Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Jul 5, 2007 13:46:25.329173000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Destination: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x0120 (288) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a02 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.139 (165.227.249.139) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0xd82f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x69256C31E16F3A5C Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 03 d2 20 0e a4 00 0c 29 f4 af 90 08 00 45 00 ... ....).....E. 0010 00 fc 01 20 00 00 40 11 3a 02 a5 e3 f9 7c a5 e3 ... ..@.:....|.. 0020 f9 8b 01 f4 01 f4 00 e8 d8 2f 69 25 6c 31 e1 6f ........./i%l1.o 0030 3a 5c 00 00 00 00 00 00 00 00 01 10 02 00 00 00 :\.............. 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b .....N.$...GYL(K 0090 21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e !;....'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 .o,....R.V Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: Jul 5, 2007 13:46:25.331428000 Time delta from previous packet: 0.002255000 seconds Time since reference or first frame: 0.002255000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.139 (165.227.249.139), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0017 (23) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb96 [correct] Good: True Bad : False Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x553b [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x69256C31E16F3A5C Responder cookie: 0xB5C0F5B3D807FB72 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 f4 af 90 00 03 d2 20 0e a4 08 00 45 00 ..)...... ....E. 0010 00 70 00 17 40 00 40 11 fb 96 a5 e3 f9 8b a5 e3 .p..@.@......... 0020 f9 7c 01 f4 01 f4 00 5c 55 3b 69 25 6c 31 e1 6f .|.....\U;i%l1.o 0030 3a 5c b5 c0 f5 b3 d8 07 fb 72 01 10 02 00 00 00 :\.......r...... 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 ............p. Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Jul 5, 2007 13:46:25.339853000 Time delta from previous packet: 0.008425000 seconds Time since reference or first frame: 0.010680000 seconds Frame Number: 3 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Destination: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0121 (289) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a2d [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.139 (165.227.249.139) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x3a8d [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x69256C31E16F3A5C Responder cookie: 0xB5C0F5B3D807FB72 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 03 d2 20 0e a4 00 0c 29 f4 af 90 08 00 45 00 ... ....).....E. 0010 00 d0 01 21 00 00 40 11 3a 2d a5 e3 f9 7c a5 e3 ...!..@.:-...|.. 0020 f9 8b 01 f4 01 f4 00 bc 3a 8d 69 25 6c 31 e1 6f ........:.i%l1.o 0030 3a 5c b5 c0 f5 b3 d8 07 fb 72 04 10 02 00 00 00 :\.......r...... 0040 00 00 00 00 00 b4 0a 00 00 84 dd 56 2b 79 b8 7f ...........V+y.. 0050 f7 7e 49 59 d4 2b ca cc f3 8b 57 44 f8 b7 f7 d0 .~IY.+....WD.... 0060 a0 85 10 d9 72 4f 4b 63 33 dd e7 7b bc 2c ac 2c ....rOKc3..{.,., 0070 a0 23 d3 e7 8b c3 2f 1b b8 74 a4 de 85 2d f9 a8 .#..../..t...-.. 0080 9c 27 0b 49 47 51 ce f8 e3 9a aa a3 a0 ed 4f 0b .'.IGQ........O. 0090 98 ef 0f 14 ee 86 ff bc 63 70 e3 54 da 20 95 6d ........cp.T. .m 00a0 e3 b7 63 63 f2 3c 5c e8 46 99 38 8a aa c7 ca d3 ..cc.<\.F.8..... 00b0 b2 0e ff 39 de 15 36 bb 20 70 0b 93 e7 a4 a7 7e ...9..6. p.....~ 00c0 9c 59 5c 31 06 10 3e 40 eb ea 00 00 00 14 8f a3 .Y\1..>@........ 00d0 1e 82 c0 5d 3f 57 1d d4 13 a8 55 f9 32 8d ...]?W....U.2. Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Jul 5, 2007 13:46:25.346931000 Time delta from previous packet: 0.007078000 seconds Time since reference or first frame: 0.017758000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.139 (165.227.249.139), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0018 (24) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb31 [correct] Good: True Bad : False Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x3e4d [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x69256C31E16F3A5C Responder cookie: 0xB5C0F5B3D807FB72 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 0c 29 f4 af 90 00 03 d2 20 0e a4 08 00 45 00 ..)...... ....E. 0010 00 d4 00 18 40 00 40 11 fb 31 a5 e3 f9 8b a5 e3 ....@.@..1...... 0020 f9 7c 01 f4 01 f4 00 c0 3e 4d 69 25 6c 31 e1 6f .|......>Mi%l1.o 0030 3a 5c b5 c0 f5 b3 d8 07 fb 72 04 10 02 00 00 00 :\.......r...... 0040 00 00 00 00 00 b8 0a 00 00 84 5c 30 dd 0d 05 3e ..........\0...> 0050 34 2f 79 ab 7c 5f 28 45 e1 29 b8 fd 71 2c 47 06 4/y.|_(E.)..q,G. 0060 26 1e 3b 0f a7 3a f9 31 15 84 3e 42 39 ab 29 62 &.;..:.1..>B9.)b 0070 2a 54 43 0b c7 76 c4 fd 58 92 36 f4 b5 34 7c ec *TC..v..X.6..4|. 0080 42 c5 d6 25 0e 4f 99 e3 02 49 eb c2 65 de 95 ae B..%.O...I..e... 0090 0a 23 a6 34 9c b5 74 9b 70 a8 06 d4 d9 46 3a b5 .#.4..t.p....F:. 00a0 f2 c6 22 a4 40 27 c0 bf 13 1d a7 35 8d c9 85 58 ..".@'.....5...X 00b0 a7 98 3e 9c b5 c4 53 c2 e6 aa a2 31 9c 82 34 8a ..>...S....1..4. 00c0 83 f5 05 41 38 2a 94 8c 9d e1 00 00 00 18 0b 9d ...A8*.......... 00d0 f1 74 49 df 74 40 79 7f 45 14 af 00 81 af 46 82 .tI.t@y.E.....F. 00e0 9a a8 .. Frame 5 (118 bytes on wire, 118 bytes captured) Arrival Time: Jul 5, 2007 13:46:25.346933000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.017760000 seconds Frame Number: 5 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Destination: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0122 (290) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a94 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.139 (165.227.249.139) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x0add [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x69256C31E16F3A5C Responder cookie: 0xB5C0F5B3D807FB72 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 03 d2 20 0e a4 00 0c 29 f4 af 90 08 00 45 00 ... ....).....E. 0010 00 68 01 22 00 00 40 11 3a 94 a5 e3 f9 7c a5 e3 .h."..@.:....|.. 0020 f9 8b 01 f4 01 f4 00 54 0a dd 69 25 6c 31 e1 6f .......T..i%l1.o 0030 3a 5c b5 c0 f5 b3 d8 07 fb 72 05 10 02 01 00 00 :\.......r...... 0040 00 00 00 00 00 4c cc 14 75 92 d3 72 ca 4f 04 6b .....L..u..r.O.k 0050 9d e7 23 d3 08 86 61 45 13 80 37 12 df 33 32 32 ..#...aE..7..322 0060 d3 c0 e1 a4 99 32 bc 32 c5 ab 66 fd c3 18 1e 9d .....2.2..f..... 0070 f1 e5 9c 2e 27 b0 ....'. Frame 6 (118 bytes on wire, 118 bytes captured) Arrival Time: Jul 5, 2007 13:46:25.360181000 Time delta from previous packet: 0.013248000 seconds Time since reference or first frame: 0.031008000 seconds Frame Number: 6 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.139 (165.227.249.139), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0019 (25) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb9c [correct] Good: True Bad : False Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x4dc0 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x69256C31E16F3A5C Responder cookie: 0xB5C0F5B3D807FB72 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 f4 af 90 00 03 d2 20 0e a4 08 00 45 00 ..)...... ....E. 0010 00 68 00 19 40 00 40 11 fb 9c a5 e3 f9 8b a5 e3 .h..@.@......... 0020 f9 7c 01 f4 01 f4 00 54 4d c0 69 25 6c 31 e1 6f .|.....TM.i%l1.o 0030 3a 5c b5 c0 f5 b3 d8 07 fb 72 05 10 02 01 00 00 :\.......r...... 0040 00 00 00 00 00 4c bb 4d f0 ea 7b 6a aa 49 ab 7d .....L.M..{j.I.} 0050 6c 4f 54 e4 e2 f5 fa a3 21 b3 84 1b a4 dd 8c f3 lOT.....!....... 0060 7f 95 16 d4 1b 7f 8e c0 32 d6 c3 7d 6c d0 99 41 ........2..}l..A 0070 c8 cf 59 66 a4 41 ..Yf.A Frame 7 (342 bytes on wire, 342 bytes captured) Arrival Time: Jul 5, 2007 13:46:25.360183000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.031010000 seconds Frame Number: 7 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Destination: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0123 (291) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x39b3 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.139 (165.227.249.139) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x9c8f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x69256C31E16F3A5C Responder cookie: 0xB5C0F5B3D807FB72 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBF0D1BAA Length: 300 Encrypted payload (272 bytes) 0000 00 03 d2 20 0e a4 00 0c 29 f4 af 90 08 00 45 00 ... ....).....E. 0010 01 48 01 23 00 00 40 11 39 b3 a5 e3 f9 7c a5 e3 .H.#..@.9....|.. 0020 f9 8b 01 f4 01 f4 01 34 9c 8f 69 25 6c 31 e1 6f .......4..i%l1.o 0030 3a 5c b5 c0 f5 b3 d8 07 fb 72 08 10 20 01 bf 0d :\.......r.. ... 0040 1b aa 00 00 01 2c a0 8a 8d 04 07 a9 d9 65 75 51 .....,.......euQ 0050 98 e8 68 76 32 fc 3d 5f 70 dd c7 b6 ae 2e e7 58 ..hv2.=_p......X 0060 b6 52 09 49 d2 db f3 7b 1a 54 dd f2 c3 33 75 67 .R.I...{.T...3ug 0070 bb be c1 ad f6 cf 68 a3 27 6c 24 82 d6 c3 74 85 ......h.'l$...t. 0080 b4 76 12 ce 74 b1 05 c8 c5 fa 6d 42 e2 fe 06 6b .v..t.....mB...k 0090 f7 63 ec 4e 4d 5b 67 8c c1 7d 38 76 d2 c1 07 b4 .c.NM[g..}8v.... 00a0 7b 4f 37 fd e1 a8 82 b8 af 14 c7 54 06 53 77 7a {O7........T.Swz 00b0 95 bb 0e 56 42 e7 cd 4f 28 47 68 a2 f8 5e 0d 8f ...VB..O(Gh..^.. 00c0 1b 09 86 7a d8 43 ee d9 2b 6c 6a 12 c7 bb 8d fb ...z.C..+lj..... 00d0 97 9c 56 91 c9 d7 15 85 2a 20 56 9d 83 44 1b 30 ..V.....* V..D.0 00e0 b8 1b 77 25 62 14 fe fb 05 a6 36 49 1d a3 15 40 ..w%b.....6I...@ 00f0 f2 c6 dd 96 0c d5 c1 38 e3 a4 91 41 dc d7 cd 6b .......8...A...k 0100 63 aa d3 4a a4 da 4c f8 8b db b9 76 f5 5d 9e 3a c..J..L....v.].: 0110 1a d9 1f 14 93 a7 d2 85 ea 4c 37 e3 77 84 43 c7 .........L7.w.C. 0120 79 3e ee 84 e6 d6 c0 c8 a6 f4 18 b2 36 49 93 a8 y>..........6I.. 0130 4a 9b 78 3e 52 fe be b6 6e 99 5a e6 89 8c f3 a4 J.x>R...n.Z..... 0140 ef 63 d3 da 48 06 84 36 72 88 15 31 45 9d b5 7e .c..H..6r..1E..~ 0150 ee d7 28 b9 3e 60 ..(.>` Frame 8 (342 bytes on wire, 342 bytes captured) Arrival Time: Jul 5, 2007 13:46:25.367065000 Time delta from previous packet: 0.006882000 seconds Time since reference or first frame: 0.037892000 seconds Frame Number: 8 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.139 (165.227.249.139), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x001a (26) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfabb [correct] Good: True Bad : False Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xe38c [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x69256C31E16F3A5C Responder cookie: 0xB5C0F5B3D807FB72 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBF0D1BAA Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 f4 af 90 00 03 d2 20 0e a4 08 00 45 00 ..)...... ....E. 0010 01 48 00 1a 40 00 40 11 fa bb a5 e3 f9 8b a5 e3 .H..@.@......... 0020 f9 7c 01 f4 01 f4 01 34 e3 8c 69 25 6c 31 e1 6f .|.....4..i%l1.o 0030 3a 5c b5 c0 f5 b3 d8 07 fb 72 08 10 20 01 bf 0d :\.......r.. ... 0040 1b aa 00 00 01 2c 6c bf 45 3b dd ff 9d db 98 12 .....,l.E;...... 0050 5e 3b 8a ee 08 d9 b5 d1 f2 92 d0 48 6c 41 b8 dc ^;.........HlA.. 0060 73 38 35 cb cc b8 25 b6 21 21 06 f3 e4 85 df 9b s85...%.!!...... 0070 52 f1 41 bd 68 09 82 f5 ab ee 03 6e 28 ff 49 a0 R.A.h......n(.I. 0080 07 bc a6 0c 80 22 f3 df 82 f3 87 c3 54 42 39 5d ....."......TB9] 0090 af fa 6b 27 4a fe f4 cb 93 19 0c 66 12 fd 78 76 ..k'J......f..xv 00a0 2d 86 10 4b 20 29 e4 61 61 19 15 e0 4a 8f b3 38 -..K ).aa...J..8 00b0 0b b8 4a f7 80 d9 e5 c3 fa b6 94 4d 4b d4 af da ..J........MK... 00c0 0c c8 61 73 8d 0e 48 85 16 0a 68 bb f2 f7 50 97 ..as..H...h...P. 00d0 3c bd f2 ab 99 2b ec d3 b5 3b 55 69 7a 0c c9 c9 <....+...;Uiz... 00e0 84 d2 75 f8 65 2d a3 b4 d4 d8 72 80 e8 23 22 a7 ..u.e-....r..#". 00f0 05 58 31 47 98 d7 af 78 93 86 c7 04 59 2b 98 94 .X1G...x....Y+.. 0100 21 c2 9f 10 ac 06 c1 b2 03 e6 d4 1a e3 9b 86 c5 !............... 0110 10 fc b9 26 9a 85 1b 0f 22 a9 b2 ef a8 a7 20 30 ...&...."..... 0 0120 12 e3 85 5d 0f e8 92 89 15 9a a3 16 7b 87 8d c9 ...]........{... 0130 f2 8e b0 3e 6b 54 1e d0 9f d0 96 57 76 25 55 8a ...>kT.....Wv%U. 0140 58 cd 1b df e8 3b 9b a2 8d ab 7f 03 ca aa 71 2f X....;........q/ 0150 44 b8 9d e3 9b b8 D..... Frame 9 (102 bytes on wire, 102 bytes captured) Arrival Time: Jul 5, 2007 13:46:25.376831000 Time delta from previous packet: 0.009766000 seconds Time since reference or first frame: 0.047658000 seconds Frame Number: 9 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Destination: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0124 (292) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3aa2 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.139 (165.227.249.139) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x4586 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x69256C31E16F3A5C Responder cookie: 0xB5C0F5B3D807FB72 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBF0D1BAA Length: 60 Encrypted payload (32 bytes) 0000 00 03 d2 20 0e a4 00 0c 29 f4 af 90 08 00 45 00 ... ....).....E. 0010 00 58 01 24 00 00 40 11 3a a2 a5 e3 f9 7c a5 e3 .X.$..@.:....|.. 0020 f9 8b 01 f4 01 f4 00 44 45 86 69 25 6c 31 e1 6f .......DE.i%l1.o 0030 3a 5c b5 c0 f5 b3 d8 07 fb 72 08 10 20 01 bf 0d :\.......r.. ... 0040 1b aa 00 00 00 3c 6f ab 20 88 8c 77 9d 8d fd 70 .....g..4e. 0070 03 dd 8e dd 3a e4 a9 43 bd 39 37 a8 2c f3 ee e3 ....:..C.97.,... 0080 b8 ad 70 ef 58 83 ..p.X. Frame 12 (134 bytes on wire, 134 bytes captured) Arrival Time: Jul 5, 2007 13:46:26.436563000 Time delta from previous packet: 0.675322000 seconds Time since reference or first frame: 1.107390000 seconds Frame Number: 12 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Destination: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0039 (57) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b4b [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.139 (165.227.249.139) Encapsulating Security Payload SPI: 0xf73332a0 Sequence: 3 Data (92 bytes) 0000 00 03 d2 20 0e a4 00 0c 29 f4 af 90 08 00 45 00 ... ....).....E. 0010 00 78 00 39 00 00 f0 32 8b 4b a5 e3 f9 7c a5 e3 .x.9...2.K...|.. 0020 f9 8b f7 33 32 a0 00 00 00 03 be 52 85 60 48 0e ...32......R.`H. 0030 70 77 0c 4b 99 35 d9 a2 fd 4b 21 b2 aa 93 ca 5d pw.K.5...K!....] 0040 fd aa 4c 06 04 56 82 38 68 90 2c a9 f6 13 13 d5 ..L..V.8h.,..... 0050 a3 a1 21 d5 b1 ff 47 3a 6a a2 20 76 71 76 80 59 ..!...G:j. vqv.Y 0060 f7 a5 ad ed 00 57 ab 13 4f a9 ee a8 2b 8c 94 ba .....W..O...+... 0070 26 50 b8 22 38 ea 9f 8b 6e 5b e6 f8 4a e1 d9 b3 &P."8...n[..J... 0080 de 05 f5 35 d5 3c ...5.< Frame 13 (134 bytes on wire, 134 bytes captured) Arrival Time: Jul 5, 2007 13:46:26.441016000 Time delta from previous packet: 0.004453000 seconds Time since reference or first frame: 1.111843000 seconds Frame Number: 13 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.139 (165.227.249.139), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0009 (9) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c7b [correct] Good: True Bad : False Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x51e9da80 Sequence: 2 Data (92 bytes) 0000 00 0c 29 f4 af 90 00 03 d2 20 0e a4 08 00 45 00 ..)...... ....E. 0010 00 78 00 09 00 00 ff 32 7c 7b a5 e3 f9 8b a5 e3 .x.....2|{...... 0020 f9 7c 51 e9 da 80 00 00 00 02 a8 14 ef a6 2e ed .|Q............. 0030 d6 a4 65 4e 64 86 27 58 d2 2b c5 29 4d f2 ab 6f ..eNd.'X.+.)M..o 0040 bc e8 77 46 7c 3f fa e1 30 75 7f 15 1f 97 52 39 ..wF|?..0u....R9 0050 14 a6 a9 5c ab 31 d0 26 a1 ec 3e b9 b4 90 f5 07 ...\.1.&..>..... 0060 a9 1e 6e cc 33 c1 b6 70 f5 12 3e df 69 9f d2 d3 ..n.3..p..>.i... 0070 0c b2 ae 2a 54 b3 87 e9 7a 4b 51 68 2c e2 6d 6c ...*T...zKQh,.ml 0080 15 23 7e dd 83 3a .#~..: Frame 14 (134 bytes on wire, 134 bytes captured) Arrival Time: Jul 5, 2007 13:46:27.446241000 Time delta from previous packet: 1.005225000 seconds Time since reference or first frame: 2.117068000 seconds Frame Number: 14 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Destination: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x003a (58) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b4a [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.139 (165.227.249.139) Encapsulating Security Payload SPI: 0xf73332a0 Sequence: 4 Data (92 bytes) 0000 00 03 d2 20 0e a4 00 0c 29 f4 af 90 08 00 45 00 ... ....).....E. 0010 00 78 00 3a 00 00 f0 32 8b 4a a5 e3 f9 7c a5 e3 .x.:...2.J...|.. 0020 f9 8b f7 33 32 a0 00 00 00 04 c1 9c 56 f3 15 c8 ...32.......V... 0030 cf 49 5b 6e ea aa 1d c8 be a0 8b d0 d2 1f a4 59 .I[n...........Y 0040 4f 9e 87 1f 9e cb 99 90 9e 06 1b 47 0c 59 d5 0a O..........G.Y.. 0050 a2 93 0f a5 f7 6e c8 c0 5e ef 54 0c 22 af ed 4d .....n..^.T."..M 0060 d8 38 1d da 62 8d 2e bb 6d d3 d0 2e 87 5a a5 bf .8..b...m....Z.. 0070 94 16 20 71 23 c7 5f af b9 56 e9 69 c7 61 93 2c .. q#._..V.i.a., 0080 14 2b 58 ea d9 e8 .+X... Frame 15 (134 bytes on wire, 134 bytes captured) Arrival Time: Jul 5, 2007 13:46:27.451311000 Time delta from previous packet: 0.005070000 seconds Time since reference or first frame: 2.122138000 seconds Frame Number: 15 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.139 (165.227.249.139), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x000a (10) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c7a [correct] Good: True Bad : False Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x51e9da80 Sequence: 3 Data (92 bytes) 0000 00 0c 29 f4 af 90 00 03 d2 20 0e a4 08 00 45 00 ..)...... ....E. 0010 00 78 00 0a 00 00 ff 32 7c 7a a5 e3 f9 8b a5 e3 .x.....2|z...... 0020 f9 7c 51 e9 da 80 00 00 00 03 aa 94 4d 6d dd 8d .|Q.........Mm.. 0030 bf 00 0c c0 f8 3c 6a a1 ea 9f 88 fa 8c 27 30 a5 ....._N.q..s..8.t.b. 0070 5d fe da 77 26 fd eb e2 78 10 17 c2 78 81 86 0a ]..w&...x...x... 0080 e3 8a ac 54 14 fd ...T.. Frame 16 (134 bytes on wire, 134 bytes captured) Arrival Time: Jul 5, 2007 13:46:28.450038000 Time delta from previous packet: 0.998727000 seconds Time since reference or first frame: 3.120865000 seconds Frame Number: 16 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Destination: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.139 (165.227.249.139) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x003b (59) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b49 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.139 (165.227.249.139) Encapsulating Security Payload SPI: 0xf73332a0 Sequence: 5 Data (92 bytes) 0000 00 03 d2 20 0e a4 00 0c 29 f4 af 90 08 00 45 00 ... ....).....E. 0010 00 78 00 3b 00 00 f0 32 8b 49 a5 e3 f9 7c a5 e3 .x.;...2.I...|.. 0020 f9 8b f7 33 32 a0 00 00 00 05 b1 29 ba 9c e2 5e ...32......)...^ 0030 db ec a6 5a ff 12 fe 01 d1 08 26 88 32 80 37 d0 ...Z......&.2.7. 0040 a5 00 b4 85 f9 a8 9c 5f aa 23 e4 70 ee f7 6f de ......._.#.p..o. 0050 bf f3 22 db 5d e8 0d 85 0c ff 2e e0 5a 6b f7 c7 ..".].......Zk.. 0060 4d d2 7c c4 0f 86 f2 2c 14 63 5b 45 da 84 47 ab M.|....,.c[E..G. 0070 ec e4 7b 4b 0d 47 ee 81 1e a7 52 eb 3f 16 37 6f ..{K.G....R.?.7o 0080 c0 6d af 8f e0 60 .m...` Frame 17 (134 bytes on wire, 134 bytes captured) Arrival Time: Jul 5, 2007 13:46:28.455142000 Time delta from previous packet: 0.005104000 seconds Time since reference or first frame: 3.125969000 seconds Frame Number: 17 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:03:d2:20:0e:a4 (00:03:d2:20:0e:a4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.139 (165.227.249.139), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x000b (11) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c79 [correct] Good: True Bad : False Source: 165.227.249.139 (165.227.249.139) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x51e9da80 Sequence: 4 Data (92 bytes) 0000 00 0c 29 f4 af 90 00 03 d2 20 0e a4 08 00 45 00 ..)...... ....E. 0010 00 78 00 0b 00 00 ff 32 7c 79 a5 e3 f9 8b a5 e3 .x.....2|y...... 0020 f9 7c 51 e9 da 80 00 00 00 04 6d 0e d2 f5 09 43 .|Q.......m....C 0030 00 46 6d 31 3d 16 91 d4 68 14 09 8b 39 17 c6 d2 .Fm1=...h...9... 0040 28 78 c6 4d 93 da 1f 19 e3 5d 6c a1 91 19 18 92 (x.M.....]l..... 0050 98 41 a6 d8 df b1 31 4c 58 ba 16 15 d4 60 ee 1a .A....1LX....`.. 0060 42 fa 73 c1 5a 24 e7 08 55 2c 02 7f 44 2f 07 d5 B.s.Z$..U,..D/.. 0070 33 da a3 6a 62 e7 ed 4b 54 2c c7 7e a4 eb 4c 9b 3..jb..KT,.~..L. 0080 2c 4d 0c 3b 89 d8 ,M.;..