Frame 5165: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.794318000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.794318000 UTC Epoch Arrival Time: 1511226051.794318000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 17.000 microseconds] [Time since reference or first frame: 45.928578000 seconds] Frame Number: 5165 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd77d (55165) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5cbf [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2609997, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 4851] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 2609997 (relative sequence number) Sequence Number (raw): 2949226378 [Next Sequence Number: 2611045 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x60a8 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.385462000 seconds] [Time since previous frame in this TCP stream: 17.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2620] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 37] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 24 e8 0e 2d 00 00 83 c4 08 85 ff 74 0a 57 ff 15 $..-.......t.W.. 0010 94 6b 65 10 83 c4 04 8b 44 24 24 85 c0 74 0a 50 .ke.....D$$..t.P 0020 ff 15 94 6b 65 10 83 c4 04 56 ff 15 94 6b 65 10 ...ke....V...ke. 0030 83 c4 04 33 c0 5f 5d 5e 5b 83 c4 0c c3 8b 44 24 ...3._]^[.....D$ 0040 24 56 89 46 30 ff 74 24 28 ff 74 24 30 ff 74 24 $V.F0.t$(.t$0.t$ 0050 1c e8 4e 42 06 00 83 c4 10 85 c0 74 41 6a 00 6a ..NB.......tAj.j 0060 00 ff 74 24 30 68 48 8b 52 10 68 fd 01 00 00 53 ..t$0hH.R.h....S 0070 ff 74 24 38 e8 fb 11 00 00 56 e8 85 15 00 00 83 .t$8.....V...... 0080 c4 20 85 ff 0f 84 f1 00 00 00 57 ff 15 94 6b 65 . ........W...ke 0090 10 83 c4 04 33 c0 5f 5d 5e 5b 83 c4 0c c3 8b 44 ....3._]^[.....D 00a0 24 14 89 46 2c 8b 44 24 2c 89 46 24 8b 44 24 20 $..F,.D$,.F$.D$ 00b0 85 c0 74 21 8b 40 1c 3d 34 12 cd ab 74 07 3d 35 ..t!.@.=4...t.=5 00c0 12 cd ab 75 10 89 6e 28 85 ed 74 18 c7 45 14 01 ...u..n(..t..E.. 00d0 00 00 00 eb 0f 55 ff 73 20 e8 06 06 00 00 83 c4 .....U.s ....... 00e0 08 89 46 28 89 5e 14 8b 43 20 89 46 20 8b 43 10 ..F(.^..C .F .C. 00f0 85 c0 75 05 89 73 0c eb 09 89 70 18 8b 43 10 89 ..u..s....p..C.. 0100 46 1c 89 73 10 85 ff 74 0a 57 ff 15 94 6b 65 10 F..s...t.W...ke. 0110 83 c4 04 5f 5d 8b c6 5e 5b 83 c4 0c c3 8b 44 24 ..._]..^[.....D$ 0120 20 33 f6 33 c9 33 d2 85 c0 74 23 8b 78 1c 8b 70 3.3.3...t#.x..p 0130 04 8b 10 81 ff 34 12 cd ab 74 08 81 ff 35 12 cd .....4...t...5.. 0140 ab 75 0b 2b c2 48 3d f8 00 00 00 0f 46 ca 68 ec .u.+.H=.....F.h. 0150 8a 52 10 68 08 8b 54 10 6a 00 6a 00 6a 00 6a 00 .R.h..T.j.j.j.j. 0160 6a 00 6a 00 6a 00 6a 02 6a 01 6a 17 6a 00 51 52 j.j.j.j.j.j.j.QR 0170 56 6a 00 e8 3c e3 ff ff 83 c4 44 5f 5d 5e 33 c0 Vj..<.....D_]^3. 0180 5b 83 c4 0c c3 8d 49 00 e3 cf 26 10 0e d0 26 10 [.....I...&...&. 0190 35 d0 26 10 5b d0 26 10 cc cc cc cc cc cc cc cc 5.&.[.&......... 01a0 cc cc cc cc 53 8b 5c 24 0c 85 db 75 04 33 c0 5b ....S.\$...u.3.[ 01b0 c3 55 8b 6c 24 14 85 ed 75 05 5d 33 c0 5b c3 57 .U.l$...u.]3.[.W 01c0 8b 7c 24 1c 85 ff 74 33 8b 43 40 89 44 24 14 85 .|$...t3.C@.D$.. 01d0 c0 75 2e ff 73 50 50 e8 b8 46 06 00 83 c4 08 89 .u..sPP..F...... 01e0 44 24 14 89 43 40 85 c0 75 17 68 18 8e 52 10 ff D$..C@..u.h..R.. 01f0 74 24 14 e8 1c 2b 00 00 83 c4 08 5f 5d 33 c0 5b t$...+....._]3.[ 0200 c3 56 6a 18 ff 15 88 6b 65 10 8b f0 83 c4 04 85 .Vj....ke....... 0210 f6 75 18 68 5c 88 52 10 ff 74 24 18 e8 f3 2a 00 .u.h\.R..t$...*. 0220 00 83 c4 08 33 c0 5e 5f 5d 5b c3 55 e8 43 64 ff ....3.^_][.U.Cd. 0230 ff 89 46 04 8b 44 24 18 83 c4 04 89 5e 14 85 c0 ..F..D$.....^... 0240 74 3e 83 78 2c 00 74 38 8b 43 50 85 c0 74 1a 6a t>.x,.t8.CP..t.j 0250 ff ff 77 08 50 e8 1a 40 08 00 83 c4 0c 89 46 0c ..w.P..@......F. 0260 c7 46 08 00 00 00 00 eb 21 ff 77 08 e8 03 64 ff .F......!.w...d. 0270 ff 83 c4 04 89 46 0c c7 46 08 00 00 00 00 eb 0a .....F..F....... 0280 89 7e 08 c7 46 0c 00 00 00 00 ff 77 14 e8 82 8d .~..F......w.... 0290 ff ff 56 55 ff 74 24 24 89 46 10 e8 e4 3f 06 00 ..VU.t$$.F...?.. 02a0 83 c4 10 85 c0 79 33 8b 44 24 14 85 c0 74 1b 6a .....y3.D$...t.j 02b0 00 6a 00 55 68 3c 8e 52 10 68 01 02 00 00 ff 77 .j.Uh<.R.h.....w 02c0 14 50 e8 ad 0f 00 00 83 c4 1c 56 e8 04 14 00 00 .P........V..... 02d0 83 c4 04 33 c0 5e 5f 5d 5b c3 8b c6 5e c7 47 28 ...3.^_][...^.G( 02e0 02 00 00 00 5f 5d 5b c3 cc cc cc cc cc cc cc cc ...._][......... 02f0 cc cc cc cc 56 8b 74 24 0c 85 f6 75 04 33 c0 5e ....V.t$...u.3.^ 0300 c3 57 8b 7c 24 14 85 ff 75 05 5f 33 c0 5e c3 55 .W.|$...u._3.^.U 0310 8b 6c 24 1c 85 ed 75 0c 39 6c 24 20 75 06 5d 5f .l$...u.9l$ u.]_ 0320 33 c0 5e c3 53 8b 5e 24 85 db 75 38 8b 4e 20 33 3.^.S.^$..u8.N 3 0330 c0 85 c9 74 03 8b 41 50 50 6a 00 e8 54 45 06 00 ...t..APPj..TE.. 0340 8b d8 83 c4 08 89 5e 24 85 db 75 18 68 9c 8d 52 ......^$..u.h..R 0350 10 ff 74 24 18 e8 ba 29 00 00 83 c4 08 33 c0 5b ..t$...).....3.[ 0360 5d 5f 5e c3 6a 0c ff 15 88 6b 65 10 8b f0 83 c4 ]_^.j....ke..... 0370 04 85 f6 75 18 68 5c 88 52 10 ff 74 24 18 e8 91 ...u.h\.R..t$... 0380 29 00 00 83 c4 08 33 c0 5b 5d 5f 5e c3 0f 57 c0 ).....3.[]_^..W. 0390 66 0f d6 06 57 c7 46 08 00 00 00 00 e8 d3 62 ff f...W.F.......b. 03a0 ff 89 06 8b 44 24 28 83 c4 04 85 c0 74 0c 50 e8 ....D$(.....t.P. 03b0 c0 62 ff ff 83 c4 04 89 46 08 85 ed 74 0c 55 e8 .b......F...t.U. 03c0 b0 62 ff ff 83 c4 04 89 46 04 56 57 53 e8 b2 3e .b......F.VWS..> 03d0 06 00 83 c4 0c 85 c0 74 22 57 68 c8 8d 52 10 68 .......t"Wh..R.h 03e0 0e 02 00 00 6a 00 e8 09 0e 00 00 56 e8 73 13 00 ....j......V.s.. 03f0 00 83 c4 14 33 c0 5b 5d 5f 5e c3 5b 5d 5f 8b c6 ....3.[]_^.[]_.. 0400 5e c3 cc cc 56 8b 74 24 0c 85 f6 75 04 33 c0 5e ^...V.t$...u.3.^ 0410 c3 55 8b 6c 24 14 85 ed .U.l$... Data […]: 24e80e2d000083c40885ff740a57ff15946b651083c4048b44242485c0740a50ff15946b651083c40456ff15946b651083c40433c05f5d5e5b83c40cc38b44242456894630ff742428ff742430ff74241ce84e42060083c41085c074416a006a00ff74243068488b521068fd01000053ff7 [Length: 1048]