Frame 3940: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.244679000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.244679000 UTC Epoch Arrival Time: 1511226051.244679000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 84.000 microseconds] [Time since reference or first frame: 45.378939000 seconds] Frame Number: 3940 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xd41f (54303) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x6229 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 1964953, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 3626] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 1964953 (relative sequence number) Sequence Number (raw): 2948581334 [Next Sequence Number: 1965477 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd473 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.835823000 seconds] [Time since previous frame in this TCP stream: 84.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1572] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 23] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 6a 00 40 50 6a 00 eb 51 8b c7 81 ff 7f ff ff 7f j.@Pj..Q........ 0010 73 06 8d 87 80 00 00 00 89 41 38 6a 00 40 50 6a s........A8j.@Pj 0020 00 eb 36 03 79 34 3b 79 38 72 3e 8d 87 80 00 00 ..6.y4;y8r>..... 0030 00 89 41 38 3d ff ff ff 7f 72 14 68 bc 73 55 10 ..A8=....r.h.sU. 0040 6a 01 e8 91 05 e5 ff 83 c4 08 b9 f0 f8 66 10 8b j............f.. 0050 41 38 6a 00 40 50 ff 71 30 e8 ea 4c e4 ff b9 f0 A8j.@P.q0..L.... 0060 f8 66 10 83 c4 0c 89 41 30 2b eb 55 53 bb f0 f8 .f.....A0+.US... 0070 66 10 e9 85 00 00 00 83 7b 30 00 75 3a c7 43 34 f.......{0.u:.C4 0080 00 00 00 00 8b 7b 1c 83 ff 4e 73 10 b8 4e 00 00 .....{...Ns..N.. 0090 00 89 43 38 6a 00 40 50 6a 00 eb 4f 8b c7 81 ff ..C8j.@Pj..O.... 00a0 7f ff ff 7f 73 06 8d 87 80 00 00 00 89 43 38 6a ....s........C8j 00b0 00 40 50 6a 00 eb 34 8b 7b 34 03 7b 1c 3b 7b 38 .@Pj..4.{4.{.;{8 00c0 72 34 8d 87 80 00 00 00 89 43 38 3d ff ff ff 7f r4.......C8=.... 00d0 72 0f 68 bc 73 55 10 6a 01 e8 fa 04 e5 ff 83 c4 r.h.sU.j........ 00e0 08 8b 43 38 6a 00 40 50 ff 73 30 e8 58 4c e4 ff ..C8j.@P.s0.XL.. 00f0 89 43 30 83 c4 0c ff 73 1c ff 73 18 8b 43 34 03 .C0....s..s..C4. 0100 43 30 50 e8 4a ba 14 00 8b 6c 24 1c 89 7b 34 83 C0P.J....l$..{4. 0110 c4 0c c7 43 5c 02 00 00 00 e9 36 de ff ff 46 83 ...C\.....6...F. 0120 7b 30 00 75 45 c7 43 34 00 00 00 00 8b de 2b df {0.uE.C4......+. 0130 83 fb 4e 73 15 b8 4e 00 00 00 b9 f0 f8 66 10 6a ..Ns..N......f.j 0140 00 89 41 38 40 50 6a 00 eb 5f 8b c3 81 fb 7f ff ..A8@Pj.._...... 0150 ff 7f 73 06 8d 83 80 00 00 00 b9 f0 f8 66 10 6a ..s..........f.j 0160 00 89 41 38 40 50 6a 00 eb 3f 8b 5b 34 2b df b9 ..A8@Pj..?.[4+.. 0170 f0 f8 66 10 03 de 3b 59 38 72 3e 8d 83 80 00 00 ..f...;Y8r>..... 0180 00 89 41 38 3d ff ff ff 7f 72 14 68 bc 73 55 10 ..A8=....r.h.sU. 0190 6a 01 e8 41 04 e5 ff 83 c4 08 b9 f0 f8 66 10 8b j..A.........f.. 01a0 41 38 6a 00 40 50 ff 71 30 e8 9a 4b e4 ff b9 f0 A8j.@P.q0..K.... 01b0 f8 66 10 83 c4 0c 89 41 30 8b c6 2b c7 50 8b 41 .f.....A0..+.P.A 01c0 30 03 41 34 57 50 e8 87 b9 14 00 b8 f0 f8 66 10 0.A4WP........f. 01d0 83 c4 0c 89 58 34 8b d8 c7 43 5c 02 00 00 00 e9 ....X4...C\..... 01e0 70 dd ff ff 3c 2f 77 0c 46 80 3e 3e 0f 85 90 dd p...>.... 01f0 ff ff eb 08 3c 3e 0f 85 85 dd ff ff 46 83 7b 30 ....<>......F.{0 0200 00 75 45 c7 43 34 00 00 00 00 8b de .uE.C4...... Data […]: 6a0040506a00eb518bc781ff7fffff7f73068d87800000008941386a0040506a00eb360379343b7938723e8d87800000008941383dffffff7f721468bc7355106a01e89105e5ff83c408b9f0f866108b41386a004050ff7130e8ea4ce4ffb9f0f8661083c40c8941302beb5553bbf0f8661 [Length: 524]