Frame 380: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:48.167133000 UTC UTC Arrival Time: Nov 21, 2017 01:00:48.167133000 UTC Epoch Arrival Time: 1511226048.167133000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 237.000 microseconds] [Time since reference or first frame: 42.301393000 seconds] Frame Number: 380 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xca2a (51754) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x6c1e [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 30969, Ack: 844, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 68] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 30969 (relative sequence number) Sequence Number (raw): 2946647350 [Next Sequence Number: 31493 (relative sequence number)] Acknowledgment Number: 844 (relative ack number) Acknowledgment number (raw): 1000186153 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x4095 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 758.277000 milliseconds] [Time since previous frame in this TCP stream: 237.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1572] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 1] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 75 0e b9 0b 00 00 00 89 4c 24 18 e9 d0 07 00 00 u.......L$...... 0010 80 fb 30 0f 8c ce 00 00 00 80 fb 39 0f 8f c5 00 ..0........9.... 0020 00 00 66 8b 47 0c 66 8b c8 66 c1 e0 02 66 03 c8 ..f.G.f..f...f.. 0030 66 03 c9 66 0f be c3 66 83 e9 30 66 03 c8 66 89 f..f...f..0f..f. 0040 4f 0c b8 e7 03 00 00 66 3b c8 0f 87 97 00 00 00 O......f;....... 0050 8b 4c 24 18 e9 87 07 00 00 8d 43 d0 3c 09 0f 87 .L$.......C.<... 0060 83 00 00 00 66 0f be c3 66 83 e8 30 b9 0c 00 00 ....f...f..0.... 0070 00 66 89 47 0e 89 4c 24 18 e9 62 07 00 00 80 fb .f.G..L$..b..... 0080 20 75 0e b9 0d 00 00 00 89 4c 24 18 e9 4f 07 00 u.......L$..O.. 0090 00 80 fb 30 7c 51 80 fb 39 7f 4c 66 8b 47 0e 66 ...0|Q..9.Lf.G.f 00a0 8b c8 66 c1 e0 02 66 03 c8 66 03 c9 66 0f be c3 ..f...f..f..f... 00b0 66 83 e9 30 66 03 c8 66 89 4f 0e eb 85 8d 43 d0 f..0f..f.O....C. 00c0 3c 09 77 1a 66 0f be c3 66 83 e8 30 b9 0e 00 00 <.w.f...f..0.... 00d0 00 66 89 47 10 89 4c 24 18 e9 02 07 00 00 80 fb .f.G..L$........ 00e0 20 0f 84 f9 06 00 00 c6 47 01 01 2b f5 5d 5f 8b .......G..+.]_. 00f0 c6 5e 5b 83 c4 2c c3 8d 43 d0 3c 09 77 25 66 8b .^[..,..C.<.w%f. 0100 47 10 66 8b c8 66 c1 e0 02 66 03 c8 66 03 c9 66 G.f..f...f..f..f 0110 0f be c3 66 83 e9 30 66 03 c8 66 89 4f 10 e9 1f ...f..0f..f.O... 0120 ff ff ff 80 fb 0a 0f 84 3b 06 00 00 80 fb 0d 74 ........;......t 0130 18 80 fb 20 75 b1 b9 0f 00 00 00 89 4c 24 18 e9 ... u.......L$.. 0140 9c 06 00 00 80 fb 0d 75 0e b9 10 00 00 00 89 4c .......u.......L 0150 24 18 e9 89 06 00 00 8b 44 24 10 80 fb 0a 8b 5c $.......D$.....\ 0160 24 14 0f 85 80 06 00 00 b9 28 00 00 00 89 4c 24 $........(....L$ 0170 18 e9 72 06 00 00 80 fb 0d 0f 84 61 06 00 00 80 ..r........a.... 0180 fb 0a 0f 84 58 06 00 00 80 27 03 c7 47 08 ff ff ....X....'..G... 0190 ff ff a1 d0 c8 40 00 85 c0 74 0e 57 ff d0 83 c4 .....@...t.W.... 01a0 04 85 c0 0f 85 42 ff ff ff 8d 43 bf 3c 19 0f 87 .....B....C.<... 01b0 33 ff ff ff 0f be c3 83 c0 bd c6 47 12 00 c7 44 3..........G...D 01c0 24 14 01 00 00 00 83 f8 12 0f 87 bd 00 00 00 ff $............... 01d0 24 85 80 9b 40 00 c6 47 12 06 b9 12 00 00 00 e9 $...@..G........ 01e0 f4 05 00 00 c6 47 12 00 b9 12 00 00 00 e9 e6 05 .....G.......... 01f0 00 00 c6 47 12 01 b9 12 00 00 00 e9 d8 05 00 00 ...G............ 0200 c6 47 12 02 b9 12 00 00 00 e9 ca 05 .G.......... Data […]: 750eb90b000000894c2418e9d007000080fb300f8cce00000080fb390f8fc5000000668b470c668bc866c1e0026603c86603c9660fbec36683e9306603c866894f0cb8e7030000663bc80f87970000008b4c2418e9870700008d43d03c090f8783000000660fbec36683e830b90c0000006 [Length: 524]