Frame 6992: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:52.559194000 UTC UTC Arrival Time: Nov 21, 2017 01:00:52.559194000 UTC Epoch Arrival Time: 1511226052.559194000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 82.000 microseconds] [Time since reference or first frame: 46.693454000 seconds] Frame Number: 6992 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xdc8f (56463) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x59b9 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 3589877, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 6678] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 3589877 (relative sequence number) Sequence Number (raw): 2950206258 [Next Sequence Number: 3590401 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9c00 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.150338000 seconds] [Time since previous frame in this TCP stream: 82.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 524] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 53] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 75 75 53 8b 5c 24 10 8d 4b 01 8a 03 43 84 c0 75 uuS.\$..K...C..u 0010 f9 6a 30 6a 01 2b d9 e8 30 b1 ca ff 53 ff 74 24 .j0j.+..0...S.t$ 0020 1c 8b f0 e8 24 2f cb ff 8b 4c 24 30 89 06 8b 44 ....$/...L$0...D 0030 24 34 83 e0 f1 83 c4 10 83 c8 01 89 5e 04 89 4e $4..........^..N 0040 10 89 46 08 5b 83 f9 01 76 11 8b c1 25 ff 0f 00 ..F.[...v...%... 0050 00 2b c8 81 c1 00 10 00 00 eb 05 b9 00 40 00 00 .+...........@.. 0060 51 89 4e 18 e8 a3 a3 cd ff 89 46 14 ff 47 08 89 Q.N.......F..G.. 0070 7d 38 89 6e 2c eb 06 55 e8 9f 78 ce ff 83 7c 24 }8.n,..U..x...|$ 0080 14 00 59 5d 74 21 ff 74 24 0c 68 08 8b 54 10 6a ..Y]t!.t$.h..T.j 0090 02 68 4c 6a 55 10 e8 c1 39 cc ff ff 74 24 1c e8 .hLjU...9...t$.. 00a0 78 78 ce ff 83 c4 14 83 7c 24 08 00 74 2a ff 74 xx......|$..t*.t 00b0 24 08 e8 65 78 ce ff 59 eb 1e ff 74 24 1c ff 74 $..ex..Y...t$..t 00c0 24 1c 68 10 08 02 10 6a 16 68 24 e1 54 10 e8 09 $.h....j.h$.T... 00d0 b0 ca ff 83 c4 14 8b f0 5f 8b c6 5e 59 59 c3 cc ........_..^YY.. 00e0 cc cc cc cc cc cc cc cc cc cc cc cc 8b 0d 54 56 ..............TV 00f0 67 10 85 c9 74 3a 8b 44 24 04 83 e8 00 74 25 48 g...t:.D$....t%H 0100 74 1d 48 74 15 48 74 0c 48 75 25 81 49 08 00 20 t.Ht.Ht.Hu%.I.. 0110 00 00 eb 19 83 61 08 af eb 13 8b 49 0c eb 08 8b .....a.....I.... 0120 49 08 eb 03 83 c1 24 8b 44 24 08 89 08 33 c0 c3 I.....$.D$...3.. 0130 83 c8 ff c3 cc cc cc cc cc cc cc cc 55 8b ec 83 ............U... 0140 e4 f8 83 ec 2c 53 56 57 33 ff 89 7c 24 0c 39 3d ....,SVW3..|$.9= 0150 58 74 67 10 75 16 68 90 09 63 10 6a 01 e8 1a 39 Xtg.u.h..c.j...9 0160 cc ff 59 59 83 c8 ff e9 8c 00 00 00 8b 75 0c 8d ..YY.........u.. 0170 44 24 0c 50 46 56 ff 75 08 bb cc e5 66 10 53 e8 D$.PFV.u....f.S. 0180 28 c1 cc ff 83 c4 10 85 c0 75 18 6a 04 57 6a 04 (........u.j.Wj. 0190 8d 45 10 50 57 ff 74 24 20 e8 3e 0a cb ff 83 c4 .E.PW.t$ .>..... 01a0 18 eb 55 6a 01 57 8d 44 24 18 6a 01 50 e8 6a 73 ..Uj.W.D$.j.P.js 01b0 cc ff 6a 04 57 6a 04 8d 45 10 50 8d 44 24 30 57 ..j.Wj..E.P.D$0W 01c0 50 e8 16 0a cb ff 83 c4 28 85 c0 8d 44 24 10 74 P.......(...D$.t 01d0 08 50 e8 d5 70 ce ff eb 8a 6a 01 57 6a 28 50 56 .P..p....j.Wj(PV 01e0 ff 75 08 53 e8 c3 58 cd ff 83 c4 1c 85 c0 74 06 .u.S..X.......t. 01f0 8d 44 24 10 eb db 33 c0 5f 5e 5b 8b e5 5d c3 cc .D$...3._^[..].. 0200 cc cc cc cc cc cc cc cc cc cc cc cc ............ Data […]: 7575538b5c24108d4b018a034384c075f96a306a012bd9e830b1caff53ff74241c8bf0e8242fcbff8b4c243089068b44243483e0f183c41083c801895e04894e108946085b83f90176118bc125ff0f00002bc881c100100000eb05b90040000051894e18e8a3a3cdff894614ff4708897d3 [Length: 524]