Frame 6398: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:52.327849000 UTC UTC Arrival Time: Nov 21, 2017 01:00:52.327849000 UTC Epoch Arrival Time: 1511226052.327849000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 69.000 microseconds] [Time since reference or first frame: 46.462109000 seconds] Frame Number: 6398 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xdaf4 (56052) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5b54 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 3278621, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 6084] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 3278621 (relative sequence number) Sequence Number (raw): 2949895002 [Next Sequence Number: 3279145 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2fb6 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 4.918993000 seconds] [Time since previous frame in this TCP stream: 69.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1572] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 49] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 47 24 01 00 00 00 e8 69 04 00 00 8b 47 10 83 c4 G$.....i....G... 0010 04 85 c0 74 23 8b 00 83 f8 01 74 1c 83 f8 07 74 ...t#.....t....t 0020 17 6a 00 68 e8 2d 54 10 68 6e 07 00 00 57 e8 61 .j.h.-T.hn...W.a 0030 fe ff ff 83 c4 10 eb 0c 57 e8 16 30 fc ff 8b e8 ........W..0.... 0040 83 c4 04 90 57 e8 0a 30 fc ff 8b c8 83 c4 04 85 ....W..0........ 0050 c9 74 1f 83 39 01 75 11 8b 41 04 83 38 01 75 09 .t..9.u..A..8.u. 0060 8b 40 08 8b 00 3b 03 74 01 46 51 e8 84 d1 fc ff .@...;.t.FQ..... 0070 eb ce 85 f6 74 15 6a 00 68 20 2e 54 10 68 6f 07 ....t.j.h .T.ho. 0080 00 00 57 e8 0c fe ff ff 83 c4 10 83 7f 08 00 74 ..W............t 0090 0b 55 e8 5d d1 fc ff 83 c4 04 33 ed 57 e8 f2 d1 .U.]......3.W... 00a0 fc ff 83 c4 04 8b c5 5f 5e 5d 5b c3 5e 5d 33 c0 ......._^][.^]3. 00b0 5b c3 cc cc 56 57 8b 7c 24 10 85 ff 75 27 8b 74 [...VW.|$...u'.t 00c0 24 0c 8b 06 80 38 2f 75 45 80 78 01 31 74 3f 57 $....8/uE.x.1t?W 00d0 68 58 2d 54 10 68 6d 07 00 00 56 e8 b4 fd ff ff hX-T.hm...V..... 00e0 83 c4 10 eb 29 57 e8 49 e6 fc ff 8b 74 24 10 50 ....)W.I....t$.P 00f0 56 e8 be 2f fc ff 57 ff 15 94 6b 65 10 6a 01 56 V../..W...ke.j.V 0100 e8 7f d4 fc ff 83 c4 18 83 7e 08 00 75 4c 8b 06 .........~..uL.. 0110 80 38 2f 75 45 8b 06 33 c9 38 08 74 03 40 89 06 .8/uE..3.8.t.@.. 0120 8b 3e 8a 07 3c 30 72 21 3c 39 77 1d 8d 14 89 0f .>..<0r!<9w..... 0130 b6 c8 8d 0c 51 83 c1 d0 84 c0 74 05 8d 47 01 89 ....Q.....t..G.. 0140 06 8b 3e 8a 07 3c 30 73 df 51 56 e8 c4 07 00 00 ..>..<0s.QV..... 0150 8b 06 83 c4 08 80 38 2f 74 bb 5f 5e c3 cc cc cc ......8/t._^.... 0160 cc cc cc cc 8b 44 24 08 56 8b 74 24 08 85 c0 75 .....D$.V.t$...u 0170 1a 56 e8 6d 10 fd ff 83 c4 04 85 c0 75 0d 6a 07 .V.m........u.j. 0180 56 e8 ce bf fc ff 83 c4 08 5e c3 50 56 c7 46 08 V........^.PV.F. 0190 00 00 00 00 e8 db 03 00 00 8b 46 08 83 c4 08 85 ..........F..... 01a0 c0 74 07 3d 6c 07 00 00 75 6a 8b 46 10 85 c0 74 .t.=l...uj.F...t 01b0 33 8b 08 49 74 0a 83 e9 06 75 11 8b 40 1c eb 03 3..It....u..@... 01c0 8b 40 04 85 c0 74 05 83 38 00 7f 48 56 e8 82 2e .@...t..8..HV... 01d0 fc ff 83 c4 04 85 c0 74 0b 50 e8 15 d0 fc ff 83 .......t.P...... 01e0 c4 04 eb e8 8b 0e 8a 01 3c 20 74 0c 3c 09 72 04 ........< t.<.r. 01f0 3c 0a 76 04 3c 0d 75 0b 84 c0 74 e8 8d 41 01 89 <.v.<.u...t..A.. 0200 06 eb e1 56 e8 db 0f fd ff 83 c4 04 ...V........ Data […]: 472401000000e8690400008b471083c40485c074238b0083f801741c83f80774176a0068e82d5410686e07000057e861feffff83c410eb0c57e81630fcff8be883c4049057e80a30fcff8bc883c40485c9741f83390175118b410483380175098b40088b003b0374014651e884d1fcffebc [Length: 524]