Frame 4478: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.502487000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.502487000 UTC Epoch Arrival Time: 1511226051.502487000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 96.000 microseconds] [Time since reference or first frame: 45.636747000 seconds] Frame Number: 4478 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xd59e (54686) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x60aa [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2252105, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 4164] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 2252105 (relative sequence number) Sequence Number (raw): 2948868486 [Next Sequence Number: 2252629 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x64dc [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.093631000 seconds] [Time since previous frame in this TCP stream: 96.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2096] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 26] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 6a 02 6a 00 6a 04 8d 44 24 1c 50 8b 44 24 20 56 j.j.j..D$.P.D$ V 0010 ff 30 68 48 e7 66 10 e8 3c c4 e1 ff 83 c4 1c 85 .0hH.f..<....... 0020 ed 74 23 8b 44 24 10 5e 81 88 d4 00 00 00 80 00 .t#.D$.^........ 0030 00 00 8b 44 24 0c 5d 83 88 d4 00 00 00 40 5f 33 ...D$.]......@_3 0040 c0 5b 83 c4 08 c3 8b 6c 24 28 85 db 74 50 8d 44 .[.....l$(..tP.D 0050 24 34 50 55 53 68 74 e7 66 10 e8 f9 2b e1 ff 83 $4PUSht.f...+... 0060 c4 10 85 c0 75 34 8b 44 24 34 55 53 ff 30 e8 25 ....u4.D$4US.0.% 0070 50 01 00 83 c4 0c 85 c0 74 20 8b 4c 24 38 85 c9 P.......t .L$8.. 0080 0f 84 95 00 00 00 8b 44 24 10 53 ff 30 68 68 fc .......D$.S.0hh. 0090 50 10 68 00 10 00 00 51 eb 79 55 53 eb 07 8b 44 P.h....Q.yUS...D 00a0 24 10 56 ff 30 e8 4e 98 df ff 8b c8 8b 44 24 18 $.V.0.N......D$. 00b0 83 c4 08 89 48 10 8b 44 24 10 85 db 8b ce 0f 45 ....H..D$......E 00c0 cd 89 48 14 85 ed 0f 84 34 fd ff ff 85 db 0f 84 ..H.....4....... 00d0 2c fd ff ff 6a 02 6a 00 6a 04 8d 44 24 1c 50 55 ,...j.j.j..D$.PU 00e0 53 68 74 e7 66 10 e8 6d c3 e1 ff 83 c4 1c 83 f8 Sht.f..m........ 00f0 ff 0f 85 09 fd ff ff f6 44 24 30 08 74 1d 8b 44 ........D$0.t..D 0100 24 38 85 c0 74 15 53 ff 74 24 20 68 c0 fc 50 10 $8..t.S.t$ h..P. 0110 6a 00 50 e8 c0 af e0 ff 83 c4 14 8b 44 24 10 6a j.P.........D$.j 0120 00 6a 00 56 ff 30 68 48 e7 66 10 e8 18 30 e1 ff .j.V.0hH.f...0.. 0130 83 c4 14 85 ff 74 06 c7 07 00 00 00 00 5e 5d 5f .....t.......^]_ 0140 83 c8 ff 5b 83 c4 08 c3 83 ec 08 53 8b 5c 24 18 ...[.......S.\$. 0150 55 56 57 c7 44 24 10 00 00 00 00 85 db 74 06 c7 UVW.D$.......t.. 0160 03 00 00 00 00 e8 2e a7 e0 ff 8b e8 8b f5 8d 56 ...............V 0170 01 8d a4 24 00 00 00 00 8a 0e 46 84 c9 75 f9 2b ...$......F..u.+ 0180 f2 56 55 e8 70 97 df ff 83 c4 08 8b f8 8b cf 85 .VU.p........... 0190 f6 7e 13 33 d2 8d 49 00 80 39 5c 75 03 c6 01 2f .~.3..I..9\u.../ 01a0 42 41 3b d6 7c f2 6a 00 ff 74 24 24 8d 44 24 2c BA;.|.j..t$$.D$, 01b0 ff 74 24 24 56 57 50 e8 2c 4f 01 00 83 c4 18 85 .t$$VWP.,O...... 01c0 c0 75 73 39 44 24 1c 74 1a 8b 44 24 24 3b 70 04 .us9D$.t..D$$;p. 01d0 75 64 56 ff 30 57 ff 15 d4 d3 3b 10 83 c4 0c 85 udV.0W....;..... 01e0 c0 75 53 57 e8 df e0 e2 ff 8b 44 24 28 83 c4 04 .uSW......D$(... 01f0 83 78 28 00 75 36 8b 88 d4 00 00 00 f6 c1 08 75 .x(.u6.........u 0200 2b f6 c1 60 74 26 83 3d a0 e7 66 10 +..`t&.=..f. Data […]: 6a026a006a048d44241c508b44242056ff306848e76610e83cc4e1ff83c41c85ed74238b4424105e8188d4000000800000008b44240c5d8388d4000000405f33c05b83c408c38b6c242885db74508d4424345055536874e76610e8f92be1ff83c41085c075348b4424345553ff30e825500 [Length: 524]