Frame 4284: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.414495000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.414495000 UTC Epoch Arrival Time: 1511226051.414495000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 1.023000 milliseconds] [Time since reference or first frame: 45.548755000 seconds] Frame Number: 4284 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd519 (54553) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5f23 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2153069, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 3970] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 2153069 (relative sequence number) Sequence Number (raw): 2948769450 [Next Sequence Number: 2154117 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x3f03 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.005639000 seconds] [Time since previous frame in this TCP stream: 1.023000 milliseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1048] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 24] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 68 40 14 20 10 e8 2a 47 e3 ff 8b 84 24 bc 01 00 h@. ..*G....$... 0010 00 83 c4 54 89 44 24 10 6a 02 6a 00 6a 08 8d 44 ...T.D$.j.j.j..D 0020 24 1c 50 6a 0d 68 98 48 50 10 68 18 a4 66 10 c7 $.Pj.h.HP.h..f.. 0030 44 24 30 40 14 20 10 e8 f8 46 e3 ff 8b 84 24 6c D$0@. ...F....$l 0040 01 00 00 6a 02 6a 00 6a 08 89 44 24 38 8d 44 24 ...j.j.j..D$8.D$ 0050 38 50 6a 0e 68 ec 6c 50 10 68 18 a4 66 10 c7 44 8Pj.h.lP.h..f..D 0060 24 4c 40 14 20 10 e8 c9 46 e3 ff 8b 84 24 90 01 $L@. ...F....$.. 0070 00 00 6a 02 6a 00 6a 08 89 44 24 54 8d 44 24 54 ..j.j.j..D$T.D$T 0080 50 6a 0b 68 94 6c 50 10 68 18 a4 66 10 c7 44 24 Pj.h.lP.h..f..D$ 0090 68 40 14 20 10 e8 9a 46 e3 ff 8b 44 24 74 83 c4 h@. ...F...D$t.. 00a0 54 40 6a 02 6a 00 6a 28 68 18 a4 66 10 50 ff 74 T@j.j.j(h..f.P.t 00b0 24 30 68 20 a1 66 10 e8 78 46 e3 ff 6a 00 6a 14 $0h .f..xF..j.j. 00c0 68 24 6d 50 10 ff 15 bc 6d 67 10 83 c4 28 89 44 h$mP....mg...(.D 00d0 24 1c 3d 24 6d 50 10 75 13 6a 13 68 24 6d 50 10 $.=$mP.u.j.h$mP. 00e0 e8 1f 52 e1 ff 83 c4 08 89 44 24 1c 6a 00 ff 35 ..R......D$.j..5 00f0 ac e9 66 10 8d 44 24 20 50 c7 44 24 2c 13 00 00 ..f..D$ P.D$,... 0100 00 c7 84 24 c8 00 00 00 00 00 00 00 c7 84 24 cc ...$..........$. 0110 00 00 00 00 00 00 00 c7 84 24 d0 00 00 00 00 00 .........$...... 0120 00 00 c7 84 24 20 01 00 00 00 00 00 00 c7 84 24 ....$ .........$ 0130 24 01 00 00 00 00 00 00 c7 84 24 e4 00 00 00 00 $.........$..... 0140 00 00 00 c7 84 24 e8 00 00 00 00 00 00 00 c7 84 .....$.......... 0150 24 ec 00 00 00 00 00 00 00 c7 84 24 d4 00 00 00 $..........$.... 0160 00 00 00 00 c7 84 24 d8 00 00 00 00 00 00 00 c7 ......$......... 0170 84 24 dc 00 00 00 00 00 00 00 c7 84 24 e0 00 00 .$..........$... 0180 00 00 00 00 00 c7 84 24 f0 00 00 00 00 00 00 00 .......$........ 0190 c7 84 24 f4 00 00 00 00 00 00 00 c7 84 24 f8 00 ..$..........$.. 01a0 00 00 00 00 00 00 c7 84 24 28 01 00 00 00 00 00 ........$(...... 01b0 00 c7 84 24 2c 01 00 00 00 00 00 00 c7 44 24 30 ...$,........D$0 01c0 00 00 00 00 c7 84 24 34 01 00 00 00 00 00 00 c7 ......$4........ 01d0 84 24 38 01 00 00 00 00 00 00 c7 84 24 3c 01 00 .$8.........$<.. 01e0 00 00 00 00 00 c7 84 24 40 01 00 00 00 00 00 00 .......$@....... 01f0 c7 84 24 44 01 00 00 00 00 00 00 c7 84 24 30 01 ..$D.........$0. 0200 00 00 00 00 00 00 c7 84 24 1c 01 00 00 00 00 00 ........$....... 0210 00 c7 84 24 fc 00 00 00 00 00 00 00 c7 84 24 4c ...$..........$L 0220 01 00 00 00 00 00 00 c7 84 24 48 01 00 00 ac 4d .........$H....M 0230 50 10 c7 84 24 18 01 00 00 70 bb 1f 10 e8 c2 da P...$....p...... 0240 e5 ff 6a 02 6a 00 a3 0c eb 66 10 8b 44 24 34 6a ..j.j....f..D$4j 0250 28 68 e8 a1 66 10 40 50 ff 74 24 3c 68 20 a1 66 (h..f.@P.t$