Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Dec 14, 2007 12:56:46.234003000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x014a (330) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x39c8 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.155 (165.227.249.155) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0xafc5 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x0566DF317458C08C Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 11 22 33 44 78 00 0c 29 f4 af 90 08 00 45 00 .."3Dx..).....E. 0010 00 fc 01 4a 00 00 40 11 39 c8 a5 e3 f9 7c a5 e3 ...J..@.9....|.. 0020 f9 9b 01 f4 01 f4 00 e8 af c5 05 66 df 31 74 58 ...........f.1tX 0030 c0 8c 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b .....N.$...GYL(K 0090 21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e !;....'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 .o,....R.V Frame 2 (146 bytes on wire, 146 bytes captured) Arrival Time: Dec 14, 2007 12:56:46.348862000 Time delta from previous packet: 0.114859000 seconds Time since reference or first frame: 0.114859000 seconds Frame Number: 2 Packet Length: 146 bytes Capture Length: 146 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:11:22:33:44:78 (00:11:22:33:44:78), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:11:22:33:44:78 (00:11:22:33:44:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.155 (165.227.249.155), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 132 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb89 [correct] Good: True Bad : False Source: 165.227.249.155 (165.227.249.155) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 112 Checksum: 0x7135 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x0566DF317458C08C Responder cookie: 0xE12A42F5000C17D4 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 104 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 f4 af 90 00 11 22 33 44 78 08 00 45 00 ..)....."3Dx..E. 0010 00 84 00 00 40 00 40 11 fb 89 a5 e3 f9 9b a5 e3 ....@.@......... 0020 f9 7c 01 f4 01 f4 00 70 71 35 05 66 df 31 74 58 .|.....pq5.f.1tX 0030 c0 8c e1 2a 42 f5 00 0c 17 d4 01 10 02 00 00 00 ...*B........... 0040 00 00 00 00 00 68 0d 00 00 38 00 00 00 01 00 00 .....h...8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 00 00 ............p... 0080 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 0090 8b 35 .5 Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Dec 14, 2007 12:56:46.348864000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.114861000 seconds Frame Number: 3 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x014b (331) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x39f3 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.155 (165.227.249.155) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xf34a [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x0566DF317458C08C Responder cookie: 0xE12A42F5000C17D4 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 11 22 33 44 78 00 0c 29 f4 af 90 08 00 45 00 .."3Dx..).....E. 0010 00 d0 01 4b 00 00 40 11 39 f3 a5 e3 f9 7c a5 e3 ...K..@.9....|.. 0020 f9 9b 01 f4 01 f4 00 bc f3 4a 05 66 df 31 74 58 .........J.f.1tX 0030 c0 8c e1 2a 42 f5 00 0c 17 d4 04 10 02 00 00 00 ...*B........... 0040 00 00 00 00 00 b4 0a 00 00 84 bd 46 c5 76 d4 d8 ...........F.v.. 0050 ad 82 cf 6c 8d 7d f7 66 79 30 f0 e4 6a 94 fb b2 ...l.}.fy0..j... 0060 42 aa 9c 05 c4 45 44 4d 76 16 04 d8 a3 36 17 46 B....EDMv....6.F 0070 f2 96 e6 1f 76 07 ad 17 0d 2a 90 f4 ee 09 86 64 ....v....*.....d 0080 55 98 ee 1b c2 2f 81 8f 08 f7 c9 3e b9 28 31 91 U..../.....>.(1. 0090 48 0d 68 bb 0b 0b 46 5a 94 3b 86 f7 fa 85 a0 dc H.h...FZ.;...... 00a0 db e8 fc 61 66 30 42 6e 4f 3a fd 21 21 d8 30 c6 ...af0BnO:.!!.0. 00b0 55 da 02 c5 ea 2b 61 33 e3 4d d9 7c 67 71 81 41 U....+a3.M.|gq.A 00c0 1d e9 c7 5c 87 3d 23 09 17 67 00 00 00 14 5c 4b ...\.=#..g....\K 00d0 9c 2b 20 bb d2 e3 a7 aa 3e bc ca 77 62 42 .+ .....>..wbB Frame 4 (242 bytes on wire, 242 bytes captured) Arrival Time: Dec 14, 2007 12:56:46.545922000 Time delta from previous packet: 0.197058000 seconds Time since reference or first frame: 0.311919000 seconds Frame Number: 4 Packet Length: 242 bytes Capture Length: 242 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:11:22:33:44:78 (00:11:22:33:44:78), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:11:22:33:44:78 (00:11:22:33:44:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.155 (165.227.249.155), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 228 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb29 [correct] Good: True Bad : False Source: 165.227.249.155 (165.227.249.155) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 208 Checksum: 0x8a0d [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x0566DF317458C08C Responder cookie: 0xE12A42F5000C17D4 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 200 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 20 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 f4 af 90 00 11 22 33 44 78 08 00 45 00 ..)....."3Dx..E. 0010 00 e4 00 00 40 00 40 11 fb 29 a5 e3 f9 9b a5 e3 ....@.@..)...... 0020 f9 7c 01 f4 01 f4 00 d0 8a 0d 05 66 df 31 74 58 .|.........f.1tX 0030 c0 8c e1 2a 42 f5 00 0c 17 d4 04 10 02 00 00 00 ...*B........... 0040 00 00 00 00 00 c8 0a 00 00 84 de 75 75 0e c2 e7 ...........uu... 0050 d8 cc 4e 02 1e b2 1b 77 84 dd 8f 68 1c 47 4e 7f ..N....w...h.GN. 0060 e0 ea dd bb 0a 3c b6 4e 45 94 db c8 d7 5d eb 31 .....<.NE....].1 0070 9c 1e d8 bc 30 ac 0f 9c e4 b7 2f cd 43 4e 75 c3 ....0...../.CNu. 0080 f2 69 0e e3 28 6c 52 08 3f 97 d8 86 e3 61 26 4e .i..(lR.?....a&N 0090 51 96 5c 9d bf 8b 85 77 f3 11 b3 5b 4d 90 e5 3d Q.\....w...[M..= 00a0 df fb 96 2f f9 ff 6b c5 1c 5f 84 c2 92 1e 97 74 .../..k.._.....t 00b0 d6 cf 85 ef 2c 9c 19 3f e7 ff 50 44 34 ba 1f 32 ....,..?..PD4..2 00c0 b0 4a 23 9c 1d 53 79 71 19 d5 0d 00 00 14 fd 23 .J#..Syq.......# 00d0 3d b0 b5 b3 bd 7f 6e 65 48 c6 51 fc 72 cf 00 00 =.....neH.Q.r... 00e0 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 00f0 8b 35 .5 Frame 5 (118 bytes on wire, 118 bytes captured) Arrival Time: Dec 14, 2007 12:56:46.545924000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.311921000 seconds Frame Number: 5 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x014c (332) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a5a [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.155 (165.227.249.155) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x78f7 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x0566DF317458C08C Responder cookie: 0xE12A42F5000C17D4 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 11 22 33 44 78 00 0c 29 f4 af 90 08 00 45 00 .."3Dx..).....E. 0010 00 68 01 4c 00 00 40 11 3a 5a a5 e3 f9 7c a5 e3 .h.L..@.:Z...|.. 0020 f9 9b 01 f4 01 f4 00 54 78 f7 05 66 df 31 74 58 .......Tx..f.1tX 0030 c0 8c e1 2a 42 f5 00 0c 17 d4 05 10 02 01 00 00 ...*B........... 0040 00 00 00 00 00 4c 2c 9e 6a 1b f2 97 8b 3b 23 10 .....L,.j....;#. 0050 70 36 97 f4 30 6f f0 1a 11 75 d8 2b f3 a6 aa c0 p6..0o...u.+.... 0060 c3 1b c5 fe 41 84 a7 d6 aa 67 d3 36 0a 67 12 49 ....A....g.6.g.I 0070 42 39 34 bc 7a 98 B94.z. Frame 6 (118 bytes on wire, 118 bytes captured) Arrival Time: Dec 14, 2007 12:56:46.775231000 Time delta from previous packet: 0.229307000 seconds Time since reference or first frame: 0.541228000 seconds Frame Number: 6 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:11:22:33:44:78 (00:11:22:33:44:78), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:11:22:33:44:78 (00:11:22:33:44:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.155 (165.227.249.155), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfba5 [correct] Good: True Bad : False Source: 165.227.249.155 (165.227.249.155) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x8523 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x0566DF317458C08C Responder cookie: 0xE12A42F5000C17D4 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 f4 af 90 00 11 22 33 44 78 08 00 45 00 ..)....."3Dx..E. 0010 00 68 00 00 40 00 40 11 fb a5 a5 e3 f9 9b a5 e3 .h..@.@......... 0020 f9 7c 01 f4 01 f4 00 54 85 23 05 66 df 31 74 58 .|.....T.#.f.1tX 0030 c0 8c e1 2a 42 f5 00 0c 17 d4 05 10 02 01 00 00 ...*B........... 0040 00 00 00 00 00 4c 4c 20 ea 2b a8 48 08 21 d6 d9 .....LL .+.H.!.. 0050 a0 04 27 46 71 7b c3 e0 c2 2a 24 4a fd fc 51 80 ..'Fq{...*$J..Q. 0060 a5 9f 09 06 ef 7f c8 52 f2 49 25 84 ca 8b 82 1e .......R.I%..... 0070 fd 8f bd eb 63 eb ....c. Frame 7 (342 bytes on wire, 342 bytes captured) Arrival Time: Dec 14, 2007 12:56:46.778796000 Time delta from previous packet: 0.003565000 seconds Time since reference or first frame: 0.544793000 seconds Frame Number: 7 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x014d (333) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3979 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.155 (165.227.249.155) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xc42d [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x0566DF317458C08C Responder cookie: 0xE12A42F5000C17D4 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x9018E73B Length: 300 Encrypted payload (272 bytes) 0000 00 11 22 33 44 78 00 0c 29 f4 af 90 08 00 45 00 .."3Dx..).....E. 0010 01 48 01 4d 00 00 40 11 39 79 a5 e3 f9 7c a5 e3 .H.M..@.9y...|.. 0020 f9 9b 01 f4 01 f4 01 34 c4 2d 05 66 df 31 74 58 .......4.-.f.1tX 0030 c0 8c e1 2a 42 f5 00 0c 17 d4 08 10 20 01 90 18 ...*B....... ... 0040 e7 3b 00 00 01 2c ee ce 45 3a 7c f6 2c e5 2c f7 .;...,..E:|.,.,. 0050 b1 12 3f 5f f9 00 d4 61 85 76 b4 ef e0 d0 ac 59 ..?_...a.v.....Y 0060 0c b9 6b 4c 6e 61 59 f6 74 ff e8 85 83 8d f3 ec ..kLnaY.t....... 0070 59 2b 19 71 b3 6a 71 63 70 b7 6c 2c ed fc 5a 96 Y+.q.jqcp.l,..Z. 0080 04 49 32 37 72 2f 7c 5b 04 9d 6e a9 d6 ac 5c 87 .I27r/|[..n...\. 0090 3d 72 55 24 ff 01 6c 49 73 e1 c8 44 64 03 24 7e =rU$..lIs..Dd.$~ 00a0 09 47 cb c1 3e 89 69 73 7b 0f 8d 8f f0 8a c5 16 .G..>.is{....... 00b0 0c b2 96 b2 1e 23 42 76 42 2e 6c a6 40 b5 c1 93 .....#BvB.l.@... 00c0 3a d0 51 f0 74 4f 75 97 30 f1 0d 04 06 1c 2b fa :.Q.tOu.0.....+. 00d0 44 b8 95 e6 95 db a9 77 34 38 cc fc 57 36 52 d3 D......w48..W6R. 00e0 10 c9 17 da ed 8a 6c 3b 5f 0a db 63 1d 96 f5 ee ......l;_..c.... 00f0 ea d0 85 8c 33 33 db a0 79 a8 b4 ac f5 56 b0 bd ....33..y....V.. 0100 26 a4 09 f3 23 ab 43 91 aa 54 84 1d a7 f2 52 f5 &...#.C..T....R. 0110 67 fe e4 58 4d f2 21 74 33 d2 ea 92 0a f0 03 a9 g..XM.!t3....... 0120 00 c6 14 ab 30 67 99 a7 8a ce d1 77 b8 7e 61 ff ....0g.....w.~a. 0130 92 b8 be 2e 56 c7 d6 b5 db d2 ba e7 dd df 0a 5a ....V..........Z 0140 0a ee 49 e4 5f 2a 85 9f e5 ae a5 39 42 9b d9 c9 ..I._*.....9B... 0150 79 fc dd 07 1a 3f y....? Frame 8 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 12:56:46.802774000 Time delta from previous packet: 0.023978000 seconds Time since reference or first frame: 0.568771000 seconds Frame Number: 8 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:11:22:33:44:78 (00:11:22:33:44:78), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:11:22:33:44:78 (00:11:22:33:44:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.155 (165.227.249.155), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb95 [correct] Good: True Bad : False Source: 165.227.249.155 (165.227.249.155) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xb66b [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x0566DF317458C08C Responder cookie: 0xE12A42F5000C17D4 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xE461C04A Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 f4 af 90 00 11 22 33 44 78 08 00 45 00 ..)....."3Dx..E. 0010 00 78 00 00 40 00 40 11 fb 95 a5 e3 f9 9b a5 e3 .x..@.@......... 0020 f9 7c 01 f4 01 f4 00 64 b6 6b 05 66 df 31 74 58 .|.....d.k.f.1tX 0030 c0 8c e1 2a 42 f5 00 0c 17 d4 08 10 05 01 e4 61 ...*B..........a 0040 c0 4a 00 00 00 5c 0a f8 e0 c1 7d 99 66 ed eb 49 .J...\....}.f..I 0050 2f 81 97 fb eb 21 4c a8 a3 0e 1f ce 24 90 3d fc /....!L.....$.=. 0060 1c 50 49 2f 9e 07 bb 66 bd 64 b1 49 e4 41 a9 c9 .PI/...f.d.I.A.. 0070 27 51 61 e7 de 64 fd 8c 5a 40 4a 02 93 fe e9 7f 'Qa..d..Z@J..... 0080 a4 1b 23 37 14 3b ..#7.; Frame 9 (342 bytes on wire, 342 bytes captured) Arrival Time: Dec 14, 2007 12:56:47.124270000 Time delta from previous packet: 0.321496000 seconds Time since reference or first frame: 0.890267000 seconds Frame Number: 9 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:11:22:33:44:78 (00:11:22:33:44:78), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:11:22:33:44:78 (00:11:22:33:44:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.155 (165.227.249.155), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfac5 [correct] Good: True Bad : False Source: 165.227.249.155 (165.227.249.155) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x6bb9 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x0566DF317458C08C Responder cookie: 0xE12A42F5000C17D4 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x9018E73B Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 f4 af 90 00 11 22 33 44 78 08 00 45 00 ..)....."3Dx..E. 0010 01 48 00 00 40 00 40 11 fa c5 a5 e3 f9 9b a5 e3 .H..@.@......... 0020 f9 7c 01 f4 01 f4 01 34 6b b9 05 66 df 31 74 58 .|.....4k..f.1tX 0030 c0 8c e1 2a 42 f5 00 0c 17 d4 08 10 20 01 90 18 ...*B....... ... 0040 e7 3b 00 00 01 2c 5f 6a 6e f4 b7 33 39 8d 69 f1 .;...,_jn..39.i. 0050 8c 36 d7 42 39 44 a4 99 69 a8 80 53 c5 75 c3 16 .6.B9D..i..S.u.. 0060 e6 18 ea 41 30 ce 86 bf 2e 5c 88 64 d1 57 a9 c2 ...A0....\.d.W.. 0070 94 ed eb 87 73 72 59 61 dc 6b 00 ef b6 1d 8b ec ....srYa.k...... 0080 55 55 0d 5a 9a 8b 11 92 75 75 fc cd 8b c8 87 a5 UU.Z....uu...... 0090 24 1b 04 18 10 09 1a d7 29 fd 86 fd 41 51 2b 44 $.......)...AQ+D 00a0 a5 4d 57 30 5f 06 d0 a2 2f 23 5b e9 66 60 46 e8 .MW0_.../#[.f`F. 00b0 bc 79 90 b8 85 34 e9 6b 59 01 78 7c 6a bb 63 c5 .y...4.kY.x|j.c. 00c0 d2 ec dd aa fc de 30 d4 3e 37 b8 96 39 7f 9a fb ......0.>7..9... 00d0 36 81 c5 c0 37 19 3f b1 f1 54 c4 f5 fe 68 2f 77 6...7.?..T...h/w 00e0 f1 94 85 91 34 bd 29 82 c1 5f 5a d4 18 b6 a2 27 ....4.).._Z....' 00f0 08 27 58 24 f3 1d 2b 17 80 1a ac 2a cc 57 0b 0a .'X$..+....*.W.. 0100 6c 2b 9b 6e 66 ab 3a 7c 53 0c e4 c7 87 b0 30 63 l+.nf.:|S.....0c 0110 a1 74 21 23 3b 60 75 19 77 19 d4 64 f7 1b f5 38 .t!#;`u.w..d...8 0120 a5 8b d3 2f 0a 9b d8 c8 eb 63 6c 4b 04 0e 4a a5 .../.....clK..J. 0130 77 fd 66 2e 9f 5f ba 8c 13 f9 a4 d3 37 b5 14 49 w.f.._......7..I 0140 d9 28 39 c5 75 05 33 4b 38 8e 07 65 00 82 55 40 .(9.u.3K8..e..U@ 0150 1f c1 35 a6 37 6a ..5.7j Frame 10 (102 bytes on wire, 102 bytes captured) Arrival Time: Dec 14, 2007 12:56:47.124272000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.890269000 seconds Frame Number: 10 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x014e (334) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a68 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.155 (165.227.249.155) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xc701 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x0566DF317458C08C Responder cookie: 0xE12A42F5000C17D4 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x9018E73B Length: 60 Encrypted payload (32 bytes) 0000 00 11 22 33 44 78 00 0c 29 f4 af 90 08 00 45 00 .."3Dx..).....E. 0010 00 58 01 4e 00 00 40 11 3a 68 a5 e3 f9 7c a5 e3 .X.N..@.:h...|.. 0020 f9 9b 01 f4 01 f4 00 44 c7 01 05 66 df 31 74 58 .......D...f.1tX 0030 c0 8c e1 2a 42 f5 00 0c 17 d4 08 10 20 01 90 18 ...*B....... ... 0040 e7 3b 00 00 00 3c 3c d7 19 1b d6 6c 1c d1 dd cf .;...<<....l.... 0050 0a 2b 92 e1 9b ce ea ad 61 2f 4f 90 cd 56 eb 10 .+......a/O..V.. 0060 dc 95 9b 6d d4 c9 ...m.. Frame 11 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 12:56:47.427663000 Time delta from previous packet: 0.303391000 seconds Time since reference or first frame: 1.193660000 seconds Frame Number: 11 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x004b (75) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b29 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.155 (165.227.249.155) Encapsulating Security Payload SPI: 0x0a98e161 Sequence: 2 Data (92 bytes) 0000 00 11 22 33 44 78 00 0c 29 f4 af 90 08 00 45 00 .."3Dx..).....E. 0010 00 78 00 4b 00 00 f0 32 8b 29 a5 e3 f9 7c a5 e3 .x.K...2.)...|.. 0020 f9 9b 0a 98 e1 61 00 00 00 02 07 e7 26 fd d4 cc .....a......&... 0030 9d 77 8e c6 0d 0d 20 c9 c3 cc b7 4d 65 f9 9c 20 .w.... ....Me.. 0040 7b 27 3a 54 00 03 2d 1f 61 20 8c 87 19 d0 85 cb {':T..-.a ...... 0050 d0 8d a5 e5 bf fa e4 f2 0d cb f7 31 66 4f f4 84 ...........1fO.. 0060 32 32 53 bf 97 89 22 5d 06 24 a2 ac af 1f 23 aa 22S..."].$....#. 0070 82 4d 29 28 59 9f 41 c6 36 0d 92 76 82 64 b2 07 .M)(Y.A.6..v.d.. 0080 7e 44 d7 09 02 7b ~D...{ Frame 12 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 12:56:47.435523000 Time delta from previous packet: 0.007860000 seconds Time since reference or first frame: 1.201520000 seconds Frame Number: 12 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:11:22:33:44:78 (00:11:22:33:44:78), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:11:22:33:44:78 (00:11:22:33:44:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.155 (165.227.249.155), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x3917 (14615) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x025e [correct] Good: True Bad : False Source: 165.227.249.155 (165.227.249.155) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x0703b078 Sequence: 1 Data (92 bytes) 0000 00 0c 29 f4 af 90 00 11 22 33 44 78 08 00 45 00 ..)....."3Dx..E. 0010 00 78 39 17 00 00 40 32 02 5e a5 e3 f9 9b a5 e3 .x9...@2.^...... 0020 f9 7c 07 03 b0 78 00 00 00 01 39 f5 f3 a8 02 23 .|...x....9....# 0030 01 5c 13 4d ea ee b2 9c 35 ef fe aa 87 14 af cb .\.M....5....... 0040 81 bf e8 57 e3 d5 c2 6b 1d c6 29 19 b0 a4 df 01 ...W...k..)..... 0050 65 fe c0 80 1d 9f b5 3f c1 7b 45 3b e5 87 e1 73 e......?.{E;...s 0060 ba 1f 88 f9 79 6c 5a 2c 64 cd 72 70 d6 c3 cf ab ....ylZ,d.rp.... 0070 6c 24 b6 53 be 2e 3a 8a 51 aa 6b c2 10 24 a6 13 l$.S..:.Q.k..$.. 0080 93 10 a5 89 eb 32 .....2 Frame 13 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 12:56:47.435525000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 1.201522000 seconds Frame Number: 13 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x004c (76) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b28 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.155 (165.227.249.155) Encapsulating Security Payload SPI: 0x0a98e161 Sequence: 3 Data (92 bytes) 0000 00 11 22 33 44 78 00 0c 29 f4 af 90 08 00 45 00 .."3Dx..).....E. 0010 00 78 00 4c 00 00 f0 32 8b 28 a5 e3 f9 7c a5 e3 .x.L...2.(...|.. 0020 f9 9b 0a 98 e1 61 00 00 00 03 e0 37 b4 b2 bd 10 .....a.....7.... 0030 ce 8b d5 19 94 56 12 8a 9a 0f 25 de b3 a9 4e 6f .....V....%...No 0040 2f 40 7b a1 af f0 0c 75 75 95 2a 64 68 34 6b 7f /@{....uu.*dh4k. 0050 30 e5 44 4b 9c c1 82 db ae 43 4d ed d0 65 59 73 0.DK.....CM..eYs 0060 f3 f2 d9 ac 1b a4 59 e6 ca de 9c 88 4a 92 f0 24 ......Y.....J..$ 0070 3e 62 fd 26 51 bf 69 e0 94 6a 7d 45 23 21 f0 76 >b.&Q.i..j}E#!.v 0080 2f 0f 15 0b bd a3 /..... Frame 14 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 12:56:47.438214000 Time delta from previous packet: 0.002689000 seconds Time since reference or first frame: 1.204211000 seconds Frame Number: 14 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:11:22:33:44:78 (00:11:22:33:44:78), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:11:22:33:44:78 (00:11:22:33:44:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.155 (165.227.249.155), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x4111 (16657) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xfa63 [correct] Good: True Bad : False Source: 165.227.249.155 (165.227.249.155) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x0703b078 Sequence: 2 Data (92 bytes) 0000 00 0c 29 f4 af 90 00 11 22 33 44 78 08 00 45 00 ..)....."3Dx..E. 0010 00 78 41 11 00 00 40 32 fa 63 a5 e3 f9 9b a5 e3 .xA...@2.c...... 0020 f9 7c 07 03 b0 78 00 00 00 02 be bc be 93 12 8b .|...x.......... 0030 b2 77 e1 47 4e b7 14 ac 32 d9 aa 18 8f 06 94 e6 .w.GN...2....... 0040 4c 0c b5 bd d4 c8 17 29 a2 6b ab ca 11 31 ce bb L......).k...1.. 0050 d4 4d 0b 33 0b 4e fe af df be 89 9e 02 e8 57 e1 .M.3.N........W. 0060 7f ca cb 71 5f 71 fe 96 0f 3d c8 92 c2 0f ff 60 ...q_q...=.....` 0070 af 2f e2 d5 de 44 bc 26 ec 41 01 b3 4d 9d bb a0 ./...D.&.A..M... 0080 c1 0b 51 00 b1 ff ..Q... Frame 15 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 12:56:48.380884000 Time delta from previous packet: 0.942670000 seconds Time since reference or first frame: 2.146881000 seconds Frame Number: 15 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x004d (77) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b27 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.155 (165.227.249.155) Encapsulating Security Payload SPI: 0x0a98e161 Sequence: 4 Data (92 bytes) 0000 00 11 22 33 44 78 00 0c 29 f4 af 90 08 00 45 00 .."3Dx..).....E. 0010 00 78 00 4d 00 00 f0 32 8b 27 a5 e3 f9 7c a5 e3 .x.M...2.'...|.. 0020 f9 9b 0a 98 e1 61 00 00 00 04 c4 01 06 57 23 ef .....a.......W#. 0030 69 b3 6f f2 0c 5c 20 71 39 b8 bf 82 5d 8f ce 3b i.o..\ q9...]..; 0040 8a 32 b6 9e cd 9f 21 6c 16 7c 25 34 db 25 63 90 .2....!l.|%4.%c. 0050 fc c9 01 1a ed a1 e6 47 20 03 18 a2 7d 77 d9 03 .......G ...}w.. 0060 0d 26 15 8d c9 35 4b 7e 74 ca 83 a2 86 a9 5f 22 .&...5K~t....._" 0070 84 5b f0 37 fa c5 4a e0 c7 b0 d5 21 88 6c b1 5b .[.7..J....!.l.[ 0080 93 a3 96 e7 26 29 ....&) Frame 16 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 12:56:48.382128000 Time delta from previous packet: 0.001244000 seconds Time since reference or first frame: 2.148125000 seconds Frame Number: 16 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:11:22:33:44:78 (00:11:22:33:44:78), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:11:22:33:44:78 (00:11:22:33:44:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.155 (165.227.249.155), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0xc398 (50072) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x77dc [correct] Good: True Bad : False Source: 165.227.249.155 (165.227.249.155) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x0703b078 Sequence: 3 Data (92 bytes) 0000 00 0c 29 f4 af 90 00 11 22 33 44 78 08 00 45 00 ..)....."3Dx..E. 0010 00 78 c3 98 00 00 40 32 77 dc a5 e3 f9 9b a5 e3 .x....@2w....... 0020 f9 7c 07 03 b0 78 00 00 00 03 46 2f 3e 8e 94 09 .|...x....F/>... 0030 0f 07 04 92 d7 da d3 eb 15 9c e5 97 cf 3c 78 c1 ................ 0050 3a 3c d2 92 e2 d9 26 df 75 11 38 ad 79 05 1c 2c :<....&.u.8.y.., 0060 2a f4 ea 36 7b 82 d9 25 64 59 35 b5 86 32 17 df *..6{..%dY5..2.. 0070 d2 75 61 d2 cb 39 8f 7b 91 29 27 11 dd 4f 15 97 .ua..9.{.)'..O.. 0080 8a e0 89 7c dd 94 ...|.. Frame 17 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 12:56:49.364802000 Time delta from previous packet: 0.982674000 seconds Time since reference or first frame: 3.130799000 seconds Frame Number: 17 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x004e (78) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b26 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.155 (165.227.249.155) Encapsulating Security Payload SPI: 0x0a98e161 Sequence: 5 Data (92 bytes) 0000 00 11 22 33 44 78 00 0c 29 f4 af 90 08 00 45 00 .."3Dx..).....E. 0010 00 78 00 4e 00 00 f0 32 8b 26 a5 e3 f9 7c a5 e3 .x.N...2.&...|.. 0020 f9 9b 0a 98 e1 61 00 00 00 05 df 3c d2 82 32 b0 .....a.....<..2. 0030 60 e5 ef 59 d9 a0 76 3b b2 83 95 df 52 e8 ed ee `..Y..v;....R... 0040 9b 49 74 c5 0e b5 cc 65 70 4e f4 0c 66 ab 9f d3 .It....epN..f... 0050 cf ab f3 a8 ed 91 3b 4c 15 e1 b4 54 65 17 66 ff ......;L...Te.f. 0060 3b 36 27 fa 73 a1 d5 ec 5d 81 b2 a2 d3 0c f3 95 ;6'.s...]....... 0070 44 d3 6b d2 31 6e 39 57 75 17 8d d0 1a fa b3 da D.k.1n9Wu....... 0080 8a bf bd a3 12 4a .....J Frame 18 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 12:56:49.366449000 Time delta from previous packet: 0.001647000 seconds Time since reference or first frame: 3.132446000 seconds Frame Number: 18 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:11:22:33:44:78 (00:11:22:33:44:78), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:11:22:33:44:78 (00:11:22:33:44:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.155 (165.227.249.155), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x4954 (18772) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xf220 [correct] Good: True Bad : False Source: 165.227.249.155 (165.227.249.155) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x0703b078 Sequence: 4 Data (92 bytes) 0000 00 0c 29 f4 af 90 00 11 22 33 44 78 08 00 45 00 ..)....."3Dx..E. 0010 00 78 49 54 00 00 40 32 f2 20 a5 e3 f9 9b a5 e3 .xIT..@2. ...... 0020 f9 7c 07 03 b0 78 00 00 00 04 cb ec ad 46 27 53 .|...x.......F'S 0030 dd ac 26 86 68 ac 7e 11 c8 fa 1a 7a de b5 6c 24 ..&.h.~....z..l$ 0040 50 6f d7 d3 c2 a1 a6 05 38 76 c2 76 be f5 b6 21 Po......8v.v...! 0050 b7 06 88 2a 1c 9b a0 b8 c6 f5 d0 a7 71 c3 18 51 ...*........q..Q 0060 fc 01 81 e9 04 e2 cd 5f 83 b9 ef b0 40 39 17 be ......._....@9.. 0070 d1 74 60 ec 29 fa 62 f4 a7 f8 d0 fc e5 49 76 47 .t`.).b......IvG 0080 01 0b a9 fc d2 bb ......