Frame 4572: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.544852000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.544852000 UTC Epoch Arrival Time: 1511226051.544852000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 46.000 microseconds] [Time since reference or first frame: 45.679112000 seconds] Frame Number: 4572 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd5df (54751) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5e5d [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2297169, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 4258] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 2297169 (relative sequence number) Sequence Number (raw): 2948913550 [Next Sequence Number: 2298217 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd20 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.135996000 seconds] [Time since previous frame in this TCP stream: 46.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2620] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 27] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 6a 00 ff 35 f4 fb 66 10 e8 83 d3 df ff 83 c4 20 j..5..f........ 0010 eb 92 cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ 0020 83 ec 14 57 ff 74 24 28 c7 44 24 10 00 00 00 00 ...W.t$(.D$..... 0030 c7 44 24 14 00 00 00 00 c7 44 24 08 18 aa 89 00 .D$......D$..... 0040 c7 44 24 0c 18 aa 89 00 e8 53 b0 e3 ff 8b f8 83 .D$......S...... 0050 c4 04 83 7f 10 00 75 1a 68 28 27 51 10 6a 00 ff ......u.h('Q.j.. 0060 35 1c fc 66 10 e8 26 d3 df ff 83 c4 0c 5f 83 c4 5..f..&......_.. 0070 14 c3 8d 44 24 10 50 8d 44 24 10 50 8d 44 24 10 ...D$.P.D$.P.D$. 0080 50 8d 44 24 10 50 68 bc 61 4f 10 ff 74 24 30 e8 P.D$.Ph.aO..t$0. 0090 6c 4b e0 ff 83 c4 18 83 f8 ff 0f 84 8a 01 00 00 lK.............. 00a0 83 3d a0 e7 66 10 00 74 1a 68 88 2c 51 10 6a 00 .=..f..t.h.,Q.j. 00b0 ff 35 f4 fb 66 10 e8 d5 d2 df ff 83 c4 0c 5f 83 .5..f........._. 00c0 c4 14 c3 8b 44 24 04 83 f8 03 7f 09 83 f8 01 7d ....D$.........} 00d0 39 85 c0 eb 05 3d 18 aa 89 00 74 0a 68 c8 2c 51 9....=....t.h.,Q 00e0 10 e9 77 ff ff ff 8b 47 10 8b 80 d4 00 00 00 a8 ..w....G........ 00f0 40 74 07 b8 02 00 00 00 eb 0c 0f b6 c0 83 e0 20 @t............. 0100 83 c8 10 c1 e8 04 89 44 24 04 8b 4c 24 08 81 f9 .......D$..L$... 0110 00 20 00 00 7f 64 74 39 85 c9 74 31 81 f9 00 10 . ...dt9..t1.... 0120 00 00 75 5e 83 f8 03 75 0a 68 20 2d 51 10 e9 2a ..u^...u.h -Q..* 0130 ff ff ff 83 3d b0 e7 66 10 00 75 0a 68 80 2d 51 ....=..f..u.h.-Q 0140 10 e9 17 ff ff ff ba 00 00 10 00 eb 4e 33 d2 eb ............N3.. 0150 4a 83 f8 03 75 0a 68 c8 2d 51 10 e9 fd fe ff ff J...u.h.-Q...... 0160 83 3d b4 e7 66 10 00 75 0a 68 28 2e 51 10 e9 ea .=..f..u.h(.Q... 0170 fe ff ff ba 00 00 20 00 eb 21 81 f9 18 aa 89 00 ...... ..!...... 0180 74 0a 68 70 2e 51 10 e9 d1 fe ff ff 8b 47 10 8b t.hp.Q.......G.. 0190 90 a4 00 00 00 81 e2 00 00 f0 00 8b 4f 10 56 8b ............O.V. 01a0 81 d4 00 00 00 8b f0 52 25 7f ff ff ff 89 81 d4 .......R%....... 01b0 00 00 00 ff 74 24 14 c1 ee 07 ff 74 24 10 83 e6 ....t$.....t$... 01c0 01 ff 77 10 e8 97 f9 ff ff 8b 4f 10 c1 e6 07 33 ..w.......O....3 01d0 b1 d4 00 00 00 83 c4 10 81 e6 80 00 00 00 31 b1 ..............1. 01e0 d4 00 00 00 8b d0 5e 85 d2 74 37 8b 4c 24 20 89 ......^..t7.L$ . 01f0 54 24 14 8b 02 89 01 8b 42 04 89 41 04 8a 42 0c T$......B..A..B. 0200 88 41 0c 3c 03 76 09 51 e8 03 c1 de ff 83 c4 04 .A.<.v.Q........ 0210 8d 44 24 14 50 e8 86 3a e2 ff 83 c4 04 5f 83 c4 .D$.P..:....._.. 0220 14 c3 8b 44 24 20 c6 40 0c 00 5f 83 c4 14 c3 cc ...D$ .@.._..... 0230 83 ec 14 57 ff 74 24 28 c7 44 24 10 00 00 00 00 ...W.t$(.D$..... 0240 c7 44 24 14 00 00 00 00 c7 44 24 08 18 aa 89 00 .D$......D$..... 0250 c7 44 24 0c 18 aa 89 00 e8 43 ae e3 ff 8b f8 83 .D$......C...... 0260 c4 04 83 7f 10 00 75 1a 68 28 27 51 10 6a 00 ff ......u.h('Q.j.. 0270 35 1c fc 66 10 e8 16 d1 df ff 83 c4 0c 5f 83 c4 5..f........._.. 0280 14 c3 8d 44 24 10 50 8d 44 24 10 50 8d 44 24 10 ...D$.P.D$.P.D$. 0290 50 8d 44 24 10 50 68 bc 61 4f 10 ff 74 24 30 e8 P.D$.Ph.aO..t$0. 02a0 5c 49 e0 ff 83 c4 18 83 f8 ff 74 2b 8b 44 24 04 \I........t+.D$. 02b0 83 f8 03 7f 27 83 f8 02 7d 64 83 e8 00 74 3e 48 ....'...}d...t>H 02c0 75 21 68 b8 2e 51 10 6a 00 ff 35 f4 fb 66 10 e8 u!h..Q.j..5..f.. 02d0 bc d0 df ff 83 c4 0c 5f 83 c4 14 c3 3d 18 aa 89 ......._....=... 02e0 00 74 1a 68 f8 2e 51 10 6a 00 ff 35 1c fc 66 10 .t.h..Q.j..5..f. 02f0 e8 9b d0 df ff 83 c4 0c 5f 83 c4 14 c3 8b 47 10 ........_.....G. 0300 8b 80 d4 00 00 00 a8 40 74 07 b8 02 00 00 00 eb .......@t....... 0310 09 a8 20 74 ad b8 03 00 00 00 89 44 24 04 8b 4c .. t.......D$..L 0320 24 08 81 f9 00 20 00 00 0f 8f a8 00 00 00 74 5d $.... ........t] 0330 85 c9 74 55 81 f9 00 10 00 00 0f 85 9e 00 00 00 ..tU............ 0340 83 f8 03 75 1a 68 20 2d 51 10 6a 00 ff 35 1c fc ...u.h -Q.j..5.. 0350 66 10 e8 39 d0 df ff 83 c4 0c 5f 83 c4 14 c3 83 f..9......_..... 0360 3d b0 e7 66 10 00 75 1a 68 80 2d 51 10 6a 00 ff =..f..u.h.-Q.j.. 0370 35 1c fc 66 10 e8 16 d0 df ff 83 c4 0c 5f 83 c4 5..f........._.. 0380 14 c3 ba 00 00 10 00 eb 7e 33 d2 eb 7a 83 f8 03 ........~3..z... 0390 75 1a 68 c8 2d 51 10 6a 00 ff 35 1c fc 66 10 e8 u.h.-Q.j..5..f.. 03a0 ec cf df ff 83 c4 0c 5f 83 c4 14 c3 83 3d b4 e7 ......._.....=.. 03b0 66 10 00 75 1a 68 28 2e 51 10 6a 00 ff 35 1c fc f..u.h(.Q.j..5.. 03c0 66 10 e8 c9 cf df ff 83 c4 0c 5f 83 c4 14 c3 ba f........._..... 03d0 00 00 20 00 eb 31 81 f9 18 aa 89 00 74 1a 68 70 .. ..1......t.hp 03e0 2e 51 10 6a 00 ff 35 1c fc 66 10 e8 a0 cf df ff .Q.j..5..f...... 03f0 83 c4 0c 5f 83 c4 14 c3 8b 47 10 8b 90 a4 00 00 ..._.....G...... 0400 00 81 e2 00 00 f0 00 8b 4f 10 56 8b 81 d4 00 00 ........O.V..... 0410 00 8b f0 52 0d 80 00 00 ...R.... Data […]: 6a00ff35f4fb6610e883d3dfff83c420eb92cccccccccccccccccccccccccccc83ec1457ff742428c744241000000000c744241400000000c744240818aa8900c744240c18aa8900e853b0e3ff8bf883c404837f1000751a68282751106a00ff351cfc6610e826d3dfff83c40c5f83c414c [Length: 1048]