Frame 5112: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.778046000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.778046000 UTC Epoch Arrival Time: 1511226051.778046000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 48.000 microseconds] [Time since reference or first frame: 45.912306000 seconds] Frame Number: 5112 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xd757 (55127) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5ef1 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2584845, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 4798] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 2584845 (relative sequence number) Sequence Number (raw): 2949201226 [Next Sequence Number: 2585369 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x55b8 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.369190000 seconds] [Time since previous frame in this TCP stream: 48.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1048] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 35] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 50 e8 ae c8 ff ff 83 c4 04 89 46 28 83 3d 84 d0 P.........F(.=.. 0010 66 10 00 74 17 e8 9a 01 01 00 83 38 00 74 0d e8 f..t.......8.t.. 0020 90 01 01 00 8b 00 56 ff d0 83 c4 04 8b c6 5e c3 ......V.......^. 0030 cc cc cc cc 8b 44 24 04 56 57 85 c0 bf 54 f6 47 .....D$.VW...T.G 0040 10 6a 60 0f 45 f8 ff 15 88 6b 65 10 8b f0 83 c4 .j`.E....ke..... 0050 04 85 f6 75 18 68 78 84 52 10 50 50 6a 02 6a 02 ...u.hx.R.PPj.j. 0060 e8 df 4a 00 00 83 c4 14 33 c0 5f 5e c3 6a 60 6a ..J.....3._^.j`j 0070 00 56 e8 61 45 0b 00 57 c7 46 04 09 00 00 00 e8 .V.aE..W.F...... 0080 30 c8 ff ff 83 c4 10 89 46 38 85 c0 75 1f 68 78 0.......F8..u.hx 0090 84 52 10 50 50 6a 02 6a 02 e8 a6 4a 00 00 56 ff .R.PPj.j...J..V. 00a0 15 94 6b 65 10 83 c4 18 33 c0 5f 5e c3 c7 46 28 ..ke....3._^..F( 00b0 ff ff ff ff c7 46 24 ff ff ff ff 89 76 20 c7 46 .....F$.....v .F 00c0 58 00 00 00 00 c7 46 5c 20 00 00 00 c7 46 4c 01 X.....F\ ....FL. 00d0 00 00 00 83 3d 84 d0 66 10 00 74 17 e8 d3 00 01 ....=..f..t..... 00e0 00 83 38 00 74 0d e8 c9 00 01 00 8b 00 56 ff d0 ..8.t........V.. 00f0 83 c4 04 5f 8b c6 5e c3 cc cc cc cc cc cc cc cc ..._..^......... 0100 cc cc cc cc ff 74 24 08 e8 a7 fe ff ff 83 c4 04 .....t$......... 0110 85 c0 74 07 8b 4c 24 04 89 48 20 c3 cc cc cc cc ..t..L$..H ..... 0120 cc cc cc cc 56 6a 3c ff 15 88 6b 65 10 8b f0 83 ....Vj<...ke.... 0130 c4 04 85 f6 75 17 68 b8 84 52 10 50 50 6a 02 6a ....u.h..R.PPj.j 0140 02 e8 fe 49 00 00 83 c4 14 33 c0 5e c3 6a 3c 6a ...I.....3.^.j....8.t..4... 0180 8b 00 56 ff d0 83 c4 04 8b c6 5e c3 cc cc cc cc ..V.......^..... 0190 cc cc cc cc 56 57 8b 7c 24 0c 85 ff 74 22 8b 47 ....VW.|$...t".G 01a0 50 85 c0 74 1b 6a ff ff 74 24 18 50 e8 03 a3 08 P..t.j..t$.P.... 01b0 00 50 ff 74 24 20 e8 b9 04 00 00 83 c4 14 eb 10 .P.t$ .......... 01c0 ff 74 24 14 ff 74 24 14 e8 27 04 00 00 83 c4 08 .t$..t$..'...... 01d0 8b f0 85 f6 74 42 8b 44 24 18 89 7e 20 85 c0 74 ....tB.D$..~ ..t 01e0 37 50 57 e8 cc 28 00 00 83 c4 08 89 46 0c 85 c0 7PW..(......F... 01f0 75 08 89 46 10 5f 8b c6 5e c3 83 78 18 00 8d 48 u..F._..^..x...H 0200 18 74 0f 90 89 70 14 8b 01 83 78 18 .t...p....x. Data […]: 50e8aec8ffff83c404894628833d84d06610007417e89a010100833800740de8900101008b0056ffd083c4048bc65ec3cccccccc8b442404565785c0bf54f647106a600f45f8ff15886b65108bf083c40485f67518687884521050506a026a02e8df4a000083c41433c05f5ec36a606a005 [Length: 524]