Frame 1 (270 bytes on wire, 270 bytes captured) Arrival Time: Sep 15, 2005 15:44:29.694208000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 270 bytes Capture Length: 270 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xcebe06dd (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x001e (30) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b23 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0x0932 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x928C41CDDD490E9C Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 13 46 3d 7d 5e 00 0c 29 f4 af 90 08 00 45 00 ..F=}^..).....E. 0010 00 fc 00 1e 00 00 40 11 3b 23 a5 e3 f9 7c a5 e3 ......@.;#...|.. 0020 f9 6c 01 f4 01 f4 00 e8 09 32 92 8c 41 cd dd 49 .l.......2..A..I 0030 0e 9c 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b .....N.$...GYL(K 0090 21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e !;....'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 ce be 06 dd .o,....R.V.... Frame 2 (270 bytes on wire, 270 bytes captured) Arrival Time: Sep 15, 2005 15:44:29.703255000 Time delta from previous packet: 0.009047000 seconds Time since reference or first frame: 0.009047000 seconds Frame Number: 2 Packet Length: 270 bytes Capture Length: 270 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0xd54119e2 (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x7dcd (32205) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0xfe72 (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0x1607 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x928C41CDDD490E9C Responder cookie: 0xFF51F8CD64FBB6E2 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 29 f4 af 90 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 00 fc 7d cd 00 00 ff 11 fe 72 a5 e3 f9 6c a5 e3 ..}......r...l.. 0020 f9 7c 01 f4 01 f4 00 e8 16 07 92 8c 41 cd dd 49 .|..........A..I 0030 0e 9c ff 51 f8 cd 64 fb b6 e2 01 10 02 00 00 00 ...Q..d......... 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 0090 01 00 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e ......'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 d5 41 19 e2 .o,....R.V.A.. Frame 3 (274 bytes on wire, 274 bytes captured) Arrival Time: Sep 15, 2005 15:44:29.714231000 Time delta from previous packet: 0.010976000 seconds Time since reference or first frame: 0.020023000 seconds Frame Number: 3 Packet Length: 274 bytes Capture Length: 274 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x8c305438 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x001f (31) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b1e (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x30ec (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x928C41CDDD490E9C Responder cookie: 0xFF51F8CD64FBB6E2 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 13 46 3d 7d 5e 00 0c 29 f4 af 90 08 00 45 00 ..F=}^..).....E. 0010 01 00 00 1f 00 00 40 11 3b 1e a5 e3 f9 7c a5 e3 ......@.;....|.. 0020 f9 6c 01 f4 01 f4 00 ec 30 ec 92 8c 41 cd dd 49 .l......0...A..I 0030 0e 9c ff 51 f8 cd 64 fb b6 e2 04 10 02 00 00 00 ...Q..d......... 0040 00 00 00 00 00 e4 0a 00 00 84 04 9d 16 19 5a 3f ..............Z? 0050 a7 03 1b f0 5d 62 e9 2d 41 a5 ef bd fc 12 53 95 ....]b.-A.....S. 0060 d7 02 ae 86 88 d7 34 63 24 5b 44 67 fe cd 6b 6c ......4c$[Dg..kl 0070 90 57 46 11 51 9a f7 03 f1 d9 29 f5 67 c5 2c 15 .WF.Q.....).g.,. 0080 47 db 7e c8 ea 67 90 40 ce 6e 4d 5f 0c 49 74 4d G.~..g.@.nM_.ItM 0090 07 3d e4 b4 c2 52 db dc 49 35 0f 9c 81 f4 c1 aa .=...R..I5...... 00a0 2f 84 3d 62 37 cc 1c 59 df 20 da de 8b 0c 66 b5 /.=b7..Y. ....f. 00b0 bd 7d 00 28 10 82 f1 19 08 33 64 6c 89 32 3d d2 .}.(.....3dl.2=. 00c0 da 1f 37 e9 77 8d fd d2 9e fa 82 00 00 14 26 b8 ..7.w.........&. 00d0 6a 00 63 9c 93 98 ff a3 64 92 fa 84 aa fc 82 00 j.c.....d....... 00e0 00 18 e6 3b bf c2 6d 73 23 df 51 45 9c 94 c2 2d ...;..ms#.QE...- 00f0 96 77 7d 0a 84 f8 00 00 00 18 b1 6f 43 2b c5 21 .w}........oC+.! 0100 34 cf ab 4e 55 8e 9c 43 a4 3a fe 13 f2 d0 8c 30 4..NU..C.:.....0 0110 54 38 T8 Frame 4 (370 bytes on wire, 370 bytes captured) Arrival Time: Sep 15, 2005 15:44:30.048640000 Time delta from previous packet: 0.334409000 seconds Time since reference or first frame: 0.354432000 seconds Frame Number: 4 Packet Length: 370 bytes Capture Length: 370 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0xe765d74a (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 352 Identification: 0x7bb3 (31667) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x0029 (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 332 Checksum: 0xfbcb (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x928C41CDDD490E9C Responder cookie: 0xFF51F8CD64FBB6E2 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 324 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0c 29 f4 af 90 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 01 60 7b b3 00 00 ff 11 00 29 a5 e3 f9 6c a5 e3 .`{......)...l.. 0020 f9 7c 01 f4 01 f4 01 4c fb cb 92 8c 41 cd dd 49 .|.....L....A..I 0030 0e 9c ff 51 f8 cd 64 fb b6 e2 04 10 02 00 00 00 ...Q..d......... 0040 00 00 00 00 01 44 0a 00 00 84 32 18 ba 2f 55 e6 .....D....2../U. 0050 0a 4b 6e f7 dd a6 15 4a 45 35 b8 49 11 5a 21 e8 .Kn....JE5.I.Z!. 0060 e1 1c 47 8d c4 72 e3 5a 77 2e 6f 0d 6a 64 0b ff ..G..r.Zw.o.jd.. 0070 75 ca d6 0d e7 93 a9 d2 f7 a4 42 d8 ed 33 fb a3 u.........B..3.. 0080 59 9c 04 7b 98 03 e3 5b 5b 46 93 92 7b 80 40 60 Y..{...[[F..{.@` 0090 f0 36 d3 6d d9 8b fe 04 4d 9c 96 12 75 68 2e d9 .6.m....M...uh.. 00a0 37 56 8e 4d 65 d8 bd 9b fc aa 73 7a 30 b5 bc 5c 7V.Me.....sz0..\ 00b0 d5 94 18 a8 51 21 bb 37 8e 13 20 82 64 b2 24 35 ....Q!.7.. .d.$5 00c0 db 6b fb 45 c4 88 f6 f9 8d 21 82 00 00 14 fe 96 .k.E.....!...... 00d0 23 4f cc 9f 08 ce 7d 59 c4 2a 60 f0 d8 f0 82 00 #O....}Y.*`..... 00e0 00 18 b1 6f 43 2b c5 21 34 cf ab 4e 55 8e 9c 43 ...oC+.!4..NU..C 00f0 a4 3a fe 13 f2 d0 82 00 00 18 d5 9a 55 26 4b 76 .:..........U&Kv 0100 31 c9 b6 2d 11 87 94 0e 4d 9d 02 90 e1 b3 82 00 1..-....M....... 0110 00 18 e6 3b bf c2 6d 73 23 df 51 45 9c 94 c2 2d ...;..ms#.QE...- 0120 96 77 7d 0a 84 f8 82 00 00 18 42 22 10 e5 61 ab .w}.......B"..a. 0130 ab ef 49 b0 9e 3e e9 a2 88 8e 6f a4 c9 9f 82 00 ..I..>....o..... 0140 00 18 f2 fa fa 58 70 29 1f 88 58 a3 46 83 15 f6 .....Xp)..X.F... 0150 1c d7 b3 1e c7 00 00 00 00 18 8e 4f fd 1f 20 bb ...........O.. . 0160 76 9f d4 2a 03 11 83 82 a3 51 d0 b8 88 a6 e7 65 v..*.....Q.....e 0170 d7 4a .J Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Sep 15, 2005 15:44:30.055940000 Time delta from previous packet: 0.007300000 seconds Time since reference or first frame: 0.361732000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x73917e0b (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0020 (32) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bb5 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x240b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x928C41CDDD490E9C Responder cookie: 0xFF51F8CD64FBB6E2 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 13 46 3d 7d 5e 00 0c 29 f4 af 90 08 00 45 00 ..F=}^..).....E. 0010 00 68 00 20 00 00 40 11 3b b5 a5 e3 f9 7c a5 e3 .h. ..@.;....|.. 0020 f9 6c 01 f4 01 f4 00 54 24 0b 92 8c 41 cd dd 49 .l.....T$...A..I 0030 0e 9c ff 51 f8 cd 64 fb b6 e2 05 10 02 01 00 00 ...Q..d......... 0040 00 00 00 00 00 4c a9 6f 0a 9f e6 95 f4 e6 be 0a .....L.o........ 0050 fa 27 b7 4b 88 29 14 8b 1b 7c c2 08 7d 46 bc 0e .'.K.)...|..}F.. 0060 2e 9f 4e 71 4b 5b 57 15 65 89 8a 97 13 c0 4c 00 ..NqK[W.e.....L. 0070 eb 33 e1 71 ce 66 73 91 7e 0b .3.q.fs.~. Frame 6 (122 bytes on wire, 122 bytes captured) Arrival Time: Sep 15, 2005 15:44:30.063484000 Time delta from previous packet: 0.007544000 seconds Time since reference or first frame: 0.369276000 seconds Frame Number: 6 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0xda332f57 (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x7d0e (32014) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0xffc5 (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x64af (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x928C41CDDD490E9C Responder cookie: 0xFF51F8CD64FBB6E2 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 f4 af 90 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 00 68 7d 0e 00 00 ff 11 ff c5 a5 e3 f9 6c a5 e3 .h}..........l.. 0020 f9 7c 01 f4 01 f4 00 54 64 af 92 8c 41 cd dd 49 .|.....Td...A..I 0030 0e 9c ff 51 f8 cd 64 fb b6 e2 05 10 02 01 00 00 ...Q..d......... 0040 00 00 00 00 00 4c ca ce b5 b1 9b c3 05 eb 1a 64 .....L.........d 0050 bb 55 dc 7a e7 ef cc de f2 5c 02 22 9b 00 e0 f5 .U.z.....\.".... 0060 3a d5 71 34 67 81 75 a3 f2 a1 cb ad 44 e2 01 ba :.q4g.u.....D... 0070 a8 34 7a 40 d2 2b da 33 2f 57 .4z@.+.3/W Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Sep 15, 2005 15:44:30.072781000 Time delta from previous packet: 0.009297000 seconds Time since reference or first frame: 0.378573000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x4152a085 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0021 (33) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ad4 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xc599 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x928C41CDDD490E9C Responder cookie: 0xFF51F8CD64FBB6E2 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDC89B27E Length: 300 Encrypted payload (272 bytes) 0000 00 13 46 3d 7d 5e 00 0c 29 f4 af 90 08 00 45 00 ..F=}^..).....E. 0010 01 48 00 21 00 00 40 11 3a d4 a5 e3 f9 7c a5 e3 .H.!..@.:....|.. 0020 f9 6c 01 f4 01 f4 01 34 c5 99 92 8c 41 cd dd 49 .l.....4....A..I 0030 0e 9c ff 51 f8 cd 64 fb b6 e2 08 10 20 01 dc 89 ...Q..d..... ... 0040 b2 7e 00 00 01 2c 5e 36 c5 9c f9 37 db 4d 3d 73 .~...,^6...7.M=s 0050 d5 94 6c c9 bb 1b 48 f8 5b 4c 07 df 02 ae ad 6e ..l...H.[L.....n 0060 a8 d0 06 fe 23 57 81 12 91 4e 40 b3 b4 a4 4a fd ....#W...N@...J. 0070 22 eb 23 95 80 4b a7 dd f3 64 7c ad 94 5b d1 b7 ".#..K...d|..[.. 0080 9e d7 1a d3 c3 e7 c9 0b 43 5a e7 e6 b5 c0 c4 3c ........CZ.....< 0090 c7 a0 b9 13 f0 4f 8e 78 26 31 64 0c 42 1c 7d 37 .....O.x&1d.B.}7 00a0 c9 ff 37 7b 53 11 3f 75 61 40 09 5a bc ed f7 6f ..7{S.?ua@.Z...o 00b0 95 7e ee a7 11 b7 42 72 de a2 41 ca d2 31 b7 55 .~....Br..A..1.U 00c0 c9 02 43 e0 de 2a b2 23 8c fa 6e c4 3d 51 47 64 ..C..*.#..n.=QGd 00d0 5e c0 2b 62 35 1c 8d 70 24 5a 6a b2 24 c8 a7 b7 ^.+b5..p$Zj.$... 00e0 18 41 25 fa 5d 5c 65 41 44 ee bd 48 58 35 9c c8 .A%.]\eAD..HX5.. 00f0 ba 50 c9 a5 3f ea 91 50 bc be bf 46 e0 32 2b ee .P..?..P...F.2+. 0100 2f 14 7f 12 8d 45 2e 5f 5a ef 28 59 7d 7d fb c8 /....E._Z.(Y}}.. 0110 ff 85 23 ff dc 26 37 e4 36 f7 8a dd 05 3f 2b de ..#..&7.6....?+. 0120 d8 03 a8 83 f8 86 18 06 4f 29 13 12 59 ad a2 2d ........O)..Y..- 0130 c6 e9 80 8b 17 30 84 59 83 1b 26 03 1c 8e c2 82 .....0.Y..&..... 0140 a3 1e 87 5d 31 43 71 75 94 59 78 f0 3e cc 13 32 ...]1Cqu.Yx.>..2 0150 bf 9b 9f 12 f2 cb 41 52 a0 85 ......AR.. Frame 8 (346 bytes on wire, 346 bytes captured) Arrival Time: Sep 15, 2005 15:44:30.244819000 Time delta from previous packet: 0.172038000 seconds Time since reference or first frame: 0.550611000 seconds Frame Number: 8 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0x1e3984fa (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x7de7 (32231) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0xfe0c (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xc67f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x928C41CDDD490E9C Responder cookie: 0xFF51F8CD64FBB6E2 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDC89B27E Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 f4 af 90 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 01 48 7d e7 00 00 ff 11 fe 0c a5 e3 f9 6c a5 e3 .H}..........l.. 0020 f9 7c 01 f4 01 f4 01 34 c6 7f 92 8c 41 cd dd 49 .|.....4....A..I 0030 0e 9c ff 51 f8 cd 64 fb b6 e2 08 10 20 01 dc 89 ...Q..d..... ... 0040 b2 7e 00 00 01 2c 2f 43 76 81 f3 49 5c c8 c6 e3 .~...,/Cv..I\... 0050 11 a5 8c 3b 47 63 7e 77 86 c7 0e 39 d7 dc 82 7d ...;Gc~w...9...} 0060 c2 eb c3 81 4f 47 e2 0f 24 c1 7d ed c6 50 63 70 ....OG..$.}..Pcp 0070 a3 cc 80 7e 27 ac 66 4a 7d 78 d4 6c 5b 67 12 39 ...~'.fJ}x.l[g.9 0080 96 44 0d 0d f1 99 a3 1a ff 2c 52 56 77 0c d7 ee .D.......,RVw... 0090 8b c3 30 28 80 ee 32 c0 19 48 30 c5 02 59 ef 82 ..0(..2..H0..Y.. 00a0 f0 f1 aa 80 87 31 08 65 99 54 f9 b5 22 d5 7a bb .....1.e.T..".z. 00b0 cf 6f a3 fe 9c dc 31 9b f3 7a d9 12 43 2b e1 d5 .o....1..z..C+.. 00c0 ca bf 1e ca c4 78 f9 6c 77 ca 7f a7 6e 89 a9 c4 .....x.lw...n... 00d0 31 0e 4e 42 12 f0 5a 0b 72 78 06 14 65 89 10 7d 1.NB..Z.rx..e..} 00e0 06 fe 5d b9 c4 32 15 13 f7 dd 19 15 1b b6 6e e2 ..]..2........n. 00f0 bd 4f 0d 5d a8 4b e8 2e 08 a6 6f a2 61 55 82 42 .O.].K....o.aU.B 0100 93 56 66 f1 29 db df f5 b8 cb 6e 50 0f 37 26 e7 .Vf.).....nP.7&. 0110 7c 39 f6 60 fa 56 c7 3b 18 e7 fd 6e 4e d7 40 c0 |9.`.V.;...nN.@. 0120 6e 31 f0 b9 20 0e e7 27 de 34 de 65 46 e7 84 9d n1.. ..'.4.eF... 0130 6b a7 3d 05 46 88 46 ea 2b ac e6 6f f6 fe 00 6d k.=.F.F.+..o...m 0140 ab 17 be c7 58 ef 01 a5 3e c4 1a c3 8e 15 de f3 ....X...>....... 0150 94 34 e5 0d be be 1e 39 84 fa .4.....9.. Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Sep 15, 2005 15:44:30.253709000 Time delta from previous packet: 0.008890000 seconds Time since reference or first frame: 0.559501000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xcf94f163 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0022 (34) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bc3 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x1627 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x928C41CDDD490E9C Responder cookie: 0xFF51F8CD64FBB6E2 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDC89B27E Length: 60 Encrypted payload (32 bytes) 0000 00 13 46 3d 7d 5e 00 0c 29 f4 af 90 08 00 45 00 ..F=}^..).....E. 0010 00 58 00 22 00 00 40 11 3b c3 a5 e3 f9 7c a5 e3 .X."..@.;....|.. 0020 f9 6c 01 f4 01 f4 00 44 16 27 92 8c 41 cd dd 49 .l.....D.'..A..I 0030 0e 9c ff 51 f8 cd 64 fb b6 e2 08 10 20 01 dc 89 ...Q..d..... ... 0040 b2 7e 00 00 00 3c 66 d4 7b d7 28 94 4a 50 ba 00 .~...Y.....,."..ApN 00a0 f6 ea f5 8a e9 0e 40 f8 4d 3b ......@.M; Frame 11 (170 bytes on wire, 170 bytes captured) Arrival Time: Sep 15, 2005 15:44:30.624144000 Time delta from previous packet: 0.084780000 seconds Time since reference or first frame: 0.929936000 seconds Frame Number: 11 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xf67db00f (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x000f (15) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b74 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.108 (165.227.249.108) Encapsulating Security Payload SPI: 0x1ba11f92 Sequence: 3 Data (124 bytes) 0000 00 13 46 3d 7d 5e 00 0c 29 f4 af 90 08 00 45 00 ..F=}^..).....E. 0010 00 98 00 0f 00 00 f0 32 8b 74 a5 e3 f9 7c a5 e3 .......2.t...|.. 0020 f9 6c 1b a1 1f 92 00 00 00 03 11 21 ba d4 bb bb .l.........!.... 0030 c3 a7 c8 86 8a c6 b3 14 b1 b8 bd 28 a9 f4 4b fb ...........(..K. 0040 f8 cb 50 18 a7 fb fd 39 24 d6 44 56 af 15 c1 26 ..P....9$.DV...& 0050 82 61 5b 24 5d fc 0b 56 0c cd 9d 8d 0f 8d 08 bf .a[$]..V........ 0060 f3 4f 02 71 9f 71 df 94 8c e1 e7 17 14 e4 00 96 .O.q.q.......... 0070 14 34 dd 08 df 93 17 12 85 79 06 27 0b 74 20 d7 .4.......y.'.t . 0080 36 32 65 f8 b8 e5 9d 0a b2 c8 15 8b 21 e0 56 b8 62e.........!.V. 0090 3f b3 33 2f 7f 21 45 05 83 80 93 b1 b2 db f4 4f ?.3/.!E........O 00a0 cd dc 50 ea dd cf f6 7d b0 0f ..P....}.. Frame 12 (170 bytes on wire, 170 bytes captured) Arrival Time: Sep 15, 2005 15:44:31.638231000 Time delta from previous packet: 1.014087000 seconds Time since reference or first frame: 1.944023000 seconds Frame Number: 12 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xb06a8446 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0010 (16) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b73 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.108 (165.227.249.108) Encapsulating Security Payload SPI: 0x1ba11f92 Sequence: 4 Data (124 bytes) 0000 00 13 46 3d 7d 5e 00 0c 29 f4 af 90 08 00 45 00 ..F=}^..).....E. 0010 00 98 00 10 00 00 f0 32 8b 73 a5 e3 f9 7c a5 e3 .......2.s...|.. 0020 f9 6c 1b a1 1f 92 00 00 00 04 25 34 90 18 65 2f .l........%4..e/ 0030 48 fe 0e 34 8b 1c b6 d4 4c 86 64 69 70 41 88 e9 H..4....L.dipA.. 0040 09 1f e1 14 92 e8 e1 8b 22 4c 42 8a 32 63 92 83 ........"LB.2c.. 0050 22 75 8d 3f 5f 1e 5d 96 d6 d0 74 5c ab 14 a8 5e "u.?_.]...t\...^ 0060 b5 ef c1 90 bc 69 51 9f e5 21 61 dc 67 e7 98 3a .....iQ..!a.g..: 0070 ac ee 0d ee 87 40 24 de 40 e1 12 c8 97 6d c7 b9 .....@$.@....m.. 0080 32 56 5b 63 e0 74 5c be ec 15 2f ea b6 5f 7f 03 2V[c.t\.../.._.. 0090 82 5a 5f 3e 26 ec 59 39 3b d7 e5 47 1e d4 fa b1 .Z_>&.Y9;..G.... 00a0 94 ed 77 78 3f 3c b0 6a 84 46 ..wx?<.j.F Frame 13 (170 bytes on wire, 170 bytes captured) Arrival Time: Sep 15, 2005 15:44:31.639912000 Time delta from previous packet: 0.001681000 seconds Time since reference or first frame: 1.945704000 seconds Frame Number: 13 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0xb707efae (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x7eeb (32491) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x0c98 (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x0ed0874d Sequence: 1 Data (124 bytes) 0000 00 0c 29 f4 af 90 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 00 98 7e eb 00 00 f0 32 0c 98 a5 e3 f9 6c a5 e3 ..~....2.....l.. 0020 f9 7c 0e d0 87 4d 00 00 00 01 00 7f 00 00 f0 32 .|...M.........2 0030 8b 04 a5 e3 f9 6c a5 e3 f9 7c 4b a6 3d 7f 6a c4 .....l...|K.=.j. 0040 aa 11 70 44 92 23 03 2b 8f 1b 94 2c cb 37 b3 23 ..pD.#.+...,.7.# 0050 83 2b 44 21 5f 97 dc 89 26 48 d0 fd ad 0e 90 24 .+D!_...&H.....$ 0060 05 d0 0f a0 73 a6 e9 08 d2 fa 00 d0 a9 9e 1b 5a ....s..........Z 0070 72 e4 97 b1 0c f3 8b f7 59 f9 8c 4e 99 f5 78 75 r.......Y..N..xu 0080 38 06 77 fd b1 86 db e9 54 65 0b 07 f6 4c a0 d3 8.w.....Te...L.. 0090 a7 4d 88 3c d9 80 fb 68 f7 43 e0 55 fa 31 51 09 .M.<...h.C.U.1Q. 00a0 6e 9c 32 66 2c fe b7 07 ef ae n.2f,..... Frame 14 (170 bytes on wire, 170 bytes captured) Arrival Time: Sep 15, 2005 15:44:32.614872000 Time delta from previous packet: 0.974960000 seconds Time since reference or first frame: 2.920664000 seconds Frame Number: 14 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xca64a50f (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0011 (17) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b72 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.108 (165.227.249.108) Encapsulating Security Payload SPI: 0x1ba11f92 Sequence: 5 Data (124 bytes) 0000 00 13 46 3d 7d 5e 00 0c 29 f4 af 90 08 00 45 00 ..F=}^..).....E. 0010 00 98 00 11 00 00 f0 32 8b 72 a5 e3 f9 7c a5 e3 .......2.r...|.. 0020 f9 6c 1b a1 1f 92 00 00 00 05 19 a5 06 7b fe 1d .l...........{.. 0030 dd fe 6a 4b c3 93 dc c9 fe e6 e7 27 0d 8f 96 b2 ..jK.......'.... 0040 dc a3 d7 2d cf 45 c7 d0 c9 4c 6b 7a 91 7e ef 64 ...-.E...Lkz.~.d 0050 ef 75 0a 1d eb af a7 af e1 1e db f4 91 ad 4d cf .u............M. 0060 04 08 b9 13 7e 5a 1f 1d 0c 67 c1 d2 f4 fd f1 b0 ....~Z...g...... 0070 2b 8b 6a 12 ef f4 5b 01 bb bb 8c c5 ec 81 1f a0 +.j...[......... 0080 e1 87 02 03 b0 67 1c 67 23 ae 3a 55 e3 93 77 7b .....g.g#.:U..w{ 0090 cb df 25 98 05 dc d7 2b 29 e1 c3 d6 c6 7d e3 2b ..%....+)....}.+ 00a0 d5 56 d2 a3 3f 04 ca 64 a5 0f .V..?..d.. Frame 15 (170 bytes on wire, 170 bytes captured) Arrival Time: Sep 15, 2005 15:44:32.616315000 Time delta from previous packet: 0.001443000 seconds Time since reference or first frame: 2.922107000 seconds Frame Number: 15 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0xebed4e63 (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x7fe8 (32744) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x0b9b (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x0ed0874d Sequence: 2 Data (124 bytes) 0000 00 0c 29 f4 af 90 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 00 98 7f e8 00 00 f0 32 0b 9b a5 e3 f9 6c a5 e3 .......2.....l.. 0020 f9 7c 0e d0 87 4d 00 00 00 02 00 80 00 00 f0 32 .|...M.........2 0030 8b 03 a5 e3 f9 6c a5 e3 f9 7c 77 89 86 fd 1a 84 .....l...|w..... 0040 0e 51 62 b3 82 39 69 1a 62 66 af 87 52 b8 52 ec .Qb..9i.bf..R.R. 0050 ca 99 f8 53 d3 de 02 28 58 8f 2d 89 7a 29 0d 12 ...S...(X.-.z).. 0060 42 90 34 b4 53 7c b6 66 c9 04 54 1f be 90 47 64 B.4.S|.f..T...Gd 0070 cc 4d 72 bb 76 6c 4e 88 fb fd 4e 56 47 9a 00 53 .Mr.vlN...NVG..S 0080 a7 82 67 13 5a 4f 6f e5 f0 2f a3 60 83 ef 4e 8d ..g.ZOo../.`..N. 0090 22 6d 1d 90 51 4f 18 df 3a fc fe dc f5 94 07 2b "m..QO..:......+ 00a0 55 04 5d 2d 2a d4 eb ed 4e 63 U.]-*...Nc