Frame 1 (146 bytes on wire, 146 bytes captured) Arrival Time: Oct 6, 2006 10:53:18.387418000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 146 bytes Capture Length: 146 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.102 (165.227.249.102), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 132 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbbe [correct] Good: True Bad : False Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 112 Checksum: 0x887e [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x1526EB53D91E4C58 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 104 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Authentication-Method (3): PSK (1) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x810FA565F8AB14369105D706FBD57279 0000 00 0c 29 f4 af 90 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 84 00 00 40 00 40 11 fb be a5 e3 f9 66 a5 e3 ....@.@......f.. 0020 f9 7c 01 f4 01 f4 00 70 88 7e 15 26 eb 53 d9 1e .|.....p.~.&.S.. 0030 4c 58 00 00 00 00 00 00 00 00 01 10 02 00 00 00 LX.............. 0040 00 00 00 00 00 68 0d 00 00 38 00 00 00 01 00 00 .....h...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 0b 00 01 80 0c 70 80 80 01 00 07 80 0e ........p....... 0070 00 80 80 03 00 01 80 02 00 02 80 04 00 02 00 00 ................ 0080 00 14 81 0f a5 65 f8 ab 14 36 91 05 d7 06 fb d5 .....e...6...... 0090 72 79 ry Frame 2 (266 bytes on wire, 266 bytes captured) Arrival Time: Oct 6, 2006 10:53:18.387482000 Time delta from previous packet: 0.000064000 seconds Time since reference or first frame: 0.000064000 seconds Frame Number: 2 Packet Length: 266 bytes Capture Length: 266 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x00f4 (244) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a53 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0x7c5b [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x1526EB53D91E4C58 Responder cookie: 0xAD2BD8CF32AE6C81 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Authentication-Method (3): PSK (1) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 e0 4c 69 0a 78 00 0c 29 f4 af 90 08 00 45 00 ..Li.x..).....E. 0010 00 fc 00 f4 00 00 40 11 3a 53 a5 e3 f9 7c a5 e3 ......@.:S...|.. 0020 f9 66 01 f4 01 f4 00 e8 7c 5b 15 26 eb 53 d9 1e .f......|[.&.S.. 0030 4c 58 ad 2b d8 cf 32 ae 6c 81 01 10 02 00 00 00 LX.+..2.l....... 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 0b 00 01 80 0c 70 80 80 01 00 07 80 0e ........p....... 0070 00 80 80 03 00 01 80 02 00 02 80 04 00 02 0d 00 ................ 0080 00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b .....N.$...GYL(K 0090 21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e !;....'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 .o,....R.V Frame 3 (242 bytes on wire, 242 bytes captured) Arrival Time: Oct 6, 2006 10:53:18.575145000 Time delta from previous packet: 0.187663000 seconds Time since reference or first frame: 0.187727000 seconds Frame Number: 3 Packet Length: 242 bytes Capture Length: 242 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.102 (165.227.249.102), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 228 Identification: 0x0001 (1) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb5d [correct] Good: True Bad : False Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 208 Checksum: 0xf1e7 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x1526EB53D91E4C58 Responder cookie: 0xAD2BD8CF32AE6C81 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 200 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 20 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 f4 af 90 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 e4 00 01 40 00 40 11 fb 5d a5 e3 f9 66 a5 e3 ....@.@..]...f.. 0020 f9 7c 01 f4 01 f4 00 d0 f1 e7 15 26 eb 53 d9 1e .|.........&.S.. 0030 4c 58 ad 2b d8 cf 32 ae 6c 81 04 10 02 00 00 00 LX.+..2.l....... 0040 00 00 00 00 00 c8 0a 00 00 84 31 f2 83 a1 c9 ca ..........1..... 0050 ab d7 4f de 84 21 e8 8d 05 06 9a 65 cc 00 d2 26 ..O..!.....e...& 0060 d2 55 7c 08 77 83 3b bd 9e e9 3f e6 51 f7 8d 27 .U|.w.;...?.Q..' 0070 5c 07 3f 93 38 ca d3 34 3c 1e 30 66 d2 cd 29 f4 \.?.8..4<.0f..). 0080 97 43 9b 0a 27 68 4e d6 bb a1 ef b2 6a 81 f2 94 .C..'hN.....j... 0090 d0 52 62 bc b4 10 d6 72 e8 5f d3 83 09 32 05 dd .Rb....r._...2.. 00a0 71 3d 42 54 1f 6b 31 3d f1 c1 27 f1 56 d2 9b ff q=BT.k1=..'.V... 00b0 bf d7 04 a1 1e 1f f4 50 0d 5a 02 40 18 5e 02 3c .......P.Z.@.^.< 00c0 cb 81 fa 2b 0f 3f ba d2 89 a1 0d 00 00 14 86 23 ...+.?.........# 00d0 e4 dc 01 35 a7 1d 0a 97 ea 9b 93 96 76 5c 00 00 ...5........v\.. 00e0 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 00f0 8b 35 .5 Frame 4 (270 bytes on wire, 270 bytes captured) Arrival Time: Oct 6, 2006 10:53:18.579763000 Time delta from previous packet: 0.004618000 seconds Time since reference or first frame: 0.192345000 seconds Frame Number: 4 Packet Length: 270 bytes Capture Length: 270 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x00f5 (245) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a4e [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x1a46 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x1526EB53D91E4C58 Responder cookie: 0xAD2BD8CF32AE6C81 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NAT-Discovery (15) Length: 20 Nonce Data NAT-Discovery payload Next payload: NAT-Discovery (15) Length: 24 Hash of address and port: 88D3FDA1E953AD5D15442FD682F252CC279FBF2D NAT-Discovery payload Next payload: NONE (0) Length: 24 Hash of address and port: 9682EC5AF098BA9A5B3CB4AB721DEEAF7184B10D 0000 00 e0 4c 69 0a 78 00 0c 29 f4 af 90 08 00 45 00 ..Li.x..).....E. 0010 01 00 00 f5 00 00 40 11 3a 4e a5 e3 f9 7c a5 e3 ......@.:N...|.. 0020 f9 66 01 f4 01 f4 00 ec 1a 46 15 26 eb 53 d9 1e .f.......F.&.S.. 0030 4c 58 ad 2b d8 cf 32 ae 6c 81 04 10 02 00 00 00 LX.+..2.l....... 0040 00 00 00 00 00 e4 0a 00 00 84 d1 fc 3a 18 e3 67 ............:..g 0050 6e c9 e6 7e 24 17 6d 37 e6 f5 f4 a8 4b 7d e8 e2 n..~$.m7....K}.. 0060 cd 96 5f 65 ca ab 27 b3 db c6 ba b3 44 46 39 a8 .._e..'.....DF9. 0070 89 58 35 ef 68 b8 49 52 f4 d0 e3 37 ce cc b3 5c .X5.h.IR...7...\ 0080 08 e1 c4 8d de 94 f8 01 87 ab 3e fc aa 8d d5 11 ..........>..... 0090 da d4 3b 1f 57 79 7b e9 e6 78 48 12 1c 07 74 c7 ..;.Wy{..xH...t. 00a0 11 03 f2 a8 e8 5a df 54 b6 95 79 72 96 c9 b1 f9 .....Z.T..yr.... 00b0 6a 8c 71 d9 e3 83 3e 9b 43 58 0a 75 6d 48 4a a0 j.q...>.CX.umHJ. 00c0 75 bd 64 2c fb 22 70 91 19 fe 0f 00 00 14 6a fb u.d,."p.......j. 00d0 7e 4b 2f 03 d7 d8 c8 a0 59 51 9f 7a 74 57 0f 00 ~K/.....YQ.ztW.. 00e0 00 18 88 d3 fd a1 e9 53 ad 5d 15 44 2f d6 82 f2 .......S.].D/... 00f0 52 cc 27 9f bf 2d 00 00 00 18 96 82 ec 5a f0 98 R.'..-.......Z.. 0100 ba 9a 5b 3c b4 ab 72 1d ee af 71 84 b1 0d ..[<..r...q... Frame 5 (118 bytes on wire, 118 bytes captured) Arrival Time: Oct 6, 2006 10:53:18.759955000 Time delta from previous packet: 0.180192000 seconds Time since reference or first frame: 0.372537000 seconds Frame Number: 5 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.102 (165.227.249.102), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0002 (2) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbd8 [correct] Good: True Bad : False Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x254b [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x1526EB53D91E4C58 Responder cookie: 0xAD2BD8CF32AE6C81 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 f4 af 90 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 68 00 02 40 00 40 11 fb d8 a5 e3 f9 66 a5 e3 .h..@.@......f.. 0020 f9 7c 01 f4 01 f4 00 54 25 4b 15 26 eb 53 d9 1e .|.....T%K.&.S.. 0030 4c 58 ad 2b d8 cf 32 ae 6c 81 05 10 02 01 00 00 LX.+..2.l....... 0040 00 00 00 00 00 4c 0b 7b 49 8f a4 6a 93 6f 5c 32 .....L.{I..j.o\2 0050 64 e3 e9 95 be db 09 df a3 76 c3 5f 16 67 77 db d........v._.gw. 0060 94 7b 21 65 05 10 fd 9e 98 b2 54 53 c7 76 b1 97 .{!e......TS.v.. 0070 cf 83 c6 73 9a ef ...s.. Frame 6 (118 bytes on wire, 118 bytes captured) Arrival Time: Oct 6, 2006 10:53:18.759957000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.372539000 seconds Frame Number: 6 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x00f6 (246) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ae5 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.102 (165.227.249.102) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xa6c6 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x1526EB53D91E4C58 Responder cookie: 0xAD2BD8CF32AE6C81 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 e0 4c 69 0a 78 00 0c 29 f4 af 90 08 00 45 00 ..Li.x..).....E. 0010 00 68 00 f6 00 00 40 11 3a e5 a5 e3 f9 7c a5 e3 .h....@.:....|.. 0020 f9 66 01 f4 01 f4 00 54 a6 c6 15 26 eb 53 d9 1e .f.....T...&.S.. 0030 4c 58 ad 2b d8 cf 32 ae 6c 81 05 10 02 01 00 00 LX.+..2.l....... 0040 00 00 00 00 00 4c af 47 6e 7a fc 48 52 44 95 07 .....L.Gnz.HRD.. 0050 35 7d f5 1f 0c 2b 96 ff 4c a2 f8 f4 0a 30 9c 84 5}...+..L....0.. 0060 65 d8 af 1c e4 10 a6 b2 c0 93 ea 22 59 3f 6e 30 e.........."Y?n0 0070 ca d4 2a fa 00 5b ..*..[ Frame 7 (134 bytes on wire, 134 bytes captured) Arrival Time: Oct 6, 2006 10:53:18.818264000 Time delta from previous packet: 0.058307000 seconds Time since reference or first frame: 0.430846000 seconds Frame Number: 7 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.102 (165.227.249.102), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0003 (3) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc7 [correct] Good: True Bad : False Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x42b4 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x1526EB53D91E4C58 Responder cookie: 0xAD2BD8CF32AE6C81 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xCC9AACB8 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 f4 af 90 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 78 00 03 40 00 40 11 fb c7 a5 e3 f9 66 a5 e3 .x..@.@......f.. 0020 f9 7c 01 f4 01 f4 00 64 42 b4 15 26 eb 53 d9 1e .|.....dB..&.S.. 0030 4c 58 ad 2b d8 cf 32 ae 6c 81 08 10 05 01 cc 9a LX.+..2.l....... 0040 ac b8 00 00 00 5c da 10 7a ce 41 95 a8 e5 9f 05 .....\..z.A..... 0050 96 2d db db 43 16 71 3a e7 3a e5 2d 9b d5 46 f0 .-..C.q:.:.-..F. 0060 ba 19 ef fc d5 2e 0a 2b 8f 55 96 54 e9 a9 a4 dc .......+.U.T.... 0070 91 2a 4f d2 c2 a6 d3 76 30 f1 4d 0a fd c6 ba 8c .*O....v0.M..... 0080 98 42 13 c5 5d 07 .B..]. Frame 8 (342 bytes on wire, 342 bytes captured) Arrival Time: Oct 6, 2006 10:53:19.989467000 Time delta from previous packet: 1.171203000 seconds Time since reference or first frame: 1.602049000 seconds Frame Number: 8 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.102 (165.227.249.102), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0004 (4) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfaf6 [correct] Good: True Bad : False Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x71bb [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x1526EB53D91E4C58 Responder cookie: 0xAD2BD8CF32AE6C81 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xACC61098 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 f4 af 90 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 01 48 00 04 40 00 40 11 fa f6 a5 e3 f9 66 a5 e3 .H..@.@......f.. 0020 f9 7c 01 f4 01 f4 01 34 71 bb 15 26 eb 53 d9 1e .|.....4q..&.S.. 0030 4c 58 ad 2b d8 cf 32 ae 6c 81 08 10 20 01 ac c6 LX.+..2.l... ... 0040 10 98 00 00 01 2c 37 4d f1 08 cb cf 85 ca 6f 59 .....,7M......oY 0050 37 98 52 76 48 ac 95 71 bc 63 80 32 f5 06 e1 7a 7.RvH..q.c.2...z 0060 c3 69 36 a4 52 d3 de b0 6c af 92 a1 05 d1 02 64 .i6.R...l......d 0070 c4 2d 77 2a cb 86 df e9 f3 06 8f 80 6d 8a 29 3f .-w*........m.)? 0080 9b 59 db d2 ed 09 3c c6 a4 c4 22 03 2c 5b 1f 0b .Y....<...".,[.. 0090 09 75 9a e4 96 fb 56 83 a9 5a 10 fd 95 bb 70 c7 .u....V..Z....p. 00a0 e3 0e e1 3d bb 5d b9 0b 7c b1 72 ba 70 ef 52 2b ...=.]..|.r.p.R+ 00b0 b5 e8 55 ee 53 92 b6 4e 1e d0 2b c7 18 cf 55 0a ..U.S..N..+...U. 00c0 a1 fe e5 25 65 50 c4 3c 58 d8 d0 fb de 3d 6f 18 ...%eP...4....: 0100 48 98 55 d4 ab b6 97 3a 81 fe d9 57 9f a4 be 22 H.U....:...W..." 0110 b3 ad dd 9d 29 4b 56 c2 d4 dc 25 66 e1 4b 64 dd ....)KV...%f.Kd. 0120 2d ba 04 64 75 dc e3 17 b5 77 70 b8 28 0d a6 4a -..du....wp.(..J 0130 35 54 dd de 17 e4 05 8d 45 e7 b5 0e 47 80 9c 86 5T......E...G... 0140 c6 79 cd d2 d3 8e 86 e8 8b 05 48 cb 56 e4 4c 9b .y........H.V.L. 0150 af 37 dc bd f0 39 .7...9 Frame 10 (102 bytes on wire, 102 bytes captured) Arrival Time: Oct 6, 2006 10:53:20.141271000 Time delta from previous packet: 0.151802000 seconds Time since reference or first frame: 1.753853000 seconds Frame Number: 10 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.102 (165.227.249.102), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0005 (5) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbe5 [correct] Good: True Bad : False Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xa29f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x1526EB53D91E4C58 Responder cookie: 0xAD2BD8CF32AE6C81 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xACC61098 Length: 60 Encrypted payload (32 bytes) 0000 00 0c 29 f4 af 90 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 58 00 05 40 00 40 11 fb e5 a5 e3 f9 66 a5 e3 .X..@.@......f.. 0020 f9 7c 01 f4 01 f4 00 44 a2 9f 15 26 eb 53 d9 1e .|.....D...&.S.. 0030 4c 58 ad 2b d8 cf 32 ae 6c 81 08 10 20 01 ac c6 LX.+..2.l... ... 0040 10 98 00 00 00 3c 2a 08 7f df 40 8d ee c5 4a 22 .....<*...@...J" 0050 ca 25 86 8a df 03 d3 eb 1e d4 02 8e 4a 3d 3f 01 .%..........J=?. 0060 ec 36 ec 61 3f 35 .6.a?5 Frame 11 (134 bytes on wire, 134 bytes captured) Arrival Time: Oct 6, 2006 10:53:23.544370000 Time delta from previous packet: 3.403099000 seconds Time since reference or first frame: 5.156952000 seconds Frame Number: 11 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.102 (165.227.249.102), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3ba9 [correct] Good: True Bad : False Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x6e19f2b6 Sequence: 1 Data (92 bytes) 0000 00 0c 29 f4 af 90 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 78 00 01 00 00 40 32 3b a9 a5 e3 f9 66 a5 e3 .x....@2;....f.. 0020 f9 7c 6e 19 f2 b6 00 00 00 01 1a 25 46 a0 61 82 .|n........%F.a. 0030 ba 38 95 a0 41 10 d6 f6 a9 04 25 4d 27 7e 04 1c .8..A.....%M'~.. 0040 23 79 b5 aa fa b0 49 d8 57 bc 28 86 5e 34 d5 75 #y....I.W.(.^4.u 0050 1d 5d cf cf 9d 75 39 ae 53 9b 91 24 38 2e c8 9a .]...u9.S..$8... 0060 7e 46 3d 41 e9 16 24 42 81 bf 51 31 21 65 87 1a ~F=A..$B..Q1!e.. 0070 fb 1b 24 16 0b 88 88 71 d3 02 06 e2 7d 3d fd d1 ..$....q....}=.. 0080 f8 74 db 36 5a 91 .t.6Z. Frame 12 (134 bytes on wire, 134 bytes captured) Arrival Time: Oct 6, 2006 10:53:23.559808000 Time delta from previous packet: 0.015438000 seconds Time since reference or first frame: 5.172390000 seconds Frame Number: 12 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x001f (31) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b8a [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.102 (165.227.249.102) Encapsulating Security Payload SPI: 0x05d6d386 Sequence: 2 Data (92 bytes) 0000 00 e0 4c 69 0a 78 00 0c 29 f4 af 90 08 00 45 00 ..Li.x..).....E. 0010 00 78 00 1f 00 00 f0 32 8b 8a a5 e3 f9 7c a5 e3 .x.....2.....|.. 0020 f9 66 05 d6 d3 86 00 00 00 02 03 ed 1f e3 eb 65 .f.............e 0030 a2 1c 8c 24 f5 c8 4c 31 7b 81 df b5 a5 14 16 2b ...$..L1{......+ 0040 0e 98 d2 b9 11 03 59 f3 28 1d a6 61 92 aa 63 70 ......Y.(..a..cp 0050 b4 45 7f f7 47 5c 81 2a 3c 28 0a d7 01 ac 3b 34 .E..G\.*<(....;4 0060 5e d8 82 a0 87 81 7f f9 21 89 09 4f 04 b5 be 2f ^.......!..O.../ 0070 84 4e 6d ec 99 6b 04 44 7b 9e 2a 83 d0 2d 2f 3b .Nm..k.D{.*..-/; 0080 e2 40 48 8e 2f 7f .@H./. Frame 13 (134 bytes on wire, 134 bytes captured) Arrival Time: Oct 6, 2006 10:53:24.570975000 Time delta from previous packet: 1.011167000 seconds Time since reference or first frame: 6.183557000 seconds Frame Number: 13 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.102 (165.227.249.102), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0002 (2) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3ba8 [correct] Good: True Bad : False Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x6e19f2b6 Sequence: 2 Data (92 bytes) 0000 00 0c 29 f4 af 90 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 78 00 02 00 00 40 32 3b a8 a5 e3 f9 66 a5 e3 .x....@2;....f.. 0020 f9 7c 6e 19 f2 b6 00 00 00 02 29 c3 0b 6e 18 2b .|n.......)..n.+ 0030 4e a0 29 5c 99 bd 06 48 d6 30 71 2a 5d 3f 97 b0 N.)\...H.0q*]?.. 0040 e1 52 12 55 80 aa 8a fb fc f2 bc dd e6 bc da ab .R.U............ 0050 6b 0d 8f 1b 11 e8 c0 6a 40 77 d5 4d 57 4a 20 34 k......j@w.MWJ 4 0060 5a d7 d0 c1 23 fc 8e fa 4c 02 78 b5 fc ee 7b 7f Z...#...L.x...{. 0070 35 5c 56 fd 62 78 e8 e1 9d 43 69 43 ab 49 d5 e6 5\V.bx...CiC.I.. 0080 25 1e 30 63 ed e7 %.0c.. Frame 14 (134 bytes on wire, 134 bytes captured) Arrival Time: Oct 6, 2006 10:53:24.571401000 Time delta from previous packet: 0.000426000 seconds Time since reference or first frame: 6.183983000 seconds Frame Number: 14 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0020 (32) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b89 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.102 (165.227.249.102) Encapsulating Security Payload SPI: 0x05d6d386 Sequence: 3 Data (92 bytes) 0000 00 e0 4c 69 0a 78 00 0c 29 f4 af 90 08 00 45 00 ..Li.x..).....E. 0010 00 78 00 20 00 00 f0 32 8b 89 a5 e3 f9 7c a5 e3 .x. ...2.....|.. 0020 f9 66 05 d6 d3 86 00 00 00 03 eb c5 34 18 fd 10 .f..........4... 0030 65 15 ba 15 cc b9 10 ae 43 58 41 fe 64 8e 98 0c e.......CXA.d... 0040 41 7b 18 bc 9e 29 41 3b 4e 33 88 ac 87 99 ba 65 A{...)A;N3.....e 0050 81 13 65 03 19 14 cf 35 0d 02 20 b7 e6 5d 70 8a ..e....5.. ..]p. 0060 d2 95 9c 2f ce ed 35 40 71 3c 42 e6 4d 47 a0 25 .../..5@qJ.H..}.. 0080 44 b6 5d 08 58 81 D.].X. Frame 15 (134 bytes on wire, 134 bytes captured) Arrival Time: Oct 6, 2006 10:53:25.577192000 Time delta from previous packet: 1.005791000 seconds Time since reference or first frame: 7.189774000 seconds Frame Number: 15 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.102 (165.227.249.102), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0003 (3) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3ba7 [correct] Good: True Bad : False Source: 165.227.249.102 (165.227.249.102) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x6e19f2b6 Sequence: 3 Data (92 bytes) 0000 00 0c 29 f4 af 90 00 e0 4c 69 0a 78 08 00 45 00 ..).....Li.x..E. 0010 00 78 00 03 00 00 40 32 3b a7 a5 e3 f9 66 a5 e3 .x....@2;....f.. 0020 f9 7c 6e 19 f2 b6 00 00 00 03 99 07 a9 53 9a 5f .|n..........S._ 0030 19 6e 1d 4a 83 d8 cc d3 71 00 eb 0e fa 45 6d 41 .n.J....q....EmA 0040 43 c5 40 f2 60 40 30 7c 6e 9d 2e 1d 10 d7 26 8c C.@.`@0|n.....&. 0050 9b ce 1a d6 c5 1f e3 d7 fc 1d 8b a5 b0 2d 01 1a .............-.. 0060 29 3a 13 96 b1 be 9d b9 36 07 6a c1 27 67 49 66 ):......6.j.'gIf 0070 68 55 c2 59 4b db 36 2d c9 7c e7 80 ee ce cc d2 hU.YK.6-.|...... 0080 7a 2b 98 6f 92 a3 z+.o.. Frame 16 (134 bytes on wire, 134 bytes captured) Arrival Time: Oct 6, 2006 10:53:25.577508000 Time delta from previous packet: 0.000316000 seconds Time since reference or first frame: 7.190090000 seconds Frame Number: 16 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Destination: 00:e0:4c:69:0a:78 (00:e0:4c:69:0a:78) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.102 (165.227.249.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0021 (33) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b88 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.102 (165.227.249.102) Encapsulating Security Payload SPI: 0x05d6d386 Sequence: 4 Data (92 bytes) 0000 00 e0 4c 69 0a 78 00 0c 29 f4 af 90 08 00 45 00 ..Li.x..).....E. 0010 00 78 00 21 00 00 f0 32 8b 88 a5 e3 f9 7c a5 e3 .x.!...2.....|.. 0020 f9 66 05 d6 d3 86 00 00 00 04 b6 95 b7 5a f8 a3 .f...........Z.. 0030 62 30 f0 56 3c a6 1c e4 03 ab 9f af 79 5b e0 84 b0.V<.......y[.. 0040 32 be 9b 04 c0 88 59 18 b0 0a 9c 5a a9 41 89 4f 2.....Y....Z.A.O 0050 df 5b 5a f0 c8 36 00 2e af cd 03 f3 64 8d a0 1c .[Z..6......d... 0060 27 d4 27 8b ca 7d 77 23 3a a9 2c 2d a9 db a2 f3 '.'..}w#:.,-.... 0070 0b fe cd af af 5b 9d ee d2 28 4f cc 06 ab df 5a .....[...(O....Z 0080 33 04 d6 e0 51 2e 3...Q.