Frame 4733: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.609332000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.609332000 UTC Epoch Arrival Time: 1511226051.609332000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 81.000 microseconds] [Time since reference or first frame: 45.743592000 seconds] Frame Number: 4733 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd651 (54865) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5deb [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2381533, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 4419] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 2381533 (relative sequence number) Sequence Number (raw): 2948997914 [Next Sequence Number: 2382581 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0354 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.200476000 seconds] [Time since previous frame in this TCP stream: 81.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2096] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 30] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 5f 04 75 74 38 5c 24 78 b9 08 93 51 10 b8 08 80 _.ut8\$x...Q.... 0010 50 10 0f 44 c1 50 68 10 93 51 10 6a 02 6a 00 e8 P..D.Ph..Q.j.j.. 0020 50 aa de ff 8d 44 24 44 83 c4 10 3b f8 75 10 80 P....D$D...;.u.. 0030 7c 24 40 03 76 09 50 e8 18 f8 e0 ff 83 c4 04 5f |$@.v.P........_ 0040 5d 83 c8 ff 5b 83 c4 58 c3 83 7d 2c 03 74 0b 88 ]...[..X..},.t.. 0050 5c 24 0f c6 44 24 6c 01 eb 2e 85 ff 75 1a 68 28 \$..D$l.....u.h( 0060 92 51 10 6a 01 57 e8 09 aa de ff 83 c4 0c 83 c8 .Q.j.W.......... 0070 ff 5f 5d 5b 83 c4 58 c3 8a 44 24 78 88 44 24 0f ._][..X..D$x.D$. 0080 8a 44 24 74 88 44 24 6c 56 8b 75 10 85 f6 74 06 .D$t.D$lV.u...t. 0090 8b 36 85 f6 75 12 68 10 92 51 10 33 f6 6a 02 56 .6..u.h..Q.3.j.V 00a0 e8 cf a9 de ff 83 c4 0c 8b 45 2c 83 f8 03 75 28 .........E,...u( 00b0 56 55 c6 44 24 1b 01 88 5c 24 78 e8 54 f6 ff ff VU.D$...\$x.T... 00c0 33 c9 83 c4 08 39 4d 20 8b f0 0f 95 c1 8b de 89 3....9M ........ 00d0 4c 24 28 e9 8b 00 00 00 83 f8 02 0f 84 82 00 00 L$(............. 00e0 00 56 ff 74 24 24 8b ee e8 27 f6 ff ff 8b f0 83 .V.t$$...'...... 00f0 c4 08 85 f6 74 05 8b 5e 2c eb 02 33 db c7 44 24 ....t..^,..3..D$ 0100 28 00 00 00 00 85 ff 75 2c 85 f6 74 28 8b 46 14 (......u,..t(.F. 0110 85 c0 74 21 83 78 04 09 75 1b 68 28 92 51 10 6a ..t!.x..u.h(.Q.j 0120 01 57 e8 4d a9 de ff 83 c4 0c 83 c8 ff 5e 5f 5d .W.M.........^_] 0130 5b 83 c4 58 c3 80 7c 24 13 00 74 23 85 f6 75 1f [..X..|$..t#..u. 0140 8b 44 24 20 83 78 2c 01 75 39 56 ff 70 20 ff 75 .D$ .x,.u9V.p .u 0150 24 55 e8 dd 17 03 00 8b f0 83 c4 10 8b 5e 2c 8b $U...........^,. 0160 6c 24 20 8b 44 24 74 89 74 24 20 85 c0 74 62 0f l$ .D$t.t$ ..tb. 0170 b6 48 0c 83 f9 06 0f 87 16 01 00 00 ff 24 8d 5c .H...........$.\ 0180 5c 23 10 8b e8 eb dc 83 78 08 01 76 31 f3 0f 7e \#......x..v1..~ 0190 00 66 0f d6 44 24 58 f3 0f 7e 40 08 66 0f d6 44 .f..D$X..~@.f..D 01a0 24 60 80 7c 24 64 03 76 0d 8d 44 24 58 50 e8 d1 $`.|$d.v..D$XP.. 01b0 77 dd ff 83 c4 04 8d 44 24 58 89 44 24 74 80 78 w......D$X.D$t.x 01c0 0c 06 74 0d 50 e8 2a cd de ff 83 c4 04 8b 44 24 ..t.P.*.......D$ 01d0 74 85 f6 0f 84 dd 04 00 00 80 7c 24 13 00 0f 84 t.........|$.... 01e0 ad 01 00 00 80 7f 0c 01 0f 85 34 01 00 00 85 db ..........4..... 01f0 0f 84 9b 01 00 00 33 c0 3b 07 0f 8f 8d 01 00 00 ......3.;....... 0200 83 7c 24 28 00 74 16 ff 75 20 ff 73 08 e8 82 e0 .|$(.t..u .s.... 0210 02 00 83 c4 08 85 c0 0f 85 da 00 00 00 8b 4d 24 ..............M$ 0220 85 c9 75 14 8b 43 24 85 c0 0f 84 b9 00 00 00 39 ..u..C$........9 0230 48 0c 0f 84 b0 00 00 00 8b 43 24 85 c0 0f 84 b4 H........C$..... 0240 00 00 00 83 7d 28 00 0f 84 8a 00 00 00 8b 40 0c ....}(........@. 0250 e9 85 00 00 00 50 e8 69 81 dd ff 83 c4 04 3b 05 .....P.i......;. 0260 c0 a5 66 10 75 2c ff 74 24 74 e8 d5 f2 ff ff 89 ..f.u,.t$t...... 0270 44 24 78 c7 40 08 01 00 00 00 8b 44 24 78 83 c4 D$x.@......D$x.. 0280 04 c6 40 0d 00 c7 44 24 34 01 00 00 00 e9 3b ff ..@...D$4.....;. 0290 ff ff 8d 44 24 38 3b f8 75 10 80 7c 24 44 03 76 ...D$8;.u..|$D.v 02a0 09 50 e8 ad f5 e0 ff 83 c4 04 80 7c 24 13 00 b9 .P.........|$... 02b0 34 93 51 10 b8 e0 6c 50 10 0f 44 c1 50 68 40 93 4.Q...lP..D.Ph@. 02c0 51 10 6a 02 e8 cb a7 de ff 83 c4 0c 83 c8 ff 5e Q.j............^ 02d0 5f 5d 5b 83 c4 58 c3 8b 40 08 51 50 e8 b3 df 02 _][..X..@.QP.... 02e0 00 83 c4 08 85 c0 75 0f 8b 44 24 24 3b 07 74 1b ......u..D$$;.t. 02f0 40 89 44 24 24 eb 04 8b 44 24 24 8b 5b 18 85 db @.D$$...D$$.[... 0300 0f 85 f2 fe ff ff e9 82 00 00 00 8b 44 24 74 b9 ............D$t. 0310 01 00 00 00 c7 44 24 2c 01 00 00 00 89 4c 24 14 .....D$,.....L$. 0320 eb 71 85 db 74 6b 83 7c 24 28 00 74 12 ff 75 20 .q..tk.|$(.t..u 0330 ff 73 08 e8 5c df 02 00 83 c4 08 85 c0 75 47 ff .s..\........uG. 0340 37 ff 73 08 e8 4b df 02 00 83 c4 08 85 c0 75 36 7.s..K........u6 0350 8b 4d 24 85 c9 75 0c 8b 43 24 85 c0 74 ad 39 48 .M$..u..C$..t.9H 0360 0c 74 a8 8b 43 24 85 c0 74 1c 83 7d 28 00 74 05 .t..C$..t..}(.t. 0370 8b 40 0c eb 03 8b 40 08 51 50 e8 15 df 02 00 83 .@....@.QP...... 0380 c4 08 85 c0 74 85 8b 5b 18 85 db 75 99 8b 44 24 ....t..[...u..D$ 0390 74 33 c9 8a 54 24 70 84 d2 0f 84 e6 00 00 00 85 t3..T$p......... 03a0 ff 74 48 80 7f 0c 01 74 42 8b 76 0c 85 f6 0f 84 .tH....tB.v..... 03b0 d1 00 00 00 83 7e 04 03 74 19 ff 37 ff 76 08 e8 .....~..t..7.v.. 03c0 d0 de 02 00 83 c4 08 85 c0 75 08 ff 44 24 14 89 .........u..D$.. 03d0 74 24 18 8b 76 18 85 f6 75 da 8b 44 24 74 8b 6c t$..v...u..D$t.l 03e0 24 18 8a 54 24 70 e9 9c 00 00 00 83 7e 04 02 75 $..T$p......~..u 03f0 1c 68 78 93 51 10 6a 01 6a 00 e8 75 a6 de ff 83 .hx.Q.j.j..u.... 0400 c4 0c 83 c8 ff 5e 5f 5d 5b 83 c4 58 c3 83 7d 2c .....^_][..X..}, 0410 00 75 3e 41 8b ee 89 6c .u>A...l Data […]: 5f047574385c2478b908935110b8088050100f44c15068109351106a026a00e850aadeff8d44244483c4103bf87510807c244003760950e818f8e0ff83c4045f5d83c8ff5b83c458c3837d2c03740b885c240fc644246c01eb2e85ff751a68289251106a0157e809aadeff83c40c83c8ff5 [Length: 1048]