Frame 5640: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:51.989476000 UTC UTC Arrival Time: Nov 21, 2017 01:00:51.989476000 UTC Epoch Arrival Time: 1511226051.989476000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 9.000 microseconds] [Time since reference or first frame: 46.123736000 seconds] Frame Number: 5640 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd8c8 (55496) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5b74 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2858373, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 5326] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 2858373 (relative sequence number) Sequence Number (raw): 2949474754 [Next Sequence Number: 2859421 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8555 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.580620000 seconds] [Time since previous frame in this TCP stream: 9.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1572] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 40] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 78 66 fe ff 83 c4 04 8d 44 24 0c 50 56 e8 aa ed xf......D$.PV... 0010 ff ff 8b c8 83 c4 08 eb 03 8d 49 00 83 f9 3c 75 ..........I....tL.......u 0110 43 57 8d 44 24 14 50 56 e8 3f d6 ff ff 83 c4 0c CW.D$.PV.?...... 0120 85 c0 74 10 83 be d0 00 00 00 00 8b 06 75 10 8b ..t..........u.. 0130 40 48 eb 0e 56 e8 12 e1 ff ff 8b 06 83 c4 04 8b @H..V........... 0140 40 44 85 c0 74 0e 57 8d 4c 24 14 51 ff 76 04 ff @D..t.W.L$.Q.v.. 0150 d0 83 c4 0c 33 ff 8b 4e 24 8b 41 10 80 38 0a 75 ....3..N$.A..8.u 0160 0f ff 41 1c 8b 46 24 c7 40 20 01 00 00 00 eb 03 ..A..F$.@ ...... 0170 ff 41 20 8b 4e 24 8b 44 24 0c c7 86 b0 00 00 00 .A .N$.D$....... 0180 00 00 00 00 01 41 10 ff 86 c8 00 00 00 43 83 fb .....A.......C.. 0190 64 7e 4f 8b 4e 24 33 db 8b 51 10 8b c2 2b 41 0c d~O.N$3..Q...+A. 01a0 3d f4 01 00 00 7e 15 8b 41 14 2b c2 3d f4 01 00 =....~..A.+.=... 01b0 00 7d 09 51 e8 c3 64 fe ff 83 c4 04 39 9e 24 01 .}.Q..d.....9.$. 01c0 00 00 75 1e 8b 4e 24 8b 41 14 2b 41 10 3d fa 00 ..u..N$.A.+A.=.. 01d0 00 00 7d 0e 68 fa 00 00 00 51 e8 ed 63 fe ff 83 ..}.h....Q..c... 01e0 c4 08 8d 44 24 0c 50 56 e8 cf eb ff ff 8b c8 83 ...D$.PV........ 01f0 c4 08 85 c9 0f 85 22 fe ff ff 8b 4e 24 8b 51 10 ......"....N$.Q. 0200 8b c2 2b 41 0c 3d f4 01 00 00 7e 15 8b 41 14 2b ..+A.=....~..A.+ 0210 c2 3d f4 01 00 00 7d 09 51 e8 5e 64 fe ff 83 c4 .=....}.Q.^d.... 0220 04 83 be 24 01 00 00 00 0f 85 d9 fd ff ff 8b 4e ...$...........N 0230 24 8b 41 14 2b 41 10 3d fa 00 00 00 0f 8d c5 fd $.A.+A.=........ 0240 ff ff 68 fa 00 00 00 51 e8 7f 63 fe ff 83 c4 08 ..h....Q..c..... 0250 e9 b2 fd ff ff 85 ff 74 7a 81 ff ee 03 00 00 0f .......tz....... 0260 83 94 00 00 00 83 3e 00 c6 44 3c 10 00 74 72 83 ......>..D<..tr. 0270 be d4 00 00 00 00 75 69 57 8d 44 24 14 50 56 e8 ......uiW.D$.PV. 0280 d8 d4 ff ff 83 c4 0c 85 c0 74 10 83 be d0 00 00 .........t...... 0290 00 00 8b 06 75 10 8b 40 48 eb 0e 56 e8 ab df ff ....u..@H..V.... 02a0 ff 8b 06 83 c4 04 8b 40 44 85 c0 74 34 57 8d 4c .......@D..t4W.L 02b0 24 14 51 ff 76 04 ff d0 83 c4 0c 5f 5e 5b 8b 8c $.Q.v......_^[.. 02c0 24 f4 03 00 00 33 cc e8 5c 14 07 00 81 c4 f8 03 $....3..\....... 02d0 00 00 c3 85 c9 75 0a c7 86 ac 00 00 00 ff ff ff .....u.......... 02e0 ff 8b 8c 24 00 04 00 00 5f 5e 5b 33 cc e8 36 14 ...$...._^[3..6. 02f0 07 00 81 c4 f8 03 00 00 c3 e8 82 15 07 00 cc cc ................ 0300 cc cc cc cc cc cc cc cc cc cc cc cc 56 57 8b 7c ............VW.| 0310 24 0c 33 f6 85 ff 0f 84 cd 01 00 00 8b 47 24 85 $.3..........G$. 0320 c0 0f 84 aa 01 00 00 8b 48 10 53 8a 19 80 fb 26 ........H.S....& 0330 0f 85 70 01 00 00 80 79 01 23 0f 85 93 00 00 00 ..p....y.#...... 0340 8a 51 02 80 fa 78 74 09 80 fa 58 0f 85 82 00 00 .Q...xt...X..... 0350 00 83 87 c8 00 00 00 03 83 40 10 03 8b 47 24 83 .........@...G$. 0360 40 20 03 8b 47 24 8b 40 10 80 38 3b 0f 84 d7 00 @ ..G$.@..8;.... 0370 00 00 8b 47 24 8b 40 10 8a 00 3c 30 72 0c 3c 39 ...G$.@...<0r.<9 0380 77 08 83 c6 fd 0f b6 c0 eb 1e 3c 61 72 0c 3c 66 w.........