Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Jul 11, 2007 15:04:22.115998000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 166 bytes Capture Length: 166 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68) Destination: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68) Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x02e4 (740) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8a8 [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.141 (165.227.249.141) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0xf7fe [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xB7B93070F3F53859 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 0000 00 10 f3 0e 66 68 00 0c 29 ab 06 ab 08 00 45 00 ....fh..).....E. 0010 00 98 02 e4 00 00 80 11 f8 a8 a5 e3 f9 73 a5 e3 .............s.. 0020 f9 8d 01 f4 01 f4 00 84 f7 fe b7 b9 30 70 f3 f5 ............0p.. 0030 38 59 00 00 00 00 00 00 00 00 01 10 02 00 00 00 8Y.............. 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 ..D..-.......F.y 0090 dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 ..........>.in.c 00a0 81 b5 ec 42 7b 1f ...B{. Frame 2 (182 bytes on wire, 182 bytes captured) Arrival Time: Jul 11, 2007 15:04:22.116000000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.000002000 seconds Frame Number: 2 Packet Length: 182 bytes Capture Length: 182 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Source: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.141 (165.227.249.141), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 168 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb7c [correct] Good: True Bad : False Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 148 Checksum: 0x5f2a [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xB7B93070F3F53859 Responder cookie: 0xAD8F7D5487D0C433 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 140 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 16 Vendor ID: unknown vendor ID: 0x4F454766754A5B59657B4168 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 0000 00 0c 29 ab 06 ab 00 10 f3 0e 66 68 08 00 45 00 ..).......fh..E. 0010 00 a8 00 00 40 00 40 11 fb 7c a5 e3 f9 8d a5 e3 ....@.@..|...... 0020 f9 73 01 f4 01 f4 00 94 5f 2a b7 b9 30 70 f3 f5 .s......_*..0p.. 0030 38 59 ad 8f 7d 54 87 d0 c4 33 01 10 02 00 00 00 8Y..}T...3...... 0040 00 00 00 00 00 8c 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 10 4f 45 47 66 75 4a 5b 59 65 7b 41 68 0d 00 ..OEGfuJ[Ye{Ah.. 0090 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 00a0 01 00 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 ..........>.in.c 00b0 81 b5 ec 42 7b 1f ...B{. Frame 3 (346 bytes on wire, 346 bytes captured) Arrival Time: Jul 11, 2007 15:04:24.265230000 Time delta from previous packet: 2.149230000 seconds Time since reference or first frame: 2.149232000 seconds Frame Number: 3 Packet Length: 346 bytes Capture Length: 346 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68) Destination: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68) Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x02e5 (741) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf7f3 [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.141 (165.227.249.141) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0x8f45 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xB7B93070F3F53859 Responder cookie: 0xAD8F7D5487D0C433 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 304 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 24 Nonce Data NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 24 Hash of address and port: 6F26167A79461D2A0CC6FC23B59DD152BC8F63B6 NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: Vendor ID (13) Length: 24 Hash of address and port: 64C019665DB58FE771B090BC3FD06E2154F9E5CE Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 10 f3 0e 66 68 00 0c 29 ab 06 ab 08 00 45 00 ....fh..).....E. 0010 01 4c 02 e5 00 00 80 11 f7 f3 a5 e3 f9 73 a5 e3 .L...........s.. 0020 f9 8d 01 f4 01 f4 01 38 8f 45 b7 b9 30 70 f3 f5 .......8.E..0p.. 0030 38 59 ad 8f 7d 54 87 d0 c4 33 04 10 02 00 00 00 8Y..}T...3...... 0040 00 00 00 00 01 30 0a 00 00 84 67 53 b5 41 c6 7e .....0....gS.A.~ 0050 c8 7b 8d a3 a6 4b 72 7b ae 7e d8 c5 b8 0a 63 34 .{...Kr{.~....c4 0060 68 e5 89 aa 3e 7e 3f 7c 13 eb ba 8e 1a 4d 78 3b h...>~?|.....Mx; 0070 e6 16 65 0b 9f 38 f6 95 a0 d8 30 4e 70 39 9f 17 ..e..8....0Np9.. 0080 8f e5 39 0e 5b 46 c6 20 de 50 a2 08 b2 11 90 55 ..9.[F. .P.....U 0090 7b cc 4a 97 5d 1a 40 9c fe fb 8b c8 bc 2b 38 7d {.J.].@......+8} 00a0 b7 7b 61 f0 64 c4 46 e9 52 69 0b d1 5f f6 17 5c .{a.d.F.Ri.._..\ 00b0 1d 4d 06 21 c9 8e 0d cf a2 f5 88 72 fa 73 b0 ed .M.!.......r.s.. 00c0 da 7e 78 4d aa 9d d5 88 09 02 82 00 00 18 a8 3c .~xM...........< 00d0 8c 23 1e 87 68 06 88 0f 0e 1c d3 fd 07 73 6f 3d .#..h........so= 00e0 87 7b 82 00 00 18 6f 26 16 7a 79 46 1d 2a 0c c6 .{....o&.zyF.*.. 00f0 fc 23 b5 9d d1 52 bc 8f 63 b6 0d 00 00 18 64 c0 .#...R..c.....d. 0100 19 66 5d b5 8f e7 71 b0 90 bc 3f d0 6e 21 54 f9 .f]...q...?.n!T. 0110 e5 ce 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .....0G......... 0120 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0130 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0140 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0150 00 0c 09 00 26 89 df d6 b7 12 ....&..... Frame 4 (270 bytes on wire, 270 bytes captured) Arrival Time: Jul 11, 2007 15:04:24.286923000 Time delta from previous packet: 0.021693000 seconds Time since reference or first frame: 2.170925000 seconds Frame Number: 4 Packet Length: 270 bytes Capture Length: 270 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Source: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.141 (165.227.249.141), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb24 [correct] Good: True Bad : False Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x6ee5 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xB7B93070F3F53859 Responder cookie: 0xAD8F7D5487D0C433 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 20 Nonce Data NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 24 Hash of address and port: 64C019665DB58FE771B090BC3FD06E2154F9E5CE NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NONE (0) Length: 24 Hash of address and port: 6F26167A79461D2A0CC6FC23B59DD152BC8F63B6 0000 00 0c 29 ab 06 ab 00 10 f3 0e 66 68 08 00 45 00 ..).......fh..E. 0010 01 00 00 00 40 00 40 11 fb 24 a5 e3 f9 8d a5 e3 ....@.@..$...... 0020 f9 73 01 f4 01 f4 00 ec 6e e5 b7 b9 30 70 f3 f5 .s......n...0p.. 0030 38 59 ad 8f 7d 54 87 d0 c4 33 04 10 02 00 00 00 8Y..}T...3...... 0040 00 00 00 00 00 e4 0a 00 00 84 16 cc 59 fe ce d2 ............Y... 0050 c8 a5 d8 39 6c 52 72 5d 94 0c 9c b6 e8 9a d2 ed ...9lRr]........ 0060 93 9c 75 ff 84 7b 57 13 09 63 a9 11 45 bf 4f d4 ..u..{W..c..E.O. 0070 04 a6 8f f4 ff c9 a9 b3 d8 fd 5b 55 d1 30 e4 f5 ..........[U.0.. 0080 36 a3 e7 94 5f f2 be cd 65 15 c4 ac 91 79 19 88 6..._...e....y.. 0090 08 93 81 90 de b4 7b 3d 3c 6d e5 d4 6e 84 a3 ce ......{=..-b 0060 23 40 1c cd 51 18 #@..Q. Frame 10 (134 bytes on wire, 134 bytes captured) Arrival Time: Jul 11, 2007 15:04:32.442307000 Time delta from previous packet: 4.961590000 seconds Time since reference or first frame: 10.326309000 seconds Frame Number: 10 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68) Destination: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68) Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb8a [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.141 (165.227.249.141) Encapsulating Security Payload SPI: 0x753fbfbf Sequence: 1 Data (92 bytes) 0000 00 10 f3 0e 66 68 00 0c 29 ab 06 ab 08 00 45 00 ....fh..).....E. 0010 00 78 00 01 00 00 80 32 fb 8a a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 8d 75 3f bf bf 00 00 00 01 83 5d 3a 7b c7 3f ..u?.......]:{.? 0030 02 ad 62 ba 63 46 7a 88 77 ef 62 6b 23 1c 1d 7c ..b.cFz.w.bk#..| 0040 5c 08 18 96 7a ce 73 fe 2b f6 45 9c 72 2b 6c 91 \...z.s.+.E.r+l. 0050 eb 35 0e 31 b6 8c 4d af ee 3b 0a fb 77 13 45 69 .5.1..M..;..w.Ei 0060 27 40 31 af c5 63 a3 16 48 39 aa 11 7b 1e 7f f7 '@1..c..H9..{... 0070 f0 1e 9c 89 69 4e c9 5a c9 49 25 82 bd 82 2e 2a ....iN.Z.I%....* 0080 4a fa 13 6f 0e d9 J..o.. Frame 11 (134 bytes on wire, 134 bytes captured) Arrival Time: Jul 11, 2007 15:04:32.444536000 Time delta from previous packet: 0.002229000 seconds Time since reference or first frame: 10.328538000 seconds Frame Number: 11 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Source: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.141 (165.227.249.141), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0xd4ae (54446) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x66dd [correct] Good: True Bad : False Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xfb4f3280 Sequence: 1 Data (92 bytes) 0000 00 0c 29 ab 06 ab 00 10 f3 0e 66 68 08 00 45 00 ..).......fh..E. 0010 00 78 d4 ae 00 00 40 32 66 dd a5 e3 f9 8d a5 e3 .x....@2f....... 0020 f9 73 fb 4f 32 80 00 00 00 01 f2 16 a0 fb ce ba .s.O2........... 0030 c1 94 98 53 48 54 2f cb ad ad da 17 dd 20 bd 90 ...SHT/...... .. 0040 6a 10 7b c1 2b 37 90 9d 46 47 b5 e7 81 8f 5a a7 j.{.+7..FG....Z. 0050 68 9d ff 54 46 81 23 e0 2a 0e 56 fd 9d 3d 32 bd h..TF.#.*.V..=2. 0060 81 62 0f d5 36 be 21 5a 80 be b0 54 1e 8f 79 0e .b..6.!Z...T..y. 0070 b9 a5 8b 7b da 1f aa af e4 9b 56 3f 44 57 fa 69 ...{......V?DW.i 0080 94 6c ea 7c db 9a .l.|.. Frame 12 (134 bytes on wire, 134 bytes captured) Arrival Time: Jul 11, 2007 15:04:33.453338000 Time delta from previous packet: 1.008802000 seconds Time since reference or first frame: 11.337340000 seconds Frame Number: 12 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68) Destination: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68) Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0002 (2) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb89 [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.141 (165.227.249.141) Encapsulating Security Payload SPI: 0x753fbfbf Sequence: 2 Data (92 bytes) 0000 00 10 f3 0e 66 68 00 0c 29 ab 06 ab 08 00 45 00 ....fh..).....E. 0010 00 78 00 02 00 00 80 32 fb 89 a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 8d 75 3f bf bf 00 00 00 02 aa 11 7b 1e 7f f7 ..u?........{... 0030 f0 1e 9c 89 69 4e c9 5a c9 49 bf 0e 1b 5d fe 44 ....iN.Z.I...].D 0040 10 13 51 4e 76 08 02 6b 5a 29 b2 53 b5 1d fa 07 ..QNv..kZ).S.... 0050 c4 98 14 34 8f 07 cb b4 df 85 29 aa e2 84 62 55 ...4......)...bU 0060 cc 15 26 8a 6f a3 ab 55 39 9e 34 d9 ea 88 03 5c ..&.o..U9.4....\ 0070 7e e9 d1 c8 53 1d db 3a 91 72 88 47 57 fb b1 5a ~...S..:.r.GW..Z 0080 15 91 52 1e c6 f8 ..R... Frame 13 (134 bytes on wire, 134 bytes captured) Arrival Time: Jul 11, 2007 15:04:33.458849000 Time delta from previous packet: 0.005511000 seconds Time since reference or first frame: 11.342851000 seconds Frame Number: 13 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Source: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.141 (165.227.249.141), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0xd4af (54447) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x66dc [correct] Good: True Bad : False Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xfb4f3280 Sequence: 2 Data (92 bytes) 0000 00 0c 29 ab 06 ab 00 10 f3 0e 66 68 08 00 45 00 ..).......fh..E. 0010 00 78 d4 af 00 00 40 32 66 dc a5 e3 f9 8d a5 e3 .x....@2f....... 0020 f9 73 fb 4f 32 80 00 00 00 02 39 4f df 51 df 20 .s.O2.....9O.Q. 0030 ac 1e 0e 26 5b bd e3 3a b7 d8 a7 c5 d2 66 75 7d ...&[..:.....fu} 0040 a9 03 8f be 06 57 27 44 f5 3d 98 bb be 7f f0 5c .....W'D.=.....\ 0050 34 b7 a6 95 7e 00 fe 52 ef ee fe db 19 93 33 f6 4...~..R......3. 0060 67 c4 ad c9 ee f7 0f 0f 5a 61 d3 0a 14 c0 4d ca g.......Za....M. 0070 ce d5 df 43 f2 c6 1c ae fe d7 04 30 c9 e0 a3 dc ...C.......0.... 0080 49 b2 99 56 56 e5 I..VV.