Post-IPsec-process packet dump: 22:54:25.386044 (authentic,confidential): SPI 0xdd43e566: 193.94.194.98 > 165.227.249.8: 10.0.23.251.42169 > 10.8.8.3.80: S [tcp sum ok] 3639792162:3639792162(0) win 5840 (DF) (ttl 63, id 54733) (DF) (ttl 219, id 68) 4500 0050 0044 4000 db04 7cb8 c15e c262 a5e3 f908 4500 003c d5cd 4000 3f06 31e9 0a00 17fb 0a08 0803 a4b9 0050 d8f2 d222 0000 0000 a002 16d0 9865 0000 0204 05b4 0402 080a 0cbe 07ef 0000 0000 0103 0300 22:54:25.387144 (authentic,confidential): SPI 0x7d425738: 165.227.249.8 > 193.94.194.98: 10.8.8.3.80 > 10.0.23.251.42169: S [tcp sum ok] 1957987232:1957987232(0) ack 3639792163 win 16384 (ttl 63, id 2271) (ttl 64, id 11696, bad cksum 0!) 4500 0050 2db0 0000 4004 0000 a5e3 f908 c15e c262 4500 003c 08df 0000 3f06 3ed8 0a08 0803 0a00 17fb 0050 a4b9 74b4 83a0 d8f2 d223 a012 4000 9625 0000 0204 05b4 0103 0300 0101 080a 0067 e343 0cbe 07ef 22:54:25.934259 (authentic,confidential): SPI 0xdd43e566: 193.94.194.98 > 165.227.249.8: 10.0.23.251.42169 > 10.8.8.3.80: . [tcp sum ok] ack 1 win 5840 (DF) (ttl 63, id 54735) (DF) (ttl 219, id 69) 4500 0048 0045 4000 db04 7cbf c15e c262 a5e3 f908 4500 0034 d5cf 4000 3f06 31ef 0a00 17fb 0a08 0803 a4b9 0050 d8f2 d223 74b4 83a1 8010 16d0 e944 0000 0101 080a 0cbe 09c4 0067 e343 22:54:25.971535 (authentic,confidential): SPI 0xdd43e566: 193.94.194.98 > 165.227.249.8: 10.0.23.251.42169 > 10.8.8.3.80: P [tcp sum ok] 1:520(519) ack 1 win 5840 (DF) (ttl 63, id 54736) (DF) (ttl 219, id 70) 4500 024f 0046 4000 db04 7ab7 c15e c262 a5e3 f908 4500 023b d5d0 4000 3f06 2fe7 0a00 17fb 0a08 0803 a4b9 0050 d8f2 d223 74b4 83a1 8018 16d0 d04e 0000 0101 080a 0cbe 09c4 0067 e343 4745 5420 2f20 4854 5450 2f31 2e31 0d0a 486f 7374 3a20 3130 2e38 2e38 2e33 0d0a 5573 6572 2d41 6765 6e74 3a20 4d6f 7a69 6c6c 612f 352e 3020 2858 3131 3b20 553b 204c 696e 7578 2069 3638 363b 2065 6e2d 5553 3b20 7276 3a31 2e31 2920 4765 636b 6f2f 3230 3032 3038 3236 0d0a 4163 6365 7074 3a20 7465 7874 2f78 6d6c 2c61 7070 6c69 6361 7469 6f6e 2f78 6d6c 2c61 7070 6c69 6361 7469 6f6e 2f78 6874 6d6c 2b78 6d6c 2c74 6578 742f 6874 6d6c 3b71 3d30 2e39 2c74 6578 742f 706c 6169 6e3b 713d 302e 382c 7669 6465 6f2f 782d 6d6e 672c 696d 6167 652f 706e 672c 696d 6167 652f 6a70 6567 2c69 6d61 6765 2f67 6966 3b71 3d30 2e32 2c74 6578 742f 6373 732c 2a2f 2a3b 713d 302e 310d 0a41 6363 6570 742d 4c61 6e67 7561 6765 3a20 656e 2d75 732c 2065 6e3b 713d 302e 3530 0d0a 4163 6365 7074 2d45 6e63 6f64 696e 673a 2067 7a69 702c 2064 6566 6c61 7465 2c20 636f 6d70 7265 7373 3b71 3d30 2e39 0d0a 4163 6365 7074 2d43 6861 7273 6574 3a20 4953 4f2d 3838 3539 2d31 2c20 7574 662d 383b 713d 302e 3636 2c20 2a3b 713d 302e 3636 0d0a 4b65 6570 2d41 6c69 7665 3a20 3330 300d 0a43 6f6e 6e65 6374 696f 6e3a 206b 6565 702d 616c 6976 650d 0a49 662d 4d6f 6469 6669 6564 2d53 696e 6365 3a20 4d6f 6e2c 2031 3920 4a75 6e20 3230 3030 2032 323a 3539 3a33 3120 474d 540d 0a43 6163 6865 2d43 6f6e 7472 6f6c 3a20 6d61 782d 6167 653d 300d 0a0d 0a 22:54:26.006063 (authentic,confidential): SPI 0x7d425738: 165.227.249.8 > 193.94.194.98: 10.8.8.3.80 > 10.0.23.251.42169: P [tcp sum ok] 1:199(198) ack 520 win 17520 (ttl 63, id 2272) (ttl 64, id 27619, bad cksum 0!) 4500 010e 6be3 0000 4004 0000 a5e3 f908 c15e c262 4500 00fa 08e0 0000 3f06 3e19 0a08 0803 0a00 17fb 0050 a4b9 74b4 83a1 d8f2 d42a 8018 4470 b057 0000 0101 080a 0067 e345 0cbe 09c4 4854 5450 2f31 2e31 2033 3034 204e 6f74 204d 6f64 6966 6965 640d 0a53 6572 7665 723a 2057 4e2f 322e 322e 390d 0a44 6174 653a 2054 7565 2c20 3033 2053 6570 2032 3030 3220 3035 3a35 363a 3037 2047 4d54 0d0a 5072 6167 6d61 3a20 6e6f 2d63 6163 6865 0d0a 4361 6368 652d 636f 6e74 726f 6c3a 206e 6f2d 6361 6368 650d 0a4c 6173 742d 4d6f 6469 6669 6564 3a20 4d6f 6e2c 2031 3920 4a75 6e20 3230 3030 2032 323a 3539 3a33 3120 474d 540d 0a43 6f6e 7465 6e74 2d74 7970 653a 2074 6578 742f 6874 6d6c 0d0a 0d0a 22:54:26.654882 (authentic,confidential): SPI 0xdd43e566: 193.94.194.98 > 165.227.249.8: 10.0.23.251.42169 > 10.8.8.3.80: . [tcp sum ok] ack 199 win 6432 (DF) (ttl 63, id 54737) (DF) (ttl 219, id 71) 4500 0048 0047 4000 db04 7cbd c15e c262 a5e3 f908 4500 0034 d5d1 4000 3f06 31ed 0a00 17fb 0a08 0803 a4b9 0050 d8f2 d42a 74b4 8467 8010 1920 e3dd 0000 0101 080a 0cbe 0a0c 0067 e345 22:54:35.997612 (authentic,confidential): SPI 0x7d425738: 165.227.249.8 > 193.94.194.98: 10.8.8.3.80 > 10.0.23.251.42169: F [tcp sum ok] 199:199(0) ack 520 win 17520 (ttl 63, id 2273) (ttl 64, id 16466, bad cksum 0!) 4500 0048 4052 0000 4004 0000 a5e3 f908 c15e c262 4500 0034 08e1 0000 3f06 3ede 0a08 0803 0a00 17fb 0050 a4b9 74b4 8467 d8f2 d42a 8011 4470 b8c0 0000 0101 080a 0067 e359 0cbe 09c4 22:54:36.608465 (authentic,confidential): SPI 0xdd43e566: 193.94.194.98 > 165.227.249.8: 10.0.23.251.42169 > 10.8.8.3.80: . [tcp sum ok] ack 200 win 6432 (DF) (ttl 63, id 54738) (DF) (ttl 219, id 72) 4500 0048 0048 4000 db04 7cbc c15e c262 a5e3 f908 4500 0034 d5d2 4000 3f06 31ec 0a00 17fb 0a08 0803 a4b9 0050 d8f2 d42a 74b4 8468 8010 1920 dfe4 0000 0101 080a 0cbe 0df0 0067 e359 22:54:40.979709 (authentic,confidential): SPI 0xdd43e566: 193.94.194.98 > 165.227.249.8: 10.0.23.251.42169 > 10.8.8.3.80: F [tcp sum ok] 520:520(0) ack 200 win 6432 (DF) (ttl 63, id 54739) (DF) (ttl 219, id 73) 4500 0048 0049 4000 db04 7cbb c15e c262 a5e3 f908 4500 0034 d5d3 4000 3f06 31eb 0a00 17fb 0a08 0803 a4b9 0050 d8f2 d42a 74b4 8468 8011 1920 de2e 0000 0101 080a 0cbe 0fa5 0067 e359 22:54:40.980752 (authentic,confidential): SPI 0x7d425738: 165.227.249.8 > 193.94.194.98: 10.8.8.3.80 > 10.0.23.251.42169: . [tcp sum ok] ack 521 win 17520 (ttl 63, id 2274) (ttl 64, id 23341, bad cksum 0!) 4500 0048 5b2d 0000 4004 0000 a5e3 f908 c15e c262 4500 0034 08e2 0000 3f06 3edd 0a08 0803 0a00 17fb 0050 a4b9 74b4 8468 d8f2 d42b 8010 4470 b2d4 0000 0101 080a 0067 e363 0cbe 0fa5