Frame 7315: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:52.679404000 UTC UTC Arrival Time: Nov 21, 2017 01:00:52.679404000 UTC Epoch Arrival Time: 1511226052.679404000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 64.000 microseconds] [Time since reference or first frame: 46.813664000 seconds] Frame Number: 7315 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xdd69 (56681) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x58df [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 3748649, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 7001] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 3748649 (relative sequence number) Sequence Number (raw): 2950365030 [Next Sequence Number: 3749173 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0cb6 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.270548000 seconds] [Time since previous frame in this TCP stream: 64.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2096] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 56] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 55 10 6a 40 e8 3f ce c9 ff e9 f1 fb c8 ff 52 ff U.j@.?........R. 0010 51 08 59 e9 9a fb c8 ff 50 e8 5a 06 cc ff ff 35 Q.Y.....P.Z....5 0020 78 70 67 10 e8 bf 0c cc ff 59 59 89 1d 78 70 67 xpg......YY..xpg 0030 10 e9 aa 71 cd ff 50 e8 3c 06 cc ff ff 35 7c 70 ...q..P.<....5|p 0040 67 10 e8 a1 0c cc ff 59 59 89 1d 7c 70 67 10 5b g......YY..|pg.[ 0050 c3 8b 15 b8 6f 67 10 8b 42 24 8b 74 01 0c 6b f6 ....og..B$.t..k. 0060 18 03 72 74 83 c7 08 a5 a5 a5 a5 e9 c8 27 c8 ff ..rt.........'.. 0070 8b 0d b8 6f 67 10 8d 57 08 e8 9a ca c8 ff e9 4b ...og..W.......K 0080 b0 cd ff ba 8c 50 55 10 3a 02 8b 54 24 10 75 33 .....PU.:..T$.u3 0090 8a 41 01 ba 8c 50 55 10 3a 42 01 8b 54 24 10 75 .A...PU.:B..T$.u 00a0 22 8a 41 02 ba 8c 50 55 10 3a 42 02 8b 54 24 10 ".A...PU.:B..T$. 00b0 75 11 8a 41 03 b9 8c 50 55 10 3a 41 03 0f 84 65 u..A...PU.:A...e 00c0 58 c9 ff 1b c0 83 c8 01 e9 5d 58 c9 ff 83 7a 58 X........]X...zX 00d0 ff 0f 85 de 56 c9 ff 68 7d ef 6c 10 6a 04 6a 04 ....V..h}.l.j.j. 00e0 68 8c 50 55 10 e8 2e c2 c8 ff 8b 0d b8 6f 67 10 h.PU.........og. 00f0 83 c4 08 8b d0 e8 8e 1b cd ff 8b 0d b8 6f 67 10 .............og. 0100 83 c4 08 89 41 58 e9 a0 56 c9 ff c6 43 19 10 a1 ....AX..V...C... 0110 b8 6f 67 10 8b 40 58 89 43 04 e9 1a 57 c9 ff 68 .og..@X.C...W..h 0120 b4 90 62 10 6a 40 e8 1d cd c9 ff 83 c4 08 e9 6b ..b.j@.........k 0130 57 c9 ff 68 d0 90 62 10 6a 40 e8 09 cd c9 ff 83 W..h..b.j@...... 0140 c4 08 e9 e0 58 c9 ff 68 b4 90 62 10 6a 40 e8 f5 ....X..h..b.j@.. 0150 cc c9 ff 83 c4 08 e9 e8 56 c9 ff 68 d8 5b 55 10 ........V..h.[U. 0160 ff 15 3c 75 67 10 83 c4 04 68 b5 01 00 00 68 38 ..