Frame 5191: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.802308000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.802308000 UTC Epoch Arrival Time: 1511226051.802308000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 78.000 microseconds] [Time since reference or first frame: 45.936568000 seconds] Frame Number: 5191 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd78f (55183) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5cad [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2623621, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 4877] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 2623621 (relative sequence number) Sequence Number (raw): 2949240002 [Next Sequence Number: 2624669 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf0d8 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.393452000 seconds] [Time since previous frame in this TCP stream: 78.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1572] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 37] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 2c 85 c0 74 22 8b 40 28 85 c0 74 1b 51 ff 76 08 ,..t".@(..t.Q.v. 0010 50 e8 36 16 06 00 8b d8 83 c4 0c 85 db 0f 85 82 P.6............. 0020 00 00 00 8b 4c 24 10 8b 45 30 85 c0 74 1a 8b 40 ....L$..E0..t..@ 0030 28 85 c0 74 13 51 ff 76 08 50 e8 0d 16 06 00 8b (..t.Q.v.P...... 0040 d8 83 c4 0c 85 db 75 2d ff 76 08 ff 75 2c e8 a9 ......u-.v..u,.. 0050 e3 ff ff 8b d8 83 c4 08 85 db 75 49 8b 45 30 85 ..........uI.E0. 0060 c0 74 24 ff 76 08 50 e8 90 e3 ff ff 8b d8 83 c4 .t$.v.P......... 0070 08 85 db 74 12 85 ff 74 2c c7 07 01 00 00 00 5f ...t...t,......_ 0080 8b c3 5b 5e 5d 59 c3 6a 00 6a 00 ff 76 08 68 20 ..[^]Y.j.j..v.h 0090 99 52 10 68 16 02 00 00 56 ff 74 24 30 e8 9a dc .R.h....V.t$0... 00a0 ff ff 83 c4 1c 5f 8b c3 5b 5e 5d 59 c3 5e 33 c0 ....._..[^]Y.^3. 00b0 5d 59 c3 cc cc cc cc cc cc cc cc cc 53 55 8b 6c ]Y..........SU.l 00c0 24 0c 56 85 ed 0f 84 bd 00 00 00 8b 5c 24 14 85 $.V.........\$.. 00d0 db 0f 84 b1 00 00 00 8b 74 24 18 85 f6 0f 84 a5 ........t$...... 00e0 00 00 00 8b 0e 57 8b 7c 24 20 3b cf 7c 07 5f 5e .....W.|$ ;.|._^ 00f0 5d 8b c1 5b c3 8b 45 00 48 83 f8 03 0f 87 7f 00 ]..[..E.H....... 0100 00 00 ff 24 85 d4 08 27 10 33 ff 85 c9 7e 19 ff ...$...'.3...~.. 0110 34 bb 68 18 8a 52 10 e8 60 2d ff ff 83 c4 08 85 4.h..R..`-...... 0120 c0 75 5e 47 3b 3e 7c e7 8b 06 5f c7 04 83 18 8a .u^G;>|..._..... 0130 52 10 ff 06 8b 06 5e 5d 5b c3 33 ff 85 c9 7e 17 R.....^][.3...~. 0140 ff 34 bb ff 75 08 e8 31 2d ff ff 83 c4 08 85 c0 .4..u..1-....... 0150 75 2f 47 3b 3e 7c e9 8b 0e 8b 45 08 89 04 8b ff u/G;>|....E..... 0160 06 8b 06 5f 5e 5d 5b c3 57 56 53 ff 75 0c e8 49 ..._^][.WVS.u..I 0170 ff ff ff 57 56 53 ff 75 10 e8 3e ff ff ff 83 c4 ...WVS.u..>..... 0180 20 8b 06 5f 5e 5d 5b c3 5e 5d 83 c8 ff 5b c3 90 .._^][.^]...[.. 0190 4d 08 27 10 7e 08 27 10 ac 08 27 10 ac 08 27 10 M.'.~.'...'...'. 01a0 cc cc cc cc cc cc cc cc cc cc cc cc 81 ec 64 04 ..............d. 01b0 00 00 53 56 68 fc 03 00 00 8d 44 24 74 6a 00 50 ..SVh.....D$tj.P 01c0 c7 44 24 78 00 00 00 00 e8 93 ac 0a 00 8b 9c 24 .D$x...........$ 01d0 7c 04 00 00 8b b4 24 80 04 00 00 83 c4 0c c7 44 |.....$........D 01e0 24 0c 00 00 00 00 85 db 75 10 85 f6 75 0c 5e 83 $.......u...u.^. 01f0 c8 ff 5b 81 c4 64 04 00 00 c3 55 8b ac 24 7c 04 ..[..d....U..$|. 0200 00 00 85 ed 74 0a 83 bc 24 80 04 00 00 00 7f 0d ....t...$....... 0210 5d 5e 83 c8 ff 5b 81 c4 64 04 00 00 c3 57 6a 40 ]^...[..d....Wj@ 0220 8d 44 24 38 6a 00 50 e8 34 ac 0a 00 33 ff 85 db .D$8j.P.4...3... 0230 0f 45 f3 c7 44 24 44 f0 4a 35 10 8b 46 14 89 44 .E..D$D.J5..F..D 0240 24 1c ff 70 08 8b 40 20 ff 70 2c e8 ac e1 ff ff $..p..@ .p,..... 0250 8b d8 83 c4 14 85 db 75 20 8b 4c 24 10 8b 41 20 .......u .L$..A 0260 8b 40 30 85 c0 74 70 ff 71 08 50 e8 8c e1 ff ff .@0..tp.q.P..... 0270 8b d8 83 c4 08 85 db 74 5e 8b 84 24 78 04 00 00 .......t^..$x... 0280 85 c0 74 09 8b 48 18 89 4c 24 20 eb 04 89 7c 24 ..t..H..L$ ...|$ 0290 20 8b 84 24 7c 04 00 00 85 c0 74 09 8b 40 1c 89 ..$|.....t..@.. 02a0 44 24 1c eb 04 89 7c 24 1c 8b 44 24 10 6a 00 8b D$....|$..D$.j.. 02b0 48 0c 8b 40 10 68 88 9f 52 10 6a 00 ff 76 20 89 H..@.h..R.j..v . 02c0 4c 24 38 89 44 24 40 e8 50 67 ff ff 83 c4 10 89 L$8.D$@.Pg...... 02d0 44 24 18 85 c0 75 0e 5f 5d 5e 83 c8 ff 5b 81 c4 D$...u._]^...[.. 02e0 64 04 00 00 c3 8b 8c 24 78 04 00 00 8b 74 24 10 d......$x....t$. 02f0 8b 94 24 7c 04 00 00 8b 68 08 89 70 14 89 48 1c ..$|....h..p..H. 0300 89 50 18 89 6c 24 2c 85 c9 74 05 89 41 18 eb 03 .P..l$,..t..A... 0310 89 46 0c 85 d2 74 05 89 42 1c eb 03 89 46 10 68 .F...t..B....F.h 0320 00 01 00 00 8d 44 24 18 50 8d 44 24 7c 50 ff 73 .....D$.P.D$|P.s 0330 28 e8 86 fd ff ff 8b ac 24 90 04 00 00 83 c4 10 (.......$....... 0340 89 44 24 14 89 7c 24 24 85 c0 7e 71 8d 5c 24 74 .D$..|$$..~q.\$t 0350 8b 03 8b 4c 24 18 56 89 41 08 ff 76 20 8d 44 24 ...L$.V.A..v .D$ 0360 3c 50 e8 d5 1f 00 00 83 c4 0c 85 c0 74 39 33 f6