Post-IPsec-process packet dump: Frame 1 (42 bytes on wire, 42 bytes captured) Arrival Time: Aug 25, 2003 21:38:44.803355000 Time delta from previous packet: 0.000000000 seconds Time relative to first packet: 0.000000000 seconds Frame Number: 1 Packet Length: 42 bytes Capture Length: 42 bytes Ethernet II, Src: 00:50:bf:94:c7:01, Dst: ff:ff:ff:ff:ff:ff Destination: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff) Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Type: ARP (0x0806) Address Resolution Protocol (request) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: request (0x0001) Sender MAC address: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Sender IP address: 10.8.8.2 (10.8.8.2) Target MAC address: 00:00:00:00:00:00 (00:00:00:00:00:00) Target IP address: 10.8.8.7 (10.8.8.7) 0000 ff ff ff ff ff ff 00 50 bf 94 c7 01 08 06 00 01 .......P........ 0010 08 00 06 04 00 01 00 50 bf 94 c7 01 0a 08 08 02 .......P........ 0020 00 00 00 00 00 00 0a 08 08 07 .......... Frame 2 (64 bytes on wire, 64 bytes captured) Arrival Time: Aug 25, 2003 21:38:44.803441000 Time delta from previous packet: 0.000086000 seconds Time relative to first packet: 0.000086000 seconds Frame Number: 2 Packet Length: 64 bytes Capture Length: 64 bytes Ethernet II, Src: 00:e0:29:2e:1e:5b, Dst: 00:50:bf:94:c7:01 Destination: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Source: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Type: ARP (0x0806) Trailer: 00000000000000000000000000000000... Address Resolution Protocol (reply) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: reply (0x0002) Sender MAC address: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Sender IP address: 10.8.8.7 (10.8.8.7) Target MAC address: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Target IP address: 10.8.8.2 (10.8.8.2) 0000 00 50 bf 94 c7 01 00 e0 29 2e 1e 5b 08 06 00 01 .P......)..[.... 0010 08 00 06 04 00 02 00 e0 29 2e 1e 5b 0a 08 08 07 ........)..[.... 0020 00 50 bf 94 c7 01 0a 08 08 02 00 00 00 00 00 00 .P.............. 0030 00 00 00 00 00 00 00 00 00 00 00 00 2f a1 7c f2 ............/.|. Frame 3 (62 bytes on wire, 62 bytes captured) Arrival Time: Aug 25, 2003 21:38:44.803462000 Time delta from previous packet: 0.000021000 seconds Time relative to first packet: 0.000107000 seconds Frame Number: 3 Packet Length: 62 bytes Capture Length: 62 bytes Ethernet II, Src: 00:50:bf:94:c7:01, Dst: 00:e0:29:2e:1e:5b Destination: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.2.2 (192.168.2.2), Dst Addr: 10.8.8.7 (10.8.8.7) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x7d5a (32090) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 126 Protocol: TCP (0x06) Header checksum: 0xaab4 (correct) Source: 192.168.2.2 (192.168.2.2) Destination: 10.8.8.7 (10.8.8.7) Transmission Control Protocol, Src Port: 1626 (1626), Dst Port: 80 (80), Seq: 2642505869, Ack: 0, Len: 0 Source port: 1626 (1626) Destination port: 80 (80) Sequence number: 2642505869 Header length: 28 bytes Flags: 0x0002 (SYN) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...0 .... = Acknowledgment: Not set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 16384 Checksum: 0x59ad (correct) Options: (8 bytes) Maximum segment size: 1460 bytes NOP NOP SACK permitted 0000 00 e0 29 2e 1e 5b 00 50 bf 94 c7 01 08 00 45 00 ..)..[.P......E. 0010 00 30 7d 5a 40 00 7e 06 aa b4 c0 a8 02 02 0a 08 .0}Z@.~......... 0020 08 07 06 5a 00 50 9d 81 70 8d 00 00 00 00 70 02 ...Z.P..p.....p. 0030 40 00 59 ad 00 00 02 04 05 b4 01 01 04 02 @.Y........... Frame 4 (64 bytes on wire, 64 bytes captured) Arrival Time: Aug 25, 2003 21:38:44.803620000 Time delta from previous packet: 0.000158000 seconds Time relative to first packet: 0.000265000 seconds Frame Number: 4 Packet Length: 64 bytes Capture Length: 64 bytes Ethernet II, Src: 00:e0:29:2e:1e:5b, Dst: 00:50:bf:94:c7:01 Destination: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Source: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Type: IP (0x0800) Trailer: 020430ABDE97 Internet Protocol, Src Addr: 10.8.8.7 (10.8.8.7), Dst Addr: 192.168.2.2 (192.168.2.2) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 44 Identification: 0x16c3 (5827) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x4f50 (correct) Source: 10.8.8.7 (10.8.8.7) Destination: 192.168.2.2 (192.168.2.2) Transmission Control Protocol, Src Port: 80 (80), Dst Port: 1626 (1626), Seq: 1848302314, Ack: 2642505870, Len: 0 Source port: 80 (80) Destination port: 1626 (1626) Sequence number: 1848302314 Acknowledgement number: 2642505870 Header length: 24 bytes Flags: 0x0012 (SYN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 57344 Checksum: 0x858d (correct) Options: (4 bytes) Maximum segment size: 1460 bytes 0000 00 50 bf 94 c7 01 00 e0 29 2e 1e 5b 08 00 45 00 .P......)..[..E. 0010 00 2c 16 c3 40 00 40 06 4f 50 0a 08 08 07 c0 a8 .,..@.@.OP...... 0020 02 02 00 50 06 5a 6e 2a da ea 9d 81 70 8e 60 12 ...P.Zn*....p.`. 0030 e0 00 85 8d 00 00 02 04 05 b4 02 04 30 ab de 97 ............0... Frame 5 (54 bytes on wire, 54 bytes captured) Arrival Time: Aug 25, 2003 21:38:45.326516000 Time delta from previous packet: 0.522896000 seconds Time relative to first packet: 0.523161000 seconds Frame Number: 5 Packet Length: 54 bytes Capture Length: 54 bytes Ethernet II, Src: 00:50:bf:94:c7:01, Dst: 00:e0:29:2e:1e:5b Destination: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.2.2 (192.168.2.2), Dst Addr: 10.8.8.7 (10.8.8.7) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x7d5c (32092) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 126 Protocol: TCP (0x06) Header checksum: 0xaaba (correct) Source: 192.168.2.2 (192.168.2.2) Destination: 10.8.8.7 (10.8.8.7) Transmission Control Protocol, Src Port: 1626 (1626), Dst Port: 80 (80), Seq: 2642505870, Ack: 1848302315, Len: 0 Source port: 1626 (1626) Destination port: 80 (80) Sequence number: 2642505870 Acknowledgement number: 1848302315 Header length: 20 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 17520 Checksum: 0x38db (correct) 0000 00 e0 29 2e 1e 5b 00 50 bf 94 c7 01 08 00 45 00 ..)..[.P......E. 0010 00 28 7d 5c 40 00 7e 06 aa ba c0 a8 02 02 0a 08 .(}\@.~......... 0020 08 07 06 5a 00 50 9d 81 70 8e 6e 2a da eb 50 10 ...Z.P..p.n*..P. 0030 44 70 38 db 00 00 Dp8... Frame 6 (406 bytes on wire, 406 bytes captured) Arrival Time: Aug 25, 2003 21:38:45.344848000 Time delta from previous packet: 0.018332000 seconds Time relative to first packet: 0.541493000 seconds Frame Number: 6 Packet Length: 406 bytes Capture Length: 406 bytes Ethernet II, Src: 00:50:bf:94:c7:01, Dst: 00:e0:29:2e:1e:5b Destination: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.2.2 (192.168.2.2), Dst Addr: 10.8.8.7 (10.8.8.7) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 392 Identification: 0x7d5d (32093) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 126 Protocol: TCP (0x06) Header checksum: 0xa959 (correct) Source: 192.168.2.2 (192.168.2.2) Destination: 10.8.8.7 (10.8.8.7) Transmission Control Protocol, Src Port: 1626 (1626), Dst Port: 80 (80), Seq: 2642505870, Ack: 1848302315, Len: 352 Source port: 1626 (1626) Destination port: 80 (80) Sequence number: 2642505870 Next sequence number: 2642506222 Acknowledgement number: 1848302315 Header length: 20 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 17520 Checksum: 0x956a (correct) Hypertext Transfer Protocol GET / HTTP/1.1\r\n Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-powerpoint, application/vnd.ms-excel, application/msword, application/x-shockwave-flash, */*\r\n Accept-Language: en-us\r\n Accept-Encoding: gzip, deflate\r\n User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)\r\n Host: 10.8.8.7\r\n Connection: Keep-Alive\r\n \r\n 0000 00 e0 29 2e 1e 5b 00 50 bf 94 c7 01 08 00 45 00 ..)..[.P......E. 0010 01 88 7d 5d 40 00 7e 06 a9 59 c0 a8 02 02 0a 08 ..}]@.~..Y...... 0020 08 07 06 5a 00 50 9d 81 70 8e 6e 2a da eb 50 18 ...Z.P..p.n*..P. 0030 44 70 95 6a 00 00 47 45 54 20 2f 20 48 54 54 50 Dp.j..GET / HTTP 0040 2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 69 6d /1.1..Accept: im 0050 61 67 65 2f 67 69 66 2c 20 69 6d 61 67 65 2f 78 age/gif, image/x 0060 2d 78 62 69 74 6d 61 70 2c 20 69 6d 61 67 65 2f -xbitmap, image/ 0070 6a 70 65 67 2c 20 69 6d 61 67 65 2f 70 6a 70 65 jpeg, image/pjpe 0080 67 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 g, application/v 0090 6e 64 2e 6d 73 2d 70 6f 77 65 72 70 6f 69 6e 74 nd.ms-powerpoint 00a0 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e , application/vn 00b0 64 2e 6d 73 2d 65 78 63 65 6c 2c 20 61 70 70 6c d.ms-excel, appl 00c0 69 63 61 74 69 6f 6e 2f 6d 73 77 6f 72 64 2c 20 ication/msword, 00d0 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 73 68 application/x-sh 00e0 6f 63 6b 77 61 76 65 2d 66 6c 61 73 68 2c 20 2a ockwave-flash, * 00f0 2f 2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 /*..Accept-Langu 0100 61 67 65 3a 20 65 6e 2d 75 73 0d 0a 41 63 63 65 age: en-us..Acce 0110 70 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 pt-Encoding: gzi 0120 70 2c 20 64 65 66 6c 61 74 65 0d 0a 55 73 65 72 p, deflate..User 0130 2d 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f -Agent: Mozilla/ 0140 34 2e 30 20 28 63 6f 6d 70 61 74 69 62 6c 65 3b 4.0 (compatible; 0150 20 4d 53 49 45 20 35 2e 35 3b 20 57 69 6e 64 6f MSIE 5.5; Windo 0160 77 73 20 4e 54 20 35 2e 30 29 0d 0a 48 6f 73 74 ws NT 5.0)..Host 0170 3a 20 31 30 2e 38 2e 38 2e 37 0d 0a 43 6f 6e 6e : 10.8.8.7..Conn 0180 65 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c 69 ection: Keep-Ali 0190 76 65 0d 0a 0d 0a ve.... Frame 7 (886 bytes on wire, 886 bytes captured) Arrival Time: Aug 25, 2003 21:38:45.373625000 Time delta from previous packet: 0.028777000 seconds Time relative to first packet: 0.570270000 seconds Frame Number: 7 Packet Length: 886 bytes Capture Length: 886 bytes Ethernet II, Src: 00:e0:29:2e:1e:5b, Dst: 00:50:bf:94:c7:01 Destination: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Source: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Type: IP (0x0800) Trailer: 8A28ED1B Internet Protocol, Src Addr: 10.8.8.7 (10.8.8.7), Dst Addr: 192.168.2.2 (192.168.2.2) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 868 Identification: 0x16c4 (5828) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x4c17 (correct) Source: 10.8.8.7 (10.8.8.7) Destination: 192.168.2.2 (192.168.2.2) Transmission Control Protocol, Src Port: 80 (80), Dst Port: 1626 (1626), Seq: 1848302315, Ack: 2642506222, Len: 828 Source port: 80 (80) Destination port: 1626 (1626) Sequence number: 1848302315 Next sequence number: 1848303143 Acknowledgement number: 2642506222 Header length: 20 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 58400 Checksum: 0x8b7f (correct) Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n Date: Tue, 26 Aug 2003 03:53:58 GMT\r\n Server: Apache/2.0.46 (Unix)\r\n Keep-Alive: timeout=15, max=100\r\n Connection: Keep-Alive\r\n Transfer-Encoding: chunked\r\n Content-Type: text/html\r\n \r\n Data (632 bytes) 0000 00 50 bf 94 c7 01 00 e0 29 2e 1e 5b 08 00 45 00 .P......)..[..E. 0010 03 64 16 c4 40 00 40 06 4c 17 0a 08 08 07 c0 a8 .d..@.@.L....... 0020 02 02 00 50 06 5a 6e 2a da eb 9d 81 71 ee 50 18 ...P.Zn*....q.P. 0030 e4 20 8b 7f 00 00 48 54 54 50 2f 31 2e 31 20 32 . ....HTTP/1.1 2 0040 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 00 OK..Date: Tue 0050 2c 20 32 36 20 41 75 67 20 32 30 30 33 20 30 33 , 26 Aug 2003 03 0060 3a 35 33 3a 35 38 20 47 4d 54 0d 0a 53 65 72 76 :53:58 GMT..Serv 0070 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 30 2e 34 er: Apache/2.0.4 0080 36 20 28 55 6e 69 78 29 0d 0a 4b 65 65 70 2d 41 6 (Unix)..Keep-A 0090 6c 69 76 65 3a 20 74 69 6d 65 6f 75 74 3d 31 35 live: timeout=15 00a0 2c 20 6d 61 78 3d 31 30 30 0d 0a 43 6f 6e 6e 65 , max=100..Conne 00b0 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c 69 76 ction: Keep-Aliv 00c0 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f e..Transfer-Enco 00d0 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 ding: chunked..C 00e0 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 ontent-Type: tex 00f0 74 2f 68 74 6d 6c 0d 0a 0d 0a 32 37 31 0d 0a 3c t/html....271..< 0100 68 74 6d 6c 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 3e html>.
.0110 0a 43 6f 6e 67 72 61 74 75 6c 61 74 69 6f 6e 73 .Congratulations 0120 2e 20 59 6f 75 20 67 6f 74 20 68 65 72 65 20 76 . You got here v 0130 69 61 20 31 30 2e 38 2e 38 2e 32 21 20 54 68 69 ia 10.8.8.2! Thi 0140 73 20 6d 65 61 6e 73 20 74 68 61 74 0a 79 6f 75 s means that.you 0150 20 77 65 6e 74 20 74 68 72 6f 75 67 68 20 74 68 went through th 0160 65 20 74 65 73 74 2d 6b 61 6d 65 20 49 50 73 65 e test-kame IPse 0170 63 20 67 61 74 65 77 61 79 2e 0a 3c 70 3e 0a 49 c gateway..
.I 0180 66 20 79 6f 75 20 68 61 76 65 20 6a 75 73 74 20 f you have just 0190 63 6f 6d 70 6c 65 74 65 64 20 79 6f 75 72 20 74 completed your t 01a0 65 73 74 20 66 6f 72 20 61 20 6c 6f 67 6f 2c 20 est for a logo, 01b0 70 6c 65 61 73 65 0a 73 65 6e 64 20 74 68 65 20 please.send the 01c0 66 6f 6c 6c 6f 77 69 6e 67 20 69 6e 66 6f 72 6d following inform 01d0 61 74 69 6f 6e 20 74 6f 0a 3c 61 20 68 72 65 66 ation to. 0200 70 61 75 6c 2e 68 6f 66 66 6d 61 6e 40 76 70 6e paul.hoffman@vpn 0210 63 2e 6f 72 67 3c 2f 61 3e 3a 0a 3c 75 6c 3e 0a c.org:.