Frame 1 (270 bytes on wire, 270 bytes captured) Arrival Time: Sep 13, 2005 12:20:22.420141000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 270 bytes Capture Length: 270 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:80:c8:ca:a8:82 Destination: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x58cd977c (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x001e (30) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b0d (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.130 (165.227.249.130) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0xa0bb (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x02333A126DC27E98 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 80 c8 ca a8 82 00 0c 29 f4 af 90 08 00 45 00 ........).....E. 0010 00 fc 00 1e 00 00 40 11 3b 0d a5 e3 f9 7c a5 e3 ......@.;....|.. 0020 f9 82 01 f4 01 f4 00 e8 a0 bb 02 33 3a 12 6d c2 ...........3:.m. 0030 7e 98 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ~............... 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b .....N.$...GYL(K 0090 21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e !;....'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 58 cd 97 7c .o,....R.VX..| Frame 2 (190 bytes on wire, 190 bytes captured) Arrival Time: Sep 13, 2005 12:20:22.421377000 Time delta from previous packet: 0.001236000 seconds Time since reference or first frame: 0.001236000 seconds Frame Number: 2 Packet Length: 190 bytes Capture Length: 190 bytes Ethernet II, Src: 00:80:c8:ca:a8:82, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Type: IP (0x0800) Frame check sequence: 0x892cc36c (correct) Internet Protocol, Src Addr: 165.227.249.130 (165.227.249.130), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 172 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb7a (correct) Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 152 Checksum: 0x0f33 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x02333A126DC27E98 Responder cookie: 0x169630047A91CF83 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 144 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0xBAEB239037E17787D730EED9D95D48AA Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0xC573B056D7FACA36C2FBA28374127CBF Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x431CFC9292A0595D7592FEBEA586AD19 0000 00 0c 29 f4 af 90 00 80 c8 ca a8 82 08 00 45 00 ..)...........E. 0010 00 ac 00 00 40 00 40 11 fb 7a a5 e3 f9 82 a5 e3 ....@.@..z...... 0020 f9 7c 01 f4 01 f4 00 98 0f 33 02 33 3a 12 6d c2 .|.......3.3:.m. 0030 7e 98 16 96 30 04 7a 91 cf 83 01 10 02 00 00 00 ~...0.z......... 0040 00 00 00 00 00 90 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 ba eb 23 90 37 e1 77 87 d7 30 ee d9 d9 5d ....#.7.w..0...] 0090 48 aa 0d 00 00 14 c5 73 b0 56 d7 fa ca 36 c2 fb H......s.V...6.. 00a0 a2 83 74 12 7c bf 00 00 00 14 43 1c fc 92 92 a0 ..t.|.....C..... 00b0 59 5d 75 92 fe be a5 86 ad 19 89 2c c3 6c Y]u........,.l Frame 3 (226 bytes on wire, 226 bytes captured) Arrival Time: Sep 13, 2005 12:20:22.431733000 Time delta from previous packet: 0.010356000 seconds Time since reference or first frame: 0.011592000 seconds Frame Number: 3 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:80:c8:ca:a8:82 Destination: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x9a0b9b39 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x001f (31) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b38 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.130 (165.227.249.130) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x2aa0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x02333A126DC27E98 Responder cookie: 0x169630047A91CF83 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 80 c8 ca a8 82 00 0c 29 f4 af 90 08 00 45 00 ........).....E. 0010 00 d0 00 1f 00 00 40 11 3b 38 a5 e3 f9 7c a5 e3 ......@.;8...|.. 0020 f9 82 01 f4 01 f4 00 bc 2a a0 02 33 3a 12 6d c2 ........*..3:.m. 0030 7e 98 16 96 30 04 7a 91 cf 83 04 10 02 00 00 00 ~...0.z......... 0040 00 00 00 00 00 b4 0a 00 00 84 bc d3 6a 18 21 52 ............j.!R 0050 55 64 37 d6 1b e8 dd 69 1c 75 5d 66 03 10 40 00 Ud7....i.u]f..@. 0060 a2 a7 49 7f 74 05 7f ec 14 35 da 83 dd 1b 09 cd ..I.t....5...... 0070 79 2b a4 27 b8 c3 76 36 11 90 eb af c9 28 fd aa y+.'..v6.....(.. 0080 3c d3 77 02 0b dd 56 28 70 7a b9 c8 53 16 b1 e7 <.w...V(pz..S... 0090 ea 3a c0 df 3d d1 2b 7e 34 8e 73 a9 76 70 85 f4 .:..=.+~4.s.vp.. 00a0 fa 4a 4c be 69 49 70 b3 a4 29 62 70 c1 fe e7 18 .JL.iIp..)bp.... 00b0 be fc 57 c9 fe 76 b8 69 6f c3 1a 16 2c ec 99 61 ..W..v.io...,..a 00c0 6d ed bf da d6 2c 73 4a f9 57 00 00 00 14 72 73 m....,sJ.W....rs 00d0 3b ae 71 f3 6b 35 0e 03 ca 15 fb b1 b8 53 9a 0b ;.q.k5.......S.. 00e0 9b 39 .9 Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Sep 13, 2005 12:20:22.442262000 Time delta from previous packet: 0.010529000 seconds Time since reference or first frame: 0.022121000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:80:c8:ca:a8:82, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Type: IP (0x0800) Frame check sequence: 0x11308bb7 (correct) Internet Protocol, Src Addr: 165.227.249.130 (165.227.249.130), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb56 (correct) Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x29ff (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x02333A126DC27E98 Responder cookie: 0x169630047A91CF83 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 f4 af 90 00 80 c8 ca a8 82 08 00 45 00 ..)...........E. 0010 00 d0 00 00 40 00 40 11 fb 56 a5 e3 f9 82 a5 e3 ....@.@..V...... 0020 f9 7c 01 f4 01 f4 00 bc 29 ff 02 33 3a 12 6d c2 .|......)..3:.m. 0030 7e 98 16 96 30 04 7a 91 cf 83 04 10 02 00 00 00 ~...0.z......... 0040 00 00 00 00 00 b4 0a 00 00 84 9f 89 da a3 e2 2b ...............+ 0050 e9 48 b2 a5 cb 89 b1 4b a8 ab d7 e8 91 ab 29 a2 .H.....K......). 0060 80 c2 c2 fb 80 2d ed 49 4e 9e 52 e3 9f ba 9a 80 .....-.IN.R..... 0070 12 bf 99 2a dc 3e 19 4f c0 75 6a 17 e5 9b cf 39 ...*.>.O.uj....9 0080 b4 16 f6 eb 8e b2 41 fd 55 53 29 c1 de a7 ce e1 ......A.US)..... 0090 99 30 37 7c da 3d 9d 73 c1 66 2a 4a 92 fd 0a c2 .07|.=.s.f*J.... 00a0 ff da 3d a2 12 cc 51 bd 2e 6b 56 81 c7 10 fa 85 ..=...Q..kV..... 00b0 1f f6 b3 38 f8 3f 73 8d ad a3 e0 b6 1a 56 de 25 ...8.?s......V.% 00c0 df 10 e4 9a d6 1d e1 63 b4 e5 00 00 00 14 40 ad .......c......@. 00d0 b5 23 6f 4c 0d ad 67 6c 69 59 c2 9a a9 95 11 30 .#oL..gliY.....0 00e0 8b b7 .. Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Sep 13, 2005 12:20:22.449301000 Time delta from previous packet: 0.007039000 seconds Time since reference or first frame: 0.029160000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:80:c8:ca:a8:82 Destination: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x059844f6 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0020 (32) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b9f (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.130 (165.227.249.130) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x756e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x02333A126DC27E98 Responder cookie: 0x169630047A91CF83 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 80 c8 ca a8 82 00 0c 29 f4 af 90 08 00 45 00 ........).....E. 0010 00 68 00 20 00 00 40 11 3b 9f a5 e3 f9 7c a5 e3 .h. ..@.;....|.. 0020 f9 82 01 f4 01 f4 00 54 75 6e 02 33 3a 12 6d c2 .......Tun.3:.m. 0030 7e 98 16 96 30 04 7a 91 cf 83 05 10 02 01 00 00 ~...0.z......... 0040 00 00 00 00 00 4c 2e 38 8b e2 cd 33 41 e5 88 9d .....L.8...3A... 0050 46 ab f3 5a 82 c5 4c 96 72 bb 2f b9 c8 d2 6c 73 F..Z..L.r./...ls 0060 bd fc 1b a9 74 f0 64 98 6d ce 45 48 ef 2d 36 b3 ....t.d.m.EH.-6. 0070 b6 cd c6 8a 4a 0f 05 98 44 f6 ....J...D. Frame 6 (122 bytes on wire, 122 bytes captured) Arrival Time: Sep 13, 2005 12:20:22.449956000 Time delta from previous packet: 0.000655000 seconds Time since reference or first frame: 0.029815000 seconds Frame Number: 6 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:80:c8:ca:a8:82, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Type: IP (0x0800) Frame check sequence: 0xe26cd682 (correct) Internet Protocol, Src Addr: 165.227.249.130 (165.227.249.130), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbbe (correct) Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x883d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x02333A126DC27E98 Responder cookie: 0x169630047A91CF83 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 f4 af 90 00 80 c8 ca a8 82 08 00 45 00 ..)...........E. 0010 00 68 00 00 40 00 40 11 fb be a5 e3 f9 82 a5 e3 .h..@.@......... 0020 f9 7c 01 f4 01 f4 00 54 88 3d 02 33 3a 12 6d c2 .|.....T.=.3:.m. 0030 7e 98 16 96 30 04 7a 91 cf 83 05 10 02 01 00 00 ~...0.z......... 0040 00 00 00 00 00 4c aa 7c ff 0c b2 d2 41 dc ee 21 .....L.|....A..! 0050 92 94 02 09 5a 68 86 00 c2 a9 c7 57 5d 3c 40 a3 ....Zh.....W]<@. 0060 1c c1 6b 2f 4a 7a 97 36 56 7a 45 69 d2 47 b5 91 ..k/Jz.6VzEi.G.. 0070 d8 71 c5 93 1f 07 e2 6c d6 82 .q.....l.. Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Sep 13, 2005 12:20:22.459117000 Time delta from previous packet: 0.009161000 seconds Time since reference or first frame: 0.038976000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:80:c8:ca:a8:82 Destination: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xdebbb75a (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0021 (33) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3abe (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.130 (165.227.249.130) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x5d8d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x02333A126DC27E98 Responder cookie: 0x169630047A91CF83 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB81FA9A5 Length: 300 Encrypted payload (272 bytes) 0000 00 80 c8 ca a8 82 00 0c 29 f4 af 90 08 00 45 00 ........).....E. 0010 01 48 00 21 00 00 40 11 3a be a5 e3 f9 7c a5 e3 .H.!..@.:....|.. 0020 f9 82 01 f4 01 f4 01 34 5d 8d 02 33 3a 12 6d c2 .......4]..3:.m. 0030 7e 98 16 96 30 04 7a 91 cf 83 08 10 20 01 b8 1f ~...0.z..... ... 0040 a9 a5 00 00 01 2c c6 cf cd 02 5d dd ca 86 82 f1 .....,....]..... 0050 b7 78 ae 5f 98 98 1e 00 56 04 2a 78 1c 5d 52 72 .x._....V.*x.]Rr 0060 0d 22 79 6a 3c a9 22 74 d2 f5 5a 55 55 bc 57 c7 ."yj<."t..ZUU.W. 0070 b0 ea 74 e9 3c 78 c9 3e 95 b4 db 70 ce 76 4f 43 ..t....p.vOC 0080 04 a7 e9 b8 17 48 24 c8 d3 72 13 e6 09 ca 38 6e .....H$..r....8n 0090 0d ff b6 8e 81 b1 7a 7c 5d 26 4f c6 f4 f2 81 24 ......z|]&O....$ 00a0 52 07 34 bb 9a bd 55 f1 cc 48 2e ac 0e f5 74 f0 R.4...U..H....t. 00b0 86 44 14 d0 e1 d5 94 f2 56 1d ae 91 ca 5f ca cf .D......V...._.. 00c0 a2 ac 08 5a 7e a5 db 12 a6 3c 17 e4 8e 32 1e 2f ...Z~....<...2./ 00d0 c9 9a 13 fa c1 27 93 91 88 42 4f 8c 26 d9 b5 61 .....'...BO.&..a 00e0 5e 09 f1 04 a1 cd eb 77 2f 16 81 01 17 6c 8b ec ^......w/....l.. 00f0 32 4c 4d 60 5d 56 1c 5f af 8c eb 82 4e 5f 6b ae 2LM`]V._....N_k. 0100 94 ba ae ca ce ab 01 bc 48 5f e2 d5 86 96 31 bc ........H_....1. 0110 1f 7b 92 86 3a fe 58 68 9d db db a9 13 23 03 09 .{..:.Xh.....#.. 0120 0b bf 32 69 f0 75 fa ea b2 44 34 95 27 44 a2 19 ..2i.u...D4.'D.. 0130 1d 1d d0 eb d6 2b d2 54 76 1d da c2 01 56 7f 69 .....+.Tv....V.i 0140 15 83 c0 00 67 82 e9 2c 70 48 0f 88 b4 a5 8a 62 ....g..,pH.....b 0150 ae d9 61 63 a1 c7 de bb b7 5a ..ac.....Z Frame 8 (346 bytes on wire, 346 bytes captured) Arrival Time: Sep 13, 2005 12:20:22.465162000 Time delta from previous packet: 0.006045000 seconds Time since reference or first frame: 0.045021000 seconds Frame Number: 8 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:80:c8:ca:a8:82, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Type: IP (0x0800) Frame check sequence: 0x57569544 (correct) Internet Protocol, Src Addr: 165.227.249.130 (165.227.249.130), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfade (correct) Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x9be8 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x02333A126DC27E98 Responder cookie: 0x169630047A91CF83 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB81FA9A5 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 f4 af 90 00 80 c8 ca a8 82 08 00 45 00 ..)...........E. 0010 01 48 00 00 40 00 40 11 fa de a5 e3 f9 82 a5 e3 .H..@.@......... 0020 f9 7c 01 f4 01 f4 01 34 9b e8 02 33 3a 12 6d c2 .|.....4...3:.m. 0030 7e 98 16 96 30 04 7a 91 cf 83 08 10 20 01 b8 1f ~...0.z..... ... 0040 a9 a5 00 00 01 2c 7c 98 38 e5 4e a7 db d9 5f 7c .....,|.8.N..._| 0050 a7 67 ad 1f 4e ef 1a 12 c4 e0 02 a7 d3 97 51 51 .g..N.........QQ 0060 7f 20 5b 86 83 5f e6 dd 7c df 6e 6a ab bb b2 e1 . [.._..|.nj.... 0070 e3 c4 f2 4e da 1b 6a 97 44 fa 08 1a d3 a8 8b 66 ...N..j.D......f 0080 4d f2 f0 b1 ed 0a b1 52 21 a4 c8 42 7f dc 17 ec M......R!..B.... 0090 7a 75 98 bc 45 20 c1 59 32 e9 75 14 55 1f 08 37 zu..E .Y2.u.U..7 00a0 e1 3b a6 4f 95 74 38 83 45 7d ed 10 8f 41 c5 12 .;.O.t8.E}...A.. 00b0 34 19 a8 d2 19 72 a2 ae 6e 5d 9f 20 e5 8c df c9 4....r..n]. .... 00c0 cc 96 df 92 4b 54 f4 dc d0 c6 a4 86 00 33 64 f8 ....KT.......3d. 00d0 05 b8 74 d8 2c 20 a9 f8 c1 e4 55 aa 77 0a 6c 97 ..t., ....U.w.l. 00e0 e5 cd 9c 88 62 bb 70 ba 0d 0d 83 82 0d 4a 24 52 ....b.p......J$R 00f0 6e 95 c5 58 b7 7d cc 44 bf 2d 7a 75 b8 19 66 5f n..X.}.D.-zu..f_ 0100 1b 63 69 4d be ec d9 64 2a 41 a4 af d9 16 e8 32 .ciM...d*A.....2 0110 47 13 33 43 9a db 54 2d 5a 7e bc af b4 0a 63 33 G.3C..T-Z~....c3 0120 f6 5e 59 d6 b9 eb 65 ee ce c4 d0 c2 c3 82 b9 e6 .^Y...e......... 0130 4c 13 ee 6b ed 03 8d 38 08 18 6f f7 f8 7e 5e 21 L..k...8..o..~^! 0140 c8 49 3d 6d 28 c2 fb b2 2c 68 ce fc fb 45 4e c8 .I=m(...,h...EN. 0150 d1 c8 e0 e0 23 48 57 56 95 44 ....#HWV.D Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Sep 13, 2005 12:20:22.474527000 Time delta from previous packet: 0.009365000 seconds Time since reference or first frame: 0.054386000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:80:c8:ca:a8:82 Destination: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x6054e11e (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0022 (34) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bad (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.130 (165.227.249.130) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x210e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x02333A126DC27E98 Responder cookie: 0x169630047A91CF83 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB81FA9A5 Length: 60 Encrypted payload (32 bytes) 0000 00 80 c8 ca a8 82 00 0c 29 f4 af 90 08 00 45 00 ........).....E. 0010 00 58 00 22 00 00 40 11 3b ad a5 e3 f9 7c a5 e3 .X."..@.;....|.. 0020 f9 82 01 f4 01 f4 00 44 21 0e 02 33 3a 12 6d c2 .......D!..3:.m. 0030 7e 98 16 96 30 04 7a 91 cf 83 08 10 20 01 b8 1f ~...0.z..... ... 0040 a9 a5 00 00 00 3c 26 53 ad 9c 62 fe da af 78 f5 .....<&S..b...x. 0050 b5 a0 c4 2e 20 5a b5 fc ee e8 42 34 e8 31 b2 df .... Z....B4.1.. 0060 2d c5 25 ac 5d ed 60 54 e1 1e -.%.].`T.. Frame 10 (170 bytes on wire, 170 bytes captured) Arrival Time: Sep 13, 2005 12:20:22.765515000 Time delta from previous packet: 0.290988000 seconds Time since reference or first frame: 0.345374000 seconds Frame Number: 10 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:80:c8:ca:a8:82 Destination: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x23792af0 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x000e (14) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b5f (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload SPI: 0x995685dc Sequence: 2 Data (124 bytes) 0000 00 80 c8 ca a8 82 00 0c 29 f4 af 90 08 00 45 00 ........).....E. 0010 00 98 00 0e 00 00 f0 32 8b 5f a5 e3 f9 7c a5 e3 .......2._...|.. 0020 f9 82 99 56 85 dc 00 00 00 02 7f 39 60 e1 07 19 ...V.......9`... 0030 33 42 6f 79 78 73 b1 4c f8 08 7c c2 05 56 8e d6 3Boyxs.L..|..V.. 0040 9d 43 e1 fe c0 01 79 f6 cb 56 9c a6 1a 8c 1f f3 .C....y..V...... 0050 96 87 72 16 d2 72 5c ea f2 cf c7 67 2a 38 16 a1 ..r..r\....g*8.. 0060 7b 8f 0d 09 a8 0f c2 63 be be 7e da e1 1e df bf {......c..~..... 0070 ab 49 fa 1b 02 0d 11 c4 fa 67 2c c7 c8 d9 af d3 .I.......g,..... 0080 5a 90 c2 cd 9e 3c 2b 01 ca 4e b5 fd d4 52 58 52 Z....<+..N...RXR 0090 14 01 19 4b 36 8a c0 a7 59 e1 7c 1f be c9 b4 32 ...K6...Y.|....2 00a0 4e 76 69 87 fc 67 23 79 2a f0 Nvi..g#y*. Frame 11 (170 bytes on wire, 170 bytes captured) Arrival Time: Sep 13, 2005 12:20:22.766324000 Time delta from previous packet: 0.000809000 seconds Time since reference or first frame: 0.346183000 seconds Frame Number: 11 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:80:c8:ca:a8:82, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Type: IP (0x0800) Frame check sequence: 0xad9fe254 (correct) Internet Protocol, Src Addr: 165.227.249.130 (165.227.249.130), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0062 (98) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b0b (correct) Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x034896f0 Sequence: 1 Data (124 bytes) 0000 00 0c 29 f4 af 90 00 80 c8 ca a8 82 08 00 45 00 ..)...........E. 0010 00 98 00 62 00 00 f0 32 8b 0b a5 e3 f9 82 a5 e3 ...b...2........ 0020 f9 7c 03 48 96 f0 00 00 00 01 9e 1d 01 e3 be 99 .|.H............ 0030 6c f0 c7 42 04 ef 14 27 f4 dc 73 34 6c b4 95 7f l..B...'..s4l... 0040 a5 28 27 d1 06 e9 86 b0 1f 39 9c 52 76 f8 52 c1 .('......9.Rv.R. 0050 09 0e 81 b9 53 45 4a a3 a2 e5 e5 e1 0f 16 05 e3 ....SEJ......... 0060 62 e1 0e 2d b2 72 1a 8e b3 dc 22 54 35 e0 f7 2b b..-.r...."T5..+ 0070 06 01 bd f7 c6 20 82 a9 4e 2d 6d 15 4a cc 10 9e ..... ..N-m.J... 0080 c4 2b e6 0c b0 85 78 83 fd fc bd 40 e3 ae c3 be .+....x....@.... 0090 09 7b 72 34 20 fa 61 24 c6 9b dc 57 77 78 c1 ad .{r4 .a$...Wwx.. 00a0 b4 3f 71 63 96 22 ad 9f e2 54 .?qc."...T Frame 12 (170 bytes on wire, 170 bytes captured) Arrival Time: Sep 13, 2005 12:20:23.289913000 Time delta from previous packet: 0.523589000 seconds Time since reference or first frame: 0.869772000 seconds Frame Number: 12 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:80:c8:ca:a8:82 Destination: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xe4817156 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x000f (15) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b5e (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload SPI: 0x995685dc Sequence: 3 Data (124 bytes) 0000 00 80 c8 ca a8 82 00 0c 29 f4 af 90 08 00 45 00 ........).....E. 0010 00 98 00 0f 00 00 f0 32 8b 5e a5 e3 f9 7c a5 e3 .......2.^...|.. 0020 f9 82 99 56 85 dc 00 00 00 03 76 20 e4 9b 0e 7f ...V......v .... 0030 50 b9 6f 09 16 89 51 b9 a1 61 68 ce a4 b8 4a 38 P.o...Q..ah...J8 0040 61 8b ac 94 c0 cd ad 0d 8a 28 d7 b6 54 5b dc c0 a........(..T[.. 0050 c7 30 b2 4a 04 2c 91 44 12 35 b5 f6 0f b7 4a d6 .0.J.,.D.5....J. 0060 55 1c 7f fb ff 3c 79 3e e5 85 41 0c 7e 0d 07 35 U......A.~..5 0070 a8 be 06 1c 09 7a c7 62 24 39 cc 6e 6d b9 59 c1 .....z.b$9.nm.Y. 0080 fb ba 80 af 98 72 3e 2a 6a 6b 77 8d c2 29 17 8d .....r>*jkw..).. 0090 3e 2e e1 8b 53 d5 79 ea fb 02 7a 49 eb 9f d6 6a >...S.y...zI...j 00a0 18 5d 33 c3 0a 70 e4 81 71 56 .]3..p..qV Frame 13 (170 bytes on wire, 170 bytes captured) Arrival Time: Sep 13, 2005 12:20:23.290364000 Time delta from previous packet: 0.000451000 seconds Time since reference or first frame: 0.870223000 seconds Frame Number: 13 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:80:c8:ca:a8:82, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Type: IP (0x0800) Frame check sequence: 0x30eaa387 (correct) Internet Protocol, Src Addr: 165.227.249.130 (165.227.249.130), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0063 (99) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b0a (correct) Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x034896f0 Sequence: 2 Data (124 bytes) 0000 00 0c 29 f4 af 90 00 80 c8 ca a8 82 08 00 45 00 ..)...........E. 0010 00 98 00 63 00 00 f0 32 8b 0a a5 e3 f9 82 a5 e3 ...c...2........ 0020 f9 7c 03 48 96 f0 00 00 00 02 3d 86 b3 af 56 28 .|.H......=...V( 0030 7f 8c 9a ab e7 08 d3 ea 9d 1f 30 22 80 6d 05 8f ..........0".m.. 0040 9e e4 fd f6 91 32 bc 9d 93 c5 12 2b d6 e3 0c 86 .....2.....+.... 0050 69 0c 26 25 66 47 b2 0e b9 22 cc d3 3c 4d 08 6e i.&%fG..."....DX..C-].](.3. 0040 3c 9a fc f8 ba 54 28 e0 cd d1 b9 e9 f5 27 73 9d <....T(......'s. 0050 2f 99 58 16 e4 e5 59 97 91 26 8a 70 00 8b 0a 0d /.X...Y..&.p.... 0060 89 31 53 3e ee 5d a7 b7 a2 0f f9 dc b2 16 6f 68 .1S>.]........oh 0070 60 88 03 54 82 96 13 d1 04 ec 63 cb 7b 3e af 03 `..T......c.{>.. 0080 50 a6 fa cd 92 8a 23 cb 89 b9 62 b3 25 19 4e e0 P.....#...b.%.N. 0090 5f 32 48 ab f7 dc 90 37 3f 51 20 db 85 ca 26 d7 _2H....7?Q ...&. 00a0 0d d5 cf 57 37 35 1c 28 ef 07 ...W75.(.. Frame 15 (170 bytes on wire, 170 bytes captured) Arrival Time: Sep 13, 2005 12:20:24.110089000 Time delta from previous packet: 0.000461000 seconds Time since reference or first frame: 1.689948000 seconds Frame Number: 15 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:80:c8:ca:a8:82, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Type: IP (0x0800) Frame check sequence: 0xdc750d29 (correct) Internet Protocol, Src Addr: 165.227.249.130 (165.227.249.130), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0064 (100) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b09 (correct) Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x034896f0 Sequence: 3 Data (124 bytes) 0000 00 0c 29 f4 af 90 00 80 c8 ca a8 82 08 00 45 00 ..)...........E. 0010 00 98 00 64 00 00 f0 32 8b 09 a5 e3 f9 82 a5 e3 ...d...2........ 0020 f9 7c 03 48 96 f0 00 00 00 03 2a 0e cd 24 7a c9 .|.H......*..$z. 0030 1b 77 27 2f ab 68 d8 27 a5 d8 8f 2e a2 4a d5 9f .w'/.h.'.....J.. 0040 c9 33 05 ef fa 28 65 6b 13 e7 81 35 c2 70 30 e6 .3...(ek...5.p0. 0050 ff d3 cf bc 71 78 11 d5 e7 a1 86 0e 80 74 66 50 ....qx.......tfP 0060 8e 38 d5 34 cf 51 4b 6c 7e 11 0a 02 fa db 29 e7 .8.4.QKl~.....). 0070 2a 8b 9c b3 44 d2 d2 83 3d 0b ae 2e 10 62 87 84 *...D...=....b.. 0080 03 3c c2 28 ea cd 34 6f 6b 89 9f 98 ed 99 2e 03 .<.(..4ok....... 0090 78 ee 0c 44 c9 30 75 76 1f 81 d7 53 0b 6b 5f bb x..D.0uv...S.k_. 00a0 24 bc d0 78 82 59 dc 75 0d 29 $..x.Y.u.) Frame 16 (170 bytes on wire, 170 bytes captured) Arrival Time: Sep 13, 2005 12:20:24.914242000 Time delta from previous packet: 0.804153000 seconds Time since reference or first frame: 2.494101000 seconds Frame Number: 16 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:80:c8:ca:a8:82 Destination: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xdb4d0d07 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0011 (17) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b5c (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload SPI: 0x995685dc Sequence: 5 Data (124 bytes) 0000 00 80 c8 ca a8 82 00 0c 29 f4 af 90 08 00 45 00 ........).....E. 0010 00 98 00 11 00 00 f0 32 8b 5c a5 e3 f9 7c a5 e3 .......2.\...|.. 0020 f9 82 99 56 85 dc 00 00 00 05 24 5f 19 4a d5 9c ...V......$_.J.. 0030 32 d7 c8 ed ae 1e f3 6e a0 a4 f5 7e 84 18 3b 92 2......n...~..;. 0040 55 35 a4 3a 84 5c a4 0b a1 41 f1 ea 74 c0 9e 4f U5.:.\...A..t..O 0050 0a e1 96 34 d0 8f 42 01 a6 a6 9f 65 34 41 ef d7 ...4..B....e4A.. 0060 7e 89 a9 8f 58 4b 08 9f c9 97 58 80 2d d5 03 61 ~...XK....X.-..a 0070 52 29 48 ab 82 f8 a6 63 39 ca a4 12 9a 21 ed e8 R)H....c9....!.. 0080 ba ed 7a 07 8f ff 88 dd f6 94 e4 37 fa fe f3 da ..z........7.... 0090 3d 11 55 2c a7 b4 43 f3 97 31 8a 14 f6 f2 17 74 =.U,..C..1.....t 00a0 fc b3 73 72 cb d6 db 4d 0d 07 ..sr...M.. Frame 17 (170 bytes on wire, 170 bytes captured) Arrival Time: Sep 13, 2005 12:20:24.914642000 Time delta from previous packet: 0.000400000 seconds Time since reference or first frame: 2.494501000 seconds Frame Number: 17 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:80:c8:ca:a8:82, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Type: IP (0x0800) Frame check sequence: 0x4604b320 (correct) Internet Protocol, Src Addr: 165.227.249.130 (165.227.249.130), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0065 (101) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b08 (correct) Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x034896f0 Sequence: 4 Data (124 bytes) 0000 00 0c 29 f4 af 90 00 80 c8 ca a8 82 08 00 45 00 ..)...........E. 0010 00 98 00 65 00 00 f0 32 8b 08 a5 e3 f9 82 a5 e3 ...e...2........ 0020 f9 7c 03 48 96 f0 00 00 00 04 6b 53 be 9b b4 e0 .|.H......kS.... 0030 77 f1 60 4a 24 9a 98 2f 2b ba 75 27 f7 95 f5 4f w.`J$../+.u'...O 0040 1e 9f 26 84 1e 4a 84 c7 c3 bb 7b 79 33 fc 3c 2c ..&..J....{y3.<, 0050 c2 85 2d 6c 71 ac 40 0f 9b 98 5f bb f4 51 38 06 ..-lq.@..._..Q8. 0060 61 d0 39 96 da ab 55 74 de 5b 01 df 2e 1e ff 63 a.9...Ut.[.....c 0070 2d 40 56 48 96 74 fb bd 8c 1d d4 f4 23 10 3c 32 -@VH.t......#.<2 0080 18 4f ba 8c 7d 6f b5 52 c3 8d a2 c7 52 ea f4 7d .O..}o.R....R..} 0090 22 fe b3 6f 68 47 cd fd 1a 92 3d 88 b5 a0 3f 75 "..ohG....=...?u 00a0 84 81 e0 76 1c e8 46 04 b3 20 ...v..F..