Frame 5805: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:52.059851000 UTC UTC Arrival Time: Nov 21, 2017 01:00:52.059851000 UTC Epoch Arrival Time: 1511226052.059851000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 59.000 microseconds] [Time since reference or first frame: 46.194111000 seconds] Frame Number: 5805 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xd938 (55608) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5b04 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 2946929, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 5491] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 2946929 (relative sequence number) Sequence Number (raw): 2949563310 [Next Sequence Number: 2947977 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x3676 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.650995000 seconds] [Time since previous frame in this TCP stream: 59.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 4192] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 40] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 50 e8 6a fe ff ff 83 c4 04 56 ff 15 94 6b 65 10 P.j......V...ke. 0010 83 c4 04 5e c3 cc cc cc cc cc cc cc cc cc cc cc ...^............ 0020 53 8b 5c 24 08 85 db 74 6a 8b 43 04 85 c0 74 09 S.\$...tj.C...t. 0030 50 e8 3a fe ff ff 83 c4 04 8b 43 18 85 c0 74 1c P.:.......C...t. 0040 8b 40 10 85 c0 74 09 50 e8 a3 3e 05 00 83 c4 04 .@...t.P..>..... 0050 ff 73 18 ff 15 94 6b 65 10 83 c4 04 56 8b 73 1c .s....ke....V.s. 0060 85 f6 74 24 57 8b fe 8b 36 8b 47 10 85 c0 74 09 ..t$W...6.G...t. 0070 50 e8 7a 3e 05 00 83 c4 04 57 ff 15 94 6b 65 10 P.z>.....W...ke. 0080 83 c4 04 85 f6 75 de 5f 53 ff 15 94 6b 65 10 83 .....u._S...ke.. 0090 c4 04 5e 5b c3 cc cc cc cc cc cc cc cc cc cc cc ..^[............ 00a0 56 8b 74 24 08 85 f6 74 3c 57 8d 9b 00 00 00 00 V.t$...t. 0100 75 1e 56 ff 15 94 6b 65 10 83 c4 04 57 ff 15 94 u.V...ke....W... 0110 6b 65 10 83 c4 04 5f 5e c3 8d a4 24 00 00 00 00 ke...._^...$.... 0120 56 8b 36 ff 15 94 6b 65 10 83 c4 04 85 f6 75 f0 V.6...ke......u. 0130 57 ff 15 94 6b 65 10 83 c4 04 5f 5e c3 cc cc cc W...ke...._^.... 0140 56 8b 74 24 08 85 f6 0f 84 82 00 00 00 8b 46 30 V.t$..........F0 0150 85 c0 74 0f 83 7e 34 00 75 09 50 e8 50 62 fa ff ..t..~4.u.P.Pb.. 0160 83 c4 04 8b 46 5c 85 c0 74 09 50 e8 70 01 00 00 ....F\..t.P.p... 0170 83 c4 04 83 7e 20 00 74 1e 8b 46 1c 85 c0 74 17 ....~ .t..F...t. 0180 50 e8 3a b2 ff ff 83 c4 04 c7 46 1c 00 00 00 00 P.:.......F..... 0190 c7 46 20 00 00 00 00 57 8b be 80 00 00 00 85 ff .F ....W........ 01a0 74 1a 8b 07 85 c0 74 0a 50 ff 15 94 6b 65 10 83 t.....t.P...ke.. 01b0 c4 04 57 ff 15 94 6b 65 10 83 c4 04 ff 76 50 e8 ..W...ke.....vP. 01c0 dc 18 03 00 56 ff 15 94 6b 65 10 83 c4 08 5f 5e ....V...ke...._^ 01d0 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ 01e0 55 8b 6c 24 08 85 ed 0f 84 f1 00 00 00 8b 45 18 U.l$..........E. 01f0 85 c0 74 09 50 e8 76 fc ff ff 83 c4 04 56 57 8b ..t.P.v......VW. 0200 7d 44 85 ff 74 5d 53 8b 47 20 8b 5f 04 85 c0 74 }D..t]S.G ._...t 0210 09 50 e8 d9 ad 04 00 83 c4 04 8b 47 24 85 c0 74 .P.........G$..t 0220 09 50 e8 89 92 03 00 83 c4 04 8b 77 10 85 f6 74 .P.........w...t 0230 21 83 3e 00 75 0c 56 ff 15 94 6b 65 10 83 c4 04 !.>.u.V...ke.... 0240 eb 10 56 8b 36 ff 15 94 6b 65 10 83 c4 04 85 f6 ..V.6...ke...... 0250 75 f0 57 ff 15 94 6b 65 10 83 c4 04 8b fb 85 db u.W...ke........ 0260 75 a5 5b 8b 75 74 85 f6 74 1a 8b 06 85 c0 74 0a u.[.ut..t.....t. 0270 50 ff 15 94 6b 65 10 83 c4 04 56 ff 15 94 6b 65 P...ke....V...ke 0280 10 83 c4 04 8b 45 5c 85 c0 74 17 eb 03 8d 49 00 .....E\..t....I. 0290 8b 30 50 ff 15 94 6b 65 10 83 c4 04 8b c6 85 f6 .0P...ke........ 02a0 75 ee 8b 45 60 85 c0 74 19 8d a4 24 00 00 00 00 u..E`..t...$.... 02b0 8b 30 50 ff 15 94 6b 65 10 83 c4 04 8b c6 85 f6 .0P...ke........ 02c0 75 ee 8b 45 6c 5f 5e 85 c0 74 09 50 e8 df 91 03 u..El_^..t.P.... 02d0 00 83 c4 04 55 ff 15 94 6b 65 10 83 c4 04 5d c3 ....U...ke....]. 02e0 57 8b 7c 24 08 85 ff 0f 84 eb 01 00 00 8b 47 48 W.|$..........GH 02f0 85 c0 74 09 50 e8 f6 ac 04 00 83 c4 04 8b 47 58 ..t.P.........GX 0300 85 c0 74 09 50 e8 36 fe ff ff 83 c4 04 83 bf 80 ..t.P.6......... 0310 00 00 00 00 53 56 74 3e 33 db 39 9f 84 00 00 00 ....SVt>3.9..... 0320 7e 25 8b 87 80 00 00 00 8b 34 98 ff 76 04 ff 15 ~%.......4..v... 0330 94 6b 65 10 56 ff 15 94 6b 65 10 43 83 c4 08 3b .ke.V...ke.C...; 0340 9f 84 00 00 00 7c db ff b7 80 00 00 00 ff 15 94 .....|.......... 0350 6b 65 10 83 c4 04 83 bf 8c 00 00 00 00 74 4c 33 ke...........tL3 0360 f6 39 b7 90 00 00 00 7e 33 8d a4 24 00 00 00 00 .9.....~3..$.... 0370 8b 87 8c 00 00 00 8b 1c b0 8b 43 04 85 c0 74 09 ..........C...t. 0380 50 e8 6a ac 04 00 83 c4 04 53 ff 15 94 6b 65 10 P.j......S...ke. 0390 46 83 c4 04 3b b7 90 00 00 00 7c d4 ff b7 8c 00 F...;.....|..... 03a0 00 00 ff 15 94 6b 65 10 83 c4 04 8b 47 74 85 c0 .....ke.....Gt.. 03b0 74 10 50 e8 e8 fc ff ff 83 c4 04 c7 47 74 00 00 t.P.........Gt.. 03c0 00 00 8b 47 78 85 c0 74 10 50 e8 d1 fc ff ff 83 ...Gx..t.P...... 03d0 c4 04 c7 47 78 00 00 00 00 8b 47 70 85 c0 74 12 ...Gx.....Gp..t. 03e0 8b 30 50 ff 15 94 6b 65 10 83 c4 04 8b c6 85 f6 .0P...ke........ 03f0 75 ee 83 bf a4 00 00 00 00 74 4f 83 bf a8 00 00 u........tO..... 0400 00 00 74 09 57 e8 c6 a5 ff ff 83 c4 04 33 f6 39 ..t.W........3.9 0410 b7 ac 00 00 00 7e 24 eb .....~$. Data […]: 50e86afeffff83c40456ff15946b651083c4045ec3cccccccccccccccccccccc538b5c240885db746a8b430485c0740950e83afeffff83c4048b431885c0741c8b401085c0740950e8a33e050083c404ff7318ff15946b651083c404568b731c85f67424578bfe8b368b471085c0740950e [Length: 1048]