Frame 8792: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:53.268959000 UTC UTC Arrival Time: Nov 21, 2017 01:00:53.268959000 UTC Epoch Arrival Time: 1511226053.268959000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 7.000 microseconds] [Time since reference or first frame: 47.403219000 seconds] Frame Number: 8792 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xe1cb (57803) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x5271 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 4586001, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 8478] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 4586001 (relative sequence number) Sequence Number (raw): 2951202382 [Next Sequence Number: 4587049 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x961a [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.860103000 seconds] [Time since previous frame in this TCP stream: 7.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 3668] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 89] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 29 20 ff ff ff ff e8 14 54 a0 ff ff ff ff e8 fb ) ......T....... 0010 0b 20 ff ff ff ff e9 fd 71 20 ff ff ff ff ea da . ......q ...... 0020 ed 20 ff ff ff ff eb dd 53 20 ff ff ff ff ec ba . ......S ...... 0030 cf 20 ff ff ff ff ed b3 fa a0 ff ff ff ff ee 9a . .............. 0040 b1 20 ff ff ff ff ef 81 67 a0 ff ff ff ff f0 9f . ......g....... 0050 7d 20 ff ff ff ff f1 61 49 a0 ff ff ff ff f2 7f } .....aI....... 0060 5f 20 ff ff ff ff f3 4a 66 20 ff ff ff ff f4 5f _ .....Jf ....._ 0070 41 20 ff ff ff ff f5 21 0d a0 ff ff ff ff f6 3f A .....!.......? 0080 23 20 ff ff ff ff f7 00 ef a0 ff ff ff ff f8 1f # .............. 0090 05 20 ff ff ff ff f8 e0 d1 a0 ff ff ff ff f9 fe . .............. 00a0 e7 20 ff ff ff ff fa c0 b3 a0 ff ff ff ff fb e8 . .............. 00b0 03 a0 ff ff ff ff fc 7b ab a0 ff ff ff ff fd c7 .......{........ 00c0 bb 70 00 00 00 00 03 70 c6 20 00 00 00 00 04 29 .p.....p. .....) 00d0 58 20 00 00 00 00 05 50 a8 20 00 00 00 00 06 09 X .....P. ...... 00e0 3a 20 00 00 00 00 07 30 8a 20 00 00 00 00 07 e9 : .....0. ...... 00f0 1c 20 00 00 00 00 09 10 6c 20 00 00 00 00 09 c8 . ......l ...... 0100 fe 20 00 00 00 00 0a f0 4e 20 00 00 00 00 0b b2 . ......N ...... 0110 1a a0 00 00 00 00 0c d0 30 20 00 00 00 00 0d 91 ........0 ...... 0120 fc a0 00 00 00 00 0e b0 12 20 00 00 00 00 0f 71 ......... .....q 0130 de a0 00 00 00 00 10 99 2e a0 00 00 00 00 11 51 ...............Q 0140 c0 a0 00 00 00 00 12 79 10 a0 00 00 00 00 13 31 .......y.......1 0150 a2 a0 00 00 00 00 14 58 f2 a0 00 00 00 00 15 23 .......X.......# 0160 eb 90 00 00 00 00 16 38 c6 90 00 00 00 00 17 03 .......8........ 0170 cd 90 00 00 00 00 18 18 a8 90 00 00 00 00 18 e3 ................ 0180 af 90 00 00 00 00 19 f8 8a 90 00 00 00 00 1a c3 ................ 0190 91 90 00 00 00 00 1b e1 a7 10 00 00 00 00 1c ac ................ 01a0 ae 10 00 00 00 00 1d c1 89 10 00 00 00 00 1e 8c ................ 01b0 90 10 00 00 00 00 1f a1 6b 10 00 00 00 00 20 6c ........k..... l 01c0 72 10 00 00 00 00 21 81 4d 10 00 00 00 00 22 4c r.....!.M....."L 01d0 54 10 00 00 00 00 23 61 2f 10 00 00 00 00 24 2c T.....#a/.....$, 01e0 36 10 00 00 00 00 25 4a 4b 90 00 00 00 00 26 0c 6.....%JK.....&. 01f0 18 10 00 00 00 00 27 2a 2d 90 00 00 00 00 27 f5 ......'*-.....'. 0200 34 90 00 00 00 00 29 0a 0f 90 00 00 00 00 29 d5 4.....).......). 0210 16 90 00 00 00 00 2a e9 f1 90 00 00 00 00 2b b4 ......*.......+. 0220 f8 90 00 00 00 00 2c c9 d3 90 00 00 00 00 2d 94 ......,.......-. 0230 da 90 00 00 00 00 2e a9 b5 90 00 00 00 00 2f 74 ............../t 0240 bc 90 00 00 00 00 30 89 97 90 00 00 00 00 30 e7 ......0.......0. 0250 24 00 00 00 00 00 31 5d d9 10 00 00 00 00 32 72 $.....1]......2r 0260 b4 10 00 00 00 00 33 3d bb 10 00 00 00 00 34 52 ......3=......4R 0270 96 10 00 00 00 00 35 1d 9d 10 00 00 00 00 36 32 ......5.......62 0280 78 10 00 00 00 00 36 fd 7f 10 00 00 00 00 38 1b x.....6.......8. 0290 94 90 00 00 00 00 38 dd 61 10 00 00 00 00 39 fb ......8.a.....9. 02a0 76 90 00 00 00 00 3a bd 43 10 00 00 00 00 3b db v.....:.C.....;. 02b0 58 90 00 00 00 00 3c a6 5f 90 00 00 00 00 3d bb X.....<._.....=. 02c0 3a 90 00 00 00 00 3e 86 41 90 00 00 00 00 3f 9b :.....>.A.....?. 02d0 1c 90 00 00 00 00 40 66 23 90 00 00 00 00 41 84 ......@f#.....A. 02e0 39 10 00 00 00 00 42 46 05 90 00 00 00 00 43 64 9.....BF......Cd 02f0 1b 10 00 00 00 00 44 25 e7 90 00 00 00 00 45 43 ......D%......EC 0300 fd 10 00 00 00 00 46 05 c9 90 00 00 00 00 47 23 ......F.......G# 0310 df 10 00 00 00 00 47 ee e6 10 00 00 00 00 49 03 ......G.......I. 0320 c1 10 00 00 00 00 49 ce c8 10 00 00 00 00 4a e3 ......I.......J. 0330 a3 10 00 00 00 00 4b ae aa 10 00 00 00 00 4c cc ......K.......L. 0340 bf 90 00 00 00 00 4d 8e 8c 10 00 00 00 00 4e ac ......M.......N. 0350 a1 90 00 00 00 00 4f 6e 6e 10 00 00 00 00 50 8c ......Onn.....P. 0360 83 90 00 00 00 00 51 57 8a 90 00 00 00 00 52 6c ......QW......Rl 0370 65 90 00 00 00 00 53 37 6c 90 00 00 00 00 54 4c e.....S7l.....TL 0380 47 90 00 00 00 00 55 17 4e 90 00 00 00 00 56 2c G.....U.N.....V, 0390 29 90 00 00 00 00 56 f7 30 90 00 00 00 00 58 15 ).....V.0.....X. 03a0 46 10 00 00 00 00 58 d7 12 90 00 00 00 00 59 f5 F.....X.......Y. 03b0 28 10 00 00 00 00 5a b6 f4 90 00 00 00 00 5b d5 (.....Z.......[. 03c0 0a 10 00 00 00 00 5c a0 11 10 00 00 00 00 5d b4 ......\.......]. 03d0 ec 10 00 00 00 00 5e 7f f3 10 00 00 00 00 5f 94 ......^......._. 03e0 ce 10 00 00 00 00 60 5f d5 10 00 00 00 00 61 7d ......`_......a} 03f0 ea 90 00 00 00 00 62 3f b7 10 00 00 00 00 63 5d ......b?......c] 0400 cc 90 00 00 00 00 64 1f 99 10 00 00 00 00 65 3d ......d.......e= 0410 ae 90 00 00 00 00 66 08 ......f. Data […]: 2920ffffffffe81454a0ffffffffe8fb0b20ffffffffe9fd7120ffffffffeadaed20ffffffffebdd5320ffffffffecbacf20ffffffffedb3faa0ffffffffee9ab120ffffffffef8167a0fffffffff09f7d20fffffffff16149a0fffffffff27f5f20fffffffff34a6620fffffffff45f412 [Length: 1048]