Frame 5630: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.989098000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.989098000 UTC Epoch Arrival Time: 1511226051.989098000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 46.000 microseconds] [Time since reference or first frame: 46.123358000 seconds] Frame Number: 5630 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xd8c1 (55489) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5d87 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2854705, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 5316] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 2854705 (relative sequence number) Sequence Number (raw): 2949471086 [Next Sequence Number: 2855229 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6bf9 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.580242000 seconds] [Time since previous frame in this TCP stream: 46.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1048] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 40] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 56 e8 9a 7c fe ff 8b 46 24 83 c4 08 8b 40 2c 85 V..|...F$....@,. 0010 c0 74 0a 50 ff 15 94 6b 65 10 83 c4 04 57 e8 6d .t.P...ke....W.m 0020 aa fb ff 8b 4e 24 83 c4 04 89 41 2c 8b 44 24 10 ....N$....A,.D$. 0030 85 c0 74 1c 8b 4e 24 85 c9 74 15 83 79 04 00 75 ..t..N$..t..y..u 0040 0f 50 e8 49 aa fb ff 8b 4e 24 83 c4 04 89 41 04 .P.I....N$....A. 0050 56 e8 3a 22 00 00 8b 7e 08 83 c4 04 83 7c 24 1c V.:"...~.....|$. 0060 00 c7 46 08 00 00 00 00 75 2b 83 be 6c 01 00 00 ..F.....u+..l... 0070 00 74 19 85 ff 74 15 8b 4f 50 3b 8e 28 01 00 00 .t...t..OP;.(... 0080 75 0a c7 86 28 01 00 00 00 00 00 00 56 e8 ee 61 u...(.......V..a 0090 fe ff 83 c4 04 8b c7 5f 5e c3 cc cc cc cc cc cc ......._^....... 00a0 56 57 8b 7c 24 10 85 ff 74 2e 8b 74 24 0c 85 f6 VW.|$...t..t$... 00b0 74 26 8b 76 10 85 f6 74 1f 8b 06 85 c0 74 19 90 t&.v...t.....t.. 00c0 57 50 e8 79 a9 fb ff 83 c4 08 85 c0 74 0f 8b 46 WP.y........t..F 00d0 04 83 c6 04 85 c0 75 e8 5f 33 c0 5e c3 5f b8 01 ......u._3.^._.. 00e0 00 00 00 5e c3 cc cc cc cc cc cc cc cc cc cc cc ...^............ 00f0 8b 44 24 04 56 85 c0 74 28 8b 74 24 0c 85 f6 74 .D$.V..t(.t$...t 0100 20 ff 36 50 e8 97 ff ff ff 83 c4 08 85 c0 74 11 .6P..........t. 0110 33 c0 38 46 09 5e 0f 94 c0 8d 04 45 02 00 00 00 3.8F.^.....E.... 0120 c3 b8 01 00 00 00 5e c3 cc cc cc cc cc cc cc cc ......^......... 0130 83 ec 30 a1 c8 79 65 10 33 c4 89 44 24 2c 8b 44 ..0..ye.3..D$,.D 0140 24 38 8b 4c 24 40 55 8b 6c 24 40 56 8b 74 24 3c $8.L$@U.l$@V.t$< 0150 57 8b fd 89 44 24 14 89 4c 24 0c 89 7c 24 20 89 W...D$..L$..|$ . 0160 74 24 18 89 6c 24 10 85 f6 0f 84 ae 01 00 00 85 t$..l$.......... 0170 c0 0f 84 a6 01 00 00 85 c9 0f 84 9e 01 00 00 85 ................ 0180 ed 0f 84 96 01 00 00 8b 08 8b 54 24 0c 03 ce 8b ..........T$.... 0190 02 03 c5 53 89 4c 24 20 89 44 24 28 3b e8 0f 83 ...S.L$ .D$(;... 01a0 50 01 00 00 0f b6 5d 00 45 81 fb 80 00 00 00 73 P.....].E......s 01b0 04 33 d2 eb 44 81 fb c0 00 00 00 0f 82 03 01 00 .3..D........... 01c0 00 81 fb e0 00 00 00 73 0a 83 e3 1f ba 01 00 00 .......s........ 01d0 00 eb 26 81 fb f0 00 00 00 73 0a 83 e3 0f ba 02 ..&......s...... 01e0 00 00 00 eb 14 81 fb f8 00 00 00 0f 83 d3 00 00 ................ 01f0 00 83 e3 07 ba 03 00 00 00 2b c5 3b c2 0f 8c f1 .........+.;.... 0200 00 00 00 85 d2 74 22 0f b6 4d 00 8b .....t"..M.. Data […]: 56e89a7cfeff8b462483c4088b402c85c0740a50ff15946b651083c40457e86daafbff8b4e2483c40489412c8b44241085c0741c8b4e2485c9741583790400750f50e849aafbff8b4e2483c40489410456e83a2200008b7e0883c404837c241c00c7460800000000752b83be6c010000007 [Length: 524]