Frame 1: 94 bytes on wire (752 bits), 94 bytes captured (752 bits) Encapsulation type: Ethernet (1) Arrival Time: Jun 14, 2017 15:46:21.768536000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1497447981.768536000 seconds [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 94 bytes (752 bits) Capture Length: 94 bytes (752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp] Ethernet II, Src: Xensourc_a9:04:1a (00:16:3e:a9:04:1a), Dst: Cisco_a0:02:83 (00:05:73:a0:02:83) Destination: Cisco_a0:02:83 (00:05:73:a0:02:83) Address: Cisco_a0:02:83 (00:05:73:a0:02:83) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Xensourc_a9:04:1a (00:16:3e:a9:04:1a) Address: Xensourc_a9:04:1a (00:16:3e:a9:04:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2001:4b98:dc2:43:216:3eff:fea9:41a, Dst: 2605:4500:2:245b::42 0110 .... = Version: 6 .... 0000 0000 .... .... .... .... .... = Traffic class: 0x00 (DSCP: CS0, ECN: Not-ECT) .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... .... .... 0000 0000 0000 0000 0000 = Flow label: 0x00000 Payload length: 40 Next header: TCP (6) Hop limit: 64 Source: 2001:4b98:dc2:43:216:3eff:fea9:41a [Source SA MAC: Xensourc_a9:04:1a (00:16:3e:a9:04:1a)] Destination: 2605:4500:2:245b::42 [Source GeoIP: France] [Source GeoIP Country: France] [Destination GeoIP: United States] [Destination GeoIP Country: United States] Transmission Control Protocol, Src Port: 37703 (37703), Dst Port: http (80), Seq: 0, Len: 0 Source Port: 37703 (37703) Destination Port: http (80) [Stream index: 0] [TCP Segment Len: 0] Sequence number: 0 (relative sequence number) Acknowledgment number: 0 Header Length: 40 bytes Flags: 0x002 (SYN) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...0 .... = Acknowledgment: Not set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish request (SYN): server port 80] [Connection establish request (SYN): server port 80] [Severity level: Chat] [Group: Sequence] .... .... ...0 = Fin: Not set [TCP Flags: ··········S·] Window size value: 28800 [Calculated window size: 28800] Checksum: 0x4d4a [unverified] [Checksum Status: Unverified] Urgent pointer: 0 Options: (20 bytes), Maximum segment size, SACK permitted, Timestamps, No-Operation (NOP), Window scale Maximum segment size: 1440 bytes Kind: Maximum Segment Size (2) Length: 4 MSS Value: 1440 TCP SACK Permitted Option: True Kind: SACK Permitted (4) Length: 2 Timestamps: TSval 1963872568, TSecr 0 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 1963872568 Timestamp echo reply: 0 No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) Window scale: 7 (multiply by 128) Kind: Window Scale (3) Length: 3 Shift count: 7 [Multiplier: 128] Frame 2: 94 bytes on wire (752 bits), 94 bytes captured (752 bits) Encapsulation type: Ethernet (1) Arrival Time: Jun 14, 2017 15:46:21.860830000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1497447981.860830000 seconds [Time delta from previous captured frame: 0.092294000 seconds] [Time delta from previous displayed frame: 0.092294000 seconds] [Time since reference or first frame: 0.092294000 seconds] Frame Number: 2 Frame Length: 94 bytes (752 bits) Capture Length: 94 bytes (752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp] Ethernet II, Src: Cisco_5b:7f:42 (84:78:ac:5b:7f:42), Dst: Xensourc_a9:04:1a (00:16:3e:a9:04:1a) Destination: Xensourc_a9:04:1a (00:16:3e:a9:04:1a) Address: Xensourc_a9:04:1a (00:16:3e:a9:04:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_5b:7f:42 (84:78:ac:5b:7f:42) Address: Cisco_5b:7f:42 (84:78:ac:5b:7f:42) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2605:4500:2:245b::42, Dst: 2001:4b98:dc2:43:216:3eff:fea9:41a 0110 .... = Version: 6 .... 0010 1000 .... .... .... .... .... = Traffic class: 0x28 (DSCP: AF11, ECN: Not-ECT) .... 0010 10.. .... .... .... .... .... = Differentiated Services Codepoint: Assured Forwarding 11 (10) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... .... .... 0000 0000 0000 0000 0000 = Flow label: 0x00000 Payload length: 40 Next header: TCP (6) Hop limit: 51 Source: 2605:4500:2:245b::42 Destination: 2001:4b98:dc2:43:216:3eff:fea9:41a [Destination SA MAC: Xensourc_a9:04:1a (00:16:3e:a9:04:1a)] [Source GeoIP: United States] [Source GeoIP Country: United States] [Destination GeoIP: France] [Destination GeoIP Country: France] Transmission Control Protocol, Src Port: http (80), Dst Port: 37703 (37703), Seq: 0, Ack: 1, Len: 0 Source Port: http (80) Destination Port: 37703 (37703) [Stream index: 0] [TCP Segment Len: 0] Sequence number: 0 (relative sequence number) Acknowledgment number: 1 (relative ack number) Header Length: 40 bytes Flags: 0x012 (SYN, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port 80] [Connection establish acknowledge (SYN+ACK): server port 80] [Severity level: Chat] [Group: Sequence] .... .... ...0 = Fin: Not set [TCP Flags: ·······A··S·] Window size value: 28560 [Calculated window size: 28560] Checksum: 0x721e [unverified] [Checksum Status: Unverified] Urgent pointer: 0 Options: (20 bytes), Maximum segment size, SACK permitted, Timestamps, No-Operation (NOP), Window scale Maximum segment size: 1440 bytes Kind: Maximum Segment Size (2) Length: 4 MSS Value: 1440 TCP SACK Permitted Option: True Kind: SACK Permitted (4) Length: 2 Timestamps: TSval 1920918972, TSecr 1963872568 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 1920918972 Timestamp echo reply: 1963872568 No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) Window scale: 6 (multiply by 64) Kind: Window Scale (3) Length: 3 Shift count: 6 [Multiplier: 64] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1] [The RTT to ACK the segment was: 0.092294000 seconds] Frame 3: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Encapsulation type: Ethernet (1) Arrival Time: Jun 14, 2017 15:46:21.860901000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1497447981.860901000 seconds [Time delta from previous captured frame: 0.000071000 seconds] [Time delta from previous displayed frame: 0.000071000 seconds] [Time since reference or first frame: 0.092365000 seconds] Frame Number: 3 Frame Length: 86 bytes (688 bits) Capture Length: 86 bytes (688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp] Ethernet II, Src: Xensourc_a9:04:1a (00:16:3e:a9:04:1a), Dst: Cisco_a0:02:83 (00:05:73:a0:02:83) Destination: Cisco_a0:02:83 (00:05:73:a0:02:83) Address: Cisco_a0:02:83 (00:05:73:a0:02:83) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Xensourc_a9:04:1a (00:16:3e:a9:04:1a) Address: Xensourc_a9:04:1a (00:16:3e:a9:04:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2001:4b98:dc2:43:216:3eff:fea9:41a, Dst: 2605:4500:2:245b::42 0110 .... = Version: 6 .... 0000 0000 .... .... .... .... .... = Traffic class: 0x00 (DSCP: CS0, ECN: Not-ECT) .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... .... .... 0000 0000 0000 0000 0000 = Flow label: 0x00000 Payload length: 32 Next header: TCP (6) Hop limit: 64 Source: 2001:4b98:dc2:43:216:3eff:fea9:41a [Source SA MAC: Xensourc_a9:04:1a (00:16:3e:a9:04:1a)] Destination: 2605:4500:2:245b::42 [Source GeoIP: France] [Source GeoIP Country: France] [Destination GeoIP: United States] [Destination GeoIP Country: United States] Transmission Control Protocol, Src Port: 37703 (37703), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 Source Port: 37703 (37703) Destination Port: http (80) [Stream index: 0] [TCP Segment Len: 0] Sequence number: 1 (relative sequence number) Acknowledgment number: 1 (relative ack number) Header Length: 32 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 225 [Calculated window size: 28800] [Window size scaling factor: 128] Checksum: 0x4d42 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) Timestamps: TSval 1963872591, TSecr 1920918972 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 1963872591 Timestamp echo reply: 1920918972 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 2] [The RTT to ACK the segment was: 0.000071000 seconds] [iRTT: 0.092365000 seconds] Frame 4: 241 bytes on wire (1928 bits), 241 bytes captured (1928 bits) Encapsulation type: Ethernet (1) Arrival Time: Jun 14, 2017 15:46:21.861165000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1497447981.861165000 seconds [Time delta from previous captured frame: 0.000264000 seconds] [Time delta from previous displayed frame: 0.000264000 seconds] [Time since reference or first frame: 0.092629000 seconds] Frame Number: 4 Frame Length: 241 bytes (1928 bits) Capture Length: 241 bytes (1928 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp:http] Ethernet II, Src: Xensourc_a9:04:1a (00:16:3e:a9:04:1a), Dst: Cisco_a0:02:83 (00:05:73:a0:02:83) Destination: Cisco_a0:02:83 (00:05:73:a0:02:83) Address: Cisco_a0:02:83 (00:05:73:a0:02:83) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Xensourc_a9:04:1a (00:16:3e:a9:04:1a) Address: Xensourc_a9:04:1a (00:16:3e:a9:04:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2001:4b98:dc2:43:216:3eff:fea9:41a, Dst: 2605:4500:2:245b::42 0110 .... = Version: 6 .... 0000 0000 .... .... .... .... .... = Traffic class: 0x00 (DSCP: CS0, ECN: Not-ECT) .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... .... .... 0000 0000 0000 0000 0000 = Flow label: 0x00000 Payload length: 187 Next header: TCP (6) Hop limit: 64 Source: 2001:4b98:dc2:43:216:3eff:fea9:41a [Source SA MAC: Xensourc_a9:04:1a (00:16:3e:a9:04:1a)] Destination: 2605:4500:2:245b::42 [Source GeoIP: France] [Source GeoIP Country: France] [Destination GeoIP: United States] [Destination GeoIP Country: United States] Transmission Control Protocol, Src Port: 37703 (37703), Dst Port: http (80), Seq: 1, Ack: 1, Len: 155 Source Port: 37703 (37703) Destination Port: http (80) [Stream index: 0] [TCP Segment Len: 155] Sequence number: 1 (relative sequence number) [Next sequence number: 156 (relative sequence number)] Acknowledgment number: 1 (relative ack number) Header Length: 32 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 225 [Calculated window size: 28800] [Window size scaling factor: 128] Checksum: 0x4ddd [unverified] [Checksum Status: Unverified] Urgent pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) Timestamps: TSval 1963872591, TSecr 1920918972 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 1963872591 Timestamp echo reply: 1920918972 [SEQ/ACK analysis] [iRTT: 0.092365000 seconds] [Bytes in flight: 155] [Bytes sent since last PSH flag: 155] Hypertext Transfer Protocol GET /robots.txt HTTP/1.1\r\n [Expert Info (Chat/Sequence): GET /robots.txt HTTP/1.1\r\n] [GET /robots.txt HTTP/1.1\r\n] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI: /robots.txt Request Version: HTTP/1.1 User-Agent: Wget/1.19.1 (linux-gnu)\r\n Accept: */*\r\n Accept-Encoding: identity\r\n Host: ada.bortzmeyer.org\r\n Connection: Keep-Alive\r\n \r\n [Full request URI: http://ada.bortzmeyer.org/robots.txt] [HTTP request 1/1] Frame 5: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Encapsulation type: Ethernet (1) Arrival Time: Jun 14, 2017 15:46:21.953385000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1497447981.953385000 seconds [Time delta from previous captured frame: 0.092220000 seconds] [Time delta from previous displayed frame: 0.092220000 seconds] [Time since reference or first frame: 0.184849000 seconds] Frame Number: 5 Frame Length: 86 bytes (688 bits) Capture Length: 86 bytes (688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp] Ethernet II, Src: Cisco_5b:7f:42 (84:78:ac:5b:7f:42), Dst: Xensourc_a9:04:1a (00:16:3e:a9:04:1a) Destination: Xensourc_a9:04:1a (00:16:3e:a9:04:1a) Address: Xensourc_a9:04:1a (00:16:3e:a9:04:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_5b:7f:42 (84:78:ac:5b:7f:42) Address: Cisco_5b:7f:42 (84:78:ac:5b:7f:42) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2605:4500:2:245b::42, Dst: 2001:4b98:dc2:43:216:3eff:fea9:41a 0110 .... = Version: 6 .... 0010 1000 .... .... .... .... .... = Traffic class: 0x28 (DSCP: AF11, ECN: Not-ECT) .... 0010 10.. .... .... .... .... .... = Differentiated Services Codepoint: Assured Forwarding 11 (10) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... .... .... 0000 0000 0000 0000 0000 = Flow label: 0x00000 Payload length: 32 Next header: TCP (6) Hop limit: 51 Source: 2605:4500:2:245b::42 Destination: 2001:4b98:dc2:43:216:3eff:fea9:41a [Destination SA MAC: Xensourc_a9:04:1a (00:16:3e:a9:04:1a)] [Source GeoIP: United States] [Source GeoIP Country: United States] [Destination GeoIP: France] [Destination GeoIP Country: France] Transmission Control Protocol, Src Port: http (80), Dst Port: 37703 (37703), Seq: 1, Ack: 156, Len: 0 Source Port: http (80) Destination Port: 37703 (37703) [Stream index: 0] [TCP Segment Len: 0] Sequence number: 1 (relative sequence number) Acknowledgment number: 156 (relative ack number) Header Length: 32 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 463 [Calculated window size: 29632] [Window size scaling factor: 64] Checksum: 0x0dce [unverified] [Checksum Status: Unverified] Urgent pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) Timestamps: TSval 1920918995, TSecr 1963872591 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 1920918995 Timestamp echo reply: 1963872591 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 4] [The RTT to ACK the segment was: 0.092220000 seconds] [iRTT: 0.092365000 seconds] Frame 6: 595 bytes on wire (4760 bits), 595 bytes captured (4760 bits) Encapsulation type: Ethernet (1) Arrival Time: Jun 14, 2017 15:46:21.953892000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1497447981.953892000 seconds [Time delta from previous captured frame: 0.000507000 seconds] [Time delta from previous displayed frame: 0.000507000 seconds] [Time since reference or first frame: 0.185356000 seconds] Frame Number: 6 Frame Length: 595 bytes (4760 bits) Capture Length: 595 bytes (4760 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp:http:data-text-lines] Ethernet II, Src: Cisco_5b:7f:42 (84:78:ac:5b:7f:42), Dst: Xensourc_a9:04:1a (00:16:3e:a9:04:1a) Destination: Xensourc_a9:04:1a (00:16:3e:a9:04:1a) Address: Xensourc_a9:04:1a (00:16:3e:a9:04:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_5b:7f:42 (84:78:ac:5b:7f:42) Address: Cisco_5b:7f:42 (84:78:ac:5b:7f:42) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2605:4500:2:245b::42, Dst: 2001:4b98:dc2:43:216:3eff:fea9:41a 0110 .... = Version: 6 .... 0010 1000 .... .... .... .... .... = Traffic class: 0x28 (DSCP: AF11, ECN: Not-ECT) .... 0010 10.. .... .... .... .... .... = Differentiated Services Codepoint: Assured Forwarding 11 (10) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... .... .... 0000 0000 0000 0000 0000 = Flow label: 0x00000 Payload length: 541 Next header: TCP (6) Hop limit: 51 Source: 2605:4500:2:245b::42 Destination: 2001:4b98:dc2:43:216:3eff:fea9:41a [Destination SA MAC: Xensourc_a9:04:1a (00:16:3e:a9:04:1a)] [Source GeoIP: United States] [Source GeoIP Country: United States] [Destination GeoIP: France] [Destination GeoIP Country: France] Transmission Control Protocol, Src Port: http (80), Dst Port: 37703 (37703), Seq: 1, Ack: 156, Len: 509 Source Port: http (80) Destination Port: 37703 (37703) [Stream index: 0] [TCP Segment Len: 509] Sequence number: 1 (relative sequence number) [Next sequence number: 510 (relative sequence number)] Acknowledgment number: 156 (relative ack number) Header Length: 32 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 463 [Calculated window size: 29632] [Window size scaling factor: 64] Checksum: 0x264d [unverified] [Checksum Status: Unverified] Urgent pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) Timestamps: TSval 1920918996, TSecr 1963872591 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 1920918996 Timestamp echo reply: 1963872591 [SEQ/ACK analysis] [iRTT: 0.092365000 seconds] [Bytes in flight: 509] [Bytes sent since last PSH flag: 509] Hypertext Transfer Protocol HTTP/1.1 404 Not Found\r\n [Expert Info (Chat/Sequence): HTTP/1.1 404 Not Found\r\n] [HTTP/1.1 404 Not Found\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 404 Response Phrase: Not Found Date: Wed, 14 Jun 2017 13:46:21 GMT\r\n Server: Apache/2.4.10 (Debian)\r\n Content-Length: 292\r\n [Content length: 292] Keep-Alive: timeout=5, max=100\r\n Connection: Keep-Alive\r\n Content-Type: text/html; charset=iso-8859-1\r\n \r\n [HTTP response 1/1] [Time since request: 0.092727000 seconds] [Request in frame: 4] File Data: 292 bytes Line-based text data: text/html \n \n 404 Not Found\n \n

Not Found

\n

The requested URL /robots.txt was not found on this server.

\n
\n
Apache/2.4.10 (Debian) Server at ada.bortzmeyer.org Port 80
\n \n Frame 7: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Encapsulation type: Ethernet (1) Arrival Time: Jun 14, 2017 15:46:21.953915000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1497447981.953915000 seconds [Time delta from previous captured frame: 0.000023000 seconds] [Time delta from previous displayed frame: 0.000023000 seconds] [Time since reference or first frame: 0.185379000 seconds] Frame Number: 7 Frame Length: 86 bytes (688 bits) Capture Length: 86 bytes (688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp] Ethernet II, Src: Xensourc_a9:04:1a (00:16:3e:a9:04:1a), Dst: Cisco_a0:02:83 (00:05:73:a0:02:83) Destination: Cisco_a0:02:83 (00:05:73:a0:02:83) Address: Cisco_a0:02:83 (00:05:73:a0:02:83) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Xensourc_a9:04:1a (00:16:3e:a9:04:1a) Address: Xensourc_a9:04:1a (00:16:3e:a9:04:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2001:4b98:dc2:43:216:3eff:fea9:41a, Dst: 2605:4500:2:245b::42 0110 .... = Version: 6 .... 0000 0000 .... .... .... .... .... = Traffic class: 0x00 (DSCP: CS0, ECN: Not-ECT) .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... .... .... 0000 0000 0000 0000 0000 = Flow label: 0x00000 Payload length: 32 Next header: TCP (6) Hop limit: 64 Source: 2001:4b98:dc2:43:216:3eff:fea9:41a [Source SA MAC: Xensourc_a9:04:1a (00:16:3e:a9:04:1a)] Destination: 2605:4500:2:245b::42 [Source GeoIP: France] [Source GeoIP Country: France] [Destination GeoIP: United States] [Destination GeoIP Country: United States] Transmission Control Protocol, Src Port: 37703 (37703), Dst Port: http (80), Seq: 156, Ack: 510, Len: 0 Source Port: 37703 (37703) Destination Port: http (80) [Stream index: 0] [TCP Segment Len: 0] Sequence number: 156 (relative sequence number) Acknowledgment number: 510 (relative ack number) Header Length: 32 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 234 [Calculated window size: 29952] [Window size scaling factor: 128] Checksum: 0x4d42 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) Timestamps: TSval 1963872614, TSecr 1920918996 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 1963872614 Timestamp echo reply: 1920918996 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 6] [The RTT to ACK the segment was: 0.000023000 seconds] [iRTT: 0.092365000 seconds] Frame 8: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Encapsulation type: Ethernet (1) Arrival Time: Jun 14, 2017 15:46:21.955677000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1497447981.955677000 seconds [Time delta from previous captured frame: 0.001762000 seconds] [Time delta from previous displayed frame: 0.001762000 seconds] [Time since reference or first frame: 0.187141000 seconds] Frame Number: 8 Frame Length: 86 bytes (688 bits) Capture Length: 86 bytes (688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp] Ethernet II, Src: Xensourc_a9:04:1a (00:16:3e:a9:04:1a), Dst: Cisco_a0:02:83 (00:05:73:a0:02:83) Destination: Cisco_a0:02:83 (00:05:73:a0:02:83) Address: Cisco_a0:02:83 (00:05:73:a0:02:83) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Xensourc_a9:04:1a (00:16:3e:a9:04:1a) Address: Xensourc_a9:04:1a (00:16:3e:a9:04:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2001:4b98:dc2:43:216:3eff:fea9:41a, Dst: 2605:4500:2:245b::42 0110 .... = Version: 6 .... 0000 0000 .... .... .... .... .... = Traffic class: 0x00 (DSCP: CS0, ECN: Not-ECT) .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... .... .... 0000 0000 0000 0000 0000 = Flow label: 0x00000 Payload length: 32 Next header: TCP (6) Hop limit: 64 Source: 2001:4b98:dc2:43:216:3eff:fea9:41a [Source SA MAC: Xensourc_a9:04:1a (00:16:3e:a9:04:1a)] Destination: 2605:4500:2:245b::42 [Source GeoIP: France] [Source GeoIP Country: France] [Destination GeoIP: United States] [Destination GeoIP Country: United States] Transmission Control Protocol, Src Port: 37703 (37703), Dst Port: http (80), Seq: 156, Ack: 510, Len: 0 Source Port: 37703 (37703) Destination Port: http (80) [Stream index: 0] [TCP Segment Len: 0] Sequence number: 156 (relative sequence number) Acknowledgment number: 510 (relative ack number) Header Length: 32 bytes Flags: 0x011 (FIN, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...1 = Fin: Set [Expert Info (Chat/Sequence): Connection finish (FIN)] [Connection finish (FIN)] [Severity level: Chat] [Group: Sequence] [TCP Flags: ·······A···F] Window size value: 234 [Calculated window size: 29952] [Window size scaling factor: 128] Checksum: 0x4d42 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) Timestamps: TSval 1963872614, TSecr 1920918996 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 1963872614 Timestamp echo reply: 1920918996 Frame 9: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Encapsulation type: Ethernet (1) Arrival Time: Jun 14, 2017 15:46:22.048553000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1497447982.048553000 seconds [Time delta from previous captured frame: 0.092876000 seconds] [Time delta from previous displayed frame: 0.092876000 seconds] [Time since reference or first frame: 0.280017000 seconds] Frame Number: 9 Frame Length: 86 bytes (688 bits) Capture Length: 86 bytes (688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp] Ethernet II, Src: Cisco_5b:7f:42 (84:78:ac:5b:7f:42), Dst: Xensourc_a9:04:1a (00:16:3e:a9:04:1a) Destination: Xensourc_a9:04:1a (00:16:3e:a9:04:1a) Address: Xensourc_a9:04:1a (00:16:3e:a9:04:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_5b:7f:42 (84:78:ac:5b:7f:42) Address: Cisco_5b:7f:42 (84:78:ac:5b:7f:42) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2605:4500:2:245b::42, Dst: 2001:4b98:dc2:43:216:3eff:fea9:41a 0110 .... = Version: 6 .... 0010 1000 .... .... .... .... .... = Traffic class: 0x28 (DSCP: AF11, ECN: Not-ECT) .... 0010 10.. .... .... .... .... .... = Differentiated Services Codepoint: Assured Forwarding 11 (10) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... .... .... 0000 0000 0000 0000 0000 = Flow label: 0x00000 Payload length: 32 Next header: TCP (6) Hop limit: 51 Source: 2605:4500:2:245b::42 Destination: 2001:4b98:dc2:43:216:3eff:fea9:41a [Destination SA MAC: Xensourc_a9:04:1a (00:16:3e:a9:04:1a)] [Source GeoIP: United States] [Source GeoIP Country: United States] [Destination GeoIP: France] [Destination GeoIP Country: France] Transmission Control Protocol, Src Port: http (80), Dst Port: 37703 (37703), Seq: 510, Ack: 157, Len: 0 Source Port: http (80) Destination Port: 37703 (37703) [Stream index: 0] [TCP Segment Len: 0] Sequence number: 510 (relative sequence number) Acknowledgment number: 157 (relative ack number) Header Length: 32 bytes Flags: 0x011 (FIN, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...1 = Fin: Set [Expert Info (Chat/Sequence): Connection finish (FIN)] [Connection finish (FIN)] [Severity level: Chat] [Group: Sequence] [TCP Flags: ·······A···F] Window size value: 463 [Calculated window size: 29632] [Window size scaling factor: 64] Checksum: 0x0ba0 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) Timestamps: TSval 1920919019, TSecr 1963872614 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 1920919019 Timestamp echo reply: 1963872614 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 8] [The RTT to ACK the segment was: 0.092876000 seconds] [iRTT: 0.092365000 seconds] Frame 10: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Encapsulation type: Ethernet (1) Arrival Time: Jun 14, 2017 15:46:22.048589000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1497447982.048589000 seconds [Time delta from previous captured frame: 0.000036000 seconds] [Time delta from previous displayed frame: 0.000036000 seconds] [Time since reference or first frame: 0.280053000 seconds] Frame Number: 10 Frame Length: 86 bytes (688 bits) Capture Length: 86 bytes (688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp] Ethernet II, Src: Xensourc_a9:04:1a (00:16:3e:a9:04:1a), Dst: Cisco_a0:02:83 (00:05:73:a0:02:83) Destination: Cisco_a0:02:83 (00:05:73:a0:02:83) Address: Cisco_a0:02:83 (00:05:73:a0:02:83) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Xensourc_a9:04:1a (00:16:3e:a9:04:1a) Address: Xensourc_a9:04:1a (00:16:3e:a9:04:1a) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2001:4b98:dc2:43:216:3eff:fea9:41a, Dst: 2605:4500:2:245b::42 0110 .... = Version: 6 .... 0000 0000 .... .... .... .... .... = Traffic class: 0x00 (DSCP: CS0, ECN: Not-ECT) .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... .... .... 0000 0000 0000 0000 0000 = Flow label: 0x00000 Payload length: 32 Next header: TCP (6) Hop limit: 64 Source: 2001:4b98:dc2:43:216:3eff:fea9:41a [Source SA MAC: Xensourc_a9:04:1a (00:16:3e:a9:04:1a)] Destination: 2605:4500:2:245b::42 [Source GeoIP: France] [Source GeoIP Country: France] [Destination GeoIP: United States] [Destination GeoIP Country: United States] Transmission Control Protocol, Src Port: 37703 (37703), Dst Port: http (80), Seq: 157, Ack: 511, Len: 0 Source Port: 37703 (37703) Destination Port: http (80) [Stream index: 0] [TCP Segment Len: 0] Sequence number: 157 (relative sequence number) Acknowledgment number: 511 (relative ack number) Header Length: 32 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 234 [Calculated window size: 29952] [Window size scaling factor: 128] Checksum: 0x4d42 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) Timestamps: TSval 1963872638, TSecr 1920919019 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 1963872638 Timestamp echo reply: 1920919019 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 9] [The RTT to ACK the segment was: 0.000036000 seconds] [iRTT: 0.092365000 seconds]