Frame 9059: Packet, 1102 bytes on wire (8816 bits), 1102 bytes captured (8816 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:53.364319000 UTC UTC Arrival Time: Nov 21, 2017 01:00:53.364319000 UTC Epoch Arrival Time: 1511226053.364319000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 10.000 microseconds] [Time since reference or first frame: 47.498579000 seconds] Frame Number: 9059 Frame Length: 1102 bytes (8816 bits) Capture Length: 1102 bytes (8816 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1088 Identification: 0xe28c (57996) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x51b0 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 4732721, Ack: 1736, Len: 1048 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 8745] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1048] Sequence Number: 4732721 (relative sequence number) Sequence Number (raw): 2951349102 [Next Sequence Number: 4733769 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xe26d [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.955463000 seconds] [Time since previous frame in this TCP stream: 10.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 1572] [Bytes sent since last PSH flag: 1048] [Client Contiguous Streams: 1] [Server Contiguous Streams: 94] TCP payload (1048 bytes) Hypertext Transfer Protocol File Data: 1048 bytes Data (1048 bytes) 0000 48 50 32 00 3f 3f 00 00 00 00 00 00 00 00 00 00 HP2.??.......... 0010 00 00 00 00 00 00 09 00 00 00 09 00 00 00 00 00 ................ 0020 00 00 90 00 00 00 09 00 00 00 2a 80 00 00 00 cb ..........*..... 0030 89 36 c0 d2 23 f4 70 d2 61 42 30 fa d2 47 a0 fe .6..#.p.aB0..G.. 0040 b8 63 40 ff a8 46 30 00 98 45 40 01 88 28 30 02 .c@..F0..E@..(0. 0050 78 27 40 03 71 44 b0 04 61 43 c0 05 51 26 b0 06 x'@.qD..aC..Q&.. 0060 41 25 c0 07 31 08 b0 07 8d 5f c0 09 10 ea b0 09 A%..1...._...... 0070 ad db 40 0a f0 cc b0 0b e0 cb c0 0c d9 e9 30 0d ..@...........0. 0080 c0 ad c0 0e b9 cb 30 0f a9 ca 40 10 99 ad 30 11 ......0...@...0. 0090 89 ac 40 12 79 8f 30 13 69 8e 40 14 59 71 30 15 ..@.y.0.i.@.Yq0. 00a0 49 70 40 16 39 53 30 17 29 52 40 18 22 6f b0 19 Ip@.9S0.)R@."o.. 00b0 09 34 40 1a 02 51 b0 1a 2b 14 10 1a f2 42 b0 1b .4@..Q..+....B.. 00c0 e2 25 a0 1c d2 24 b0 1d c2 07 a0 1e b2 06 b0 1f .%...$.......... 00d0 a1 e9 a0 20 76 39 30 21 81 cb a0 22 56 1b 30 23 ... v90!..."V.0# 00e0 6a e8 20 24 35 fd 30 25 4a ca 20 26 15 df 30 27 j. $5.0%J. &..0' 00f0 2a ac 20 27 fe fb b0 29 0a 8e 20 29 de dd b0 2a *. '...).. )...* 0100 ea 70 20 2b be bf b0 2c d3 8c a0 2d 9e a1 b0 2e .p +...,...-.... 0110 b3 6e a0 2f 7e 83 b0 30 93 50 a0 31 67 a0 30 32 .n./~..0.P.1g.02 0120 73 32 a0 33 47 82 30 34 53 14 a0 35 27 64 30 36 s2.3G.04S..5'd06 0130 32 f6 a0 37 07 46 30 38 1c 13 20 38 e7 28 30 39 2..7.F08.. 8.(09 0140 fb f5 20 3a c7 0a 30 3b db d7 20 3c b0 26 b0 3d .. :..0;.. <.&.= 0150 bb b9 20 3e 90 08 b0 3f 9b 9b 20 40 6f ea b0 41 .. >...?.. @o..A 0160 84 b7 a0 42 4f cc b0 43 64 99 a0 44 2f ae b0 45 ...BO..Cd..D/..E 0170 44 7b a0 45 f3 e1 30 47 2d 98 20 47 d3 c3 30 49 D{.E..0G-. G..0I 0180 0d 7a 20 49 b3 a5 30 4a ed 5c 20 4b 9c c1 b0 4c .z I..0J.\ K...L 0190 d6 78 a0 4d 7c a3 b0 4e b6 5a a0 4f 5c 85 b0 50 .x.M|..N.Z.O\..P 01a0 96 3c a0 51 3c 67 b0 52 76 1e a0 53 1c 49 b0 54 .<.Q