Frame 5194: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.802378000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.802378000 UTC Epoch Arrival Time: 1511226051.802378000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 60.000 microseconds] [Time since reference or first frame: 45.936638000 seconds] Frame Number: 5194 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd791 (55185) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5cab [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2625717, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 4880] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 2625717 (relative sequence number) Sequence Number (raw): 2949242098 [Next Sequence Number: 2626765 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x63b0 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.393522000 seconds] [Time since previous frame in this TCP stream: 60.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 3144] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 37] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 77 04 e8 45 26 ff ff 83 c4 08 85 c0 75 25 8b 3f w..E&.......u%.? 0010 85 ff 75 e8 ff 76 3c ff 76 08 ff 76 30 68 00 92 ..u..v<.v..v0h.. 0020 52 10 68 f6 01 00 00 56 55 e8 de d4 ff ff 83 c4 R.h....VU....... 0030 1c 33 db 5d 5e 5f 8b c3 5b c3 cc cc 8b 44 24 04 .3.]^_..[....D$. 0040 83 78 28 02 75 06 8b 44 24 08 ff 00 c3 cc cc cc .x(.u..D$....... 0050 cc cc cc cc cc cc cc cc cc cc cc cc ff 74 24 08 .............t$. 0060 ff 74 24 08 6a 00 e8 01 02 00 00 83 c4 0c c3 cc .t$.j........... 0070 cc cc cc cc cc cc cc cc cc cc cc cc 8b 44 24 10 .............D$. 0080 55 56 57 bd 01 00 00 00 83 e8 05 0f 84 4e 01 00 UVW..........N.. 0090 00 48 74 77 83 e8 04 0f 85 ba 01 00 00 8b 74 24 .Htw..........t$ 00a0 14 8b 7c 24 20 8b 46 2c 85 c0 74 19 8b 40 24 85 ..|$ .F,..t..@$. 00b0 c0 74 12 57 50 e8 42 0d 06 00 83 c4 08 85 c0 0f .t.WP.B......... 00c0 85 92 01 00 00 8b 46 30 85 c0 74 19 8b 40 24 85 ......F0..t..@$. 00d0 c0 74 12 57 50 e8 22 0d 06 00 83 c4 08 85 c0 0f .t.WP."......... 00e0 85 72 01 00 00 6a 00 57 ff 74 24 20 68 00 90 52 .r...j.W.t$ h..R 00f0 10 68 19 02 00 00 56 ff 74 24 28 e8 0c d4 ff ff .h....V.t$(..... 0100 83 c4 1c 33 ed 5f 5e 8b c5 5d c3 ff 74 24 20 e8 ...3._^..]..t$ . 0110 f8 27 ff ff 83 c4 04 89 44 24 1c 85 c0 75 04 5f .'......D$...u._ 0120 5e 5d c3 80 38 00 8b f0 0f 84 a1 00 00 00 53 80 ^]..8.........S. 0130 3e 00 8b fe 74 1e 8d 9b 00 00 00 00 8a 06 3c 20 >...t.........< 0140 74 12 3c 09 72 04 3c 0a 76 0a 3c 0d 74 06 46 80 t.<.r.<.v.<.t.F. 0150 3e 00 75 e8 8a 1e 57 ff 74 24 1c c6 06 00 e8 49 >.u...W.t$.....I 0160 6f 07 00 83 c4 08 85 c0 75 12 50 57 ff 74 24 24 o.......u.PW.t$$ 0170 68 88 8f 52 10 68 17 02 00 00 eb 17 83 78 30 03 h..R.h.......x0. 0180 74 24 6a 00 57 ff 74 24 24 68 c0 8f 52 10 68 ff t$j.W.t$$h..R.h. 0190 01 00 00 8b 44 24 2c 50 ff 74 24 2c e8 6b d3 ff ....D$,P.t$,.k.. 01a0 ff 83 c4 1c 33 ed 84 db 74 20 88 1e 8a 06 3c 20 ....3...t ....< 01b0 74 0c 3c 09 72 04 3c 0a 76 04 3c 0d 75 03 46 eb t.<.r.<.v.<.u.F. 01c0 eb 80 3e 00 0f 85 65 ff ff ff 8b 44 24 20 5b 50 ..>...e....D$ [P 01d0 ff 15 94 6b 65 10 83 c4 04 8b c5 5f 5e 5d c3 8b ...ke......_^].. 01e0 7c 24 20 8b 74 24 14 57 56 e8 be 6e 07 00 83 c4 |$ .t$.WV..n.... 01f0 08 85 c0 75 3c 39 6e 28 75 11 57 56 89 46 28 e8 ...u<9n(u.WV.F(. 0200 a8 6e 07 00 83 c4 08 85 c0 75 26 6a 00 57 ff 74 .n.......u&j.W.t 0210 24 20 68 14 8f 52 10 68 17 02 00 00 56 ff 74 24 $ h..R.h....V.t$ 0220 28 e8 e6 d2 ff ff 83 c4 1c 33 ed 5f 5e 8b c5 5d (........3._^..] 0230 c3 83 78 30 03 74 20 6a 00 57 ff 74 24 20 68 4c ..x0.t j.W.t$ hL 0240 8f 52 10 68 ff 01 00 00 56 ff 74 24 28 e8 ba d2 .R.h....V.t$(... 0250 ff ff 83 c4 1c 33 ed 5f 5e 8b c5 5d c3 cc cc cc .....3._^..].... 0260 cc cc cc cc cc cc cc cc cc cc cc cc 8b 44 24 08 .............D$. 0270 83 c0 fe 83 f8 08 77 4b ff 24 85 40 12 27 10 ff ......wK.$.@.'.. 0280 74 24 0c ff 74 24 08 e8 10 0d 00 00 83 c4 08 c3 t$..t$.......... 0290 ff 74 24 0c ff 74 24 08 e8 5f 0c 00 00 83 c4 08 .t$..t$.._...... 02a0 c3 ff 74 24 0c ff 74 24 08 e8 1e 11 00 00 83 c4 ..t$..t$........ 02b0 08 c3 ff 74 24 0c ff 74 24 08 e8 fd 0d 00 00 83 ...t$..t$....... 02c0 c4 08 c3 b8 01 00 00 00 c3 8d 49 00 04 12 27 10 ..........I...'. 02d0 04 12 27 10 f3 11 27 10 04 12 27 10 f3 11 27 10 ..'...'...'...'. 02e0 26 12 27 10 15 12 27 10 15 12 27 10 04 12 27 10 &.'...'...'...'. 02f0 cc cc cc cc cc cc cc cc cc cc cc cc 51 53 56 57 ............QSVW 0300 8b 7c 24 1c 8d 44 24 0c 50 57 e8 1d 84 ff ff 8b .|$..D$.PW...... 0310 74 24 20 8b d8 83 c4 08 85 db 0f 85 a1 00 00 00 t$ ............. 0320 85 f6 0f 84 85 01 00 00 8d 64 24 00 8b 06 83 f8 .........d$..... 0330 02 75 0c 83 7e 18 00 75 40 57 ff 76 08 eb 1b 83 .u..~..u@W.v.... 0340 f8 04 75 43 8b 46 0c 85 c0 74 3c 83 38 02 75 20 ..uC.F...t<.8.u 0350 83 78 18 00 75 23 57 ff 70 08 e8 ed 22 ff ff 83 .x..u#W.p..."... 0360 c4 08 85 c0 74 13 5f 5e b8 01 00 00 00 5b 59 c3 ....t._^.....[Y. 0370 85 c0 74 13 83 38 01 75 0e 8b 76 10 85 f6 75 ac ..t..8.u..v...u. 0380 5f 5e 33 c0 5b 59 c3 68 fc 98 52 10 68 08 8b 54 _^3.[Y.h..R.h..T 0390 10 6a 00 6a 00 6a 00 6a 00 6a 00 6a 00 6a 00 6a .j.j.j.j.j.j.j.j 03a0 02 68 07 02 00 00 6a 17 6a 00 6a 00 6a 00 6a 00 .h....j.j.j.j.j. 03b0 6a 00 e8 95 a3 ff ff 83 c4 44 33 c0 5f 5e 5b 59 j........D3._^[Y 03c0 c3 85 f6 0f 84 e4 00 00 00 8d 49 00 8b 06 83 f8 ..........I..... 03d0 02 75 1f 8b 46 18 85 c0 74 64 ff 74 24 0c 57 50 .u..F...td.t$.WP 03e0 e8 97 27 ff ff 83 c4 0c 85 c0 75 52 53 ff 76 08 ..'.......uRS.v. 03f0 eb 31 83 f8 04 75 55 8b 46 0c 85 c0 74 4e 83 38 .1...uU.F...tN.8 0400 02 75 32 8b 40 18 85 c0 74 34 ff 74 24 0c 57 50 .u2.@...t4.t$.WP 0410 e8 67 27 ff ff 83 c4 0c .g'..... Data […]: 7704e84526ffff83c40885c075258b3f85ff75e8ff763cff7608ff7630680092521068f60100005655e8ded4ffff83c41c33db5d5e5f8bc35bc3cccc8b4424048378280275068b442408ff00c3ccccccccccccccccccccccccccccccff742408ff7424086a00e80102000083c40cc3ccccc [Length: 1048]