Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Dec 14, 2007 09:46:57.476715000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 166 bytes Capture Length: 166 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Destination: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.154 (165.227.249.154) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0455 (1109) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf72a [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.154 (165.227.249.154) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0x2e3d [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x833AF9E260E3002D Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 0000 00 1b 11 4c 84 98 00 0c 29 ab 06 ab 08 00 45 00 ...L....).....E. 0010 00 98 04 55 00 00 80 11 f7 2a a5 e3 f9 73 a5 e3 ...U.....*...s.. 0020 f9 9a 01 f4 01 f4 00 84 2e 3d 83 3a f9 e2 60 e3 .........=.:..`. 0030 00 2d 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .-.............. 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 ..D..-.......F.y 0090 dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 ..........>.in.c 00a0 81 b5 ec 42 7b 1f ...B{. Frame 2 (146 bytes on wire, 146 bytes captured) Arrival Time: Dec 14, 2007 09:46:57.481799000 Time delta from previous packet: 0.005084000 seconds Time since reference or first frame: 0.005084000 seconds Frame Number: 2 Packet Length: 146 bytes Capture Length: 146 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Source: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.154 (165.227.249.154), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 132 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb93 [correct] Good: True Bad : False Source: 165.227.249.154 (165.227.249.154) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 112 Checksum: 0x13f8 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x833AF9E260E3002D Responder cookie: 0xC14090F9800CF9D6 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 104 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 0c 29 ab 06 ab 00 1b 11 4c 84 98 08 00 45 00 ..)......L....E. 0010 00 84 00 00 40 00 40 11 fb 93 a5 e3 f9 9a a5 e3 ....@.@......... 0020 f9 73 01 f4 01 f4 00 70 13 f8 83 3a f9 e2 60 e3 .s.....p...:..`. 0030 00 2d c1 40 90 f9 80 0c f9 d6 01 10 02 00 00 00 .-.@............ 0040 00 00 00 00 00 68 0d 00 00 38 00 00 00 01 00 00 .....h...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 00 00 ................ 0080 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 0090 01 00 .. Frame 3 (298 bytes on wire, 298 bytes captured) Arrival Time: Dec 14, 2007 09:46:59.393761000 Time delta from previous packet: 1.911962000 seconds Time since reference or first frame: 1.917046000 seconds Frame Number: 3 Packet Length: 298 bytes Capture Length: 298 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Destination: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.154 (165.227.249.154) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x0456 (1110) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf6a5 [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.154 (165.227.249.154) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0x793d [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x833AF9E260E3002D Responder cookie: 0xC14090F9800CF9D6 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 1b 11 4c 84 98 00 0c 29 ab 06 ab 08 00 45 00 ...L....).....E. 0010 01 1c 04 56 00 00 80 11 f6 a5 a5 e3 f9 73 a5 e3 ...V.........s.. 0020 f9 9a 01 f4 01 f4 01 08 79 3d 83 3a f9 e2 60 e3 ........y=.:..`. 0030 00 2d c1 40 90 f9 80 0c f9 d6 04 10 02 00 00 00 .-.@............ 0040 00 00 00 00 01 00 0a 00 00 84 98 31 7c ba 15 77 ...........1|..w 0050 c8 ea 93 93 3b 58 d0 fe 1c b0 13 d7 39 23 dc a7 ....;X......9#.. 0060 6e c5 92 d6 55 b7 1b 6d 0d eb 8b e7 81 e9 e5 e9 n...U..m........ 0070 90 05 f4 e7 65 78 0f ad 23 c9 5e f1 8d a5 8b 12 ....ex..#.^..... 0080 bb 25 4e 16 e1 8e 3c 43 d6 11 cd 30 86 16 1e 86 .%N.....a.fu.Fa.h. 0060 c0 30 a7 bf 21 94 d2 41 d2 b8 68 47 c5 d7 0d 5a .0..!..A..hG...Z 0070 3f e3 ef 9d e0 cc ca 44 86 90 ee cd 97 5d fe 9a ?......D.....].. 0080 c3 2e d1 75 9b bf 0a c7 55 9d fe a5 26 c1 0c e9 ...u....U...&... 0090 c7 1c 3e 6d 5f f2 88 b6 67 25 e9 d9 4c ba 44 15 ..>m_...g%..L.D. 00a0 85 da 2b f2 44 ac e0 7c 1b cf 8a 81 8a 3b 56 9a ..+.D..|.....;V. 00b0 d6 6d 84 0a 00 89 e0 6b 93 89 b1 7b dd 10 8c 5e .m.....k...{...^ 00c0 f6 95 61 6a 1f 40 77 f9 bb aa 5d f9 4a 42 99 89 ..aj.@w...].JB.. 00d0 4e 30 d8 6f e1 4e cb 09 0b 01 10 0a 66 6c bb 19 N0.o.N......fl.. 00e0 97 22 6f 4d 68 11 49 80 5e 3e 4c fc 2e fc 15 e8 ."oMh.I.^>L..... 00f0 9a 20 c4 8b 41 fd 93 42 d9 bd 11 94 0d 33 89 6b . ..A..B.....3.k 0100 b1 52 d0 11 87 4f 0a 65 7c 68 92 8d cc e8 a7 b1 .R...O.e|h...... 0110 d9 cb f2 bf 0c 51 53 05 a3 44 32 53 50 e9 30 d0 .....QS..D2SP.0. 0120 5c 8e 59 54 40 f2 32 2c e5 6c b6 1f 86 23 a7 4b \.YT@.2,.l...#.K 0130 e1 30 2f 83 42 e8 82 30 3e d7 53 2a 46 a0 69 66 .0/.B..0>.S*F.if 0140 75 e4 a4 ac 24 85 2b f3 14 d9 4d 13 4e fa 8f 57 u...$.+...M.N..W 0150 6e 90 f5 e2 31 67 n...1g Frame 9 (102 bytes on wire, 102 bytes captured) Arrival Time: Dec 14, 2007 09:47:02.728057000 Time delta from previous packet: 0.001317000 seconds Time since reference or first frame: 5.251342000 seconds Frame Number: 9 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Destination: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.154 (165.227.249.154) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x045b (1115) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf764 [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.154 (165.227.249.154) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xdeaa [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x833AF9E260E3002D Responder cookie: 0xC14090F9800CF9D6 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xAFCA5200 Length: 60 Encrypted payload (32 bytes) 0000 00 1b 11 4c 84 98 00 0c 29 ab 06 ab 08 00 45 00 ...L....).....E. 0010 00 58 04 5b 00 00 80 11 f7 64 a5 e3 f9 73 a5 e3 .X.[.....d...s.. 0020 f9 9a 01 f4 01 f4 00 44 de aa 83 3a f9 e2 60 e3 .......D...:..`. 0030 00 2d c1 40 90 f9 80 0c f9 d6 08 10 20 01 af ca .-.@........ ... 0040 52 00 00 00 00 3c 8a b3 d0 b1 12 a5 a1 4b 1c 77 R....<.......K.w 0050 5c ee de 3a 8c 0f ab a8 65 69 1e bb 73 c3 d5 f3 \..:....ei..s... 0060 d7 e2 9e e7 26 45 ....&E Frame 10 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 09:47:07.568932000 Time delta from previous packet: 4.840875000 seconds Time since reference or first frame: 10.092217000 seconds Frame Number: 10 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Destination: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.154 (165.227.249.154) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb7d [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.154 (165.227.249.154) Encapsulating Security Payload SPI: 0x448b82da Sequence: 1 Data (92 bytes) 0000 00 1b 11 4c 84 98 00 0c 29 ab 06 ab 08 00 45 00 ...L....).....E. 0010 00 78 00 01 00 00 80 32 fb 7d a5 e3 f9 73 a5 e3 .x.....2.}...s.. 0020 f9 9a 44 8b 82 da 00 00 00 01 6a 1a 11 7b 82 8e ..D.......j..{.. 0030 67 51 40 89 59 7f 1b af a3 79 4f 07 14 04 ef 75 gQ@.Y....yO....u 0040 97 6c b7 30 a8 2a 9a 71 44 c2 d3 0a ad 65 d4 67 .l.0.*.qD....e.g 0050 7e 02 00 95 ac 0c 28 af 24 3e a3 4c bd 0f 81 26 ~.....(.$>.L...& 0060 e1 ca 67 0a cb 7b 8a 4e e3 f8 7b 51 11 e5 4e 84 ..g..{.N..{Q..N. 0070 12 4d 66 d7 c7 02 03 0b 4e a8 9a 1f f5 b3 4e ab .Mf.....N.....N. 0080 01 bc 22 c5 a6 4d .."..M Frame 11 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 09:47:07.570387000 Time delta from previous packet: 0.001455000 seconds Time since reference or first frame: 10.093672000 seconds Frame Number: 11 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Source: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.154 (165.227.249.154), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0xd9dc (55772) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x61a2 [correct] Good: True Bad : False Source: 165.227.249.154 (165.227.249.154) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xc2f438e0 Sequence: 1 Data (92 bytes) 0000 00 0c 29 ab 06 ab 00 1b 11 4c 84 98 08 00 45 00 ..)......L....E. 0010 00 78 d9 dc 00 00 40 32 61 a2 a5 e3 f9 9a a5 e3 .x....@2a....... 0020 f9 73 c2 f4 38 e0 00 00 00 01 60 99 bf ad 61 98 .s..8.....`...a. 0030 d9 48 77 8a e4 5c dd 88 8d 54 65 c7 98 90 00 6d .Hw..\...Te....m 0040 ba d6 a6 d1 72 43 86 da 55 32 6c 06 55 1c ba 6a ....rC..U2l.U..j 0050 43 c4 39 b2 96 36 9d f7 11 ec 72 d9 64 a5 ab 81 C.9..6....r.d... 0060 65 4b 54 27 f2 f6 f7 d3 d0 4d 45 6c 74 d1 9e 41 eKT'.....MElt..A 0070 7d ae 79 de 5d e7 10 14 3f 6f 78 d9 a9 80 5c 70 }.y.]...?ox...\p 0080 49 d6 d6 a5 92 98 I..... Frame 12 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 09:47:08.589660000 Time delta from previous packet: 1.019273000 seconds Time since reference or first frame: 11.112945000 seconds Frame Number: 12 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Destination: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.154 (165.227.249.154) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0002 (2) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb7c [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.154 (165.227.249.154) Encapsulating Security Payload SPI: 0x448b82da Sequence: 2 Data (92 bytes) 0000 00 1b 11 4c 84 98 00 0c 29 ab 06 ab 08 00 45 00 ...L....).....E. 0010 00 78 00 02 00 00 80 32 fb 7c a5 e3 f9 73 a5 e3 .x.....2.|...s.. 0020 f9 9a 44 8b 82 da 00 00 00 02 7b 51 11 e5 4e 84 ..D.......{Q..N. 0030 12 4d 66 d7 c7 02 03 0b 4e a8 f2 82 09 8e 9e d2 .Mf.....N....... 0040 fe 4d 75 e6 ab 7c 53 dc 62 60 9c 6d 72 97 e0 28 .Mu..|S.b`.mr..( 0050 c0 b6 14 4c dc f1 08 22 01 9e e0 24 15 b5 d6 50 ...L..."...$...P 0060 7b b0 9d 0f 8c d8 75 df 5a f2 5c 70 83 55 77 16 {.....u.Z.\p.Uw. 0070 2a 36 b2 37 a0 84 80 30 84 79 e6 48 2c 68 fb e3 *6.7...0.y.H,h.. 0080 ce 53 19 21 b3 91 .S.!.. Frame 13 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 09:47:08.597134000 Time delta from previous packet: 0.007474000 seconds Time since reference or first frame: 11.120419000 seconds Frame Number: 13 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Source: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.154 (165.227.249.154), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0xd9dd (55773) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x61a1 [correct] Good: True Bad : False Source: 165.227.249.154 (165.227.249.154) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xc2f438e0 Sequence: 2 Data (92 bytes) 0000 00 0c 29 ab 06 ab 00 1b 11 4c 84 98 08 00 45 00 ..)......L....E. 0010 00 78 d9 dd 00 00 40 32 61 a1 a5 e3 f9 9a a5 e3 .x....@2a....... 0020 f9 73 c2 f4 38 e0 00 00 00 02 75 76 77 61 62 63 .s..8.....uvwabc 0030 64 65 66 67 68 69 01 02 02 04 39 92 5e 60 76 27 defghi....9.^`v' 0040 96 a7 10 89 a8 36 c9 95 30 cc 03 d9 f3 97 72 17 .....6..0.....r. 0050 3e 93 d5 1d ae 8e 32 79 89 a0 42 a6 dd e3 ec 83 >.....2y..B..... 0060 46 c9 00 cf 97 b0 dd ec 91 c8 2e 6f bd 6e ae c9 F..........o.n.. 0070 60 0b ac 12 b9 e5 d6 7d 26 b7 21 5b 0c ad 11 66 `......}&.![...f 0080 6d 2c f3 16 d9 eb m,....