Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Dec 14, 2007 09:56:28.827727000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Destination: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.154 (165.227.249.154) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x014a (330) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x39c9 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.154 (165.227.249.154) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0xc1bb [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9BAACBEFF305ACE7 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 1b 11 4c 84 98 00 0c 29 f4 af 90 08 00 45 00 ...L....).....E. 0010 00 fc 01 4a 00 00 40 11 39 c9 a5 e3 f9 7c a5 e3 ...J..@.9....|.. 0020 f9 9a 01 f4 01 f4 00 e8 c1 bb 9b aa cb ef f3 05 ................ 0030 ac e7 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b .....N.$...GYL(K 0090 21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e !;....'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 .o,....R.V Frame 2 (146 bytes on wire, 146 bytes captured) Arrival Time: Dec 14, 2007 09:56:28.843196000 Time delta from previous packet: 0.015469000 seconds Time since reference or first frame: 0.015469000 seconds Frame Number: 2 Packet Length: 146 bytes Capture Length: 146 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.154 (165.227.249.154), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 132 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb8a [correct] Good: True Bad : False Source: 165.227.249.154 (165.227.249.154) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 112 Checksum: 0x7cbb [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9BAACBEFF305ACE7 Responder cookie: 0x31318B5CA4F67802 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 104 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 0c 29 f4 af 90 00 1b 11 4c 84 98 08 00 45 00 ..)......L....E. 0010 00 84 00 00 40 00 40 11 fb 8a a5 e3 f9 9a a5 e3 ....@.@......... 0020 f9 7c 01 f4 01 f4 00 70 7c bb 9b aa cb ef f3 05 .|.....p|....... 0030 ac e7 31 31 8b 5c a4 f6 78 02 01 10 02 00 00 00 ..11.\..x....... 0040 00 00 00 00 00 68 0d 00 00 38 00 00 00 01 00 00 .....h...8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 00 00 ............p... 0080 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 0090 01 00 .. Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Dec 14, 2007 09:56:28.852175000 Time delta from previous packet: 0.008979000 seconds Time since reference or first frame: 0.024448000 seconds Frame Number: 3 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Destination: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.154 (165.227.249.154) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x014b (331) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x39f4 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.154 (165.227.249.154) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x097f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9BAACBEFF305ACE7 Responder cookie: 0x31318B5CA4F67802 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 1b 11 4c 84 98 00 0c 29 f4 af 90 08 00 45 00 ...L....).....E. 0010 00 d0 01 4b 00 00 40 11 39 f4 a5 e3 f9 7c a5 e3 ...K..@.9....|.. 0020 f9 9a 01 f4 01 f4 00 bc 09 7f 9b aa cb ef f3 05 ................ 0030 ac e7 31 31 8b 5c a4 f6 78 02 04 10 02 00 00 00 ..11.\..x....... 0040 00 00 00 00 00 b4 0a 00 00 84 cb 35 42 48 d4 0a ...........5BH.. 0050 d5 7e 1a 4c a1 9b 83 eb 01 2c eb 01 02 85 06 6e .~.L.....,.....n 0060 1c af bf dc 25 79 c3 40 af 08 cb ba fd 21 83 f7 ....%y.@.....!.. 0070 d7 60 9c 33 d7 4f c6 0f 1b de f8 53 e5 b8 2d d5 .`.3.O.....S..-. 0080 8e 04 8f 7e ed 23 0e 4d ff c1 63 7f 2e 41 3e 33 ...~.#.M..c..A>3 0090 62 15 e7 03 74 8b fa 93 46 7a 5a 73 3f 19 9c 84 b...t...FzZs?... 00a0 4c 2e a2 3b 39 66 96 ac 45 4a c4 02 89 a1 b3 b4 L..;9f..EJ...... 00b0 c7 16 02 ca 02 ad 77 3c e6 84 5d a9 ef 18 98 a1 ......w<..]..... 00c0 de 3f 51 6a ba 48 9a e2 e6 5c 00 00 00 14 1c 51 .?Qj.H...\.....Q 00d0 c7 65 2c 90 7f 04 b2 92 04 d0 3d 64 b8 6c .e,.......=d.l Frame 4 (222 bytes on wire, 222 bytes captured) Arrival Time: Dec 14, 2007 09:56:29.028948000 Time delta from previous packet: 0.176773000 seconds Time since reference or first frame: 0.201221000 seconds Frame Number: 4 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.154 (165.227.249.154), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb3e [correct] Good: True Bad : False Source: 165.227.249.154 (165.227.249.154) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x6813 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9BAACBEFF305ACE7 Responder cookie: 0x31318B5CA4F67802 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 f4 af 90 00 1b 11 4c 84 98 08 00 45 00 ..)......L....E. 0010 00 d0 00 00 40 00 40 11 fb 3e a5 e3 f9 9a a5 e3 ....@.@..>...... 0020 f9 7c 01 f4 01 f4 00 bc 68 13 9b aa cb ef f3 05 .|......h....... 0030 ac e7 31 31 8b 5c a4 f6 78 02 04 10 02 00 00 00 ..11.\..x....... 0040 00 00 00 00 00 b4 0a 00 00 84 27 ff 38 83 0a f9 ..........'.8... 0050 36 0d 8c ff 5e 9d 2f f4 95 82 37 77 7e cd cf 36 6...^./...7w~..6 0060 77 27 fa 93 b5 64 93 17 66 39 aa 38 4a fd 23 d7 w'...d..f9.8J.#. 0070 c7 53 17 7b 5c bd 2e 25 d7 1c dd 42 36 85 ea 9b .S.{\..%...B6... 0080 b2 50 f7 8a 8e be c4 bc da 57 5c 65 30 e7 7f 1b .P.......W\e0... 0090 99 c8 71 51 b7 21 fd 0e 05 80 66 da 88 c2 9b 74 ..qQ.!....f....t 00a0 ca 36 4c bf 23 9e eb 43 f0 68 d2 7d bf 1c 24 7a .6L.#..C.h.}..$z 00b0 ef cc 07 84 25 e4 82 74 1b e3 27 79 74 e9 93 9e ....%..t..'yt... 00c0 b2 b1 53 7b 66 99 da 10 1f c4 00 00 00 14 a1 fd ..S{f........... 00d0 b4 f1 fe 9c 2b 0b 60 c0 57 1e e5 5e a0 21 ....+.`.W..^.! Frame 5 (118 bytes on wire, 118 bytes captured) Arrival Time: Dec 14, 2007 09:56:29.028950000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.201223000 seconds Frame Number: 5 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Destination: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.154 (165.227.249.154) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x014c (332) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a5b [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.154 (165.227.249.154) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x56d4 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9BAACBEFF305ACE7 Responder cookie: 0x31318B5CA4F67802 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 1b 11 4c 84 98 00 0c 29 f4 af 90 08 00 45 00 ...L....).....E. 0010 00 68 01 4c 00 00 40 11 3a 5b a5 e3 f9 7c a5 e3 .h.L..@.:[...|.. 0020 f9 9a 01 f4 01 f4 00 54 56 d4 9b aa cb ef f3 05 .......TV....... 0030 ac e7 31 31 8b 5c a4 f6 78 02 05 10 02 01 00 00 ..11.\..x....... 0040 00 00 00 00 00 4c f8 d2 ba 35 ce f2 79 ca b4 73 .....L...5..y..s 0050 d2 74 14 65 25 08 62 56 1e b5 b7 21 d6 41 58 55 .t.e%.bV...!.AXU 0060 90 54 b5 50 0b 67 5f 00 89 a5 f8 d8 2a 06 7b f5 .T.P.g_.....*.{. 0070 9f 35 92 f8 4f aa .5..O. Frame 6 (118 bytes on wire, 118 bytes captured) Arrival Time: Dec 14, 2007 09:56:29.042289000 Time delta from previous packet: 0.013339000 seconds Time since reference or first frame: 0.214562000 seconds Frame Number: 6 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.154 (165.227.249.154), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfba6 [correct] Good: True Bad : False Source: 165.227.249.154 (165.227.249.154) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x2b6f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9BAACBEFF305ACE7 Responder cookie: 0x31318B5CA4F67802 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 f4 af 90 00 1b 11 4c 84 98 08 00 45 00 ..)......L....E. 0010 00 68 00 00 40 00 40 11 fb a6 a5 e3 f9 9a a5 e3 .h..@.@......... 0020 f9 7c 01 f4 01 f4 00 54 2b 6f 9b aa cb ef f3 05 .|.....T+o...... 0030 ac e7 31 31 8b 5c a4 f6 78 02 05 10 02 01 00 00 ..11.\..x....... 0040 00 00 00 00 00 4c 1e 5e ec ba 2d 5c 78 af eb 7b .....L.^..-\x..{ 0050 77 af c9 08 24 01 c6 76 44 7f 68 50 80 56 9b c9 w...$..vD.hP.V.. 0060 e5 ab c4 8e 62 e9 7a 79 6e a0 e4 c4 52 7b 1c be ....b.zyn...R{.. 0070 1c 71 a7 58 09 de .q.X.. Frame 7 (342 bytes on wire, 342 bytes captured) Arrival Time: Dec 14, 2007 09:56:29.051865000 Time delta from previous packet: 0.009576000 seconds Time since reference or first frame: 0.224138000 seconds Frame Number: 7 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Destination: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.154 (165.227.249.154) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x014d (333) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x397a [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.154 (165.227.249.154) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xfa95 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9BAACBEFF305ACE7 Responder cookie: 0x31318B5CA4F67802 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x3EC6264A Length: 300 Encrypted payload (272 bytes) 0000 00 1b 11 4c 84 98 00 0c 29 f4 af 90 08 00 45 00 ...L....).....E. 0010 01 48 01 4d 00 00 40 11 39 7a a5 e3 f9 7c a5 e3 .H.M..@.9z...|.. 0020 f9 9a 01 f4 01 f4 01 34 fa 95 9b aa cb ef f3 05 .......4........ 0030 ac e7 31 31 8b 5c a4 f6 78 02 08 10 20 01 3e c6 ..11.\..x... .>. 0040 26 4a 00 00 01 2c 58 0d 8c ed b6 39 96 dc 65 ef &J...,X....9..e. 0050 df 06 e4 1e f9 3c c7 2f 16 f1 a4 8c 7c b0 9b 73 .....<./....|..s 0060 eb 81 d0 64 90 34 ac e2 c2 57 2e 1b d9 e6 5f ef ...d.4...W...._. 0070 4a 76 b0 78 2f 51 4a d8 73 5e e4 1b 5c f5 4f 2d Jv.x/QJ.s^..\.O- 0080 4c e9 21 1d 1e 87 30 e8 0e bf 94 fa a6 30 bf 17 L.!...0......0.. 0090 11 60 cb 1f 1e fe 00 e9 fb 9e 87 91 a4 38 47 94 .`...........8G. 00a0 44 a1 ab 6e 4c 38 17 9a 1d bf 19 00 d6 8e f7 32 D..nL8.........2 00b0 cb ee 3c 4e 5c de 4c e7 c8 87 8d cb ac fe 13 6d ... 0040 26 4a 00 00 01 2c 9b d0 a1 28 ac 2c 17 27 71 c3 &J...,...(.,.'q. 0050 3b a0 a0 e9 6a f9 99 9b 1d c4 97 90 20 64 ce 90 ;...j....... d.. 0060 71 27 23 60 da 5a 0e 7d 60 a6 aa ac d3 81 38 29 q'#`.Z.}`.....8) 0070 5b 0e 1c 9c d9 6b 4a 6a ca 49 85 84 b9 9b d6 bc [....kJj.I...... 0080 52 22 42 06 76 f5 c8 b7 b1 67 90 ce 83 85 cd 5e R"B.v....g.....^ 0090 d7 71 85 4d f1 19 b5 31 4e bd 93 48 f8 c8 0a 2d .q.M...1N..H...- 00a0 ee b2 fc b6 6b 1e a3 bb 83 73 4e 8e 16 4e 67 ef ....k....sN..Ng. 00b0 0f 08 ef fe d9 62 ca 7d d1 14 3d 64 10 b2 21 de .....b.}..=d..!. 00c0 2d 25 f0 0f 8e 92 57 5e 67 1c 44 03 1c f1 e1 87 -%....W^g.D..... 00d0 0f 39 13 c2 e4 13 09 55 27 49 77 a2 8b d7 bc ba .9.....U'Iw..... 00e0 ee 15 d8 7c ff 59 49 32 c2 55 f8 3f 65 7d 09 3e ...|.YI2.U.?e}.> 00f0 90 23 4b b8 e2 4e 7a 95 49 65 41 de bf 23 96 6d .#K..Nz.IeA..#.m 0100 2b d7 1f f2 91 50 ed 73 99 5d ee 08 28 97 22 c1 +....P.s.]..(.". 0110 d0 ac dc 37 4e 73 17 1a 74 11 4f 06 90 77 97 ed ...7Ns..t.O..w.. 0120 58 aa 2f c6 86 f8 94 4b c2 43 59 ac 1d 5b 56 df X./....K.CY..[V. 0130 a1 38 76 cb 14 14 0a c3 e3 7c cf 78 76 0a 88 c1 .8v......|.xv... 0140 d5 d0 4b 63 30 6f c5 13 f7 2e 65 0c 6d 0f 84 31 ..Kc0o....e.m..1 0150 e5 f3 2b 6f d6 d9 ..+o.. Frame 9 (102 bytes on wire, 102 bytes captured) Arrival Time: Dec 14, 2007 09:56:29.164746000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.337019000 seconds Frame Number: 9 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Destination: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.154 (165.227.249.154) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x014e (334) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a69 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.154 (165.227.249.154) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x1909 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9BAACBEFF305ACE7 Responder cookie: 0x31318B5CA4F67802 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x3EC6264A Length: 60 Encrypted payload (32 bytes) 0000 00 1b 11 4c 84 98 00 0c 29 f4 af 90 08 00 45 00 ...L....).....E. 0010 00 58 01 4e 00 00 40 11 3a 69 a5 e3 f9 7c a5 e3 .X.N..@.:i...|.. 0020 f9 9a 01 f4 01 f4 00 44 19 09 9b aa cb ef f3 05 .......D........ 0030 ac e7 31 31 8b 5c a4 f6 78 02 08 10 20 01 3e c6 ..11.\..x... .>. 0040 26 4a 00 00 00 3c a5 5f 8f f9 bf 01 cf da c5 41 &J...<._.......A 0050 d6 87 b0 5d f8 87 36 be f8 8b 3b 89 f9 79 34 16 ...]..6...;..y4. 0060 bd b5 54 a2 81 89 ..T... Frame 10 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 09:56:29.428694000 Time delta from previous packet: 0.263948000 seconds Time since reference or first frame: 0.600967000 seconds Frame Number: 10 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Destination: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.154 (165.227.249.154) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x004b (75) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b2a [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.154 (165.227.249.154) Encapsulating Security Payload SPI: 0x5ec5923f Sequence: 2 Data (92 bytes) 0000 00 1b 11 4c 84 98 00 0c 29 f4 af 90 08 00 45 00 ...L....).....E. 0010 00 78 00 4b 00 00 f0 32 8b 2a a5 e3 f9 7c a5 e3 .x.K...2.*...|.. 0020 f9 9a 5e c5 92 3f 00 00 00 02 59 04 b4 4f c0 ef ..^..?....Y..O.. 0030 09 a2 dd 60 9c 87 e0 66 e5 7b be 97 bf fb cc ee ...`...f.{...... 0040 b0 37 27 db b4 50 62 03 03 f1 6e 8f dd 90 cb 76 .7'..Pb...n....v 0050 eb 1c 8f 85 59 6c 13 58 d1 fb 5e b9 87 4f cb 01 ....Yl.X..^..O.. 0060 b3 6a 55 8b df 95 5f 8b fe 7f 19 ff bb 1b 78 2f .jU..._.......x/ 0070 48 30 1d f2 18 69 16 87 17 be 5f 12 a2 fd 37 f7 H0...i...._...7. 0080 d3 42 54 ca cd b1 .BT... Frame 11 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 09:56:29.430028000 Time delta from previous packet: 0.001334000 seconds Time since reference or first frame: 0.602301000 seconds Frame Number: 11 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.154 (165.227.249.154), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x4bd5 (19413) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xefa0 [correct] Good: True Bad : False Source: 165.227.249.154 (165.227.249.154) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x83e569e6 Sequence: 1 Data (92 bytes) 0000 00 0c 29 f4 af 90 00 1b 11 4c 84 98 08 00 45 00 ..)......L....E. 0010 00 78 4b d5 00 00 40 32 ef a0 a5 e3 f9 9a a5 e3 .xK...@2........ 0020 f9 7c 83 e5 69 e6 00 00 00 01 60 c2 ac d6 67 2f .|..i.....`...g/ 0030 bd 72 58 e1 25 6c 58 68 bb 0c 84 a5 24 c0 65 a2 .rX.%lXh....$.e. 0040 79 09 d7 f2 20 0a bc e4 85 65 9a cf 8d 6e 96 7a y... ....e...n.z 0050 74 bd 7f 49 77 9d 14 f3 c7 dc 4d 52 b5 22 20 91 t..Iw.....MR." . 0060 8c dc 25 6e a1 bb 29 9a 93 1b 1d c4 2e b8 de 3b ..%n..)........; 0070 50 f1 f5 2f 0d f3 23 10 3c 94 4f 7e b8 e2 95 28 P../..#.<.O~...( 0080 16 8b b0 7b 9a 93 ...{.. Frame 12 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 09:56:29.852117000 Time delta from previous packet: 0.422089000 seconds Time since reference or first frame: 1.024390000 seconds Frame Number: 12 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Destination: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.154 (165.227.249.154) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x004c (76) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b29 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.154 (165.227.249.154) Encapsulating Security Payload SPI: 0x5ec5923f Sequence: 3 Data (92 bytes) 0000 00 1b 11 4c 84 98 00 0c 29 f4 af 90 08 00 45 00 ...L....).....E. 0010 00 78 00 4c 00 00 f0 32 8b 29 a5 e3 f9 7c a5 e3 .x.L...2.)...|.. 0020 f9 9a 5e c5 92 3f 00 00 00 03 0e 85 4d 37 c0 d3 ..^..?......M7.. 0030 c2 35 2d 94 f9 0e 45 58 ff 86 d4 ea 77 aa ad 41 .5-...EX....w..A 0040 f7 74 84 c7 74 ed 7f ff eb c5 7b 13 b8 1c cc c4 .t..t.....{..... 0050 fd c4 17 11 78 bb 90 12 32 f8 41 f6 c0 ab 96 e2 ....x...2.A..... 0060 aa 37 46 1c 3c 57 d1 ae 2d be e8 dd ac cc 57 57 .7F.. Frame 13 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 09:56:29.853576000 Time delta from previous packet: 0.001459000 seconds Time since reference or first frame: 1.025849000 seconds Frame Number: 13 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.154 (165.227.249.154), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x4bd6 (19414) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xef9f [correct] Good: True Bad : False Source: 165.227.249.154 (165.227.249.154) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x83e569e6 Sequence: 2 Data (92 bytes) 0000 00 0c 29 f4 af 90 00 1b 11 4c 84 98 08 00 45 00 ..)......L....E. 0010 00 78 4b d6 00 00 40 32 ef 9f a5 e3 f9 9a a5 e3 .xK...@2........ 0020 f9 7c 83 e5 69 e6 00 00 00 02 75 76 77 61 62 63 .|..i.....uvwabc 0030 64 65 66 67 68 69 01 02 02 04 e3 12 e4 27 89 2c defghi.......'., 0040 5e f8 1a 0a c0 e3 b1 9e 1f 7a 90 5d 67 20 0c f8 ^........z.]g .. 0050 0b d3 4e 68 db 31 34 3e a8 a8 dc e6 97 e8 93 bc ..Nh.14>........ 0060 74 48 03 52 90 d3 15 be 3d a4 bb e4 23 35 37 4b tH.R....=...#57K 0070 f1 d6 a5 03 b6 f3 c4 86 df f7 58 56 d0 a9 b0 8f ..........XV.... 0080 21 f2 f0 71 04 66 !..q.f Frame 14 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 09:56:30.862433000 Time delta from previous packet: 1.008857000 seconds Time since reference or first frame: 2.034706000 seconds Frame Number: 14 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Destination: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.154 (165.227.249.154) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x004d (77) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b28 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.154 (165.227.249.154) Encapsulating Security Payload SPI: 0x5ec5923f Sequence: 4 Data (92 bytes) 0000 00 1b 11 4c 84 98 00 0c 29 f4 af 90 08 00 45 00 ...L....).....E. 0010 00 78 00 4d 00 00 f0 32 8b 28 a5 e3 f9 7c a5 e3 .x.M...2.(...|.. 0020 f9 9a 5e c5 92 3f 00 00 00 04 23 09 14 44 9f 7b ..^..?....#..D.{ 0030 44 d3 66 a6 7f dc 86 c4 b8 ce af 25 85 ab 07 26 D.f........%...& 0040 26 b9 07 6b c8 03 cd ad ae 75 bb 4e 07 00 0f 2f &..k.....u.N.../ 0050 37 75 ff 70 ff 20 62 1f 98 e1 6a 88 bb de 75 13 7u.p. b...j...u. 0060 7c 5d 41 fe 3d cb 0c a2 a2 0d bf 63 80 53 c9 da |]A.=......c.S.. 0070 c1 e2 e8 68 db 8c 41 74 4d 99 ea 91 af 6c 2b a8 ...h..AtM....l+. 0080 04 90 6c dc 85 19 ..l... Frame 15 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 09:56:30.863644000 Time delta from previous packet: 0.001211000 seconds Time since reference or first frame: 2.035917000 seconds Frame Number: 15 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.154 (165.227.249.154), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x4bd7 (19415) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xef9e [correct] Good: True Bad : False Source: 165.227.249.154 (165.227.249.154) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x83e569e6 Sequence: 3 Data (92 bytes) 0000 00 0c 29 f4 af 90 00 1b 11 4c 84 98 08 00 45 00 ..)......L....E. 0010 00 78 4b d7 00 00 40 32 ef 9e a5 e3 f9 9a a5 e3 .xK...@2........ 0020 f9 7c 83 e5 69 e6 00 00 00 03 75 76 77 61 62 63 .|..i.....uvwabc 0030 64 65 66 67 68 69 01 02 02 04 cd 03 bd 4d d2 11 defghi.......M.. 0040 81 e1 bf 8e 0d 15 89 e3 0d b9 37 62 74 63 21 64 ..........7btc!d 0050 ba a9 d4 e9 e7 29 15 38 89 b5 ca 75 cb 73 5d 1a .....).8...u.s]. 0060 41 2a da 45 75 74 c3 47 34 7b 77 8a 88 28 28 37 A*.Eut.G4{w..((7 0070 68 e0 7f de ac 2b 9e 3c da e2 32 59 65 68 72 3f h....+.<..2Yehr? 0080 2f 76 73 76 a2 d7 /vsv.. Frame 16 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 09:56:31.877673000 Time delta from previous packet: 1.014029000 seconds Time since reference or first frame: 3.049946000 seconds Frame Number: 16 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Destination: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.154 (165.227.249.154) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x004e (78) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b27 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.154 (165.227.249.154) Encapsulating Security Payload SPI: 0x5ec5923f Sequence: 5 Data (92 bytes) 0000 00 1b 11 4c 84 98 00 0c 29 f4 af 90 08 00 45 00 ...L....).....E. 0010 00 78 00 4e 00 00 f0 32 8b 27 a5 e3 f9 7c a5 e3 .x.N...2.'...|.. 0020 f9 9a 5e c5 92 3f 00 00 00 05 f6 7d ac 66 96 d6 ..^..?.....}.f.. 0030 31 08 03 56 e2 c6 6d f3 ce e3 e5 a6 64 ed 9b b3 1..V..m.....d... 0040 ac 90 5c 13 e2 55 63 59 6d 0f 2f 93 de 5c 41 3b ..\..UcYm./..\A; 0050 1a f8 5e 8f 7e 13 4a 11 2c 6d 42 f2 11 f1 2f 66 ..^.~.J.,mB.../f 0060 1c ae 55 db 5a 6c 6d 55 9d da af f1 0d dd fc bb ..U.ZlmU........ 0070 fc 2f b0 2d 95 01 7b 70 7f 85 76 a9 e2 ae 30 bb ./.-..{p..v...0. 0080 fe 4b e9 3c 0a d6 .K.<.. Frame 17 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 09:56:31.902039000 Time delta from previous packet: 0.024366000 seconds Time since reference or first frame: 3.074312000 seconds Frame Number: 17 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:1b:11:4c:84:98 (00:1b:11:4c:84:98) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.154 (165.227.249.154), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x4bd8 (19416) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xef9d [correct] Good: True Bad : False Source: 165.227.249.154 (165.227.249.154) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x83e569e6 Sequence: 4 Data (92 bytes) 0000 00 0c 29 f4 af 90 00 1b 11 4c 84 98 08 00 45 00 ..)......L....E. 0010 00 78 4b d8 00 00 40 32 ef 9d a5 e3 f9 9a a5 e3 .xK...@2........ 0020 f9 7c 83 e5 69 e6 00 00 00 04 75 76 77 61 62 63 .|..i.....uvwabc 0030 64 65 66 67 68 69 01 02 02 04 f8 2b 90 04 a3 9b defghi.....+.... 0040 15 ea c2 5e 32 a1 53 52 db 00 14 b1 6b 04 78 6d ...^2.SR....k.xm 0050 3b 82 dc e8 e4 09 4d 14 c6 40 bc 59 95 09 61 ae ;.....M..@.Y..a. 0060 85 18 8c c3 2e f7 a5 47 04 4e 1f 89 7d ac cd 7d .......G.N..}..} 0070 c6 88 1b bf 59 6e ee 3b be d7 ba d2 98 33 01 a7 ....Yn.;.....3.. 0080 a9 de 80 5d cf 90 ...]..