Frame 5323: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.860893000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.860893000 UTC Epoch Arrival Time: 1511226051.860893000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 60.000 microseconds] [Time since reference or first frame: 45.995153000 seconds] Frame Number: 5323 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd7f4 (55284) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5c48 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2697505, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 5009] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 2697505 (relative sequence number) Sequence Number (raw): 2949313886 [Next Sequence Number: 2698553 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc675 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.452037000 seconds] [Time since previous frame in this TCP stream: 60.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2620] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 39] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 20 e9 55 01 00 00 8b 46 24 01 78 10 8b 46 24 01 .U....F$.x..F$. 0010 78 20 bf 01 00 00 00 eb 27 85 ed 75 11 ff b6 b8 x ......'..u.... 0020 00 00 00 56 e8 27 32 00 00 83 c4 08 eb 10 55 ff ...V.'2.......U. 0030 b6 b8 00 00 00 56 e8 15 52 00 00 83 c4 0c 8b f8 .....V..R....... 0040 83 be 24 01 00 00 00 75 1a 8b 46 24 8b 48 14 2b ..$....u..F$.H.+ 0050 48 10 81 f9 fa 00 00 00 7d 09 56 e8 e0 79 ff ff H.......}.V..y.. 0060 83 c4 04 83 be ac 00 00 00 ff 0f 84 2f 01 00 00 ............/... 0070 56 e8 da b3 00 00 8b 4e 24 83 c4 04 8b 41 10 8a V......N$....A.. 0080 00 3c 09 72 04 3c 0a 76 08 3c 0d 74 04 3c 20 72 .<.r.<.v.<.t.< r 0090 04 3c 3e 74 64 83 be d4 00 00 00 00 74 09 83 be .<>td.......t... 00a0 ac 00 00 00 ff 74 7a 68 98 a9 52 10 68 00 87 62 .....tzh..R.h..b 00b0 10 6a 00 6a 00 6a 00 6a 00 6a 00 6a 00 6a 00 6a .j.j.j.j.j.j.j.j 00c0 03 6a 49 6a 01 6a 00 56 6a 00 6a 00 6a 00 c7 46 .jIj.j.Vj.j.j..F 00d0 54 49 00 00 00 e8 06 8e fe ff 83 c4 44 83 be 20 TI..........D.. 00e0 01 00 00 00 c7 46 0c 00 00 00 00 75 34 c7 86 d4 .....F.....u4... 00f0 00 00 00 01 00 00 00 eb 28 ff 41 20 8b 46 24 ff ........(.A .F$. 0100 40 10 8b 4e 24 ff 86 c8 00 00 00 8b 41 10 80 38 @..N$.......A..8 0110 00 75 0e 68 fa 00 00 00 51 e8 12 d9 00 00 83 c4 .u.h....Q....... 0120 08 83 ff 01 74 35 8b 44 24 20 85 ff b9 64 be 52 ....t5.D$ ...d.R 0130 10 0f 45 cf 85 c0 75 0b 8b 56 34 85 d2 74 04 0f ..E...u..V4..t.. 0140 b7 42 38 51 50 ff b6 b8 00 00 00 68 70 be 52 10 .B8QP......hp.R. 0150 6a 4c 56 e8 68 78 ff ff 83 c4 18 8b 06 85 c0 74 jLV.hx.........t 0160 23 8b 40 78 85 c0 74 1c 83 be d4 00 00 00 00 75 #.@x..t........u 0170 13 ff 74 24 1c 55 ff b6 b8 00 00 00 ff 76 04 ff ..t$.U.......v.. 0180 d0 83 c4 10 56 e8 76 55 ff ff 8b 44 24 28 83 c4 ....V.vU...D$(.. 0190 04 85 c0 74 0a 50 56 e8 a4 53 ff ff 83 c4 08 5f ...t.PV..S....._ 01a0 5d 5b 5e c3 83 be d4 00 00 00 00 74 09 83 be ac ][^........t.... 01b0 00 00 00 ff 74 ec 68 14 aa 52 10 68 00 87 62 10 ....t.h..R.h..b. 01c0 6a 00 6a 00 6a 00 6a 00 6a 00 6a 00 6a 00 6a 03 j.j.j.j.j.j.j.j. 01d0 6a 4a 6a 01 6a 00 56 6a 00 6a 00 6a 00 c7 46 54 jJj.j.Vj.j.j..FT 01e0 4a 00 00 00 e8 f7 8c fe ff 83 c4 44 83 be 20 01 J..........D.. . 01f0 00 00 00 c7 46 0c 00 00 00 00 75 a6 c7 86 d4 00 ....F.....u..... 0200 00 00 01 00 00 00 5e c3 cc cc cc cc cc cc cc cc ......^......... 0210 56 6a 00 ff 74 24 0c e8 54 64 ff ff 8b f0 83 c4 Vj..t$..Td...... 0220 08 85 f6 75 02 5e c3 57 56 e8 32 13 00 00 83 c4 ...u.^.WV.2..... 0230 04 83 7e 0c 00 74 11 8b 7e 08 56 e8 50 c6 00 00 ..~..t..~.V.P... 0240 83 c4 04 8b c7 5f 5e c3 ff 76 08 33 ff e8 ae 2f ....._^..v.3.../ 0250 fe ff 83 c4 04 89 7e 08 56 e8 32 c6 00 00 83 c4 ......~.V.2..... 0260 04 8b c7 5f 5e c3 cc cc cc cc cc cc cc cc cc cc ..._^........... 0270 83 ec 14 55 56 8b 74 24 20 33 c0 8b 56 24 57 8b ...UV.t$ 3..V$W. 0280 4a 10 33 ed 33 ff 80 39 3c 89 44 24 14 89 6c 24 J.3.3..9<.D$..l$ 0290 0c 89 44 24 18 89 44 24 10 89 54 24 1c 0f 85 25 ..D$..D$..T$...% 02a0 08 00 00 80 79 01 21 0f 85 1b 08 00 00 80 79 02 ....y.!.......y. 02b0 45 0f 85 11 08 00 00 80 79 03 4e 0f 85 07 08 00 E.......y.N..... 02c0 00 80 79 04 54 0f 85 fd 07 00 00 80 79 05 49 0f ..y.T.......y.I. 02d0 85 f3 07 00 00 80 79 06 54 0f 85 e9 07 00 00 80 ......y.T....... 02e0 79 07 59 0f 85 df 07 00 00 39 86 24 01 00 00 75 y.Y......9.$...u 02f0 21 8b c1 2b 42 0c 3d f4 01 00 00 7e 15 8b 42 14 !..+B.=....~..B. 0300 2b c1 3d f4 01 00 00 7d 09 56 e8 71 b0 00 00 83 +.=....}.V.q.... 0310 c4 04 8b 46 24 83 86 c8 00 00 00 08 83 40 10 08 ...F$........@.. 0320 8b 46 24 83 40 20 08 8b 46 24 8b 40 10 80 38 25 .F$.@ ..F$.@..8% 0330 75 09 56 e8 08 a1 00 00 83 c4 04 8b 4e 24 8b 41 u.V.........N$.A 0340 10 80 38 00 75 1b 68 fa 00 00 00 51 e8 df d6 00 ..8.u.h....Q.... 0350 00 83 c4 08 85 c0 7f 09 56 e8 62 a5 00 00 83 c4 ........V.b..... 0360 04 56 e8 e9 b0 00 00 83 c4 04 85 c0 75 10 68 38 .V..........u.h8 0370 b2 52 10 6a 41 56 e8 65 75 ff ff 83 c4 0c 8b 46 .R.jAV.eu......F 0380 24 8b 40 10 80 38 25 75 2b 56 e8 41 d1 00 00 56 $.@..8%u+V.A...V 0390 e8 bb b0 00 00 83 c4 08 85 c0 75 10 68 5c b2 52 ..........u.h\.R 03a0 10 6a 41 56 e8 37 75 ff ff 83 c4 0c c7 44 24 18 .jAV.7u......D$. 03b0 01 00 00 00 53 56 e8 35 2d 00 00 8b d8 83 c4 04 ....SV.5-....... 03c0 85 db 75 18 68 78 b2 52 10 6a 44 56 e8 0f 75 ff ..u.hx.R.jDV..u. 03d0 ff 83 c4 0c 5b 5f 5e 5d 83 c4 14 c3 6a 3a 53 e8 ....[_^]....j:S. 03e0 3c 0c fe ff 83 c4 08 85 c0 74 18 6a 00 6a 00 53 <........t.j.j.S 03f0 68 98 b2 52 10 68 cd 00 00 00 56 e8 00 83 ff ff h..R.h....V..... 0400 83 c4 18 56 e8 47 b0 00 00 83 c4 04 85 c0 75 10 ...V.G........u. 0410 68 c8 b2 52 10 6a 41 56 h..R.jAV Data […]: 20e9550100008b46240178108b4624017820bf01000000eb2785ed7511ffb6b800000056e82732000083c408eb1055ffb6b800000056e81552000083c40c8bf883be2401000000751a8b46248b48142b481081f9fa0000007d0956e8e079ffff83c40483beac000000ff0f842f01000056e [Length: 1048]