 2843] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 1548897 (relative sequence number) Sequence Number (raw): 2948165278 [Next Sequence Number: 1549421 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x41b0 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.422910000 seconds] [Time since previous frame in this TCP stream: 71.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2096] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 18] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 56 8b 74 24 08 83 7e 10 00 8d 46 10 74 09 50 e8 V.t$..~...F.t.P. 0010 7c a7 ed ff 83 c4 04 83 7e 2c 07 75 1f 8b 46 34 |.......~,.u..F4 0020 50 8b 48 04 8b 01 ff d0 8d 46 30 83 c4 04 83 38 P.H......F0....8 0030 00 74 09 50 e8 57 a7 ed ff 83 c4 04 8b 46 2c 83 .t.P.W.......F,. 0040 f8 02 74 05 83 f8 03 75 1a 83 7e 3c 00 57 8d 7e ..t....u..~<.W.~ 0050 3c 74 0f 57 e8 37 a7 ed ff 83 c4 04 c7 07 00 00 ..j 0110 00 68 20 a1 16 10 68 70 a0 16 10 57 e8 1f 5b eb .h ...hp...W..[. 0120 ff 83 c4 30 ba c8 8b 65 10 5f c3 cc cc cc cc cc ...0...e._...... 0130 8b 4c 24 04 8b 51 34 83 fa ff 74 0e 8b 41 30 03 .L$..Q4...t..A0. 0140 c2 39 41 28 7c 04 83 c8 ff c3 8b 49 1c 85 c9 74 .9A(|......I...t 0150 f5 8b 41 04 89 4c 24 04 8b 40 04 ff e0 cc cc cc ..A..L$..@...... 0160 53 55 56 8b 74 24 10 57 8b 4e 1c 85 c9 74 10 8b SUV.t$.W.N...t.. 0170 41 04 8b 40 18 85 c0 74 06 51 ff d0 83 c4 04 83 A..@...t.Q...... 0180 7e 20 00 8d 5e 20 74 0f 53 e8 02 a6 ed ff 83 c4 ~ ..^ t.S....... 0190 04 c7 03 00 00 00 00 83 7e 24 00 8d 7e 24 74 0f ........~$..~$t. 01a0 57 e8 ea a5 ed ff 83 c4 04 c7 07 00 00 00 00 8b W............... 01b0 46 2c 83 f8 02 74 05 83 f8 03 75 32 83 7e 34 00 F,...t....u2.~4. 01c0 8d 6e 34 74 10 55 e8 c5 a5 ed ff 83 c4 04 c7 45 .n4t.U.........E 01d0 00 00 00 00 00 83 7e 38 00 8d 6e 38 74 10 55 e8 ......~8..n8t.U. 01e0 ac a5 ed ff 83 c4 04 c7 45 00 00 00 00 00 8b 4e ........E......N 01f0 30 8b 54 24 18 3b d1 7d 1c 51 52 68 94 82 4b 10 0.T$.;.}.QRh..K. 0200 6a 00 ff 35 04 fc 66 10 e8 73 3c eb j..5..f..s<. Data […]: 568b742408837e10008d4610740950e87ca7edff83c404837e2c07751f8b4634508b48048b01ffd08d463083c404833800740950e857a7edff83c4048b462c83f802740583f803751a837e3c00578d7e3c740f57e837a7edff83c404c707000000005f8b462c83f808740583f809751a8b4 [Length: 524]