Frame 4821: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.652434000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.652434000 UTC Epoch Arrival Time: 1511226051.652434000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 4.000 microseconds] [Time since reference or first frame: 45.786694000 seconds] Frame Number: 4821 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd68c (54924) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5db0 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2427645, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 4507] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 2427645 (relative sequence number) Sequence Number (raw): 2949044026 [Next Sequence Number: 2428693 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xe56d [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.243578000 seconds] [Time since previous frame in this TCP stream: 4.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 3668] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 31] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 24 04 e9 5d c5 dc ff c3 cc cc cc cc cc cc cc cc $..]............ 0010 cc cc cc cc 81 ec 48 01 00 00 56 57 e8 d3 95 e2 ......H...VW.... 0020 ff 6a 00 8b f0 b9 1c 00 00 00 bf e0 a5 66 10 f3 .j...........f.. 0030 a5 6a 0a 68 f4 78 4c 10 c7 05 ec a5 66 10 c0 12 .j.h.xL.....f... 0040 24 10 c7 05 f0 a5 66 10 b0 13 24 10 c7 05 fc a5 $.....f...$..... 0050 66 10 00 12 24 10 c7 05 e8 a5 66 10 00 00 00 00 f...$.....f..... 0060 ff 15 bc 6d 67 10 83 c4 0c 89 44 24 1c 5f 5e 3d ...mg.....D$._^= 0070 f4 78 4c 10 75 13 6a 09 68 f4 78 4c 10 e8 f2 21 .xL.u.j.h.xL...! 0080 dd ff 83 c4 08 89 44 24 14 8d 44 24 10 50 c7 44 ......D$..D$.P.D 0090 24 1c 09 00 00 00 c7 84 24 b8 00 00 00 00 00 00 $.......$....... 00a0 00 c7 84 24 bc 00 00 00 00 00 00 00 c7 84 24 c0 ...$..........$. 00b0 00 00 00 00 00 00 00 c7 84 24 10 01 00 00 00 00 .........$...... 00c0 00 00 c7 84 24 14 01 00 00 00 00 00 00 c7 84 24 ....$..........$ 00d0 d4 00 00 00 00 00 00 00 c7 84 24 d8 00 00 00 00 ..........$..... 00e0 00 00 00 c7 84 24 dc 00 00 00 00 00 00 00 c7 84 .....$.......... 00f0 24 c4 00 00 00 00 00 00 00 c7 84 24 c8 00 00 00 $..........$.... 0100 00 00 00 00 c7 84 24 cc 00 00 00 00 00 00 00 c7 ......$......... 0110 84 24 d0 00 00 00 00 00 00 00 c7 84 24 e0 00 00 .$..........$... 0120 00 00 00 00 00 c7 84 24 e4 00 00 00 00 00 00 00 .......$........ 0130 c7 84 24 e8 00 00 00 00 00 00 00 c7 84 24 18 01 ..$..........$.. 0140 00 00 00 00 00 00 c7 84 24 1c 01 00 00 00 00 00 ........$....... 0150 00 c7 44 24 20 00 00 00 00 c7 84 24 24 01 00 00 ..D$ ......$$... 0160 00 00 00 00 c7 84 24 28 01 00 00 00 00 00 00 c7 ......$(........ 0170 84 24 2c 01 00 00 00 00 00 00 c7 84 24 30 01 00 .$,.........$0.. 0180 00 00 00 00 00 c7 84 24 34 01 00 00 00 00 00 00 .......$4....... 0190 c7 84 24 20 01 00 00 00 00 00 00 c7 84 24 0c 01 ..$ .........$.. 01a0 00 00 00 00 00 00 c7 84 24 ec 00 00 00 00 00 00 ........$....... 01b0 00 c7 84 24 3c 01 00 00 00 00 00 00 c7 84 24 38 ...$<.........$8 01c0 01 00 00 50 bb 51 10 c7 84 24 08 01 00 00 e0 16 ...P.Q...$...... 01d0 24 10 e8 8d aa e1 ff 6a 01 6a 00 6a 00 68 50 a6 $......j.j.j.hP. 01e0 66 10 a3 f8 e6 66 10 e8 28 2f de ff 6a 02 6a 00 f....f..(/..j.j. 01f0 6a 10 8d 44 24 20 50 6a 0f 68 b4 c0 51 10 68 50 j..D$ Pj.h..Q.hP 0200 a6 66 10 c7 44 24 34 00 00 00 00 c7 44 24 30 e0 .f..D$4.....D$0. 0210 8b 2e 10 c7 44 24 3c 01 00 00 00 e8 84 14 df ff ....D$<......... 0220 6a 02 6a 00 6a 10 8d 44 24 3c 50 6a 08 68 fc 6c j.j.j..D$