Frame 6940: Packet, 390 bytes on wire (3120 bits), 390 bytes captured (3120 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:52.542466000 UTC UTC Arrival Time: Nov 21, 2017 01:00:52.542466000 UTC Epoch Arrival Time: 1511226052.542466000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 38.000 microseconds] [Time since reference or first frame: 46.676726000 seconds] Frame Number: 6940 Frame Length: 390 bytes (3120 bits) Capture Length: 390 bytes (3120 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 376 Identification: 0xdc6e (56430) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5a96 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 3563865, Ack: 1736, Len: 336 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 6626] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 336] Sequence Number: 3563865 (relative sequence number) Sequence Number (raw): 2950180246 [Next Sequence Number: 3564201 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xcaef [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.133610000 seconds] [Time since previous frame in this TCP stream: 38.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 4716] [Bytes sent since last PSH flag: 4716] [Client Contiguous Streams: 1] [Server Contiguous Streams: 53] TCP payload (336 bytes) Hypertext Transfer Protocol File Data: 336 bytes Data (336 bytes) 0000 24 30 6a 0a 50 e8 4e b1 cc ff 80 7c 24 44 01 8b $0j.P.N....|$D.. 0010 75 10 59 59 6a 02 75 1b 8d 4c 24 34 89 4d 0c eb u.YYj.u..L$4.M.. 0020 12 89 54 24 30 c6 44 24 3c 01 8d 4c 24 30 89 4d ..T$0.D$<..L$0.M 0030 0c 6a 02 59 8a 46 0c 3c 04 0f 84 b8 02 00 00 3b .j.Y.F.<.......; 0040 f3 75 14 3c 01 0f 84 a4 02 00 00 56 e8 e7 a3 d0 .u.<.......V.... 0050 ff 59 e9 98 02 00 00 0f b6 c0 33 db 2b c3 0f 84 .Y........3.+... 0060 47 02 00 00 83 e8 03 74 12 2b c1 0f 84 4c 02 00 G......t.+...L.. 0070 00 48 74 12 48 0f 85 74 02 00 00 8b 06 89 44 24 .Ht.H..t......D$ 0080 40 e9 29 02 00 00 8b 45 10 8b 76 04 8b 08 6a 0a @.)....E..v...j. 0090 58 89 44 24 14 8b fb 0f 57 c0 85 f6 0f 84 ff 01 X.D$....W....... 00a0 00 00 8a 01 3c 20 74 14 3c 09 74 10 3c 0a 74 0c ....< t.<.t.<.t. 00b0 3c 0d 74 08 3c 0b 74 04 3c 0c 75 04 41 4e eb e2 <.t.<.t.<.u.AN.. 00c0 8a 11 8b c1 89 4c 24 18 89 44 24 10 80 fa 2d 74 .....L$..D$...-t 00d0 05 80 fa 2b 75 07 8d 41 01 89 44 24 10 8a 08 80 ...+u..A..D$.... 00e0 f9 30 0f 8c 81 01 00 00 80 f9 39 0f 8f 78 01 00 .0........9..x.. 00f0 00 6a 02 5b 3b f3 8b 74 24 18 7e 21 80 fa 30 75 .j.[;..t$.~!..0u 0100 1c 8a 4e 01 80 f9 78 74 05 80 f9 58 75 0f 6a 10 ..N...xt...Xu.j. 0110 5a 03 c3 89 54 24 14 89 44 24 10 eb 04 8b 54 24 Z...T$..D$....T$ 0120 14 80 38 30 75 0a 40 80 38 30 74 fa 89 44 24 10 ..80u.@.80t..D$. 0130 b3 01 83 ff 0b 7d 7f 8a 08 80 f9 30 7c 05 80 f9 .....}.....0|... 0140 39 7e 19 83 fa 10 75 1c 80 f9 41 7c 05 80 f9 46 9~....u...A|...F Data […]: 24306a0a50e84eb1ccff807c2444018b751059596a02751b8d4c2434894d0ceb1289542430c644243c018d4c2430894d0c6a02598a460c3c040f84b80200003bf375143c010f84a402000056e8e7a3d0ff59e9980200000fb6c033db2bc30f844702000083e80374122bc10f844c0200004 [Length: 336]