Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Mar 3, 2008 14:26:03.389614000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01) Destination: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.149 (165.227.249.149) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x0151 (337) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x39c7 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.149 (165.227.249.149) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0x06ff [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x146393826144B91F Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 17 c5 0f 77 01 00 0c 29 f4 af 90 08 00 45 00 ....w...).....E. 0010 00 fc 01 51 00 00 40 11 39 c7 a5 e3 f9 7c a5 e3 ...Q..@.9....|.. 0020 f9 95 01 f4 01 f4 00 e8 06 ff 14 63 93 82 61 44 ...........c..aD 0030 b9 1f 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b .....N.$...GYL(K 0090 21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e !;....'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 .o,....R.V Frame 2 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 3, 2008 14:26:03.390347000 Time delta from previous packet: 0.000733000 seconds Time since reference or first frame: 0.000733000 seconds Frame Number: 2 Packet Length: 138 bytes Capture Length: 138 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.149 (165.227.249.149), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 124 Identification: 0x443b (17467) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x385c [correct] Good: True Bad : False Source: 165.227.249.149 (165.227.249.149) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 104 Checksum: 0x934e [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x146393826144B91F Responder cookie: 0x55EE82261ABAC7B0 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 96 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: unknown vendor ID: 0x5B362BC820F60007 0000 00 0c 29 f4 af 90 00 17 c5 0f 77 01 08 00 45 00 ..).......w...E. 0010 00 7c 44 3b 00 00 ff 11 38 5c a5 e3 f9 95 a5 e3 .|D;....8\...... 0020 f9 7c 01 f4 01 f4 00 68 93 4e 14 63 93 82 61 44 .|.....h.N.c..aD 0030 b9 1f 55 ee 82 26 1a ba c7 b0 01 10 02 00 00 00 ..U..&.......... 0040 00 00 00 00 00 60 0d 00 00 38 00 00 00 01 00 00 .....`...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 00 00 ............p... 0080 00 0c 5b 36 2b c8 20 f6 00 07 ..[6+. ... Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Mar 3, 2008 14:26:03.393705000 Time delta from previous packet: 0.003358000 seconds Time since reference or first frame: 0.004091000 seconds Frame Number: 3 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01) Destination: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.149 (165.227.249.149) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0152 (338) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x39f2 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.149 (165.227.249.149) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x79a4 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x146393826144B91F Responder cookie: 0x55EE82261ABAC7B0 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 17 c5 0f 77 01 00 0c 29 f4 af 90 08 00 45 00 ....w...).....E. 0010 00 d0 01 52 00 00 40 11 39 f2 a5 e3 f9 7c a5 e3 ...R..@.9....|.. 0020 f9 95 01 f4 01 f4 00 bc 79 a4 14 63 93 82 61 44 ........y..c..aD 0030 b9 1f 55 ee 82 26 1a ba c7 b0 04 10 02 00 00 00 ..U..&.......... 0040 00 00 00 00 00 b4 0a 00 00 84 ef 58 4b 47 75 1d ...........XKGu. 0050 4c 73 84 ad 53 01 86 92 5b 6f 25 06 6e e9 61 45 Ls..S...[o%.n.aE 0060 07 26 4d 70 15 85 ea 68 7a 0b 48 49 83 85 c5 05 .&Mp...hz.HI.... 0070 41 50 26 75 a0 83 e5 96 c9 ea 50 7b ff e7 bc b1 AP&u......P{.... 0080 80 aa 02 bb bb 52 47 80 af 00 1c 43 af 39 79 43 .....RG....C.9yC 0090 47 09 5e ba b0 2d 6b 35 b3 d9 44 45 37 7b 22 71 G.^..-k5..DE7{"q 00a0 dd e7 35 13 80 60 8d a5 9a 87 42 a6 eb 80 27 e1 ..5..`....B...'. 00b0 ee 3d ae 1e ab 4e 58 6b 8c c0 69 a6 0a e8 bf bf .=...NXk..i..... 00c0 e1 63 47 a2 02 eb ed b4 e3 84 00 00 00 14 78 29 .cG...........x) 00d0 1e 33 94 3b 86 8c 96 b8 db ac c1 89 02 6f .3.;.........o Frame 4 (250 bytes on wire, 250 bytes captured) Arrival Time: Mar 3, 2008 14:26:03.463494000 Time delta from previous packet: 0.069789000 seconds Time since reference or first frame: 0.073880000 seconds Frame Number: 4 Packet Length: 250 bytes Capture Length: 250 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.149 (165.227.249.149), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 236 Identification: 0x443b (17467) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x37ec [correct] Good: True Bad : False Source: 165.227.249.149 (165.227.249.149) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 216 Checksum: 0x4d15 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x146393826144B91F Responder cookie: 0x55EE82261ABAC7B0 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 208 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0x404BF439522CA3F6 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 0c 29 f4 af 90 00 17 c5 0f 77 01 08 00 45 00 ..).......w...E. 0010 00 ec 44 3b 00 00 ff 11 37 ec a5 e3 f9 95 a5 e3 ..D;....7....... 0020 f9 7c 01 f4 01 f4 00 d8 4d 15 14 63 93 82 61 44 .|......M..c..aD 0030 b9 1f 55 ee 82 26 1a ba c7 b0 04 10 02 00 00 00 ..U..&.......... 0040 00 00 00 00 00 d0 0a 00 00 84 73 7a 97 41 8e 9f ..........sz.A.. 0050 9f c3 d1 4b f6 35 6f 5b 73 31 3b de 8c 46 06 96 ...K.5o[s1;..F.. 0060 87 66 cd db b7 89 f2 c8 fd 68 d8 e0 a9 6c 70 5a .f.......h...lpZ 0070 f7 dc 19 25 40 71 a1 85 0d 3c ec 03 5b 3e fb a1 ...%@q...<..[>.. 0080 de 88 79 08 bd 6e 2d e1 72 26 35 20 1e c3 1c 31 ..y..n-.r&5 ...1 0090 8c 3f 28 ef 03 3d ee f9 05 11 7e e3 65 c9 d9 03 .?(..=....~.e... 00a0 46 5a 25 b9 1f 48 2f 0b 8f 68 eb 0e f5 50 40 57 FZ%..H/..h...P@W 00b0 a9 2f 84 e7 16 51 0e da 27 68 32 ca 87 22 39 a6 ./...Q..'h2.."9. 00c0 4e ac cd 66 00 bb 12 cf f6 e8 0d 00 00 18 27 2b N..f..........'+ 00d0 92 b7 01 4f ac fb 47 e3 85 a0 eb 28 8c fd ce 52 ...O..G....(...R 00e0 e5 8e 0d 00 00 0c 40 4b f4 39 52 2c a3 f6 00 00 ......@K.9R,.... 00f0 00 0c 09 00 26 89 df d6 b7 12 ....&..... Frame 5 (118 bytes on wire, 118 bytes captured) Arrival Time: Mar 3, 2008 14:26:03.463496000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.073882000 seconds Frame Number: 5 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01) Destination: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.149 (165.227.249.149) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0153 (339) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a59 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.149 (165.227.249.149) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x9fe9 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x146393826144B91F Responder cookie: 0x55EE82261ABAC7B0 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 17 c5 0f 77 01 00 0c 29 f4 af 90 08 00 45 00 ....w...).....E. 0010 00 68 01 53 00 00 40 11 3a 59 a5 e3 f9 7c a5 e3 .h.S..@.:Y...|.. 0020 f9 95 01 f4 01 f4 00 54 9f e9 14 63 93 82 61 44 .......T...c..aD 0030 b9 1f 55 ee 82 26 1a ba c7 b0 05 10 02 01 00 00 ..U..&.......... 0040 00 00 00 00 00 4c f9 65 2d 2d e0 d9 99 a4 d0 09 .....L.e--...... 0050 31 85 21 f6 73 f9 af c2 26 13 da 88 a5 86 b4 a0 1.!.s...&....... 0060 50 cd 72 5f 96 ae 67 e6 87 33 93 9a f6 b6 07 6c P.r_..g..3.....l 0070 49 3b 9c 33 95 3c I;.3.< Frame 6 (118 bytes on wire, 118 bytes captured) Arrival Time: Mar 3, 2008 14:26:03.467911000 Time delta from previous packet: 0.004415000 seconds Time since reference or first frame: 0.078297000 seconds Frame Number: 6 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.149 (165.227.249.149), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x443b (17467) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x3870 [correct] Good: True Bad : False Source: 165.227.249.149 (165.227.249.149) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x98a3 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x146393826144B91F Responder cookie: 0x55EE82261ABAC7B0 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 f4 af 90 00 17 c5 0f 77 01 08 00 45 00 ..).......w...E. 0010 00 68 44 3b 00 00 ff 11 38 70 a5 e3 f9 95 a5 e3 .hD;....8p...... 0020 f9 7c 01 f4 01 f4 00 54 98 a3 14 63 93 82 61 44 .|.....T...c..aD 0030 b9 1f 55 ee 82 26 1a ba c7 b0 05 10 02 01 00 00 ..U..&.......... 0040 00 00 00 00 00 4c 84 e9 a1 bd 30 a4 cc 96 9f 62 .....L....0....b 0050 6b 2d 36 15 2a ff 79 ba 75 2d 2a 1d fc ff 02 63 k-6.*.y.u-*....c 0060 31 66 8a fb 30 f9 ca 0b 08 d4 a1 a2 25 ee a1 7e 1f..0.......%..~ 0070 96 75 b6 bb 81 50 .u...P Frame 7 (342 bytes on wire, 342 bytes captured) Arrival Time: Mar 3, 2008 14:26:03.467913000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.078299000 seconds Frame Number: 7 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01) Destination: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.149 (165.227.249.149) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0154 (340) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3978 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.149 (165.227.249.149) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x1307 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x146393826144B91F Responder cookie: 0x55EE82261ABAC7B0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x61A700F5 Length: 300 Encrypted payload (272 bytes) 0000 00 17 c5 0f 77 01 00 0c 29 f4 af 90 08 00 45 00 ....w...).....E. 0010 01 48 01 54 00 00 40 11 39 78 a5 e3 f9 7c a5 e3 .H.T..@.9x...|.. 0020 f9 95 01 f4 01 f4 01 34 13 07 14 63 93 82 61 44 .......4...c..aD 0030 b9 1f 55 ee 82 26 1a ba c7 b0 08 10 20 01 61 a7 ..U..&...... .a. 0040 00 f5 00 00 01 2c 42 3a 00 27 73 f7 d7 d5 23 d3 .....,B:.'s...#. 0050 b3 73 fa ef 41 71 fc c5 92 2b 7f 3e bd f1 57 fc .s..Aq...+.>..W. 0060 ef 78 76 26 3d 6b ea b6 82 04 f3 66 1f 9e 15 f4 .xv&=k.....f.... 0070 6d 15 50 fc 27 c8 cb 52 75 c4 6e 5b e7 b4 5c b4 m.P.'..Ru.n[..\. 0080 e8 15 b9 9e b5 67 5d 34 67 8c 19 8f 20 39 40 8a .....g]4g... 9@. 0090 34 f3 a3 98 2f ba ad 91 24 c5 54 e4 37 14 86 06 4.../...$.T.7... 00a0 61 c0 66 6f cf 82 dd af f5 e6 8e e2 bf 0a ee b7 a.fo............ 00b0 a0 53 45 cd e7 9f 2f 3c c4 43 fe a9 68 4d 44 44 .SE.../<.C..hMDD 00c0 76 6e ba af f0 e0 a3 95 20 5f 5d 3c 56 05 ff b0 vn...... _] ... 0120 ec 83 a0 a6 7e b2 c0 9f b5 d7 51 88 f3 81 43 a9 ....~.....Q...C. 0130 d4 a9 75 15 43 0d 0e d4 3e 2d 07 10 fa f8 df 47 ..u.C...>-.....G 0140 5a 14 21 d8 6d 33 1d e4 66 eb d5 6b 6e a3 14 4d Z.!.m3..f..kn..M 0150 39 23 88 00 d7 c8 9#.... Frame 8 (342 bytes on wire, 342 bytes captured) Arrival Time: Mar 3, 2008 14:26:03.533150000 Time delta from previous packet: 0.065237000 seconds Time since reference or first frame: 0.143536000 seconds Frame Number: 8 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.149 (165.227.249.149), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x443b (17467) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x3790 [correct] Good: True Bad : False Source: 165.227.249.149 (165.227.249.149) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x927c [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x146393826144B91F Responder cookie: 0x55EE82261ABAC7B0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x61A700F5 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 f4 af 90 00 17 c5 0f 77 01 08 00 45 00 ..).......w...E. 0010 01 48 44 3b 00 00 ff 11 37 90 a5 e3 f9 95 a5 e3 .HD;....7....... 0020 f9 7c 01 f4 01 f4 01 34 92 7c 14 63 93 82 61 44 .|.....4.|.c..aD 0030 b9 1f 55 ee 82 26 1a ba c7 b0 08 10 20 01 61 a7 ..U..&...... .a. 0040 00 f5 00 00 01 2c 82 cf 66 18 06 ba fe c0 cb 1c .....,..f....... 0050 cc 85 51 47 e1 2b 4e 2a 67 d0 98 be e6 4c 0f 4a ..QG.+N*g....L.J 0060 a4 19 98 95 5d d7 f3 26 41 56 fe ef e5 46 35 25 ....]..&AV...F5% 0070 2c 23 83 d2 de e2 c1 c0 03 6f bc b2 98 c1 7a d8 ,#.......o....z. 0080 b7 25 fc ac b0 a8 52 55 c0 eb 12 84 26 7f d9 35 .%....RU....&..5 0090 a6 87 0b ac 81 21 21 9e d5 48 d9 b8 f2 a9 58 3a .....!!..H....X: 00a0 9b 32 41 c5 e6 e4 20 c4 45 73 bc ae 41 da 12 e2 .2A... .Es..A... 00b0 4f 92 8b b9 49 04 20 64 5a 11 74 17 18 db 3d fc O...I. dZ.t...=. 00c0 dd e9 77 56 d1 92 f7 72 bd a7 b5 3d 47 ff 02 2d ..wV...r...=G..- 00d0 d5 5f 41 d7 1a 76 ba 94 9f ba 86 89 a1 4e b1 a3 ._A..v.......N.. 00e0 50 45 c8 69 63 f3 9b 3f e8 83 1b fa be 85 a7 c9 PE.ic..?........ 00f0 9e cd 39 41 33 84 40 63 cc a5 0f d3 8d 3b a9 79 ..9A3.@c.....;.y 0100 da dd 54 eb 02 ed 31 a9 a0 5a 77 a8 2c ac f1 16 ..T...1..Zw.,... 0110 62 3c a9 e8 c0 21 ac 84 0e ea 39 ae 8f d4 ec 70 b<...!....9....p 0120 b4 ba 84 10 7a 11 41 f9 de 9b c3 4a d6 35 14 cd ....z.A....J.5.. 0130 5c 6e 56 93 8c cc 23 f3 27 d3 2d a9 8a 85 72 95 \nV...#.'.-...r. 0140 70 89 8a 22 f9 cf 6e ea e3 f8 36 91 7b a3 e4 e0 p.."..n...6.{... 0150 d5 5d 88 96 29 30 .]..)0 Frame 9 (102 bytes on wire, 102 bytes captured) Arrival Time: Mar 3, 2008 14:26:03.534771000 Time delta from previous packet: 0.001621000 seconds Time since reference or first frame: 0.145157000 seconds Frame Number: 9 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01) Destination: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.149 (165.227.249.149) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0155 (341) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a67 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.149 (165.227.249.149) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x80b2 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x146393826144B91F Responder cookie: 0x55EE82261ABAC7B0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x61A700F5 Length: 60 Encrypted payload (32 bytes) 0000 00 17 c5 0f 77 01 00 0c 29 f4 af 90 08 00 45 00 ....w...).....E. 0010 00 58 01 55 00 00 40 11 3a 67 a5 e3 f9 7c a5 e3 .X.U..@.:g...|.. 0020 f9 95 01 f4 01 f4 00 44 80 b2 14 63 93 82 61 44 .......D...c..aD 0030 b9 1f 55 ee 82 26 1a ba c7 b0 08 10 20 01 61 a7 ..U..&...... .a. 0040 00 f5 00 00 00 3c 47 5a ae 0f fc bd 80 b5 36 41 ......5. 0030 da a5 29 ba a6 fb f3 14 08 ea 76 bb db fa dc a9 ..).......v..... 0040 ec f3 22 4d df 29 07 fc 4c d9 87 79 16 11 f6 5b .."M.)..L..y...[ 0050 e2 c8 54 2d 18 96 1d 6f a6 f2 d6 82 9a 49 4d b1 ..T-...o.....IM. 0060 bf 58 ee 72 d0 d9 ac 67 64 bc dc 2c a9 4d e4 89 .X.r...gd..,.M.. 0070 d2 91 9c 8c 3b da 67 65 1f 18 b1 99 70 e6 98 30 ....;.ge....p..0 0080 4c c6 fb 32 57 fb L..2W. Frame 11 (134 bytes on wire, 134 bytes captured) Arrival Time: Mar 3, 2008 14:26:03.856869000 Time delta from previous packet: 0.003535000 seconds Time since reference or first frame: 0.467255000 seconds Frame Number: 11 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.149 (165.227.249.149), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0xfac1 (64193) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x40b9 [correct] Good: True Bad : False Source: 165.227.249.149 (165.227.249.149) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xd065c453 Sequence: 1 Data (92 bytes) 0000 00 0c 29 f4 af 90 00 17 c5 0f 77 01 08 00 45 00 ..).......w...E. 0010 00 78 fa c1 00 00 40 32 40 b9 a5 e3 f9 95 a5 e3 .x....@2@....... 0020 f9 7c d0 65 c4 53 00 00 00 01 4c 3e d2 bc b9 7d .|.e.S....L>...} 0030 bb b5 ca 91 0b f0 8c cd 22 14 23 7b 0f 26 23 a5 ........".#{.&#. 0040 9b a9 41 67 1d c0 a5 36 40 cc 9c 60 0e 41 43 e8 ..Ag...6@..`.AC. 0050 a8 47 21 68 0f bf a5 d1 47 2b 38 86 1c d6 92 da .G!h....G+8..... 0060 c9 2b 56 16 32 e4 88 f9 a6 55 a4 52 9c 5f f9 f1 .+V.2....U.R._.. 0070 9b 20 32 cd 15 f9 ff 02 69 a1 43 ee 21 5e 7b ff . 2.....i.C.!^{. 0080 f8 d1 66 ab b1 0e ..f... Frame 12 (134 bytes on wire, 134 bytes captured) Arrival Time: Mar 3, 2008 14:26:04.497300000 Time delta from previous packet: 0.640431000 seconds Time since reference or first frame: 1.107686000 seconds Frame Number: 12 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01) Destination: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.149 (165.227.249.149) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x004f (79) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b2b [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.149 (165.227.249.149) Encapsulating Security Payload SPI: 0x2c7e027c Sequence: 3 Data (92 bytes) 0000 00 17 c5 0f 77 01 00 0c 29 f4 af 90 08 00 45 00 ....w...).....E. 0010 00 78 00 4f 00 00 f0 32 8b 2b a5 e3 f9 7c a5 e3 .x.O...2.+...|.. 0020 f9 95 2c 7e 02 7c 00 00 00 03 02 a0 bc 27 d6 d7 ..,~.|.......'.. 0030 ad 3a 64 ad d0 f2 bf 76 73 4d 4f d5 42 ea cd 55 .:d....vsMO.B..U 0040 78 59 a6 71 46 77 a3 7e c5 d4 68 9c 50 b8 c0 3b xY.qFw.~..h.P..; 0050 34 11 d0 b5 5c 06 6c e0 d4 3a 2a 4c 53 17 36 b4 4...\.l..:*LS.6. 0060 8f 3d e5 20 94 0b 23 aa 02 5a f8 f0 d4 a3 62 0c .=. ..#..Z....b. 0070 0a b4 a3 ae 5c 02 52 63 1f 3b 24 f6 a5 30 b2 14 ....\.Rc.;$..0.. 0080 1c ca 47 bb e4 82 ..G... Frame 13 (134 bytes on wire, 134 bytes captured) Arrival Time: Mar 3, 2008 14:26:04.497596000 Time delta from previous packet: 0.000296000 seconds Time since reference or first frame: 1.107982000 seconds Frame Number: 13 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.149 (165.227.249.149), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x3ff6 (16374) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xfb84 [correct] Good: True Bad : False Source: 165.227.249.149 (165.227.249.149) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xd065c453 Sequence: 2 Data (92 bytes) 0000 00 0c 29 f4 af 90 00 17 c5 0f 77 01 08 00 45 00 ..).......w...E. 0010 00 78 3f f6 00 00 40 32 fb 84 a5 e3 f9 95 a5 e3 .x?...@2........ 0020 f9 7c d0 65 c4 53 00 00 00 02 75 61 8c f0 8e d8 .|.e.S....ua.... 0030 a6 7b 49 8b b4 57 93 f9 f6 83 a6 24 b1 79 70 8d .{I..W.....$.yp. 0040 c4 83 52 11 31 33 4a 49 c4 3c d2 6f ea 66 40 ab ..R.13JI.<.o.f@. 0050 17 44 bb 4a cc e7 d3 7c 61 67 76 35 6e 64 41 9f .D.J...|agv5ndA. 0060 25 20 e6 5d 23 46 ab bc 52 0a f3 36 10 93 f6 a5 % .]#F..R..6.... 0070 56 f4 b3 31 83 52 db 2f ea bb ee bf f9 3a 94 5f V..1.R./.....:._ 0080 ee 02 02 a2 b9 32 .....2 Frame 14 (134 bytes on wire, 134 bytes captured) Arrival Time: Mar 3, 2008 14:26:05.499783000 Time delta from previous packet: 1.002187000 seconds Time since reference or first frame: 2.110169000 seconds Frame Number: 14 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01) Destination: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.149 (165.227.249.149) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0050 (80) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b2a [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.149 (165.227.249.149) Encapsulating Security Payload SPI: 0x2c7e027c Sequence: 4 Data (92 bytes) 0000 00 17 c5 0f 77 01 00 0c 29 f4 af 90 08 00 45 00 ....w...).....E. 0010 00 78 00 50 00 00 f0 32 8b 2a a5 e3 f9 7c a5 e3 .x.P...2.*...|.. 0020 f9 95 2c 7e 02 7c 00 00 00 04 84 0f 81 9d 36 70 ..,~.|........6p 0030 e5 9f fb e6 97 4b 56 94 ca 1a 76 f5 30 62 e0 1e .....KV...v.0b.. 0040 4d 58 1e 37 8b c3 a2 ae 4f 28 6d bd 36 e3 31 d0 MX.7....O(m.6.1. 0050 a6 6c 07 da f5 54 a6 25 b6 47 b9 17 1c 94 3c 1d .l...T.%.G....<. 0060 88 a9 27 3f e9 39 1a 55 0b 36 04 27 0b f1 cf 6e ..'?.9.U.6.'...n 0070 39 2d 50 f6 f8 41 44 e3 c4 db 00 cc da 59 67 80 9-P..AD......Yg. 0080 9f b8 c4 d8 99 81 ...... Frame 15 (134 bytes on wire, 134 bytes captured) Arrival Time: Mar 3, 2008 14:26:05.500266000 Time delta from previous packet: 0.000483000 seconds Time since reference or first frame: 2.110652000 seconds Frame Number: 15 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.149 (165.227.249.149), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x15fb (5627) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x2580 [correct] Good: True Bad : False Source: 165.227.249.149 (165.227.249.149) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xd065c453 Sequence: 3 Data (92 bytes) 0000 00 0c 29 f4 af 90 00 17 c5 0f 77 01 08 00 45 00 ..).......w...E. 0010 00 78 15 fb 00 00 40 32 25 80 a5 e3 f9 95 a5 e3 .x....@2%....... 0020 f9 7c d0 65 c4 53 00 00 00 03 0e f2 c4 c2 4b 2a .|.e.S........K* 0030 57 a2 84 80 42 83 d9 69 a0 3d 32 a4 73 97 81 69 W...B..i.=2.s..i 0040 5b 4e 6d 90 4d 7a 5e 16 8f 60 b8 0c c0 dd a2 a5 [Nm.Mz^..`...... 0050 06 d7 b3 31 89 e4 70 cb 5f 64 bf f2 04 c7 d6 47 ...1..p._d.....G 0060 0a 27 84 1d 52 75 fd 19 bd a1 44 2b a8 8a 04 cf .'..Ru....D+.... 0070 9b 05 3e 19 ca a1 fc 10 c8 23 ee 08 96 bc 60 a4 ..>......#....`. 0080 fb 1f 2c 46 7a 16 ..,Fz. Frame 16 (134 bytes on wire, 134 bytes captured) Arrival Time: Mar 3, 2008 14:26:06.495850000 Time delta from previous packet: 0.995584000 seconds Time since reference or first frame: 3.106236000 seconds Frame Number: 16 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01) Destination: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.149 (165.227.249.149) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0051 (81) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b29 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.149 (165.227.249.149) Encapsulating Security Payload SPI: 0x2c7e027c Sequence: 5 Data (92 bytes) 0000 00 17 c5 0f 77 01 00 0c 29 f4 af 90 08 00 45 00 ....w...).....E. 0010 00 78 00 51 00 00 f0 32 8b 29 a5 e3 f9 7c a5 e3 .x.Q...2.)...|.. 0020 f9 95 2c 7e 02 7c 00 00 00 05 af 3f 7c b5 d3 a4 ..,~.|.....?|... 0030 bd 7d 57 51 d7 a9 46 fb cb 96 1e e4 4f 37 42 7d .}WQ..F.....O7B} 0040 78 6d e9 10 a9 49 33 5f 3a 8c 63 c6 bd 77 4f a0 xm...I3_:.c..wO. 0050 18 10 5d 08 e7 e0 77 55 de 86 9d 54 38 df aa 35 ..]...wU...T8..5 0060 b6 b2 6e 23 b5 a7 5c 38 63 4c ef c1 23 b5 96 b2 ..n#..\8cL..#... 0070 b9 3d fc 17 a5 28 11 4c 81 aa d5 01 07 d2 40 cf .=...(.L......@. 0080 48 35 1a 13 21 a6 H5..!. Frame 17 (134 bytes on wire, 134 bytes captured) Arrival Time: Mar 3, 2008 14:26:06.496525000 Time delta from previous packet: 0.000675000 seconds Time since reference or first frame: 3.106911000 seconds Frame Number: 17 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.149 (165.227.249.149), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x3133 (12595) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x0a48 [correct] Good: True Bad : False Source: 165.227.249.149 (165.227.249.149) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xd065c453 Sequence: 4 Data (92 bytes) 0000 00 0c 29 f4 af 90 00 17 c5 0f 77 01 08 00 45 00 ..).......w...E. 0010 00 78 31 33 00 00 40 32 0a 48 a5 e3 f9 95 a5 e3 .x13..@2.H...... 0020 f9 7c d0 65 c4 53 00 00 00 04 d8 99 ba 29 3f 78 .|.e.S.......)?x 0030 0c 3f 83 6b dc 84 98 e6 e1 40 a2 90 98 a3 e2 68 .?.k.....@.....h 0040 95 6e 59 7f c9 bf 26 51 4d d1 cb 80 3d 9a df 9e .nY...&QM...=... 0050 cf e7 c0 42 f1 cb c5 67 c7 b8 cc d2 5a 78 48 57 ...B...g....ZxHW 0060 04 cd c7 af 5b 07 4a 8b 00 75 06 58 e2 f4 dc e2 ....[.J..u.X.... 0070 f9 f9 48 75 1f 4e f3 e3 67 e8 61 54 a3 be 2f a2 ..Hu.N..g.aT../. 0080 ad 16 13 e9 99 7e .....~