Frame 4372: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.456178000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.456178000 UTC Epoch Arrival Time: 1511226051.456178000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 77.000 microseconds] [Time since reference or first frame: 45.590438000 seconds] Frame Number: 4372 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd558 (54616) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5ee4 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2202325, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 4058] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 2202325 (relative sequence number) Sequence Number (raw): 2948818706 [Next Sequence Number: 2203373 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x3962 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.047322000 seconds] [Time since previous frame in this TCP stream: 77.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2620] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 26] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 24 0c bd 01 00 00 00 8b 47 10 83 78 14 00 75 05 $.......G..x..u. 0010 5f 8b c5 5d c3 53 8b 5c 24 14 56 8b 77 3c 85 f6 _..].S.\$.V.w<.. 0020 74 4d 6a 00 56 e8 52 67 e2 ff 6a 00 8d 44 24 20 tMj.V.Rg..j..D$ 0030 50 56 e8 75 6e e2 ff 83 c4 14 85 c0 75 31 8b 47 PV.un.......u1.G 0040 10 53 ff 74 24 18 8b 40 14 57 ff d0 83 c4 0c 85 .S.t$..@.W...... 0050 c0 74 27 6a 00 56 e8 01 6c e2 ff 6a 00 8d 44 24 .t'j.V..l..j..D$ 0060 20 50 56 e8 44 6e e2 ff 83 c4 14 85 c0 74 cf 85 PV.Dn.......t.. 0070 ed 74 0e 8b 77 44 33 ed eb a4 5e 5b 5f 33 c0 5d .t..wD3...^[_3.] 0080 c3 5e 5b 5f b8 01 00 00 00 5d c3 cc 56 8b 74 24 .^[_.....]..V.t$ 0090 08 80 7e 74 00 75 26 6a 00 68 10 98 20 10 68 d0 ..~t.u&j.h.. .h. 00a0 46 00 10 56 c6 46 74 05 e8 1f 63 e1 ff 83 c4 10 F..V.Ft...c..... 00b0 ff 46 78 89 46 68 c7 46 6c b8 45 65 10 8b 4c 24 .Fx.Fh.Fl.Ee..L$ 00c0 0c 51 c6 41 0c 05 8b 46 68 89 01 8b 46 6c 89 41 .Q.A...Fh...Fl.A 00d0 04 e8 b6 39 e0 ff 83 c4 04 5e c3 cc 56 8b 74 24 ...9.....^..V.t$ 00e0 08 8b 4e 20 8b 41 10 8b 40 14 85 c0 74 09 6a 01 ..N .A..@...t.j. 00f0 56 51 ff d0 83 c4 0c 8b 46 04 85 c0 74 09 50 e8 VQ......F...t.P. 0100 38 a4 e3 ff 83 c4 04 83 7e 10 00 57 8d 7e 10 74 8.......~..W.~.t 0110 0f 57 e8 05 ae e3 ff 83 c4 04 c7 07 00 00 00 00 .W.............. 0120 83 c6 18 5f 83 3e 00 74 09 56 e8 ed ad e3 ff 83 ..._.>.t.V...... 0130 c4 04 5e c3 cc cc cc cc cc cc cc cc 51 53 8b 5c ..^.........QS.\ 0140 24 10 55 8b 6c 24 18 56 57 c7 44 24 10 00 00 00 $.U.l$.VW.D$.... 0150 00 85 ed 74 05 8b 73 3c eb 03 8b 73 44 89 74 24 ...t..s<...sD.t$ 0160 1c 85 f6 75 2b 6a 28 e8 c0 ce e2 ff 6a 00 68 70 ...u+j(.....j.hp 0170 9a 20 10 8b f0 6a 0d 56 89 74 24 30 e8 bb 9f e1 . ...j.V.t$0.... 0180 ff 83 c4 14 85 ed 74 05 89 73 3c eb 03 89 73 44 ......t..s<...sD 0190 8b 7c 24 18 8b 47 14 25 ff ff 00 00 83 f8 02 75 .|$..G.%.......u 01a0 59 83 7f 0c 00 7f 53 8b 57 10 8a 4a 0c 84 c9 74 Y.....S.W..J...t 01b0 49 3a c8 75 38 f2 0f 10 02 83 ec 08 8d 44 24 20 I:.u8........D$ 01c0 f2 0f 11 04 24 ff 35 80 72 67 10 68 d4 f0 62 10 ....$.5.rg.h..b. 01d0 6a 00 50 e8 74 71 e1 ff 8b 57 10 8b 4c 24 30 83 j.P.tq...W..L$0. 01e0 c4 18 89 42 04 89 0a c6 42 0c 06 eb 3a 80 f9 06 ...B....B...:... 01f0 74 35 52 e8 04 89 e1 ff eb 2a 83 f8 01 75 11 8b t5R......*...u.. 0200 4f 10 80 79 0c 03 75 08 51 e8 ae 75 e1 ff eb 14 O..y..u.Q..u.... 0210 83 f8 05 75 12 8b 47 10 80 78 0c 01 75 09 50 e8 ...u..G..x..u.P. 0220 28 66 e3 ff 83 c4 04 8b 47 18 89 5f 20 89 6f 24 (f......G.._ .o$ 0230 85 c0 74 03 ff 40 08 85 ed 0f 85 94 00 00 00 8b ..t..@.......... 0240 47 04 85 c0 0f 84 89 00 00 00 8b 6b 20 85 ed 0f G..........k ... 0250 84 7a 00 00 00 33 f6 39 73 1c 7e 3e 8b c8 8b 45 .z...3.9s.~>...E 0260 00 8a 10 3a 11 75 1a 84 d2 74 12 8a 50 01 3a 51 ...:.u...t..P.:Q 0270 01 75 0e 83 c0 02 83 c1 02 84 d2 75 e4 33 c0 eb .u.........u.3.. 0280 05 1b c0 83 c8 01 85 c0 8b 47 04 74 0b 46 83 c5 .........G.t.F.. 0290 18 3b 73 1c 7c c6 eb 02 89 37 83 3f ff 75 30 50 .;s.|....7.?.u0P 02a0 68 c0 bc 50 10 8d 44 24 20 6a 00 50 e8 9b 70 e1 h..P..D$ j.P..p. 02b0 ff ff 74 24 28 68 e0 13 49 10 53 ff 73 38 e8 39 ..t$(h..I.S.s8.9 02c0 ac ff ff ff 74 24 38 e8 70 a2 e3 ff 83 c4 24 8b ....t$8.p.....$. 02d0 6c 24 20 8b 47 04 85 c0 74 42 85 ed 74 2f 80 38 l$ .G...tB..t/.8 02e0 3a 74 2a ff 47 08 8b 47 08 40 50 e8 3c cd e2 ff :t*.G..G.@P.<... 02f0 8b f0 c6 06 3a ff 77 08 8d 4e 01 ff 77 04 51 ff ....:.w..N..w.Q. 0300 15 d0 d3 3b 10 83 c4 10 89 77 04 eb 0f ff 77 08 ...;.....w....w. 0310 50 e8 56 58 e0 ff 83 c4 08 89 47 04 85 ed 74 58 P.VX......G...tX 0320 8b 43 40 85 c0 74 51 33 f6 39 b3 c8 00 00 00 75 .C@..tQ3.9.....u 0330 47 39 77 04 0f 85 9a 00 00 00 8d 4c 24 20 51 ff G9w........L$ Q. 0340 37 50 e8 35 f0 e1 ff 83 c4 0c 85 c0 0f 85 f4 00 7P.5............ 0350 00 00 ff 74 24 20 e8 91 1e e2 ff 8b c8 83 c4 04 ...t$ .......... 0360 89 4f 04 8d 51 01 8d 9b 00 00 00 00 8a 01 41 84 .O..Q.........A. 0370 c0 75 f9 2b ca 89 4f 08 8b 43 10 8b 40 14 85 c0 .u.+..O..C..@... 0380 74 11 6a 06 57 53 ff d0 83 c4 0c 85 c0 0f 84 c9 t.j.WS.......... 0390 00 00 00 8b 07 8b 74 24 1c 85 c0 78 10 6a 01 50 ......t$...x.j.P 03a0 6a 00 6a 00 56 e8 12 f0 e1 ff 83 c4 14 8b 47 04 j.j.V.........G. 03b0 6a 01 85 c0 0f 84 e8 00 00 00 8d 4c 24 14 51 6a j..........L$.Qj 03c0 28 57 ff 77 08 50 56 e8 00 83 e2 ff 83 c4 1c e9 (W.w.PV......... 03d0 e1 00 00 00 6a 00 50 e8 a0 63 e2 ff 6a 00 8d 44 ....j.P..c..j..D 03e0 24 2c 50 ff 73 40 e8 c1 6a e2 ff 83 c4 14 85 c0 $,P.s@..j....... 03f0 75 54 8b 4f 04 8b 44 24 20 8d 49 00 8a 10 3a 11 uT.O..D$ .I...:. 0400 75 1a 84 d2 74 12 8a 50 01 3a 51 01 75 0e 83 c0 u...t..P.:Q.u... 0410 02 83 c1 02 84 d2 75 e4 ......u. Data […]: 240cbd010000008b47108378140075055f8bc55dc3538b5c2414568b773c85f6744d6a0056e85267e2ff6a008d4424205056e8756ee2ff83c41485c075318b471053ff7424188b401457ffd083c40c85c074276a0056e8016ce2ff6a008d4424205056e8446ee2ff83c41485c074cf85ed7 [Length: 1048]