Frame 7008: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:52.563878000 UTC UTC Arrival Time: Nov 21, 2017 01:00:52.563878000 UTC Epoch Arrival Time: 1511226052.563878000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 75.000 microseconds] [Time since reference or first frame: 46.698138000 seconds] Frame Number: 7008 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xdc9b (56475) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x57a1 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 3596689, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 6694] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 3596689 (relative sequence number) Sequence Number (raw): 2950213070 [Next Sequence Number: 3597737 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x3fa2 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.155022000 seconds] [Time since previous frame in this TCP stream: 75.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1572] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 53] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 53 e8 7a 5e ce ff eb 1b 83 7b 08 01 75 04 c6 43 S.z^.....{..u..C 0010 0d 00 8a 43 0c 3c 04 74 04 3c 05 75 07 53 e8 1d ...C.<.t.<.u.S.. 0020 45 ce ff 59 5b 83 c4 10 c3 cc cc cc cc cc cc cc E..Y[........... 0030 8b 4c 24 14 85 c9 74 06 8b 44 24 10 89 01 33 c0 .L$...t..D$...3. 0040 40 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc @............... 0050 55 8b ec 83 e4 f8 b8 34 40 00 00 e8 00 d9 fb ff U......4@....... 0060 a1 c8 79 65 10 33 c4 89 84 24 30 40 00 00 8b 45 ..ye.3...$0@...E 0070 0c 53 89 44 24 2c a1 9c 5c 67 10 56 57 89 44 24 .S.D$,..\g.VW.D$ 0080 30 85 c0 0f 84 e4 01 00 00 6a 00 6a 00 50 e8 5d 0........j.j.P.] 0090 13 d0 ff 83 c4 0c 85 c0 0f 85 cf 01 00 00 6a 08 ..............j. 00a0 59 8d 7c 24 10 f3 ab 8b 5c 24 14 8b 74 24 10 8b Y.|$....\$..t$.. 00b0 7c 24 30 57 e8 a7 84 d0 ff 59 85 c0 0f 85 3e 01 |$0W.....Y....>. 00c0 00 00 68 ff 3f 00 00 50 88 44 24 40 8d 44 24 41 ..h.?..P.D$@.D$A 00d0 50 e8 7e d4 fb ff 83 c4 0c 8d 44 24 38 68 00 40 P.~.......D$8h.@ 00e0 00 00 50 57 e8 47 57 cf ff 8b f8 83 c4 0c 85 ff ..PW.GW......... 00f0 0f 84 fe 00 00 00 83 ff ff 0f 84 f5 00 00 00 85 ................ 0100 f6 75 2c 33 db 89 7c 24 0c 83 ff 4e 73 05 6a 4e .u,3..|$...Ns.jN 0110 58 eb 10 8b c7 81 ff 7f ff ff 7f 73 06 8d 87 80 X..........s.... 0120 00 00 00 89 44 24 18 6a 00 40 50 6a 00 eb 32 8d ....D$.j.@Pj..2. 0130 04 3b 89 44 24 0c 3b 44 24 18 72 33 83 e8 80 89 .;.D$.;D$.r3.... 0140 44 24 18 3d ff ff ff 7f 72 12 68 bc 73 55 10 6a D$.=....r.h.sU.j 0150 01 e8 8a 1e cc ff 8b 44 24 20 59 59 6a 00 40 50 .......D$ YYj.@P 0160 56 e8 ea 65 cb ff 8b f0 89 74 24 1c 83 c4 0c 57 V..e.....t$....W 0170 8d 44 24 3c 50 8d 04 33 50 e8 dc d3 fb ff 8b 4c .D$