Frame 4134: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.353623000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.353623000 UTC Epoch Arrival Time: 1511226051.353623000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 3.000 microseconds] [Time since reference or first frame: 45.487883000 seconds] Frame Number: 4134 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd4ab (54443) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5f91 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2074469, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 3820] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 2074469 (relative sequence number) Sequence Number (raw): 2948690850 [Next Sequence Number: 2075517 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf52a [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 3.944767000 seconds] [Time since previous frame in this TCP stream: 3.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 6288] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 24] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 3b 10 83 c4 08 85 c0 74 0c c7 46 60 05 00 00 00 ;......t..F`.... 0010 e9 f2 fd ff ff 57 e8 21 11 00 00 8b 44 24 30 83 .....W.!....D$0. 0020 0f 10 89 47 28 8b 47 04 89 47 04 8b 4e 50 8b 56 ...G(.G..G..NP.V 0030 54 8b c1 23 c2 83 c4 04 83 f8 ff 74 05 89 4f 18 T..#.......t..O. 0040 eb 18 8b 44 24 16 25 00 f0 00 00 3d 00 80 00 00 ...D$.%....=.... 0050 75 14 8b 44 24 24 99 89 47 18 8b 47 04 83 0f 04 u..D$$..G..G.... 0060 89 47 04 89 57 1c 5f b8 38 00 00 00 33 d2 5e 8b .G..W._.8...3.^. 0070 4c 24 2c 33 cc e8 ce 0c 13 00 83 c4 30 c3 83 7c L$,3........0..| 0080 24 48 00 77 11 0f 82 87 fd ff ff 83 7c 24 44 08 $H.w........|$D. 0090 0f 82 7c fd ff ff 8b 46 60 89 07 8b 46 64 89 47 ..|....F`...Fd.G 00a0 04 5f b8 08 00 00 00 33 d2 5e 8b 4c 24 2c 33 cc ._.....3.^.L$,3. 00b0 e8 93 0c 13 00 83 c4 30 c3 ff 36 8b 3d 90 d3 3b .......0..6.=..; 00c0 10 ff d7 83 c4 04 83 7e 08 00 74 11 8b 46 04 85 .......~..t..F.. 00d0 c0 74 0a 50 ff 15 14 d4 3b 10 83 c4 04 56 ff d7 .t.P....;....V.. 00e0 8b 4c 24 38 83 c4 04 33 c0 5f 5e 33 cc 33 d2 e8 .L$8...3._^3.3.. 00f0 54 0c 13 00 83 c4 30 c3 08 a4 1e 10 9d a4 1e 10 T.....0......... 0100 8b a5 1e 10 b8 a5 1e 10 a2 a6 1e 10 dd a6 1e 10 ................ 0110 cc cc cc cc cc cc cc cc cc cc cc cc 56 8b 74 24 ............V.t$ 0120 08 85 f6 74 4e 83 7e 10 00 74 09 56 e8 2b f0 ff ...tN.~..t.V.+.. 0130 ff 83 c4 04 8b 06 6a 05 6a 00 6a 00 6a 00 ff 76 ......j.j.j.j..v 0140 08 85 c0 75 14 8b 46 04 ff d0 83 c4 14 56 ff 15 ...u..F......V.. 0150 90 d3 3b 10 83 c4 04 5e c3 50 8b 46 04 ff d0 ff ..;....^.P.F.... 0160 36 e8 b6 ff ff ff 83 c4 1c 56 ff 15 90 d3 3b 10 6........V....;. 0170 83 c4 04 5e c3 cc cc cc cc cc cc cc 56 8b 74 24 ...^........V.t$ 0180 08 85 f6 74 20 6a 14 ff 15 94 d3 3b 10 8b c8 83 ...t j.....;.... 0190 c4 04 85 c9 75 13 50 8d 46 0c 6a 0e 50 e8 ba b4 ....u.P.F.j.P... 01a0 ff ff 83 c4 0c 33 c0 5e c3 8b 44 24 0c c7 41 04 .....3.^..D$..A. 01b0 00 00 00 00 89 41 04 8b 44 24 10 c7 41 08 00 00 .....A..D$..A... 01c0 00 00 89 41 08 c7 01 00 00 00 00 c7 41 0c 00 00 ...A........A... 01d0 00 00 c7 41 10 00 00 00 00 8b c1 5e c3 cc cc cc ...A.......^.... 01e0 cc cc cc cc cc cc cc cc cc cc cc cc 6a 14 ff 15 ............j... 01f0 94 d3 3b 10 83 c4 04 85 c0 75 16 50 8b 44 24 08 ..;......u.P.D$. 0200 83 c0 0c 6a 0e 50 e8 51 b4 ff ff 83 c4 0c 33 c0 ...j.P.Q......3. 0210 c3 c7 00 00 00 00 00 c7 40 04 00 00 00 00 c7 40 ........@......@ 0220 08 00 00 00 00 c7 40 0c 00 00 00 00 c7 40 10 00 ......@......@.. 0230 00 00 00 c3 cc cc cc cc cc cc cc cc 8b 44 24 04 .............D$. 0240 85 c0 75 03 33 c0 c3 50 e8 9f ff ff ff 8b c8 83 ..u.3..P........ 0250 c4 04 85 c9 74 ee 8b 44 24 08 89 01 8b 44 24 0c ....t..D$....D$. 0260 89 41 04 8b 44 24 10 89 41 08 8b c1 c3 cc cc cc .A..D$..A....... 0270 cc cc cc cc cc cc cc cc cc cc cc cc 56 8b 74 24 ............V.t$ 0280 08 83 7e 10 00 74 0c c7 46 0c 03 00 00 00 83 c8 ..~..t..F....... 0290 ff 5e c3 8b 06 53 57 85 c0 75 20 50 50 50 50 ff .^...SW..u PPPP. 02a0 76 08 8b 46 04 ff d0 83 c4 14 85 d2 7f 7a 7c 71 v..F.........z|q 02b0 85 c0 73 74 5f 5b 83 c8 ff 5e c3 50 e8 bb ff ff ..st_[...^.P.... 02c0 ff 83 c4 04 85 c0 79 0e 5f 5b c7 46 0c 02 00 00 ......y._[.F.... 02d0 00 83 c8 ff 5e c3 8b 46 04 6a 00 6a 00 6a 00 6a ....^..F.j.j.j.j 02e0 00 ff 76 08 ff 36 ff d0 8b da 83 c4 18 8b f8 85 ..v..6.......... 02f0 db 7f 35 7c 04 85 ff 73 2f ff 36 e8 5c ee ff ff ..5|...s/.6.\... 0300 83 c4 04 83 ff fe 75 12 83 fb ff 75 0d 5f 0b c3 ......u....u._.. 0310 5b c7 46 0c 02 00 00 00 5e c3 c7 46 0c 01 00 00 [.F.....^..F.... 0320 00 5f 5b 83 c8 ff 5e c3 5f 5b c7 46 10 01 00 00 ._[...^._[.F.... 0330 00 33 c0 5e c3 cc cc cc cc cc cc cc 57 8b 7c 24 .3.^........W.|$ 0340 18 85 ff 0f 84 c7 00 00 00 83 7c 24 0c 00 0f 84 ..........|$.... 0350 bc 00 00 00 66 83 7c 24 10 01 0f 85 b0 00 00 00 ....f.|$........ 0360 f6 44 24 14 01 74 18 8b 44 24 08 6a 00 83 c0 0c .D$..t..D$.j.... 0370 6a 18 50 e8 e4 b2 ff ff 83 c4 0c 33 c0 5f c3 56 j.P........3._.V 0380 6a 14 ff 15 94 d3 3b 10 8b f0 83 c4 04 85 f6 75 j.....;........u 0390 18 50 8b 44 24 10 83 c0 0c 6a 0e 50 e8 bb b2 ff .P.D$....j.P.... 03a0 ff 83 c4 0c 33 c0 5e 5f c3 8b cf c7 46 04 00 00 ....3.^_....F... 03b0 00 00 c7 06 00 00 00 00 c7 46 08 78 56 34 12 c7 .........F.xV4.. 03c0 46 0c 89 67 45 23 c7 46 10 90 78 56 34 8d 51 01 F..gE#.F..xV4.Q. 03d0 8a 01 41 84 c0 75 f9 6a 01 6a 00 2b ca 51 57 6a ..A..u.j.j.+.QWj 03e0 00 56 e8 45 00 00 00 56 68 30 ac 1e 10 ff 74 24 .V.E...Vh0....t$ 03f0 30 ff 74 24 30 e8 42 fe ff ff 83 c4 28 85 c0 75 0.t$0.B.....(..u 0400 a5 56 ff 15 90 d3 3b 10 83 c4 04 33 c0 5e 5f c3 .V....;....3.^_. 0410 8b 44 24 08 6a 00 83 c0 .D$.j... Data […]: 3b1083c40885c0740cc7466005000000e9f2fdffff57e8211100008b442430830f108947288b47048947048b4e508b56548bc123c283c40483f8ff7405894f18eb188b4424162500f000003d0080000075148b442424998947188b4704830f0489470489571c5fb83800000033d25e8b4c2 [Length: 1048]