Frame 4359: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.450331000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.450331000 UTC Epoch Arrival Time: 1511226051.450331000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 2.000 microseconds] [Time since reference or first frame: 45.584591000 seconds] Frame Number: 4359 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd54f (54607) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5eed [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2194465, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 4045] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 2194465 (relative sequence number) Sequence Number (raw): 2948810846 [Next Sequence Number: 2195513 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7d68 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.041475000 seconds] [Time since previous frame in this TCP stream: 2.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2620] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 25] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 74 24 08 8d 4c 24 18 51 8d 4c 24 20 51 ff 74 24 t$..L$.Q.L$ Q.t$ 0010 18 ff 74 24 20 57 ff d0 83 c4 18 85 c0 74 1b 8b ..t$ W.......t.. 0020 4c 24 24 8b 44 24 14 89 41 04 8b 44 24 18 5e 89 L$$.D$..A..D$.^. 0030 01 c6 41 0c 06 5f 83 c4 14 c3 b8 d8 13 49 10 90 ..A.._.......I.. 0040 8a 0e 3a 08 75 1a 84 c9 74 12 8a 4e 01 3a 48 01 ..:.u...t..N.:H. 0050 75 0e 83 c6 02 83 c0 02 84 c9 75 e4 33 c0 eb 05 u.........u.3... 0060 1b c0 83 c8 01 85 c0 74 0b 6a 00 57 e8 df ce ff .......t.j.W.... 0070 ff 83 c4 08 8b 44 24 24 5e c6 40 0c 03 c7 00 00 .....D$$^.@..... 0080 00 00 00 5f 83 c4 14 c3 cc cc cc cc cc cc cc cc ..._............ 0090 68 c8 87 50 10 6a 00 e8 f4 c3 ff ff 50 e8 1e 64 h..P.j......P..d 00a0 e1 ff 83 c4 0c c3 cc cc cc cc cc cc cc cc cc cc ................ 00b0 68 c8 87 50 10 6a 00 e8 d4 c3 ff ff 50 e8 fe 63 h..P.j......P..c 00c0 e1 ff 83 c4 0c c3 cc cc cc cc cc cc cc cc cc cc ................ 00d0 83 ec 08 68 94 8a 54 10 ff 74 24 10 e8 4f dc e1 ...h..T..t$..O.. 00e0 ff 83 c4 08 83 f8 ff 74 75 56 8b 74 24 14 6a 00 .......tuV.t$.j. 00f0 56 e8 7a 25 e0 ff 8d 44 24 0c 50 68 80 e9 66 10 V.z%...D$.Ph..f. 0100 e8 2b 85 e2 ff 8d 44 24 14 50 8d 44 24 1c 50 68 .+....D$.P.D$.Ph 0110 80 e9 66 10 e8 47 8c e2 ff 83 c4 1c 85 c0 75 3d ..f..G........u= 0120 8b 44 24 08 6a 01 8b 00 ff 70 04 ff 30 56 e8 6d .D$.j....p..0V.m 0130 62 e0 ff 8d 44 24 14 50 68 80 e9 66 10 e8 ce 89 b...D$.Ph..f.... 0140 e2 ff 8d 44 24 1c 50 8d 44 24 24 50 68 80 e9 66 ...D$.P.D$$Ph..f 0150 10 e8 0a 8c e2 ff 83 c4 24 85 c0 74 c3 5e 83 c4 ........$..t.^.. 0160 08 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ 0170 51 53 8b 5c 24 0c 55 56 57 ff 33 c7 44 24 14 00 QS.\$.UVW.3.D$.. 0180 00 00 00 e8 48 40 e5 ff 8b 7c 24 24 8b e8 8d 47 ....H@...|$$...G 0190 01 50 e8 49 ed e2 ff 8b 74 24 24 57 56 50 89 44 .P.I....t$$WVP.D 01a0 24 2c e8 09 88 e2 ff ff 74 24 38 57 56 53 ff 15 $,......t$8WVS.. 01b0 1c 7d 65 10 83 c4 24 89 44 24 10 85 c0 75 46 8b .}e...$.D$...uF. 01c0 45 4c 85 c0 75 15 50 55 e8 53 d8 ff ff 83 c4 08 EL..u.PU.S...... 01d0 85 c0 74 31 8b 45 4c 85 c0 74 2a 8b 74 24 18 8d ..t1.EL..t*.t$.. 01e0 4c 24 10 51 8d 4f 01 51 56 50 e8 91 0b e2 ff 83 L$.Q.O.QVP...... 01f0 c4 10 56 e8 f8 c1 e3 ff 8b 44 24 14 83 c4 04 5f ..V......D$...._ 0200 5e 5d 5b 59 c3 8b 74 24 18 56 e8 e1 c1 e3 ff 8b ^][Y..t$.V...... 0210 44 24 14 83 c4 04 5f 5e 5d 5b 59 c3 cc cc cc cc D$...._^][Y..... 0220 83 c8 ff c3 cc cc cc cc cc cc cc cc cc cc cc cc ................ 0230 56 8b 74 24 08 ff 4e 48 0f 85 fc 00 00 00 83 7e V.t$..NH.......~ 0240 60 00 74 19 80 7e 74 03 8d 46 68 76 09 50 e8 bd `.t..~t..Fhv.P.. 0250 d0 e3 ff 83 c4 04 c7 46 60 00 00 00 00 8b 46 10 .......F`.....F. 0260 85 c0 74 08 8b 00 56 ff d0 83 c4 04 8b 46 24 53 ..t...V......F$S 0270 8b 1d 90 d3 3b 10 85 c0 74 13 f6 46 20 01 50 74 ....;...t..F .Pt 0280 04 ff d3 eb 05 e8 66 c1 e3 ff 83 c4 04 8b 46 18 ......f.......F. 0290 85 c0 74 13 f6 46 20 01 50 74 04 ff d3 eb 05 e8 ..t..F .Pt...... 02a0 4c c1 e3 ff 83 c4 04 8b 46 1c 85 c0 74 13 f6 46 L.......F...t..F 02b0 20 01 50 74 04 ff d3 eb 05 e8 32 c1 e3 ff 83 c4 .Pt......2..... 02c0 04 8b 46 40 85 c0 74 13 f6 46 20 01 50 74 04 ff ..F@..t..F .Pt.. 02d0 d3 eb 05 e8 18 c1 e3 ff 83 c4 04 83 7e 5c 00 8d ............~\.. 02e0 46 5c 74 09 50 e8 e6 ca e3 ff 83 c4 04 55 57 8d F\t.P........UW. 02f0 7e 4c bd 02 00 00 00 8b 07 85 c0 74 1d 50 e8 7d ~L.........t.P.} 0300 ba e3 ff 83 c4 04 f6 46 20 01 ff 37 74 04 ff d3 .......F ..7t... 0310 eb 05 e8 d9 c0 e3 ff 83 c4 04 83 c7 04 4d 75 d7 .............Mu. 0320 f6 46 20 01 5f 5d 56 74 08 ff d3 83 c4 04 5b 5e .F ._]Vt......[^ 0330 c3 e8 ba c0 e3 ff 83 c4 04 5b 5e c3 cc cc cc cc .........[^..... 0340 56 8b 74 24 08 f6 46 20 10 74 18 8b 46 10 85 c0 V.t$..F .t..F... 0350 74 11 8b 40 18 85 c0 74 0a 56 ff d0 83 c4 04 83 t..@...t.V...... 0360 66 20 ef f6 46 20 01 74 14 8b 46 10 85 c0 74 0d f ..F .t..F...t. 0370 8b 40 34 85 c0 74 06 56 ff d0 83 c4 04 56 e8 cd .@4..t.V.....V.. 0380 3d e5 ff 56 c7 46 04 00 00 00 00 c7 46 08 00 00 =..V.F......F... 0390 00 00 e8 99 fe ff ff 83 c4 08 5e c3 cc cc cc cc ..........^..... 03a0 8b 44 24 04 80 78 0c 03 76 09 89 44 24 04 e9 5d .D$..x..v..D$..] 03b0 cf e3 ff c3 cc cc cc cc cc cc cc cc cc cc cc cc ................ 03c0 8b 44 24 04 80 78 0c 03 76 09 89 44 24 04 e9 6d .D$..x..v..D$..m 03d0 50 e0 ff c3 cc cc cc cc cc cc cc cc cc cc cc cc P............... 03e0 83 ec 30 8b 44 24 38 53 89 44 24 28 40 03 44 24 ..0.D$8S.D$(@.D$ 03f0 40 55 56 89 44 24 38 57 8d 44 24 30 33 ff 50 c7 @UV.D$8W.D$03.P. 0400 44 24 20 00 00 00 00 33 db 89 7c 24 14 33 ed e8 D$ ....3..|$.3.. 0410 3c 07 00 00 83 c4 04 83 <....... Data […]: 7424088d4c2418518d4c242051ff742418ff74242057ffd083c41885c0741b8b4c24248b4424148941048b4424185e8901c6410c065f83c414c3b8d8134910908a0e3a08751a84c974128a4e013a4801750e83c60283c00284c975e433c0eb051bc083c80185c0740b6a0057e8dfceffff8 [Length: 1048]