Frame 6109: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:52.199842000 UTC UTC Arrival Time: Nov 21, 2017 01:00:52.199842000 UTC Epoch Arrival Time: 1511226052.199842000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 72.000 microseconds] [Time since reference or first frame: 46.334102000 seconds] Frame Number: 6109 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xda1c (55836) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5a20 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 3112513, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 5795] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 3112513 (relative sequence number) Sequence Number (raw): 2949728894 [Next Sequence Number: 3113561 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x777a [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.790986000 seconds] [Time since previous frame in this TCP stream: 72.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 4192] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 43] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 6a 02 6a 02 e8 07 3e f8 ff 55 ff 15 94 6b 65 10 j.j...>..U...ke. 0010 83 c4 18 33 c0 5e 5d 5b 5f 8b 4c 24 28 33 cc e8 ...3.^][_.L$(3.. 0020 48 36 03 00 83 c4 2c c3 8b 4c 24 38 c6 06 00 5e H6....,..L$8...^ 0030 8b c5 5d 5b 5f 33 cc e8 30 36 03 00 83 c4 2c c3 ..][_3..06....,. 0040 6a 00 ff 74 24 0c ff 74 24 0c e8 d1 fa ff ff 83 j..t$..t$....... 0050 c4 0c c3 cc cc cc cc cc cc cc cc cc cc cc cc cc ................ 0060 56 8b 74 24 0c 85 f6 75 04 33 c0 5e c3 53 bb e8 V.t$...u.3.^.S.. 0070 03 00 00 55 53 89 5c 24 18 ff 15 88 6b 65 10 8b ...US.\$....ke.. 0080 e8 83 c4 04 85 ed 75 19 68 0c f9 53 10 50 50 6a ......u.h..S.PPj 0090 02 6a 02 e8 78 3d f8 ff 83 c4 14 33 c0 5d 5b 5e .j..x=.....3.][^ 00a0 c3 80 3e 00 57 0f 84 a0 00 00 00 eb 03 8d 49 00 ..>.W.........I. 00b0 8b f8 2b fd 8d 4f 0a 3b cb 76 23 03 db 3b 5c 24 ..+..O.;.v#..;\$ 00c0 18 0f 82 8e 00 00 00 53 55 ff 15 90 6b 65 10 83 .......SU...ke.. 00d0 c4 08 85 c0 74 7f 8b e8 89 5c 24 18 03 c7 8a 0e ....t....\$..... 00e0 80 f9 3c 75 0b c7 00 26 6c 74 3b 83 c0 04 eb 51 ..u...>....A 0100 80 f9 26 75 0f c7 00 26 61 6d 70 c6 40 04 3b 83 ..&u...&.@.;. 0110 c0 05 eb 2d 80 f9 22 75 11 c7 00 26 71 75 6f 66 ...-.."u...&quof 0120 c7 40 04 74 3b 83 c0 06 eb 17 80 f9 0d 75 0f c7 .@.t;........u.. 0130 00 26 23 31 33 c6 40 04 3b 83 c0 05 eb 03 88 08 . .@.;....... 0140 40 46 80 3e 00 0f 85 65 ff ff ff 5f c6 00 00 8b @F.>...e..._.... 0150 c5 5d 5b 5e c3 68 34 f9 53 10 6a 00 6a 00 6a 02 .][^.h4.S.j.j.j. 0160 6a 02 e8 a9 3c f8 ff 55 ff 15 94 6b 65 10 83 c4 j...<..U...ke... 0170 18 33 c0 5f 5d 5b 5e c3 cc cc cc cc cc cc cc cc .3._][^......... 0180 68 10 80 2e 10 ff 74 24 08 e8 42 9c fe ff 83 c4 h.....t$..B..... 0190 08 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ 01a0 56 8b 74 24 08 57 33 ff 85 f6 0f 84 59 01 00 00 V.t$.W3.....Y... 01b0 8b 46 20 85 c0 74 03 8b 78 50 8b 46 0c 85 c0 74 .F ..t..xP.F...t 01c0 14 83 7e 44 01 75 0e 3b 70 14 75 09 50 e8 6e df ..~D.u.;p.u.P.n. 01d0 f7 ff 83 c4 04 8b 46 08 85 ff 0f 84 bc 00 00 00 ......F......... 01e0 85 c0 74 1a 50 57 e8 45 98 00 00 83 c4 08 85 c0 ..t.PW.E........ 01f0 75 0c ff 76 08 ff 15 94 6b 65 10 83 c4 04 8b 46 u..v....ke.....F 0200 34 85 c0 74 1a 50 57 e8 24 98 00 00 83 c4 08 85 4..t.PW.$....... 0210 c0 75 0c ff 76 34 ff 15 94 6b 65 10 83 c4 04 8b .u..v4...ke..... 0220 46 38 85 c0 74 1a 50 57 e8 03 98 00 00 83 c4 08 F8..t.PW........ 0230 85 c0 75 0c ff 76 38 ff 15 94 6b 65 10 83 c4 04 ..u..v8...ke.... 0240 8b 46 40 85 c0 74 1a 50 57 e8 e2 97 00 00 83 c4 .F@..t.PW....... 0250 08 85 c0 75 0c ff 76 40 ff 15 94 6b 65 10 83 c4 ...u..v@...ke... 0260 04 8b 46 28 85 c0 74 1a 50 57 e8 c1 97 00 00 83 ..F(..t.PW...... 0270 c4 08 85 c0 75 0c ff 76 28 ff 15 94 6b 65 10 83 ....u..v(...ke.. 0280 c4 04 8b 46 24 85 c0 74 76 50 57 e8 a0 97 00 00 ...F$..tvPW..... 0290 83 c4 08 85 c0 75 68 ff 76 24 eb 5a 85 c0 74 0a .....uh.v$.Z..t. 02a0 50 ff 15 94 6b 65 10 83 c4 04 8b 46 34 85 c0 74 P...ke.....F4..t 02b0 0a 50 ff 15 94 6b 65 10 83 c4 04 8b 46 38 85 c0 .P...ke.....F8.. 02c0 74 0a 50 ff 15 94 6b 65 10 83 c4 04 8b 46 40 85 t.P...ke.....F@. 02d0 c0 74 0a 50 ff 15 94 6b 65 10 83 c4 04 8b 46 28 .t.P...ke.....F( 02e0 85 c0 74 0a 50 ff 15 94 6b 65 10 83 c4 04 8b 46 ..t.P...ke.....F 02f0 24 85 c0 74 0a 50 ff 15 94 6b 65 10 83 c4 04 56 $..t.P...ke....V 0300 ff 15 94 6b 65 10 83 c4 04 5f 5e c3 cc cc cc cc ...ke...._^..... 0310 8b 44 24 04 85 c0 74 07 50 e8 82 fe ff ff 59 c3 .D$...t.P.....Y. 0320 56 8b 74 24 08 57 8b 7c 24 10 85 f6 74 3e 8b 46 V.t$.W.|$...t>.F 0330 2c 85 c0 74 15 8b 40 30 85 c0 74 0e 57 50 e8 2d ,..t..@0..t.WP.- 0340 9d fe ff 83 c4 08 85 c0 75 2b 83 7e 28 01 74 1c ........u+.~(.t. 0350 8b 46 30 85 c0 74 15 8b 40 30 85 c0 74 0e 57 50 .F0..t..@0..t.WP 0360 e8 0b 9d fe ff 83 c4 08 85 c0 75 09 57 e8 8e 00 ..........u.W... 0370 00 00 83 c4 04 5f 5e c3 cc cc cc cc cc cc cc cc ....._^......... 0380 8b 44 24 04 85 c0 74 17 8b 40 30 85 c0 74 10 8b .D$...t..@0..t.. 0390 40 30 85 c0 74 09 89 44 24 04 e9 d1 9c fe ff 33 @0..t..D$......3 03a0 c0 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc ................ 03b0 56 8b 74 24 08 85 f6 74 37 8b 46 2c 85 c0 74 18 V.t$...t7.F,..t. 03c0 8b 40 3c 85 c0 74 11 ff 74 24 0c 50 e8 9f 9c fe .@<..t..t$.P.... 03d0 ff 83 c4 08 85 c0 75 1a 8b 46 30 85 c0 74 11 8b ......u..F0..t.. 03e0 40 3c 85 c0 74 0a 5e 89 44 24 04 e9 80 9c fe ff @<..t.^.D$...... 03f0 33 c0 5e c3 cc cc cc cc cc cc cc cc cc cc cc cc 3.^............. 0400 56 8b 74 24 08 85 f6 0f 84 9a 00 00 00 0f b6 06 V.t$............ 0410 83 c0 9f 83 f8 10 0f 87 ........ Data […]: 6a026a02e8073ef8ff55ff15946b651083c41833c05e5d5b5f8b4c242833cce84836030083c42cc38b4c2438c606005e8bc55d5b5f33cce83036030083c42cc36a00ff74240cff74240ce8d1faffff83c40cc3cccccccccccccccccccccccccc568b74240c85f6750433c05ec353bbe8030 [Length: 1048]