Frame 623: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:48.920386000 UTC UTC Arrival Time: Nov 21, 2017 01:00:48.920386000 UTC Epoch Arrival Time: 1511226048.920386000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 100.000 microseconds] [Time since reference or first frame: 43.054646000 seconds] Frame Number: 623 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xcaea (51946) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x6b5e [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 175493, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 311] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 175493 (relative sequence number) Sequence Number (raw): 2946791874 [Next Sequence Number: 176017 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x4f98 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 1.511530000 seconds] [Time since previous frame in this TCP stream: 100.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2096] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 5] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 38 6f 67 10 4f 78 27 eb 03 8d 49 00 a1 40 6f 67 8og.Ox'...I..@og 0010 10 ff 34 b8 e8 73 62 ff ff 83 c4 04 85 c0 0f 84 ..4..sb......... 0020 29 c0 38 00 8b 0d b8 6f 67 10 89 4c 24 10 8b 79 ).8....og..L$..y 0030 28 8b 44 24 1c 3b c7 0f 8c 1c c0 38 00 83 3d c8 (.D$.;.....8..=. 0040 70 67 10 00 0f 85 3a c0 38 00 8b 79 28 8d 47 01 pg....:.8..y(.G. 0050 89 41 28 8b 15 ac 70 67 10 3b fa 0f 83 9d 1c 00 .A(...pg.;...... 0060 00 8b 44 24 10 8d 0c fd 00 00 00 00 8b 40 24 2b ..D$.........@$+ 0070 cf 80 7c 24 58 00 8d 14 88 0f 57 c0 66 0f d6 02 ..|$X.....W.f... 0080 66 0f d6 42 08 66 0f d6 42 10 c7 42 18 00 00 00 f..B.f..B..B.... 0090 00 a1 b4 6f 67 10 89 42 14 89 54 24 10 c6 42 1b ...og..B..T$..B. 00a0 08 0f 85 4d 19 00 00 b8 3e 00 00 00 88 42 18 c6 ...M....>....B.. 00b0 42 19 01 f3 0f 7e 05 10 75 67 10 8b 3d b8 6f 67 B....~..ug..=.og 00c0 10 66 0f d6 84 24 88 00 00 00 f3 0f 7e 05 18 75 .f...$......~..u 00d0 67 10 66 0f d6 84 24 90 00 00 00 8b 4f 78 89 4c g.f...$.....Ox.L 00e0 24 0c 8d 41 01 89 47 78 3b 0d b4 70 67 10 0f 8d $..A..Gx;..pg... 00f0 69 0e 00 00 8a 84 24 94 00 00 00 3c 06 0f 84 9f i.....$....<.... 0100 bf 38 00 3c 08 0f 84 97 bf 38 00 8b 47 74 f3 0f .8.<.....8..Gt.. 0110 7e 84 24 88 00 00 00 8d 0c 49 66 0f d6 04 c8 f3 ~.$......If..... 0120 0f 7e 84 24 90 00 00 00 66 0f d6 44 c8 08 8b 47 .~.$....f..D...G 0130 74 c7 44 c8 08 02 00 00 00 8b 47 74 c6 44 c8 0d t.D.......Gt.D.. 0140 01 8b 47 74 c7 44 c8 10 00 00 00 00 8b 47 74 c7 ..Gt.D.......Gt. 0150 44 c8 14 ff ff ff ff 8b 44 24 0c 89 42 04 c6 42 D.......D$..B..B 0160 1a 08 ff 35 b8 6f 67 10 e8 1f 9a ff ff a1 cc 70 ...5.og........p 0170 67 10 83 c4 04 85 c0 0f 85 54 bf 38 00 8b 0d d0 g........T.8.... 0180 70 67 10 85 c9 0f 84 c9 00 00 00 8b 15 d8 70 67 pg............pg 0190 10 0f 8e 90 23 00 00 8b 44 8a fc f3 0f 7e 00 66 ....#...D....~.f 01a0 0f d6 05 ac 70 67 10 f3 0f 7e 40 08 66 0f d6 05 ....pg...~@.f... 01b0 b4 70 67 10 f3 0f 7e 40 10 66 0f d6 05 bc 70 67 .pg...~@.f....pg 01c0 10 f3 0f 7e 40 18 66 0f d6 05 c4 70 67 10 8b 40 ...~@.f....pg..@ 01d0 20 a3 cc 70 67 10 85 c9 7e 7a 8b 3d 70 e2 66 10 ..pg...~z.=p.f. 01e0 49 89 0d d0 70 67 10 83 3f 00 8b 04 8a 89 44 24 I...pg..?.....D$ 01f0 1c 89 7c 24 18 0f 84 fc be 38 00 85 c0 74 55 8b ..|$.....8...tU. 0200 0d e8 74 67 10 85 c9 0f 85 21 23 00 ..tg.....!#. Data […]: 386f67104f7827eb038d4900a1406f6710ff34b8e87362ffff83c40485c00f8429c038008b0db86f6710894c24108b79288b44241c3bc70f8c1cc03800833dc8706710000f853ac038008b79288d47018941288b15ac7067103bfa0f839d1c00008b4424108d0cfd000000008b40242bcf8 [Length: 524]