Frame 3329: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:50.919833000 UTC UTC Arrival Time: Nov 21, 2017 01:00:50.919833000 UTC Epoch Arrival Time: 1511226050.919833000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 60.000 microseconds] [Time since reference or first frame: 45.054093000 seconds] Frame Number: 3329 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xd270 (53872) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x63d8 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1637977, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 3015] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 1637977 (relative sequence number) Sequence Number (raw): 2948254358 [Next Sequence Number: 1638501 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2809 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.510977000 seconds] [Time since previous frame in this TCP stream: 60.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1048] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 18] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 50 ff 15 d4 d5 3b 10 85 c0 75 12 8b 44 24 14 c7 P....;...u..D$.. 0010 00 00 00 00 00 c6 40 0c 03 83 c4 0c c3 56 57 8b ......@......VW. 0020 38 8b cf 8d 51 01 8b ff 8a 01 41 84 c0 75 f9 8b 8...Q.....A..u.. 0030 74 24 1c 2b ca 89 4e 04 79 0f 68 bc 73 55 10 6a t$.+..N.y.h.sU.j 0040 01 e8 d2 02 ea ff 83 c4 08 ff 76 04 57 e8 96 f7 ..........v.W... 0050 e8 ff 83 c4 08 89 06 5f c6 46 0c 06 5e 83 c4 0c ......._.F..^... 0060 c3 cc cc cc cc cc cc cc 83 ec 08 8d 44 24 04 50 ............D$.P 0070 8d 44 24 04 50 68 e8 48 55 10 ff 74 24 18 e8 75 .D$.Ph.HU..t$..u 0080 5a ea ff 83 c4 10 83 f8 ff 74 2d ff 34 24 ff 15 Z........t-.4$.. 0090 10 d6 3b 10 85 c0 75 12 8b 44 24 10 c7 00 00 00 ..;...u..D$..... 00a0 00 00 c6 40 0c 03 83 c4 08 c3 0f bf 40 08 8b 4c ...@........@..L 00b0 24 10 89 01 c6 41 0c 01 83 c4 08 c3 cc cc cc cc $....A.......... 00c0 cc cc cc cc cc cc cc cc 51 8d 04 24 50 68 f4 4f ........Q..$Ph.O 00d0 55 10 ff 74 24 10 e8 1d 5a ea ff 83 c4 0c 83 f8 U..t$...Z....... 00e0 ff 74 5b ff 34 24 ff 15 cc d5 3b 10 85 c0 75 10 .t[.4$....;...u. 00f0 8b 44 24 0c c7 00 00 00 00 00 c6 40 0c 03 59 c3 .D$........@..Y. 0100 56 57 8b 38 8b cf 8d 51 01 8a 01 41 84 c0 75 f9 VW.8...Q...A..u. 0110 8b 74 24 14 2b ca 89 4e 04 79 0f 68 bc 73 55 10 .t$.+..N.y.h.sU. 0120 6a 01 e8 f1 01 ea ff 83 c4 08 ff 76 04 57 e8 b5 j..........v.W.. 0130 f6 e8 ff 83 c4 08 89 06 5f c6 46 0c 06 5e 59 c3 ........_.F..^Y. 0140 cc cc cc cc cc cc cc cc 83 ec 10 56 8b 74 24 18 ...........V.t$. 0150 c7 44 24 04 00 00 00 00 c7 44 24 10 00 00 00 00 .D$......D$..... 0160 89 74 24 0c 83 fe 01 7d 0a e8 0a 1f 1a 00 5e 83 .t$....}......^. 0170 c4 10 c3 6a 00 56 6a 04 e8 9b 33 ed ff 50 ff 74 ...j.Vj...3..P.t 0180 24 1c 89 44 24 1c 56 e8 ec 81 ee ff 83 c4 18 83 $..D$.V......... 0190 f8 ff 75 1f ff 74 24 08 e8 1b 40 ec ff 8b 44 24 ..u..t$...@...D$ 01a0 20 83 c4 04 c7 00 00 00 00 00 c6 40 0c 03 5e 83 ..........@..^. 01b0 c4 10 c3 8d 44 24 04 50 8b 44 24 0c 6a 00 ff 30 ....D$.P.D$.j..0 01c0 e8 13 0c ee ff 83 c4 0c 84 c0 75 3a ff 74 24 08 ..........u:.t$. 01d0 e8 e3 3f ec ff ff 74 24 08 68 d8 5b 4c 10 6a 02 ..?...t$.h.[L.j. 01e0 6a 00 e8 11 01 ea ff ff 74 24 18 e8 c8 3f ec ff j.......t$...?.. 01f0 8b 44 24 34 83 c4 18 c7 00 00 00 00 00 c6 40 0c .D$4..........@. 0200 03 5e 83 c4 10 c3 8b 44 24 04 85 c0 .^.....D$... Data […]: 50ff15d4d53b1085c075128b442414c70000000000c6400c0383c40cc356578b388bcf8d51018bff8a014184c075f98b74241c2bca894e04790f68bc7355106a01e8d202eaff83c408ff760457e896f7e8ff83c40889065fc6460c065e83c40cc3cccccccccccccc83ec088d442404508d4 [Length: 524]