Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Nov 20, 2007 16:30:06.627750000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Destination: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x0139 (313) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x39ee [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0x6042 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x1FEEDB9E4EA31EE5 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 29 9c c5 d4 00 0c 29 f4 af 90 08 00 45 00 ..).....).....E. 0010 00 fc 01 39 00 00 40 11 39 ee a5 e3 f9 7c a5 e3 ...9..@.9....|.. 0020 f9 86 01 f4 01 f4 00 e8 60 42 1f ee db 9e 4e a3 ........`B....N. 0030 1e e5 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b .....N.$...GYL(K 0090 21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e !;....'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 .o,....R.V Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: Nov 20, 2007 16:30:06.811921000 Time delta from previous packet: 0.184171000 seconds Time since reference or first frame: 0.184171000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x500c (20492) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xeba6 [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x2ea3 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x1FEEDB9E4EA31EE5 Responder cookie: 0x47050C5EE42FF806 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Key-Length (14): Key-Length (128) 0000 00 0c 29 f4 af 90 00 0c 29 9c c5 d4 08 00 45 00 ..).....).....E. 0010 00 70 50 0c 00 00 40 11 eb a6 a5 e3 f9 86 a5 e3 .pP...@......... 0020 f9 7c 01 f4 01 f4 00 5c 2e a3 1f ee db 9e 4e a3 .|.....\......N. 0030 1e e5 47 05 0c 5e e4 2f f8 06 01 10 02 00 00 00 ..G..^./........ 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 80 0e 00 80 ........p..... Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Nov 20, 2007 16:30:06.816526000 Time delta from previous packet: 0.004605000 seconds Time since reference or first frame: 0.188776000 seconds Frame Number: 3 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Destination: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x013a (314) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a19 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x27b2 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x1FEEDB9E4EA31EE5 Responder cookie: 0x47050C5EE42FF806 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 9c c5 d4 00 0c 29 f4 af 90 08 00 45 00 ..).....).....E. 0010 00 d0 01 3a 00 00 40 11 3a 19 a5 e3 f9 7c a5 e3 ...:..@.:....|.. 0020 f9 86 01 f4 01 f4 00 bc 27 b2 1f ee db 9e 4e a3 ........'.....N. 0030 1e e5 47 05 0c 5e e4 2f f8 06 04 10 02 00 00 00 ..G..^./........ 0040 00 00 00 00 00 b4 0a 00 00 84 63 cb 44 1a a0 9a ..........c.D... 0050 38 d1 39 c2 96 f6 b4 ca fe d5 93 83 04 92 49 f0 8.9...........I. 0060 a7 0f b4 91 ee d7 30 ad 0b 7b 00 5b 35 a2 b5 83 ......0..{.[5... 0070 21 cf 48 c9 99 aa 3c 2d 60 20 0c d0 50 cb ee fc !.H...<-` ..P... 0080 95 9b 12 cd d4 8d 6d f5 3c 26 1a 29 91 35 e7 2d ......m.<&.).5.- 0090 79 d3 81 49 54 54 10 73 2e 5a a5 71 be 2a 93 d1 y..ITT.s.Z.q.*.. 00a0 df e1 bd fa 32 52 11 01 98 e8 b4 3c 48 aa fc 8d ....2R.....X*.j....2:.B.. 0080 55 26 06 8d 31 a4 25 03 1e 41 aa 6e 9a 13 b1 ae U&..1.%..A.n.... 0090 c0 3c f2 86 76 4e 17 a3 fd f3 a3 72 6c 14 ba a7 .<..vN.....rl... 00a0 ed e7 14 a7 5e f0 98 41 ca 27 10 0f f4 2a b2 7f ....^..A.'...*.. 00b0 5e b1 d0 c0 00 64 03 76 5c 52 cd 41 59 f5 ea c3 ^....d.v\R.AY... 00c0 12 1a f2 7b 9f 94 99 78 d9 66 91 7b 58 2d ce 35 ...{...x.f.{X-.5 00d0 74 f4 a0 08 f8 28 1e 45 55 b4 3e cc a3 58 c5 63 t....(.EU.>..X.c 00e0 ee 37 92 d1 99 f8 76 e6 f1 d4 20 e1 65 38 f1 bc .7....v... .e8.. 00f0 ec 04 2f 1d 7d 11 90 ed c8 8b 18 b9 97 46 6f e2 ../.}........Fo. 0100 08 d4 28 e2 1d 25 52 c8 9f 3e 67 1a 1e e0 aa 39 ..(..%R..>g....9 0110 05 40 e4 b3 ab b1 8b 2e c0 2b f0 67 9a ee 5d 95 .@.......+.g..]. 0120 ec 34 e7 9d 73 35 04 af 86 05 fb bf f0 d9 5f 84 .4..s5........_. 0130 70 07 53 3d 25 80 29 8a 86 5e 6e 22 14 9e 9e a0 p.S=%.)..^n".... 0140 80 69 4f 78 22 65 1c fa b9 29 74 32 ce 5e 43 40 .iOx"e...)t2.^C@ 0150 f7 eb 10 1d 61 0c ....a. Frame 8 (390 bytes on wire, 390 bytes captured) Arrival Time: Nov 20, 2007 16:30:07.372084000 Time delta from previous packet: 0.244355000 seconds Time since reference or first frame: 0.744334000 seconds Frame Number: 8 Packet Length: 390 bytes Capture Length: 390 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 376 Identification: 0x530c (21260) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe79e [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 356 Checksum: 0xa41a [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x1FEEDB9E4EA31EE5 Responder cookie: 0x47050C5EE42FF806 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x36BC12AE Length: 348 Encrypted payload (320 bytes) 0000 00 0c 29 f4 af 90 00 0c 29 9c c5 d4 08 00 45 00 ..).....).....E. 0010 01 78 53 0c 00 00 40 11 e7 9e a5 e3 f9 86 a5 e3 .xS...@......... 0020 f9 7c 01 f4 01 f4 01 64 a4 1a 1f ee db 9e 4e a3 .|.....d......N. 0030 1e e5 47 05 0c 5e e4 2f f8 06 08 10 20 01 36 bc ..G..^./.... .6. 0040 12 ae 00 00 01 5c 3a ff be 0c b4 73 2d 7e d2 df .....\:....s-~.. 0050 5b 35 bf a5 34 23 7b db 35 0a 27 98 9f d6 9f e8 [5..4#{.5.'..... 0060 24 00 40 55 fb ea 10 44 ff 92 6a 8a ed 14 98 db $.@U...D..j..... 0070 76 67 7a 57 1c 0e 5c 67 74 8f 6f 06 0d 3f 59 1a vgzW..\gt.o..?Y. 0080 81 07 5f 66 fe 79 b6 0a ed 05 69 12 a0 89 4a 84 .._f.y....i...J. 0090 5e ba be ae 9d ee 43 32 06 9f 27 09 c3 c7 90 09 ^.....C2..'..... 00a0 43 c3 a5 ad ac fb dc 3b 59 c2 82 0f 7a b9 8b a5 C......;Y...z... 00b0 f1 02 14 a7 50 9e 22 31 94 41 13 e8 35 05 35 be ....P."1.A..5.5. 00c0 df fb b6 b2 dd e3 53 3c 00 a1 46 c9 40 2a 82 ae ......S<..F.@*.. 00d0 2f 5d cd 96 d1 87 a7 c0 1d a8 57 9a 0d 3c 6c ba /]........W........)8l....; 00f0 b0 e9 53 d3 46 4e 3e e5 ca b6 e8 66 8c 6c f9 02 ..S.FN>....f.l.. 0100 90 15 55 2c ec 97 9a bc bd 85 a7 92 67 1b 10 d1 ..U,........g... 0110 8b 00 1d db 0a 46 ae 54 7a 39 56 8e 29 54 50 75 .....F.Tz9V.)TPu 0120 13 32 c1 0b 2a 66 d7 67 c6 97 1b e1 49 67 32 34 .2..*f.g....Ig24 0130 84 b3 c0 f4 2c d1 37 38 c6 b7 d4 5c 54 e3 65 09 ....,.78...\T.e. 0140 65 04 a4 6a 5a 60 ec e7 97 01 77 e0 17 ab 9a c5 e..jZ`....w..... 0150 52 60 b8 3f 44 ad 84 90 2a 5f 86 06 b2 90 80 ed R`.?D...*_...... 0160 49 08 48 79 f3 42 5e 9c 09 c1 dc c9 7f de 98 1a I.Hy.B^......... 0170 18 27 03 c5 30 a9 b3 8a 15 d7 56 5c 52 02 ab 93 .'..0.....V\R... 0180 ee 3e 48 88 e3 0f .>H... Frame 9 (102 bytes on wire, 102 bytes captured) Arrival Time: Nov 20, 2007 16:30:07.377729000 Time delta from previous packet: 0.005645000 seconds Time since reference or first frame: 0.749979000 seconds Frame Number: 9 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Destination: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x013d (317) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a8e [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x3440 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x1FEEDB9E4EA31EE5 Responder cookie: 0x47050C5EE42FF806 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x36BC12AE Length: 60 Encrypted payload (32 bytes) 0000 00 0c 29 9c c5 d4 00 0c 29 f4 af 90 08 00 45 00 ..).....).....E. 0010 00 58 01 3d 00 00 40 11 3a 8e a5 e3 f9 7c a5 e3 .X.=..@.:....|.. 0020 f9 86 01 f4 01 f4 00 44 34 40 1f ee db 9e 4e a3 .......D4@....N. 0030 1e e5 47 05 0c 5e e4 2f f8 06 08 10 20 01 36 bc ..G..^./.... .6. 0040 12 ae 00 00 00 3c 98 97 5a 7a 9e 72 0b 1d b4 bb .....<..Zz.r.... 0050 61 ea 81 57 e4 a4 02 41 b3 fd 12 6e 5a 48 2b ca a..W...A...nZH+. 0060 42 f3 ae 0d 25 08 B...%. Frame 10 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 20, 2007 16:30:07.715720000 Time delta from previous packet: 0.337991000 seconds Time since reference or first frame: 1.087970000 seconds Frame Number: 10 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Destination: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0047 (71) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b42 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x8be629e6 Sequence: 2 Data (92 bytes) 0000 00 0c 29 9c c5 d4 00 0c 29 f4 af 90 08 00 45 00 ..).....).....E. 0010 00 78 00 47 00 00 f0 32 8b 42 a5 e3 f9 7c a5 e3 .x.G...2.B...|.. 0020 f9 86 8b e6 29 e6 00 00 00 02 bf 36 54 17 e1 f8 ....)......6T... 0030 8a 20 b1 a1 b4 09 a0 59 3f 5c dd 9a f7 89 4e 7c . .....Y?\....N| 0040 92 d3 a1 46 9f a0 b8 9d ea 93 a3 f7 51 f2 21 2b ...F........Q.!+ 0050 6c fc 67 21 c4 f2 91 d7 d3 1a b4 02 07 a1 ed 6e l.g!...........n 0060 41 1c 98 f7 11 2a 25 c9 74 ad 3b f7 4e 76 af 8a A....*%.t.;.Nv.. 0070 9f c3 30 ca e7 56 97 87 27 87 c7 1d 5c 0d 95 c4 ..0..V..'...\... 0080 36 f6 b0 e1 6d 83 6...m. Frame 11 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 20, 2007 16:30:07.734874000 Time delta from previous packet: 0.019154000 seconds Time since reference or first frame: 1.107124000 seconds Frame Number: 11 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x560c (22028) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0xa67d [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xf3ca29ee Sequence: 1 Data (92 bytes) 0000 00 0c 29 f4 af 90 00 0c 29 9c c5 d4 08 00 45 00 ..).....).....E. 0010 00 78 56 0c 00 00 7f 32 a6 7d a5 e3 f9 86 a5 e3 .xV....2.}...... 0020 f9 7c f3 ca 29 ee 00 00 00 01 41 de 6d 50 21 e4 .|..).....A.mP!. 0030 0a e6 63 a0 5b 19 8a ac 3d 0f 7a 50 f0 67 4a c4 ..c.[...=.zP.gJ. 0040 76 b8 88 20 3a b4 3d 7b c6 71 64 38 7e bb 64 8e v.. :.={.qd8~.d. 0050 06 09 16 41 e0 3e d2 a9 64 46 bb 90 41 dc 45 63 ...A.>..dF..A.Ec 0060 7e 6f 77 1e a0 de 03 84 13 e3 af 2d f0 19 37 0f ~ow........-..7. 0070 b1 18 ad de ce e3 85 ed 36 40 43 cf 14 70 95 c2 ........6@C..p.. 0080 50 33 5c c2 29 4f P3\.)O Frame 12 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 20, 2007 16:30:07.737443000 Time delta from previous packet: 0.002569000 seconds Time since reference or first frame: 1.109693000 seconds Frame Number: 12 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Destination: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0048 (72) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b41 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x8be629e6 Sequence: 3 Data (92 bytes) 0000 00 0c 29 9c c5 d4 00 0c 29 f4 af 90 08 00 45 00 ..).....).....E. 0010 00 78 00 48 00 00 f0 32 8b 41 a5 e3 f9 7c a5 e3 .x.H...2.A...|.. 0020 f9 86 8b e6 29 e6 00 00 00 03 14 1c 50 2e ec be ....).......P... 0030 20 b6 2f be 3b ce 38 14 c0 de d4 d2 69 89 a9 0e ./.;.8.....i... 0040 5a 51 6a 6d 3e 17 69 92 9d 1c de f6 25 7f 0d 73 ZQjm>.i.....%..s 0050 65 50 b5 58 60 5d cb 9c 88 99 80 6b 08 e4 4d 7a eP.X`].....k..Mz 0060 2d 15 b5 f0 bb 22 07 ae 6f 29 91 b2 43 6f ef 9c -...."..o)..Co.. 0070 83 2a b2 b6 ba e5 ae d3 0e cf b6 41 fc 0a f8 60 .*.........A...` 0080 9f db 26 ca 60 c8 ..&.`. Frame 13 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 20, 2007 16:30:07.755277000 Time delta from previous packet: 0.017834000 seconds Time since reference or first frame: 1.127527000 seconds Frame Number: 13 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x580c (22540) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0xa47d [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xf3ca29ee Sequence: 2 Data (92 bytes) 0000 00 0c 29 f4 af 90 00 0c 29 9c c5 d4 08 00 45 00 ..).....).....E. 0010 00 78 58 0c 00 00 7f 32 a4 7d a5 e3 f9 86 a5 e3 .xX....2.}...... 0020 f9 7c f3 ca 29 ee 00 00 00 02 41 de 6d 50 21 e4 .|..).....A.mP!. 0030 0a e6 63 a0 5b 19 8a ac 3d 0f 39 49 1e 4b 47 b6 ..c.[...=.9I.KG. 0040 69 06 17 0b 28 5f 19 b1 e9 b6 54 c7 92 34 6f f9 i...(_....T..4o. 0050 d0 49 ed 6d c8 fc 0e c2 61 2b 68 26 1c 12 22 55 .I.m....a+h&.."U 0060 81 7d 4e 4c 72 d0 5b b5 06 4d ac 53 c4 96 0e b7 .}NLr.[..M.S.... 0070 99 d3 b4 f2 6f b4 9f fa cf 5c d3 82 12 55 98 82 ....o....\...U.. 0080 5f fd 97 be e9 14 _..... Frame 14 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 20, 2007 16:30:09.194013000 Time delta from previous packet: 1.438736000 seconds Time since reference or first frame: 2.566263000 seconds Frame Number: 14 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Destination: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0049 (73) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b40 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x8be629e6 Sequence: 4 Data (92 bytes) 0000 00 0c 29 9c c5 d4 00 0c 29 f4 af 90 08 00 45 00 ..).....).....E. 0010 00 78 00 49 00 00 f0 32 8b 40 a5 e3 f9 7c a5 e3 .x.I...2.@...|.. 0020 f9 86 8b e6 29 e6 00 00 00 04 7e 63 68 0c 1a 68 ....).....~ch..h 0030 e2 c8 59 c4 16 e9 ee 3d eb a9 8f 57 70 28 52 c2 ..Y....=...Wp(R. 0040 ef 5f f5 2d 5d ba e1 21 85 62 35 ff 88 66 ca 2c ._.-]..!.b5..f., 0050 af ee a1 f4 82 94 08 c4 24 cb d4 b3 c8 83 b7 61 ........$......a 0060 e2 4a 38 12 91 ac 42 09 27 b3 6d 40 34 a1 fa c5 .J8...B.'.m@4... 0070 ba 48 29 e2 dc e2 1f 80 b2 10 fd f8 c8 5e 40 c3 .H)..........^@. 0080 4a 8a 99 79 6b f3 J..yk. Frame 15 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 20, 2007 16:30:09.206843000 Time delta from previous packet: 0.012830000 seconds Time since reference or first frame: 2.579093000 seconds Frame Number: 15 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x5a0c (23052) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0xa27d [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xf3ca29ee Sequence: 3 Data (92 bytes) 0000 00 0c 29 f4 af 90 00 0c 29 9c c5 d4 08 00 45 00 ..).....).....E. 0010 00 78 5a 0c 00 00 7f 32 a2 7d a5 e3 f9 86 a5 e3 .xZ....2.}...... 0020 f9 7c f3 ca 29 ee 00 00 00 03 41 de 6d 50 21 e4 .|..).....A.mP!. 0030 0a e6 63 a0 5b 19 8a ac 3d 0f 1f 64 4e 58 23 06 ..c.[...=..dNX#. 0040 f2 8b 2f bc 47 d4 26 d6 8d e2 2f 39 0e b8 ef 3a ../.G.&.../9...: 0050 be 92 6a 44 a7 91 34 90 a9 10 e0 14 8d a8 69 46 ..jD..4.......iF 0060 17 0c 42 d5 10 c1 b6 9a f9 80 0c ae 24 fa 5a ca ..B.........$.Z. 0070 e1 f3 26 28 1c b3 b6 70 a5 50 a4 df 6e 4b 97 9f ..&(...p.P..nK.. 0080 51 d9 7a db 41 c1 Q.z.A. Frame 16 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 20, 2007 16:30:10.557618000 Time delta from previous packet: 1.350775000 seconds Time since reference or first frame: 3.929868000 seconds Frame Number: 16 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Destination: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x004a (74) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b3f [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x8be629e6 Sequence: 5 Data (92 bytes) 0000 00 0c 29 9c c5 d4 00 0c 29 f4 af 90 08 00 45 00 ..).....).....E. 0010 00 78 00 4a 00 00 f0 32 8b 3f a5 e3 f9 7c a5 e3 .x.J...2.?...|.. 0020 f9 86 8b e6 29 e6 00 00 00 05 da a3 c2 de 49 e9 ....).........I. 0030 a6 06 64 7b 5a 01 8b 10 cb 73 40 8c 82 e1 d7 c1 ..d{Z....s@..... 0040 9a 9e 84 cb 23 53 ce c8 d2 8e ce 43 4b 42 af 4b ....#S.....CKB.K 0050 ff 66 14 4c 4d d5 3a e6 6e 1a 4b 74 4f 2e d3 0a .f.LM.:.n.KtO... 0060 fd 44 61 e6 e3 1b e1 3a 39 18 ee b5 80 6b ce e4 .Da....:9....k.. 0070 d9 da dd b6 5b 2d 7b 70 55 70 db 21 23 31 de 41 ....[-{pUp.!#1.A 0080 e7 9d 6a 90 04 81 ..j... Frame 17 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 20, 2007 16:30:10.585201000 Time delta from previous packet: 0.027583000 seconds Time since reference or first frame: 3.957451000 seconds Frame Number: 17 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x5c0c (23564) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0xa07d [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xf3ca29ee Sequence: 4 Data (92 bytes) 0000 00 0c 29 f4 af 90 00 0c 29 9c c5 d4 08 00 45 00 ..).....).....E. 0010 00 78 5c 0c 00 00 7f 32 a0 7d a5 e3 f9 86 a5 e3 .x\....2.}...... 0020 f9 7c f3 ca 29 ee 00 00 00 04 41 de 6d 50 21 e4 .|..).....A.mP!. 0030 0a e6 63 a0 5b 19 8a ac 3d 0f b6 29 ec 7f a2 05 ..c.[...=..).... 0040 09 41 2e 83 48 66 ac 95 ba 0d 20 7e ec 34 77 34 .A..Hf.... ~.4w4 0050 75 b0 36 2b 57 b3 67 44 0a 71 36 4d dd 07 fc 58 u.6+W.gD.q6M...X 0060 06 84 ba 07 8a 9d a0 75 d1 9c be a2 02 37 13 a9 .......u.....7.. 0070 c1 14 ef 70 46 53 ed d8 f1 78 e2 94 4b 5d 76 b1 ...pFS...x..K]v. 0080 75 20 fb 49 a7 87 u .I..