Post-IPsec-process packet dump: Frame 1 (42 bytes on wire, 42 bytes captured) Arrival Time: Sep 30, 2003 12:39:38.800706000 Time delta from previous packet: 0.000000000 seconds Time relative to first packet: 0.000000000 seconds Frame Number: 1 Packet Length: 42 bytes Capture Length: 42 bytes Ethernet II, Src: 00:50:bf:94:c7:01, Dst: ff:ff:ff:ff:ff:ff Destination: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff) Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Type: ARP (0x0806) Address Resolution Protocol (request) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: request (0x0001) Sender MAC address: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Sender IP address: 10.8.8.2 (10.8.8.2) Target MAC address: 00:00:00:00:00:00 (00:00:00:00:00:00) Target IP address: 10.8.8.7 (10.8.8.7) 0000 ff ff ff ff ff ff 00 50 bf 94 c7 01 08 06 00 01 .......P........ 0010 08 00 06 04 00 01 00 50 bf 94 c7 01 0a 08 08 02 .......P........ 0020 00 00 00 00 00 00 0a 08 08 07 .......... Frame 2 (64 bytes on wire, 64 bytes captured) Arrival Time: Sep 30, 2003 12:39:38.800789000 Time delta from previous packet: 0.000083000 seconds Time relative to first packet: 0.000083000 seconds Frame Number: 2 Packet Length: 64 bytes Capture Length: 64 bytes Ethernet II, Src: 00:e0:29:2e:1e:5b, Dst: 00:50:bf:94:c7:01 Destination: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Source: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Type: ARP (0x0806) Trailer: 00000000000000000000000000000000... Address Resolution Protocol (reply) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: reply (0x0002) Sender MAC address: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Sender IP address: 10.8.8.7 (10.8.8.7) Target MAC address: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Target IP address: 10.8.8.2 (10.8.8.2) 0000 00 50 bf 94 c7 01 00 e0 29 2e 1e 5b 08 06 00 01 .P......)..[.... 0010 08 00 06 04 00 02 00 e0 29 2e 1e 5b 0a 08 08 07 ........)..[.... 0020 00 50 bf 94 c7 01 0a 08 08 02 00 00 00 00 00 00 .P.............. 0030 00 00 00 00 00 00 00 00 00 00 00 00 2f a1 7c f2 ............/.|. Frame 3 (62 bytes on wire, 62 bytes captured) Arrival Time: Sep 30, 2003 12:39:38.800813000 Time delta from previous packet: 0.000024000 seconds Time relative to first packet: 0.000107000 seconds Frame Number: 3 Packet Length: 62 bytes Capture Length: 62 bytes Ethernet II, Src: 00:50:bf:94:c7:01, Dst: 00:e0:29:2e:1e:5b Destination: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Type: IP (0x0800) Internet Protocol, Src Addr: 172.30.22.1 (172.30.22.1), Dst Addr: 10.8.8.7 (10.8.8.7) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x00e1 (225) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 126 Protocol: TCP (0x06) Header checksum: 0x27b9 (correct) Source: 172.30.22.1 (172.30.22.1) Destination: 10.8.8.7 (10.8.8.7) Transmission Control Protocol, Src Port: 1043 (1043), Dst Port: 80 (80), Seq: 2705214127, Ack: 0, Len: 0 Source port: 1043 (1043) Destination port: 80 (80) Sequence number: 2705214127 Header length: 28 bytes Flags: 0x0002 (SYN) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...0 .... = Acknowledgment: Not set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 16384 Checksum: 0x7ed6 (correct) Options: (8 bytes) Maximum segment size: 1406 bytes NOP NOP SACK permitted 0000 00 e0 29 2e 1e 5b 00 50 bf 94 c7 01 08 00 45 00 ..)..[.P......E. 0010 00 30 00 e1 40 00 7e 06 27 b9 ac 1e 16 01 0a 08 .0..@.~.'....... 0020 08 07 04 13 00 50 a1 3e 4a af 00 00 00 00 70 02 .....P.>J.....p. 0030 40 00 7e d6 00 00 02 04 05 7e 01 01 04 02 @.~......~.... Frame 4 (64 bytes on wire, 64 bytes captured) Arrival Time: Sep 30, 2003 12:39:38.800968000 Time delta from previous packet: 0.000155000 seconds Time relative to first packet: 0.000262000 seconds Frame Number: 4 Packet Length: 64 bytes Capture Length: 64 bytes Ethernet II, Src: 00:e0:29:2e:1e:5b, Dst: 00:50:bf:94:c7:01 Destination: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Source: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Type: IP (0x0800) Trailer: 0204D029A39B Internet Protocol, Src Addr: 10.8.8.7 (10.8.8.7), Dst Addr: 172.30.22.1 (172.30.22.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 44 Identification: 0x22ab (8875) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x43f3 (correct) Source: 10.8.8.7 (10.8.8.7) Destination: 172.30.22.1 (172.30.22.1) Transmission Control Protocol, Src Port: 80 (80), Dst Port: 1043 (1043), Seq: 2588128815, Ack: 2705214128, Len: 0 Source port: 80 (80) Destination port: 1043 (1043) Sequence number: 2588128815 Acknowledgement number: 2705214128 Header length: 24 bytes Flags: 0x0012 (SYN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 57344 Checksum: 0xa322 (correct) Options: (4 bytes) Maximum segment size: 1460 bytes 0000 00 50 bf 94 c7 01 00 e0 29 2e 1e 5b 08 00 45 00 .P......)..[..E. 0010 00 2c 22 ab 40 00 40 06 43 f3 0a 08 08 07 ac 1e .,".@.@.C....... 0020 16 01 00 50 04 13 9a 43 b6 2f a1 3e 4a b0 60 12 ...P...C./.>J.`. 0030 e0 00 a3 22 00 00 02 04 05 b4 02 04 d0 29 a3 9b ...".........).. Frame 5 (54 bytes on wire, 54 bytes captured) Arrival Time: Sep 30, 2003 12:39:38.908398000 Time delta from previous packet: 0.107430000 seconds Time relative to first packet: 0.107692000 seconds Frame Number: 5 Packet Length: 54 bytes Capture Length: 54 bytes Ethernet II, Src: 00:50:bf:94:c7:01, Dst: 00:e0:29:2e:1e:5b Destination: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Type: IP (0x0800) Internet Protocol, Src Addr: 172.30.22.1 (172.30.22.1), Dst Addr: 10.8.8.7 (10.8.8.7) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x00e3 (227) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 125 Protocol: TCP (0x06) Header checksum: 0x28bf (correct) Source: 172.30.22.1 (172.30.22.1) Destination: 10.8.8.7 (10.8.8.7) Transmission Control Protocol, Src Port: 1043 (1043), Dst Port: 80 (80), Seq: 2705214128, Ack: 2588128816, Len: 0 Source port: 1043 (1043) Destination port: 80 (80) Sequence number: 2705214128 Acknowledgement number: 2588128816 Header length: 20 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 16872 Checksum: 0x58f8 (correct) 0000 00 e0 29 2e 1e 5b 00 50 bf 94 c7 01 08 00 45 00 ..)..[.P......E. 0010 00 28 00 e3 40 00 7d 06 28 bf ac 1e 16 01 0a 08 .(..@.}.(....... 0020 08 07 04 13 00 50 a1 3e 4a b0 9a 43 b6 30 50 10 .....P.>J..C.0P. 0030 41 e8 58 f8 00 00 A.X... Frame 6 (407 bytes on wire, 407 bytes captured) Arrival Time: Sep 30, 2003 12:39:38.914006000 Time delta from previous packet: 0.005608000 seconds Time relative to first packet: 0.113300000 seconds Frame Number: 6 Packet Length: 407 bytes Capture Length: 407 bytes Ethernet II, Src: 00:50:bf:94:c7:01, Dst: 00:e0:29:2e:1e:5b Destination: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Type: IP (0x0800) Internet Protocol, Src Addr: 172.30.22.1 (172.30.22.1), Dst Addr: 10.8.8.7 (10.8.8.7) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 393 Identification: 0x00e4 (228) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 125 Protocol: TCP (0x06) Header checksum: 0x275d (correct) Source: 172.30.22.1 (172.30.22.1) Destination: 10.8.8.7 (10.8.8.7) Transmission Control Protocol, Src Port: 1043 (1043), Dst Port: 80 (80), Seq: 2705214128, Ack: 2588128816, Len: 353 Source port: 1043 (1043) Destination port: 80 (80) Sequence number: 2705214128 Next sequence number: 2705214481 Acknowledgement number: 2588128816 Header length: 20 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 16872 Checksum: 0x44cb (correct) Hypertext Transfer Protocol GET / HTTP/1.1\r\n Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-shockwave-flash, */*\r\n Accept-Language: en-us\r\n Accept-Encoding: gzip, deflate\r\n User-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)\r\n Host: 10.8.8.7\r\n Connection: Keep-Alive\r\n \r\n 0000 00 e0 29 2e 1e 5b 00 50 bf 94 c7 01 08 00 45 00 ..)..[.P......E. 0010 01 89 00 e4 40 00 7d 06 27 5d ac 1e 16 01 0a 08 ....@.}.']...... 0020 08 07 04 13 00 50 a1 3e 4a b0 9a 43 b6 30 50 18 .....P.>J..C.0P. 0030 41 e8 44 cb 00 00 47 45 54 20 2f 20 48 54 54 50 A.D...GET / HTTP 0040 2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 69 6d /1.1..Accept: im 0050 61 67 65 2f 67 69 66 2c 20 69 6d 61 67 65 2f 78 age/gif, image/x 0060 2d 78 62 69 74 6d 61 70 2c 20 69 6d 61 67 65 2f -xbitmap, image/ 0070 6a 70 65 67 2c 20 69 6d 61 67 65 2f 70 6a 70 65 jpeg, image/pjpe 0080 67 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 g, application/v 0090 6e 64 2e 6d 73 2d 65 78 63 65 6c 2c 20 61 70 70 nd.ms-excel, app 00a0 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 6d 73 2d lication/vnd.ms- 00b0 70 6f 77 65 72 70 6f 69 6e 74 2c 20 61 70 70 6c powerpoint, appl 00c0 69 63 61 74 69 6f 6e 2f 6d 73 77 6f 72 64 2c 20 ication/msword, 00d0 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 73 68 application/x-sh 00e0 6f 63 6b 77 61 76 65 2d 66 6c 61 73 68 2c 20 2a ockwave-flash, * 00f0 2f 2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 /*..Accept-Langu 0100 61 67 65 3a 20 65 6e 2d 75 73 0d 0a 41 63 63 65 age: en-us..Acce 0110 70 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 pt-Encoding: gzi 0120 70 2c 20 64 65 66 6c 61 74 65 0d 0a 55 73 65 72 p, deflate..User 0130 2d 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f -Agent: Mozilla/ 0140 34 2e 30 20 28 63 6f 6d 70 61 74 69 62 6c 65 3b 4.0 (compatible; 0150 20 4d 53 49 45 20 35 2e 30 31 3b 20 57 69 6e 64 MSIE 5.01; Wind 0160 6f 77 73 20 4e 54 20 35 2e 30 29 0d 0a 48 6f 73 ows NT 5.0)..Hos 0170 74 3a 20 31 30 2e 38 2e 38 2e 37 0d 0a 43 6f 6e t: 10.8.8.7..Con 0180 6e 65 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c nection: Keep-Al 0190 69 76 65 0d 0a 0d 0a ive.... Frame 7 (886 bytes on wire, 886 bytes captured) Arrival Time: Sep 30, 2003 12:39:38.975169000 Time delta from previous packet: 0.061163000 seconds Time relative to first packet: 0.174463000 seconds Frame Number: 7 Packet Length: 886 bytes Capture Length: 886 bytes Ethernet II, Src: 00:e0:29:2e:1e:5b, Dst: 00:50:bf:94:c7:01 Destination: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Source: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Type: IP (0x0800) Trailer: FD7EB77B Internet Protocol, Src Addr: 10.8.8.7 (10.8.8.7), Dst Addr: 172.30.22.1 (172.30.22.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 868 Identification: 0x22ac (8876) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x40ba (correct) Source: 10.8.8.7 (10.8.8.7) Destination: 172.30.22.1 (172.30.22.1) Transmission Control Protocol, Src Port: 80 (80), Dst Port: 1043 (1043), Seq: 2588128816, Ack: 2705214481, Len: 828 Source port: 80 (80) Destination port: 1043 (1043) Sequence number: 2588128816 Next sequence number: 2588129644 Acknowledgement number: 2705214481 Header length: 20 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 57646 Checksum: 0xc3dd (correct) Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n Date: Tue, 30 Sep 2003 18:58:56 GMT\r\n Server: Apache/2.0.46 (Unix)\r\n Keep-Alive: timeout=15, max=100\r\n Connection: Keep-Alive\r\n Transfer-Encoding: chunked\r\n Content-Type: text/html\r\n \r\n Data (632 bytes) 0000 00 50 bf 94 c7 01 00 e0 29 2e 1e 5b 08 00 45 00 .P......)..[..E. 0010 03 64 22 ac 40 00 40 06 40 ba 0a 08 08 07 ac 1e .d".@.@.@....... 0020 16 01 00 50 04 13 9a 43 b6 30 a1 3e 4c 11 50 18 ...P...C.0.>L.P. 0030 e1 2e c3 dd 00 00 48 54 54 50 2f 31 2e 31 20 32 ......HTTP/1.1 2 0040 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 00 OK..Date: Tue 0050 2c 20 33 30 20 53 65 70 20 32 30 30 33 20 31 38 , 30 Sep 2003 18 0060 3a 35 38 3a 35 36 20 47 4d 54 0d 0a 53 65 72 76 :58:56 GMT..Serv 0070 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 30 2e 34 er: Apache/2.0.4 0080 36 20 28 55 6e 69 78 29 0d 0a 4b 65 65 70 2d 41 6 (Unix)..Keep-A 0090 6c 69 76 65 3a 20 74 69 6d 65 6f 75 74 3d 31 35 live: timeout=15 00a0 2c 20 6d 61 78 3d 31 30 30 0d 0a 43 6f 6e 6e 65 , max=100..Conne 00b0 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c 69 76 ction: Keep-Aliv 00c0 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f e..Transfer-Enco 00d0 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 ding: chunked..C 00e0 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 ontent-Type: tex 00f0 74 2f 68 74 6d 6c 0d 0a 0d 0a 32 37 31 0d 0a 3c t/html....271..< 0100 68 74 6d 6c 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 3e html>..

0110 0a 43 6f 6e 67 72 61 74 75 6c 61 74 69 6f 6e 73 .Congratulations 0120 2e 20 59 6f 75 20 67 6f 74 20 68 65 72 65 20 76 . You got here v 0130 69 61 20 31 30 2e 38 2e 38 2e 32 21 20 54 68 69 ia 10.8.8.2! Thi 0140 73 20 6d 65 61 6e 73 20 74 68 61 74 0a 79 6f 75 s means that.you 0150 20 77 65 6e 74 20 74 68 72 6f 75 67 68 20 74 68 went through th 0160 65 20 74 65 73 74 2d 6b 61 6d 65 20 49 50 73 65 e test-kame IPse 0170 63 20 67 61 74 65 77 61 79 2e 0a 3c 70 3e 0a 49 c gateway..

.I 0180 66 20 79 6f 75 20 68 61 76 65 20 6a 75 73 74 20 f you have just 0190 63 6f 6d 70 6c 65 74 65 64 20 79 6f 75 72 20 74 completed your t 01a0 65 73 74 20 66 6f 72 20 61 20 6c 6f 67 6f 2c 20 est for a logo, 01b0 70 6c 65 61 73 65 0a 73 65 6e 64 20 74 68 65 20 please.send the 01c0 66 6f 6c 6c 6f 77 69 6e 67 20 69 6e 66 6f 72 6d following inform 01d0 61 74 69 6f 6e 20 74 6f 0a 3c 61 20 68 72 65 66 ation to. 0200 70 61 75 6c 2e 68 6f 66 66 6d 61 6e 40 76 70 6e paul.hoffman@vpn 0210 63 2e 6f 72 67 3c 2f 61 3e 3a 0a 3c 75 6c 3e 0a c.org:.

. 0360 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a .. 0370 0d 0a fd 7e b7 7b ...~.{ Frame 8 (64 bytes on wire, 64 bytes captured) Arrival Time: Sep 30, 2003 12:39:38.975795000 Time delta from previous packet: 0.000626000 seconds Time relative to first packet: 0.175089000 seconds Frame Number: 8 Packet Length: 64 bytes Capture Length: 64 bytes Ethernet II, Src: 00:e0:29:2e:1e:5b, Dst: 00:50:bf:94:c7:01 Destination: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Source: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Type: IP (0x0800) Trailer: 004E830CE0 Internet Protocol, Src Addr: 10.8.8.7 (10.8.8.7), Dst Addr: 172.30.22.1 (172.30.22.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 45 Identification: 0x22ad (8877) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x43f0 (correct) Source: 10.8.8.7 (10.8.8.7) Destination: 172.30.22.1 (172.30.22.1) Transmission Control Protocol, Src Port: 80 (80), Dst Port: 1043 (1043), Seq: 2588129644, Ack: 2705214481, Len: 5 Source port: 80 (80) Destination port: 1043 (1043) Sequence number: 2588129644 Next sequence number: 2588129649 Acknowledgement number: 2705214481 Header length: 20 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 57646 Checksum: 0x70ed (correct) Hypertext Transfer Protocol Data (5 bytes) 0000 00 50 bf 94 c7 01 00 e0 29 2e 1e 5b 08 00 45 00 .P......)..[..E. 0010 00 2d 22 ad 40 00 40 06 43 f0 0a 08 08 07 ac 1e .-".@.@.C....... 0020 16 01 00 50 04 13 9a 43 b9 6c a1 3e 4c 11 50 18 ...P...C.l.>L.P. 0030 e1 2e 70 ed 00 00 30 0d 0a 0d 0a 00 4e 83 0c e0 ..p...0.....N... Frame 9 (54 bytes on wire, 54 bytes captured) Arrival Time: Sep 30, 2003 12:39:39.138311000 Time delta from previous packet: 0.162516000 seconds Time relative to first packet: 0.337605000 seconds Frame Number: 9 Packet Length: 54 bytes Capture Length: 54 bytes Ethernet II, Src: 00:50:bf:94:c7:01, Dst: 00:e0:29:2e:1e:5b Destination: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Type: IP (0x0800) Internet Protocol, Src Addr: 172.30.22.1 (172.30.22.1), Dst Addr: 10.8.8.7 (10.8.8.7) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x00e6 (230) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 125 Protocol: TCP (0x06) Header checksum: 0x28bc (correct) Source: 172.30.22.1 (172.30.22.1) Destination: 10.8.8.7 (10.8.8.7) Transmission Control Protocol, Src Port: 1043 (1043), Dst Port: 80 (80), Seq: 2705214481, Ack: 2588129649, Len: 0 Source port: 1043 (1043) Destination port: 80 (80) Sequence number: 2705214481 Acknowledgement number: 2588129649 Header length: 20 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 16039 Checksum: 0x5797 (correct) 0000 00 e0 29 2e 1e 5b 00 50 bf 94 c7 01 08 00 45 00 ..)..[.P......E. 0010 00 28 00 e6 40 00 7d 06 28 bc ac 1e 16 01 0a 08 .(..@.}.(....... 0020 08 07 04 13 00 50 a1 3e 4c 11 9a 43 b9 71 50 10 .....P.>L..C.qP. 0030 3e a7 57 97 00 00 >.W... Frame 10 (64 bytes on wire, 64 bytes captured) Arrival Time: Sep 30, 2003 12:39:53.981205000 Time delta from previous packet: 14.842894000 seconds Time relative to first packet: 15.180499000 seconds Frame Number: 10 Packet Length: 64 bytes Capture Length: 64 bytes Ethernet II, Src: 00:e0:29:2e:1e:5b, Dst: 00:50:bf:94:c7:01 Destination: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Source: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Type: IP (0x0800) Trailer: B50E0000B50EF2867EDF Internet Protocol, Src Addr: 10.8.8.7 (10.8.8.7), Dst Addr: 172.30.22.1 (172.30.22.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x22ae (8878) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x43f4 (correct) Source: 10.8.8.7 (10.8.8.7) Destination: 172.30.22.1 (172.30.22.1) Transmission Control Protocol, Src Port: 80 (80), Dst Port: 1043 (1043), Seq: 2588129649, Ack: 2705214481, Len: 0 Source port: 80 (80) Destination port: 1043 (1043) Sequence number: 2588129649 Acknowledgement number: 2705214481 Header length: 20 bytes Flags: 0x0011 (FIN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...1 = Fin: Set Window size: 57646 Checksum: 0xb50e (correct) 0000 00 50 bf 94 c7 01 00 e0 29 2e 1e 5b 08 00 45 00 .P......)..[..E. 0010 00 28 22 ae 40 00 40 06 43 f4 0a 08 08 07 ac 1e .(".@.@.C....... 0020 16 01 00 50 04 13 9a 43 b9 71 a1 3e 4c 11 50 11 ...P...C.q.>L.P. 0030 e1 2e b5 0e 00 00 b5 0e 00 00 b5 0e f2 86 7e df ..............~. Frame 11 (54 bytes on wire, 54 bytes captured) Arrival Time: Sep 30, 2003 12:39:54.089197000 Time delta from previous packet: 0.107992000 seconds Time relative to first packet: 15.288491000 seconds Frame Number: 11 Packet Length: 54 bytes Capture Length: 54 bytes Ethernet II, Src: 00:50:bf:94:c7:01, Dst: 00:e0:29:2e:1e:5b Destination: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Type: IP (0x0800) Internet Protocol, Src Addr: 172.30.22.1 (172.30.22.1), Dst Addr: 10.8.8.7 (10.8.8.7) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x00e7 (231) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 125 Protocol: TCP (0x06) Header checksum: 0x28bb (correct) Source: 172.30.22.1 (172.30.22.1) Destination: 10.8.8.7 (10.8.8.7) Transmission Control Protocol, Src Port: 1043 (1043), Dst Port: 80 (80), Seq: 2705214481, Ack: 2588129650, Len: 0 Source port: 1043 (1043) Destination port: 80 (80) Sequence number: 2705214481 Acknowledgement number: 2588129650 Header length: 20 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 16039 Checksum: 0x5796 (correct) 0000 00 e0 29 2e 1e 5b 00 50 bf 94 c7 01 08 00 45 00 ..)..[.P......E. 0010 00 28 00 e7 40 00 7d 06 28 bb ac 1e 16 01 0a 08 .(..@.}.(....... 0020 08 07 04 13 00 50 a1 3e 4c 11 9a 43 b9 72 50 10 .....P.>L..C.rP. 0030 3e a7 57 96 00 00 >.W... Frame 12 (54 bytes on wire, 54 bytes captured) Arrival Time: Sep 30, 2003 12:39:54.138726000 Time delta from previous packet: 0.049529000 seconds Time relative to first packet: 15.338020000 seconds Frame Number: 12 Packet Length: 54 bytes Capture Length: 54 bytes Ethernet II, Src: 00:50:bf:94:c7:01, Dst: 00:e0:29:2e:1e:5b Destination: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Type: IP (0x0800) Internet Protocol, Src Addr: 172.30.22.1 (172.30.22.1), Dst Addr: 10.8.8.7 (10.8.8.7) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x00e8 (232) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 125 Protocol: TCP (0x06) Header checksum: 0x28ba (correct) Source: 172.30.22.1 (172.30.22.1) Destination: 10.8.8.7 (10.8.8.7) Transmission Control Protocol, Src Port: 1043 (1043), Dst Port: 80 (80), Seq: 2705214481, Ack: 2588129650, Len: 0 Source port: 1043 (1043) Destination port: 80 (80) Sequence number: 2705214481 Header length: 20 bytes Flags: 0x0004 (RST) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...0 .... = Acknowledgment: Not set .... 0... = Push: Not set .... .1.. = Reset: Set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 0 Checksum: 0x9649 (correct) 0000 00 e0 29 2e 1e 5b 00 50 bf 94 c7 01 08 00 45 00 ..)..[.P......E. 0010 00 28 00 e8 40 00 7d 06 28 ba ac 1e 16 01 0a 08 .(..@.}.(....... 0020 08 07 04 13 00 50 a1 3e 4c 11 9a 43 b9 72 50 04 .....P.>L..C.rP. 0030 00 00 96 49 00 00 ...I..