Frame 518: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:48.806965000 UTC UTC Arrival Time: Nov 21, 2017 01:00:48.806965000 UTC Epoch Arrival Time: 1511226048.806965000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 177.000 microseconds] [Time since reference or first frame: 42.941225000 seconds] Frame Number: 518 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xca9d (51869) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x6bab [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 117701, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 206] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 117701 (relative sequence number) Sequence Number (raw): 2946734082 [Next Sequence Number: 118225 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf2dc [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 1.398109000 seconds] [Time since previous frame in this TCP stream: 177.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 3968] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 4] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 48 c6 00 10 00 13 3a 10 00 13 3a 10 37 c5 00 10 H.....:...:.7... 0010 e5 12 3a 10 84 c5 00 10 dc c7 00 10 cf c7 00 10 ..:............. 0020 c2 c7 00 10 b5 c7 00 10 a8 c7 00 10 9b c7 00 10 ................ 0030 1c c9 00 10 14 ca 00 10 14 ca 00 10 14 ca 00 10 ................ 0040 14 ca 00 10 21 c5 00 10 9c c9 00 10 fd c7 00 10 ....!........... 0050 ff c9 00 10 ad c6 00 10 82 13 3a 10 75 c9 00 10 ..........:.u... 0060 d8 c6 00 10 d8 c6 00 10 75 c9 00 10 53 13 3a 10 ........u...S.:. 0070 3a c9 00 10 6d 13 3a 10 75 c9 00 10 d8 c6 00 10 :...m.:.u....... 0080 d8 c6 00 10 75 c9 00 10 cc cc cc cc 55 8b ec 53 ....u.......U..S 0090 8b 5d 0c 56 8b 73 14 57 8b 7d 08 83 7f 10 00 0f .].V.s.W.}...... 00a0 94 c0 88 45 0b 85 f6 74 41 84 c0 74 05 39 73 10 ...E...tA..t.9s. 00b0 74 49 83 7e 04 00 6a 01 8d 45 0c 50 ff 75 18 ff tI.~..j..E.P.u.. 00c0 76 08 ff 36 74 3b ff 76 04 ff 76 20 57 e8 7a 99 v..6t;.v..v W.z. 00d0 02 00 83 c4 20 83 7d 10 00 74 07 ff 75 0c ff 55 .... .}..t..u..U 00e0 10 59 8b 76 10 8a 45 0b eb bb 83 7f 10 00 75 06 .Y.v..E.......u. 00f0 8b 47 14 89 47 10 5f 5e 5b 5d c3 83 67 10 00 eb .G..G._^[]..g... 0100 b1 57 e8 05 06 00 00 83 c4 18 eb c9 55 8b ec 51 .W..........U..Q 0110 53 56 57 8b f9 8b 1f 8d 4f 48 83 7b 10 00 8b 53 SVW.....OH.{...S 0120 04 8d 0c 91 8b 31 75 47 85 f6 0f 84 ce 9a 37 00 .....1uG......7. 0130 8b 36 80 7e 0d 00 89 75 fc 0f 85 96 00 00 00 ff .6.~...u........ 0140 46 08 6a 04 6a 00 6a 04 8d 45 fc 50 8b 43 0c 6a F.j.j.j..E.P.C.j 0150 00 ff 34 38 e8 b3 05 00 00 83 c4 18 83 f8 ff 0f ..48............ 0160 84 a5 9a 37 00 83 07 1c 5f 5e 33 c0 5b c9 c3 85 ...7...._^3.[... 0170 f6 0f 84 7b 9a 37 00 8b 06 80 78 0d 00 75 49 83 ...{.7....x..uI. 0180 78 08 01 76 3d ff 48 08 6a 18 e8 ad 9d 02 00 83 x..v=.H.j....... 0190 60 10 00 8b 16 59 8b 0a 89 08 8b 4a 04 89 48 04 `....Y.....J..H. 01a0 8b 0e 8a 49 0c 88 48 0c c7 40 08 01 00 00 00 c6 ...I..H..@...... 01b0 40 0d 00 89 06 80 78 0c 03 76 07 50 e8 db 02 00 @.....x..v.P.... 01c0 00 59 8b 06 c6 40 0d 01 8b 06 89 45 fc ff 40 08 .Y...@.....E..@. 01d0 e9 6d ff ff ff 6a 18 e8 60 9d 02 00 83 60 10 00 .m...j..`....`.. 01e0 59 8b 0e 89 08 8b 4e 04 89 48 04 8a 4e 0c 88 48 Y.....N..H..N..H 01f0 0c c7 40 08 01 00 00 00 c6 40 0d 00 89 45 fc 80 ..@......@...E.. 0200 f9 03 0f 86 3a ff ff ff 50 e8 8e 02 ....:...P... Data […]: 48c6001000133a1000133a1037c50010e5123a1084c50010dcc70010cfc70010c2c70010b5c70010a8c700109bc700101cc9001014ca001014ca001014ca001014ca001021c500109cc90010fdc70010ffc90010adc6001082133a1075c90010d8c60010d8c6001075c9001053133a103ac [Length: 524]