Frame 1 (270 bytes on wire, 270 bytes captured) Arrival Time: Jul 13, 2005 13:39:04.577260000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 270 bytes Capture Length: 270 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x680a1682 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x001e (30) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b25 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0x19d5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x25F72560C402A044 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 a0 8e 72 1e 40 00 0c 29 f4 af 90 08 00 45 00 ...r.@..).....E. 0010 00 fc 00 1e 00 00 40 11 3b 25 a5 e3 f9 7c a5 e3 ......@.;%...|.. 0020 f9 6a 01 f4 01 f4 00 e8 19 d5 25 f7 25 60 c4 02 .j........%.%`.. 0030 a0 44 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .D.............. 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b .....N.$...GYL(K 0090 21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e !;....'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 68 0a 16 82 .o,....R.Vh... Frame 2 (150 bytes on wire, 150 bytes captured) Arrival Time: Jul 13, 2005 13:39:04.702642000 Time delta from previous packet: 0.125382000 seconds Time since reference or first frame: 0.125382000 seconds Frame Number: 2 Packet Length: 150 bytes Capture Length: 150 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xcb0e2b42 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 132 Identification: 0x70bd (28861) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xcafd (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 112 Checksum: 0xd78d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x25F72560C402A044 Responder cookie: 0xEE7D07140CAFD28C Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 104 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Key-Length (14): Key-Length (128) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt 0000 00 0c 29 f4 af 90 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 84 70 bd 00 00 40 11 ca fd a5 e3 f9 6a a5 e3 ..p...@......j.. 0020 f9 7c 01 f4 01 f4 00 70 d7 8d 25 f7 25 60 c4 02 .|.....p..%.%`.. 0030 a0 44 ee 7d 07 14 0c af d2 8c 01 10 02 00 00 00 .D.}............ 0040 00 00 00 00 00 68 0d 00 00 38 00 00 00 01 00 00 .....h...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 02 00 02 80 03 00 01 80 0e ................ 0070 00 80 80 04 00 02 80 0b 00 01 80 0c 70 80 00 00 ............p... 0080 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 0090 01 00 cb 0e 2b 42 ....+B Frame 3 (226 bytes on wire, 226 bytes captured) Arrival Time: Jul 13, 2005 13:39:04.713106000 Time delta from previous packet: 0.010464000 seconds Time since reference or first frame: 0.135846000 seconds Frame Number: 3 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xde7e7d2b (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x001f (31) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b50 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x3656 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x25F72560C402A044 Responder cookie: 0xEE7D07140CAFD28C Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 a0 8e 72 1e 40 00 0c 29 f4 af 90 08 00 45 00 ...r.@..).....E. 0010 00 d0 00 1f 00 00 40 11 3b 50 a5 e3 f9 7c a5 e3 ......@.;P...|.. 0020 f9 6a 01 f4 01 f4 00 bc 36 56 25 f7 25 60 c4 02 .j......6V%.%`.. 0030 a0 44 ee 7d 07 14 0c af d2 8c 04 10 02 00 00 00 .D.}............ 0040 00 00 00 00 00 b4 0a 00 00 84 e8 5d 56 a7 1a 88 ...........]V... 0050 e0 ff f8 ed 44 a5 b9 d2 26 2d c6 5b b3 54 62 2f ....D...&-.[.Tb/ 0060 aa 9f c4 eb a2 52 fa 55 a2 d7 7f 39 d9 c6 2c a7 .....R.U...9..,. 0070 c7 2c 15 4c 5f 0f db ef 1b a8 aa 69 81 23 28 ef .,.L_......i.#(. 0080 a7 b9 df d7 b3 df 09 a2 3d 0e ca ef 3b 4f 09 40 ........=...;O.@ 0090 c4 29 9f 51 1f fd b7 6d 97 f2 5d f5 85 b0 b8 37 .).Q...m..]....7 00a0 7b 9d d5 26 d6 3f 0e 0d ba 22 68 ff b9 40 cc 44 {..&.?..."h..@.D 00b0 74 c4 b9 f0 c5 83 bc 53 db b1 96 a6 b3 f0 13 aa t......S........ 00c0 34 b4 f3 1f 0d 83 36 a1 33 90 00 00 00 14 4f 43 4.....6.3.....OC 00d0 3e 42 ad 5e b0 ad d8 fd a9 80 a4 32 85 15 de 7e >B.^.......2...~ 00e0 7d 2b }+ Frame 4 (262 bytes on wire, 262 bytes captured) Arrival Time: Jul 13, 2005 13:39:04.864178000 Time delta from previous packet: 0.151072000 seconds Time since reference or first frame: 0.286918000 seconds Frame Number: 4 Packet Length: 262 bytes Capture Length: 262 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x51ad3b90 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0x70be (28862) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xca8c (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0x52ac (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x25F72560C402A044 Responder cookie: 0xEE7D07140CAFD28C Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x0300001423CAD17355ABB9E6B41CAF68... 0000 00 0c 29 f4 af 90 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 f4 70 be 00 00 40 11 ca 8c a5 e3 f9 6a a5 e3 ..p...@......j.. 0020 f9 7c 01 f4 01 f4 00 e0 52 ac 25 f7 25 60 c4 02 .|......R.%.%`.. 0030 a0 44 ee 7d 07 14 0c af d2 8c 04 10 02 00 00 00 .D.}............ 0040 00 00 00 00 00 d8 0a 00 00 84 64 16 38 43 69 83 ..........d.8Ci. 0050 f8 4d c2 9a ae a1 7d 07 38 58 7b 77 4f 81 d4 77 .M....}.8X{wO..w 0060 4a 97 e3 ef 90 52 68 44 90 e6 46 09 b3 28 29 8a J....RhD..F..(). 0070 5d 9a 88 50 b0 8e 9f c5 44 2e e7 8e 62 f7 bc 70 ]..P....D...b..p 0080 ea 49 18 58 93 d7 2a 98 8d 5c 3d b5 ee 91 74 0c .I.X..*..\=...t. 0090 b2 2a 8d 23 30 a0 7a 77 a1 b1 ae be 60 99 11 74 .*.#0.zw....`..t 00a0 eb 22 40 d1 76 f1 be 0c 74 f6 c8 3a 56 b8 81 6d ."@.v...t..:V..m 00b0 43 b6 3d 38 62 a4 64 69 6a f9 b8 26 47 35 72 66 C.=8b.dij..&G5rf 00c0 d8 da 8e e2 89 d7 b6 ce d8 5b 0d 00 00 18 ac a8 .........[...... 00d0 ee b3 b9 b3 57 66 48 8e d3 88 8d 4a 1b 41 53 6b ....WfH....J.ASk 00e0 e7 46 00 00 00 20 03 00 00 14 23 ca d1 73 55 ab .F... ....#..sU. 00f0 b9 e6 b4 1c af 68 49 ad 8d 23 00 00 00 08 00 06 .....hI..#...... 0100 00 03 51 ad 3b 90 ..Q.;. Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Jul 13, 2005 13:39:04.871632000 Time delta from previous packet: 0.007454000 seconds Time since reference or first frame: 0.294372000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x2b55c460 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0020 (32) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bb7 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x371e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x25F72560C402A044 Responder cookie: 0xEE7D07140CAFD28C Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 f4 af 90 08 00 45 00 ...r.@..).....E. 0010 00 68 00 20 00 00 40 11 3b b7 a5 e3 f9 7c a5 e3 .h. ..@.;....|.. 0020 f9 6a 01 f4 01 f4 00 54 37 1e 25 f7 25 60 c4 02 .j.....T7.%.%`.. 0030 a0 44 ee 7d 07 14 0c af d2 8c 05 10 02 01 00 00 .D.}............ 0040 00 00 00 00 00 4c 23 ce 2e 1e c4 ad 09 18 47 c3 .....L#.......G. 0050 a2 db 68 6e 32 57 dc c7 ff 6a 4e 34 68 2f b4 37 ..hn2W...jN4h/.7 0060 f3 da ff 87 31 26 fa d6 21 2a cc 52 09 51 41 99 ....1&..!*.R.QA. 0070 e3 53 91 9d 41 2a 2b 55 c4 60 .S..A*+U.` Frame 6 (138 bytes on wire, 138 bytes captured) Arrival Time: Jul 13, 2005 13:39:04.875803000 Time delta from previous packet: 0.004171000 seconds Time since reference or first frame: 0.298543000 seconds Frame Number: 6 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x62e06138 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x70bf (28863) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xcb07 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xa1d4 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x25F72560C402A044 Responder cookie: 0xEE7D07140CAFD28C Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 f4 af 90 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 78 70 bf 00 00 40 11 cb 07 a5 e3 f9 6a a5 e3 .xp...@......j.. 0020 f9 7c 01 f4 01 f4 00 64 a1 d4 25 f7 25 60 c4 02 .|.....d..%.%`.. 0030 a0 44 ee 7d 07 14 0c af d2 8c 05 10 02 01 00 00 .D.}............ 0040 00 00 00 00 00 5c 12 a4 3e 16 da 11 20 83 14 e0 .....\..>... ... 0050 92 4e d0 86 73 1d 4c ba b7 60 7b 82 13 ca 6a 76 .N..s.L..`{...jv 0060 86 85 c2 6e a1 4c 15 6f 1a 51 6e 24 37 25 f4 20 ...n.L.o.Qn$7%. 0070 62 17 b0 17 8b e8 52 15 9e b2 9e f0 4c ba a8 21 b.....R.....L..! 0080 13 2b 34 e1 3c bd 62 e0 61 38 .+4.<.b.a8 Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Jul 13, 2005 13:39:04.886691000 Time delta from previous packet: 0.010888000 seconds Time since reference or first frame: 0.309431000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xa038d56b (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0021 (33) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ad6 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x655c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x25F72560C402A044 Responder cookie: 0xEE7D07140CAFD28C Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x591A50BC Length: 300 Encrypted payload (272 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 f4 af 90 08 00 45 00 ...r.@..).....E. 0010 01 48 00 21 00 00 40 11 3a d6 a5 e3 f9 7c a5 e3 .H.!..@.:....|.. 0020 f9 6a 01 f4 01 f4 01 34 65 5c 25 f7 25 60 c4 02 .j.....4e\%.%`.. 0030 a0 44 ee 7d 07 14 0c af d2 8c 08 10 20 01 59 1a .D.}........ .Y. 0040 50 bc 00 00 01 2c 85 7c 44 59 6e 94 24 6e ad 38 P....,.|DYn.$n.8 0050 98 60 2c 25 63 6b f7 2a 6c ae a9 70 5d 38 4e f9 .`,%ck.*l..p]8N. 0060 d7 43 f4 87 c1 e1 12 f7 57 b3 23 4c c6 21 ce f7 .C......W.#L.!.. 0070 7a f1 2f 8b 92 ea f4 88 14 99 7c 9a cb e4 51 ea z./.......|...Q. 0080 c7 02 72 41 bd 2b 33 a8 49 2d 53 a0 01 34 8d e3 ..rA.+3.I-S..4.. 0090 42 9c f7 29 d9 00 5f 71 9e 07 e7 00 3a e2 52 8a B..).._q....:.R. 00a0 93 e8 bf da 59 33 a0 cb a6 0d 76 8b 0f e9 5f 60 ....Y3....v..._` 00b0 63 e4 a6 3b 8f 04 7d 20 9e 10 c8 0c ae fc 23 f9 c..;..} ......#. 00c0 3e 1c 62 8d 42 36 99 92 43 56 fd c0 c2 75 19 40 >.b.B6..CV...u.@ 00d0 55 07 00 4e a6 68 e3 07 8d 1d 01 c2 61 34 64 70 U..N.h......a4dp 00e0 cb 79 ce 84 15 ec c0 13 05 b9 b4 b2 15 b6 1e 41 .y.............A 00f0 7c 7f 91 66 f2 fb d1 55 2b 74 4d 30 c6 3c 2e 0d |..f...U+tM0.<.. 0100 f9 fa 12 e0 64 ca d4 b5 24 56 5c af e4 d3 4d d3 ....d...$V\...M. 0110 fe 35 20 10 54 fa f8 aa 24 99 9c 6f d8 17 6e 78 .5 .T...$..o..nx 0120 bd 0e e9 58 45 4e bd b2 74 8e 58 cd 57 39 10 00 ...XEN..t.X.W9.. 0130 61 55 e1 6c 92 a2 96 82 f3 17 61 06 c7 15 2a d5 aU.l......a...*. 0140 3d a6 e2 25 89 52 2f fa 82 9c 02 56 cd da c4 57 =..%.R/....V...W 0150 31 cd 4a 06 a9 9e a0 38 d5 6b 1.J....8.k Frame 8 (346 bytes on wire, 346 bytes captured) Arrival Time: Jul 13, 2005 13:39:05.165713000 Time delta from previous packet: 0.279022000 seconds Time since reference or first frame: 0.588453000 seconds Frame Number: 8 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xb48c9fbe (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x70c0 (28864) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xca36 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x9ac1 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x25F72560C402A044 Responder cookie: 0xEE7D07140CAFD28C Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x591A50BC Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 f4 af 90 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 01 48 70 c0 00 00 40 11 ca 36 a5 e3 f9 6a a5 e3 .Hp...@..6...j.. 0020 f9 7c 01 f4 01 f4 01 34 9a c1 25 f7 25 60 c4 02 .|.....4..%.%`.. 0030 a0 44 ee 7d 07 14 0c af d2 8c 08 10 20 01 59 1a .D.}........ .Y. 0040 50 bc 00 00 01 2c a0 22 a5 08 f5 bd 12 22 12 d7 P....,.".....".. 0050 07 54 b1 88 9d 32 30 21 c0 86 08 fb 34 b2 14 03 .T...20!....4... 0060 32 ea 7f 92 33 03 26 d3 27 da 60 34 78 7f e5 44 2...3.&.'.`4x..D 0070 98 2f 24 b7 7d 98 da 7a ff be c7 87 72 c2 63 49 ./$.}..z....r.cI 0080 a6 44 4a 16 1e 8c 29 32 73 d4 3a 61 27 95 2d 49 .DJ...)2s.:a'.-I 0090 8e b7 c4 f7 94 c2 bc e6 3d b2 2c c4 3b 46 fd 43 ........=.,.;F.C 00a0 1d 31 55 37 70 17 7c bb 5b 00 0d 16 96 39 70 4a .1U7p.|.[....9pJ 00b0 b5 3b 87 98 1e 19 60 6a 19 cf 94 1a b6 69 c6 0c .;....`j.....i.. 00c0 25 1a 8f be f7 52 18 f7 be fb 2d 58 77 b2 df 2c %....R....-Xw.., 00d0 6f 9d cd fe 14 67 d0 a7 7e 83 b9 a3 82 6b 2c 46 o....g..~....k,F 00e0 e7 89 88 5d 29 e2 5c 5d 6f 19 0c fd d2 8f 57 60 ...]).\]o.....W` 00f0 81 7c 07 d4 69 3b 80 e4 45 dd 00 79 20 be 3a 2d .|..i;..E..y .:- 0100 7d b8 04 aa df 11 e8 53 aa 51 0d ba af 70 a3 59 }......S.Q...p.Y 0110 8e 07 9e 45 47 b1 19 a5 2d 4e 44 77 72 ab 74 e2 ...EG...-NDwr.t. 0120 61 76 56 f5 4b b0 dd b8 ee 50 05 c8 33 db e1 5e avV.K....P..3..^ 0130 9c 8a de 43 f0 d7 1d d8 96 2f 9e f2 de 0f 43 29 ...C...../....C) 0140 3d ee 4b 7c f1 50 54 f3 e4 76 d9 94 58 a2 e8 c7 =.K|.PT..v..X... 0150 d1 f4 d7 8f b2 e2 b4 8c 9f be .......... Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Jul 13, 2005 13:39:05.174600000 Time delta from previous packet: 0.008887000 seconds Time since reference or first frame: 0.597340000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xd7ad085a (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0022 (34) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bc5 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xa275 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x25F72560C402A044 Responder cookie: 0xEE7D07140CAFD28C Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x591A50BC Length: 60 Encrypted payload (32 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 f4 af 90 08 00 45 00 ...r.@..).....E. 0010 00 58 00 22 00 00 40 11 3b c5 a5 e3 f9 7c a5 e3 .X."..@.;....|.. 0020 f9 6a 01 f4 01 f4 00 44 a2 75 25 f7 25 60 c4 02 .j.....D.u%.%`.. 0030 a0 44 ee 7d 07 14 0c af d2 8c 08 10 20 01 59 1a .D.}........ .Y. 0040 50 bc 00 00 00 3c 1d 96 f6 fc 9d 80 10 eb 35 5d P....<........5] 0050 f7 30 c8 e9 98 ef c8 85 29 c9 08 73 3f e3 fb 99 .0......)..s?... 0060 1f 6e 4f 16 cd 9f d7 ad 08 5a .nO......Z Frame 10 (170 bytes on wire, 170 bytes captured) Arrival Time: Jul 13, 2005 13:39:05.460045000 Time delta from previous packet: 0.285445000 seconds Time since reference or first frame: 0.882785000 seconds Frame Number: 10 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x402f1352 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x000e (14) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b77 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x4c92dc00 Sequence: 2 Data (124 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 f4 af 90 08 00 45 00 ...r.@..).....E. 0010 00 98 00 0e 00 00 f0 32 8b 77 a5 e3 f9 7c a5 e3 .......2.w...|.. 0020 f9 6a 4c 92 dc 00 00 00 00 02 18 cb 08 6f 7a bd .jL..........oz. 0030 49 74 3b 00 ab ce cb 7b c0 af 44 f6 35 89 c8 5f It;....{..D.5.._ 0040 0a b0 74 1d e2 9f cd ab 09 55 b3 fb 1a e3 62 c0 ..t......U....b. 0050 91 45 12 7a c5 2c 25 f1 78 c7 99 ae b9 f3 67 02 .E.z.,%.x.....g. 0060 1a 85 24 c5 f2 63 06 3c 27 e7 8e 9d 77 5e ad c3 ..$..c.<'...w^.. 0070 55 bf 3a 3f 8b 09 d8 4b ac e7 ef 5f 9a 70 9b 99 U.:?...K..._.p.. 0080 03 0c ae b1 92 9c 46 3a bd bd 48 08 49 67 8f 86 ......F:..H.Ig.. 0090 60 74 c4 66 47 28 fa 4d a9 3e e1 2b 07 ce 48 0e `t.fG(.M.>.+..H. 00a0 57 62 bf 3f 64 ee 40 2f 13 52 Wb.?d.@/.R Frame 11 (170 bytes on wire, 170 bytes captured) Arrival Time: Jul 13, 2005 13:39:05.462468000 Time delta from previous packet: 0.002423000 seconds Time since reference or first frame: 0.885208000 seconds Frame Number: 11 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xdcb8d3ec (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x70c1 (28865) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xcac4 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x383b8eae Sequence: 1 Data (124 bytes) 0000 00 0c 29 f4 af 90 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 98 70 c1 00 00 40 32 ca c4 a5 e3 f9 6a a5 e3 ..p...@2.....j.. 0020 f9 7c 38 3b 8e ae 00 00 00 01 22 c1 e3 91 67 43 .|8;......"...gC 0030 56 6a 75 de 7e 1c b8 9c 29 62 cd f2 62 f9 31 d2 Vju.~...)b..b.1. 0040 20 77 cf 21 ed 36 04 d5 9a ab fc 89 ce 59 b0 fe w.!.6.......Y.. 0050 9b f2 61 70 f4 6b ab 6e ff 52 c2 95 75 ec ed a1 ..ap.k.n.R..u... 0060 62 d8 c4 f0 43 b0 fe 82 cf 2d e7 ba c1 8b ed b8 b...C....-...... 0070 8e f4 c6 fc 3f 11 92 5e 00 0e 3a 41 0e 66 6a 35 ....?..^..:A.fj5 0080 11 2e 14 65 8f ca 90 a6 2b 88 c0 14 29 26 55 7c ...e....+...)&U| 0090 1a 18 e9 3e 6e 94 91 a2 a0 cb c0 c2 41 b2 6b b6 ...>n.......A.k. 00a0 b6 80 64 5f 1a df dc b8 d3 ec ..d_...... Frame 12 (170 bytes on wire, 170 bytes captured) Arrival Time: Jul 13, 2005 13:39:05.552046000 Time delta from previous packet: 0.089578000 seconds Time since reference or first frame: 0.974786000 seconds Frame Number: 12 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x0fc6948c (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x000f (15) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b76 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x4c92dc00 Sequence: 3 Data (124 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 f4 af 90 08 00 45 00 ...r.@..).....E. 0010 00 98 00 0f 00 00 f0 32 8b 76 a5 e3 f9 7c a5 e3 .......2.v...|.. 0020 f9 6a 4c 92 dc 00 00 00 00 03 45 07 0a 25 60 32 .jL.......E..%`2 0030 a8 4d 36 1d 81 eb 53 8b 72 b7 e6 a3 37 f3 3d c3 .M6...S.r...7.=. 0040 c7 e4 b4 29 10 9c f6 f2 52 eb 72 0a f7 5d 09 e6 ...)....R.r..].. 0050 7d 64 7a 49 da 8e b6 ac 9b 3d e6 89 56 17 2d ce }dzI.....=..V.-. 0060 43 34 44 5f 7a 67 41 01 e7 43 29 bf fc be e2 3a C4D_zgA..C)....: 0070 d8 a2 7b d4 46 80 e4 7e bb 09 fb 32 ac 05 71 10 ..{.F..~...2..q. 0080 66 dd 41 31 ed 9e 1d cf 5f 64 0c 90 34 d1 4a c6 f.A1...._d..4.J. 0090 be 04 d3 ff bb 10 04 c7 e1 31 85 a9 eb 45 9e eb .........1...E.. 00a0 62 fd 9f f1 41 ed 0f c6 94 8c b...A..... Frame 13 (170 bytes on wire, 170 bytes captured) Arrival Time: Jul 13, 2005 13:39:05.553134000 Time delta from previous packet: 0.001088000 seconds Time since reference or first frame: 0.975874000 seconds Frame Number: 13 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x62004aab (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x70c2 (28866) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xcac3 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x383b8eae Sequence: 2 Data (124 bytes) 0000 00 0c 29 f4 af 90 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 98 70 c2 00 00 40 32 ca c3 a5 e3 f9 6a a5 e3 ..p...@2.....j.. 0020 f9 7c 38 3b 8e ae 00 00 00 02 19 f0 26 61 65 67 .|8;........&aeg 0030 b7 94 7c 45 89 8e 5f 09 4a 39 c9 c2 94 40 2e ec ..|E.._.J9...@.. 0040 63 3c 8f d6 86 65 0a 94 89 fd 3c 97 6a cc 39 4a c<...e....<.j.9J 0050 57 81 5e 58 0e 9c 54 32 df c3 9b 4b 10 75 0a 4d W.^X..T2...K.u.M 0060 07 e4 8c 70 76 2f 09 b1 6e 27 7e 54 e9 2e c6 c6 ...pv/..n'~T.... 0070 69 42 e8 5c ea f5 79 9f 68 50 ff 76 79 1c 31 49 iB.\..y.hP.vy.1I 0080 2a b8 f7 a9 bc 99 d0 16 b2 32 ff 32 13 cf 78 fa *........2.2..x. 0090 f3 1c 95 02 cb 86 a3 35 fc cc 97 bb a2 a2 da df .......5........ 00a0 03 52 d4 94 64 e7 62 00 4a ab .R..d.b.J. Frame 14 (170 bytes on wire, 170 bytes captured) Arrival Time: Jul 13, 2005 13:39:06.516266000 Time delta from previous packet: 0.963132000 seconds Time since reference or first frame: 1.939006000 seconds Frame Number: 14 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xfc923d43 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0010 (16) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b75 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x4c92dc00 Sequence: 4 Data (124 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 f4 af 90 08 00 45 00 ...r.@..).....E. 0010 00 98 00 10 00 00 f0 32 8b 75 a5 e3 f9 7c a5 e3 .......2.u...|.. 0020 f9 6a 4c 92 dc 00 00 00 00 04 57 8d 90 11 c8 ad .jL.......W..... 0030 3e a1 13 4b 5f 57 b6 89 7d 58 66 b9 fa ae 0d fd >..K_W..}Xf..... 0040 b7 f7 4a 34 27 aa e3 11 2a 3d 4e 29 88 03 68 b7 ..J4'...*=N)..h. 0050 f5 78 2e d9 5f d4 a1 b1 5c 73 ea c8 be 88 94 b9 .x.._...\s...... 0060 22 f2 02 94 19 9e 1b 8f ad ed 0c 58 84 4f 46 47 "..........X.OFG 0070 0d 65 ad 97 5f 61 cd f9 55 31 8a 30 97 2b 29 8c .e.._a..U1.0.+). 0080 15 da 12 3e d3 2a 7f af ad 19 c6 bc 7e 80 59 c1 ...>.*......~.Y. 0090 ba fc aa b7 94 27 dd 04 43 90 d4 be bb 62 16 65 .....'..C....b.e 00a0 d2 ef ed 29 66 c3 fc 92 3d 43 ...)f...=C Frame 15 (170 bytes on wire, 170 bytes captured) Arrival Time: Jul 13, 2005 13:39:06.517331000 Time delta from previous packet: 0.001065000 seconds Time since reference or first frame: 1.940071000 seconds Frame Number: 15 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xa19fe777 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x70c3 (28867) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xcac2 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x383b8eae Sequence: 3 Data (124 bytes) 0000 00 0c 29 f4 af 90 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 98 70 c3 00 00 40 32 ca c2 a5 e3 f9 6a a5 e3 ..p...@2.....j.. 0020 f9 7c 38 3b 8e ae 00 00 00 03 53 37 8f 6b 64 a8 .|8;......S7.kd. 0030 e4 7b 0c 30 7a de 12 8b d2 42 39 dc 22 11 17 b6 .{.0z....B9."... 0040 2a 75 6f 94 56 c7 f2 24 79 27 3f d9 bc a6 5f 49 *uo.V..$y'?..._I 0050 b2 6c 54 ed 41 ce 1f 8a f7 5b f0 c7 9f ec c2 ba .lT.A....[...... 0060 87 90 29 96 80 00 c6 f7 6a 15 e6 f2 8b fb fc 9f ..).....j....... 0070 bf f8 08 45 06 1a 3a 38 90 99 cf dd 3f 28 ec 6a ...E..:8....?(.j 0080 a4 d6 70 14 f3 1c 58 ac 3e 1d 87 1f 48 50 27 25 ..p...X.>...HP'% 0090 5b 96 83 ad be 9a 3d da be 1c ac d6 22 01 06 e1 [.....=....."... 00a0 b2 0a 42 78 5b d2 a1 9f e7 77 ..Bx[....w Frame 16 (170 bytes on wire, 170 bytes captured) Arrival Time: Jul 13, 2005 13:39:07.535399000 Time delta from previous packet: 1.018068000 seconds Time since reference or first frame: 2.958139000 seconds Frame Number: 16 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xc2756a92 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0011 (17) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b74 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x4c92dc00 Sequence: 5 Data (124 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 f4 af 90 08 00 45 00 ...r.@..).....E. 0010 00 98 00 11 00 00 f0 32 8b 74 a5 e3 f9 7c a5 e3 .......2.t...|.. 0020 f9 6a 4c 92 dc 00 00 00 00 05 b3 58 2f d1 63 83 .jL........X/.c. 0030 ce 84 7e 1a 15 08 9e 44 72 7b 09 e8 79 e6 fb e6 ..~....Dr{..y... 0040 74 dd 84 e2 75 c1 65 bf cc 33 37 85 6b b4 a7 8d t...u.e..37.k... 0050 12 b9 7c f7 4b 90 c9 f0 a9 99 a6 d7 ca 46 5f 6e ..|.K........F_n 0060 f6 61 93 5b 92 d7 fd 1e 74 03 1a 8a 44 23 a5 d1 .a.[....t...D#.. 0070 66 d3 99 ad 59 40 b2 3f 68 a5 14 25 2f f3 75 32 f...Y@.?h..%/.u2 0080 f4 39 f5 f5 3f 9e f7 ff a8 bb 69 75 f2 cd 2e 8f .9..?.....iu.... 0090 ce 2f 11 2f 08 9a 48 ef 92 f4 8a f1 c1 56 78 ca ././..H......Vx. 00a0 18 06 4f e1 b5 2f c2 75 6a 92 ..O../.uj. Frame 17 (170 bytes on wire, 170 bytes captured) Arrival Time: Jul 13, 2005 13:39:07.536478000 Time delta from previous packet: 0.001079000 seconds Time since reference or first frame: 2.959218000 seconds Frame Number: 17 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x43c015c3 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x70c4 (28868) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xcac1 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x383b8eae Sequence: 4 Data (124 bytes) 0000 00 0c 29 f4 af 90 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 98 70 c4 00 00 40 32 ca c1 a5 e3 f9 6a a5 e3 ..p...@2.....j.. 0020 f9 7c 38 3b 8e ae 00 00 00 04 51 48 18 80 54 40 .|8;......QH..T@ 0030 a5 30 60 1d 1d 86 b6 79 7d 17 15 91 f6 aa f5 51 .0`....y}......Q 0040 31 8b dd 37 c4 e0 f7 25 1b 1c 28 75 cb 2c 88 46 1..7...%..(u.,.F 0050 7e e8 7c 61 03 07 bd 4e 44 27 9a 2b 1c 26 67 ea ~.|a...ND'.+.&g. 0060 14 03 d9 9c 8d a4 21 04 a3 f0 58 64 1f 02 b0 e2 ......!...Xd.... 0070 d1 e8 f8 fa ab 29 94 fe b8 52 82 53 28 58 43 72 .....)...R.S(XCr 0080 dd d2 1d ef 71 9b cd 8b 4c 5e 8b 93 65 a8 35 1a ....q...L^..e.5. 0090 ba 02 a2 01 18 55 64 e7 79 a5 fb c2 e9 a1 81 45 .....Ud.y......E 00a0 19 ba 0e 77 22 0e 43 c0 15 c3 ...w".C...