Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Dec 9, 2005 14:45:48.141276000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 166 bytes Capture Length: 166 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Trailer: CAEC2F2A Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x08fd (2301) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x32c3 [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0x7ea1 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x009CA9E43118D642 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 d0 c9 94 ef f7 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 94 08 fd 00 00 40 11 32 c3 a5 e3 f9 6a a5 e3 ......@.2....j.. 0020 f9 67 01 f4 01 f4 00 80 7e a1 00 9c a9 e4 31 18 .g......~.....1. 0030 d6 42 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .B.............. 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 4a 13 ........p.....J. 0080 1c 81 07 03 58 45 5c 57 28 f2 0e 95 45 2f 00 00 ....XE\W(...E/.. 0090 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 00a0 01 00 ca ec 2f 2a ..../* Frame 2 (166 bytes on wire, 166 bytes captured) Arrival Time: Dec 9, 2005 14:45:48.148781000 Time delta from previous packet: 0.007505000 seconds Time since reference or first frame: 0.007505000 seconds Frame Number: 2 Packet Length: 166 bytes Capture Length: 166 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Trailer: CF2F558C Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbbf [correct] Good: True Bad : False Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0xbeea [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x009CA9E43118D642 Responder cookie: 0x3CBC9B3556779FCE Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x648982785BEDBDD66A6DD356F0E160FD 0000 00 a0 8e 72 1e 40 00 d0 c9 94 ef f7 08 00 45 00 ...r.@........E. 0010 00 94 00 00 40 00 40 11 fb bf a5 e3 f9 67 a5 e3 ....@.@......g.. 0020 f9 6a 01 f4 01 f4 00 80 be ea 00 9c a9 e4 31 18 .j............1. 0030 d6 42 3c bc 9b 35 56 77 9f ce 01 10 02 00 00 00 .B<..5Vw........ 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 af ca ........p....... 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 00 00 ..h...k...wW.... 0090 00 14 64 89 82 78 5b ed bd d6 6a 6d d3 56 f0 e1 ..d..x[...jm.V.. 00a0 60 fd cf 2f 55 8c `../U. Frame 3 (282 bytes on wire, 282 bytes captured) Arrival Time: Dec 9, 2005 14:45:48.272822000 Time delta from previous packet: 0.124041000 seconds Time since reference or first frame: 0.131546000 seconds Frame Number: 3 Packet Length: 282 bytes Capture Length: 282 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Trailer: EE10E542 Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 264 Identification: 0x08fe (2302) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x324e [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 244 Checksum: 0x5ce7 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x009CA9E43118D642 Responder cookie: 0x3CBC9B3556779FCE Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 236 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 52 Vendor ID: unknown vendor ID: 0x0200001406A15DF7A0B1CFE066DD33491375C06103000014... 0000 00 d0 c9 94 ef f7 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 01 08 08 fe 00 00 40 11 32 4e a5 e3 f9 6a a5 e3 ......@.2N...j.. 0020 f9 67 01 f4 01 f4 00 f4 5c e7 00 9c a9 e4 31 18 .g......\.....1. 0030 d6 42 3c bc 9b 35 56 77 9f ce 04 10 02 00 00 00 .B<..5Vw........ 0040 00 00 00 00 00 ec 0a 00 00 84 1c a2 ee 3f e4 d8 .............?.. 0050 ce 7a cb b5 8e d5 a4 40 9a 5d 46 ca a7 60 cc 82 .z.....@.]F..`.. 0060 17 19 8a 5f 4e 22 48 a5 d0 ec 31 61 9d 3f 81 20 ..._N"H...1a.?. 0070 27 8a 8d c4 96 d4 bb 13 47 ca 18 2f c2 27 02 a8 '.......G../.'.. 0080 f8 7d 90 29 e2 f6 c6 17 cb 1f 40 c9 72 ab 51 d3 .}.)......@.r.Q. 0090 97 d6 59 6e 9b 9d 2e 0f 2f a9 67 4d b2 fe c1 78 ..Yn..../.gM...x 00a0 02 90 27 c0 a0 2e 05 f3 9e 71 8c 4f 50 a7 9a bb ..'......q.OP... 00b0 d7 af 6b 41 98 fe 09 a5 86 2f fd a9 b4 06 88 a7 ..kA...../...... 00c0 f8 75 c1 00 28 b1 7c 3e ab 80 0d 00 00 18 ca ff .u..(.|>........ 00d0 ca 0f 4f 5a 7e 32 91 59 86 3d b0 41 40 4e d1 b1 ..OZ~2.Y.=.A@N.. 00e0 93 8f 00 00 00 34 02 00 00 14 06 a1 5d f7 a0 b1 .....4......]... 00f0 cf e0 66 dd 33 49 13 75 c0 61 03 00 00 14 10 02 ..f.3I.u.a...... 0100 01 f4 a5 e3 f9 6a 00 00 00 00 00 00 00 00 00 00 .....j.......... 0110 00 08 00 06 00 03 ee 10 e5 42 .........B Frame 4 (218 bytes on wire, 218 bytes captured) Arrival Time: Dec 9, 2005 14:45:48.416365000 Time delta from previous packet: 0.143543000 seconds Time since reference or first frame: 0.275089000 seconds Frame Number: 4 Packet Length: 218 bytes Capture Length: 218 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Trailer: 8CAE987A Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 200 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb8b [correct] Good: True Bad : False Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 180 Checksum: 0x1a3e [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x009CA9E43118D642 Responder cookie: 0x3CBC9B3556779FCE Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 172 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 12 Nonce Data 0000 00 a0 8e 72 1e 40 00 d0 c9 94 ef f7 08 00 45 00 ...r.@........E. 0010 00 c8 00 00 40 00 40 11 fb 8b a5 e3 f9 67 a5 e3 ....@.@......g.. 0020 f9 6a 01 f4 01 f4 00 b4 1a 3e 00 9c a9 e4 31 18 .j.......>....1. 0030 d6 42 3c bc 9b 35 56 77 9f ce 04 10 02 00 00 00 .B<..5Vw........ 0040 00 00 00 00 00 ac 0a 00 00 84 2d 07 48 c0 28 08 ..........-.H.(. 0050 2a b9 83 84 a3 d3 23 52 10 58 78 29 80 c2 d4 3d *.....#R.Xx)...= 0060 1a f3 75 f2 46 a1 59 6f e6 33 5f d1 15 7a f9 27 ..u.F.Yo.3_..z.' 0070 ad 4f 14 fb 9c 9b 76 db 53 74 49 85 9f 36 f0 71 .O....v.StI..6.q 0080 1c f2 a6 0b 50 95 20 db fe d5 71 d2 4e 37 14 86 ....P. ...q.N7.. 0090 5a 00 84 7b 09 2e 07 34 9c 40 da 46 a5 9c aa 89 Z..{...4.@.F.... 00a0 36 77 2a 1a 71 15 9e 61 6f 7f e7 1c 17 dd 67 9c 6w*.q..ao.....g. 00b0 02 92 72 b8 93 0d 2c 06 7b cf 28 b9 64 82 33 33 ..r...,.{.(.d.33 00c0 63 57 2f bb 9d dc 08 82 6f eb 00 00 00 0c 95 95 cW/.....o....... 00d0 c5 be 6b e8 b2 fc 8c ae 98 7a ..k......z Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: Dec 9, 2005 14:45:48.568835000 Time delta from previous packet: 0.152470000 seconds Time since reference or first frame: 0.427559000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Trailer: 35985526 Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x08ff (2303) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x32dd [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x53ea [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x009CA9E43118D642 Responder cookie: 0x3CBC9B3556779FCE Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 d0 c9 94 ef f7 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 78 08 ff 00 00 40 11 32 dd a5 e3 f9 6a a5 e3 .x....@.2....j.. 0020 f9 67 01 f4 01 f4 00 64 53 ea 00 9c a9 e4 31 18 .g.....dS.....1. 0030 d6 42 3c bc 9b 35 56 77 9f ce 05 10 02 01 00 00 .B<..5Vw........ 0040 00 00 00 00 00 5c 82 91 bc fd 1a 7f 8f 14 66 51 .....\........fQ 0050 28 31 75 2e d6 d5 a8 e7 a8 0d 06 13 f0 a6 c7 80 (1u............. 0060 cc 18 44 44 38 b1 aa a7 39 36 35 32 ff 4d fa 57 ..DD8...9652.M.W 0070 af ee 01 c9 ea 23 08 01 fd 53 b0 ae 8a bf d1 08 .....#...S...... 0080 5f 38 f3 8c b2 2e 35 98 55 26 _8....5.U& Frame 6 (138 bytes on wire, 138 bytes captured) Arrival Time: Dec 9, 2005 14:45:48.740519000 Time delta from previous packet: 0.171684000 seconds Time since reference or first frame: 0.599243000 seconds Frame Number: 6 Packet Length: 138 bytes Capture Length: 138 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Trailer: CCCE9349 Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbdb [correct] Good: True Bad : False Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xe07b [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x009CA9E43118D642 Responder cookie: 0x3CBC9B3556779FCE Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 a0 8e 72 1e 40 00 d0 c9 94 ef f7 08 00 45 00 ...r.@........E. 0010 00 78 00 00 40 00 40 11 fb db a5 e3 f9 67 a5 e3 .x..@.@......g.. 0020 f9 6a 01 f4 01 f4 00 64 e0 7b 00 9c a9 e4 31 18 .j.....d.{....1. 0030 d6 42 3c bc 9b 35 56 77 9f ce 05 10 02 01 00 00 .B<..5Vw........ 0040 00 00 00 00 00 5c e4 33 57 03 11 df 16 03 31 e1 .....\.3W.....1. 0050 4d ce a2 14 bf 16 3b 5d 36 c1 31 ab c0 02 43 01 M.....;]6.1...C. 0060 fa a9 59 3d b9 1e 8d 95 94 9b 20 bd c4 64 54 d5 ..Y=...... ..dT. 0070 cd 05 90 41 93 cd f7 31 62 ef 54 cf 40 5d 9b c0 ...A...1b.T.@].. 0080 e6 33 b2 8d eb d2 cc ce 93 49 .3.......I Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Dec 9, 2005 14:45:48.868577000 Time delta from previous packet: 0.128058000 seconds Time since reference or first frame: 0.727301000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Trailer: AE4CE522 Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0900 (2304) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3214 [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x0591 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x009CA9E43118D642 Responder cookie: 0x3CBC9B3556779FCE Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x2FC2C814 Length: 292 Encrypted payload (264 bytes) 0000 00 d0 c9 94 ef f7 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 01 40 09 00 00 00 40 11 32 14 a5 e3 f9 6a a5 e3 .@....@.2....j.. 0020 f9 67 01 f4 01 f4 01 2c 05 91 00 9c a9 e4 31 18 .g.....,......1. 0030 d6 42 3c bc 9b 35 56 77 9f ce 08 10 20 01 2f c2 .B<..5Vw.... ./. 0040 c8 14 00 00 01 24 02 89 54 6d 15 a9 03 81 56 74 .....$..Tm....Vt 0050 5d 23 34 ea 2e 3d d1 79 de f0 7f bd 72 47 06 82 ]#4..=.y....rG.. 0060 72 ae f3 34 ed 92 ef ca 09 b1 6a 07 34 db 8c 1f r..4......j.4... 0070 17 58 d0 96 2b d7 fd 07 b4 20 35 b4 39 e0 1c 0e .X..+.... 5.9... 0080 87 54 84 0b 95 25 fc ce f6 e6 20 3e 58 11 69 d0 .T...%.... >X.i. 0090 e1 73 91 5a b2 7a 5f 5d 41 8a c1 cc fc 5d dd 8f .s.Z.z_]A....].. 00a0 34 58 f7 31 a8 7c fb cc 68 ca ea fc 00 66 96 eb 4X.1.|..h....f.. 00b0 f2 a9 9d e6 8a 30 00 fc 17 d1 1c 88 df a0 e1 84 .....0.......... 00c0 6f da 83 84 a7 5a d2 31 66 6b 87 7e 17 18 2c 1a o....Z.1fk.~..,. 00d0 bd d6 10 e3 0d 3e 31 4c 22 5c 43 0b bc b5 a1 85 .....>1L"\C..... 00e0 77 73 26 b5 b1 63 2c 8e fd df e6 e9 17 38 2c ab ws&..c,......8,. 00f0 ed 4d 55 16 10 fc 02 9d 3e 47 d2 a2 5a 83 ea 0e .MU.....>G..Z... 0100 f1 a7 8b 65 e8 62 d7 59 ff 3c 8e f9 2c 49 eb ee ...e.b.Y.<..,I.. 0110 20 d6 2c 36 33 6e af 6b 27 4f 6f 5b 18 51 45 ce .,63n.k'Oo[.QE. 0120 5e 0c b1 b8 3e 9f b0 78 15 11 28 a8 d7 d9 17 b1 ^...>..x..(..... 0130 37 31 cc 17 ff d1 08 84 a3 c8 85 ba 83 75 c8 a5 71...........u.. 0140 ff bb b4 36 0b 52 ae 0b 31 3f 74 93 f0 02 ae 4c ...6.R..1?t....L 0150 e5 22 ." Frame 8 (330 bytes on wire, 330 bytes captured) Arrival Time: Dec 9, 2005 14:45:49.014071000 Time delta from previous packet: 0.145494000 seconds Time since reference or first frame: 0.872795000 seconds Frame Number: 8 Packet Length: 330 bytes Capture Length: 330 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Trailer: 0F71CFF3 Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb1b [correct] Good: True Bad : False Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x6819 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x009CA9E43118D642 Responder cookie: 0x3CBC9B3556779FCE Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x2FC2C814 Length: 284 Encrypted payload (256 bytes) 0000 00 a0 8e 72 1e 40 00 d0 c9 94 ef f7 08 00 45 00 ...r.@........E. 0010 01 38 00 00 40 00 40 11 fb 1b a5 e3 f9 67 a5 e3 .8..@.@......g.. 0020 f9 6a 01 f4 01 f4 01 24 68 19 00 9c a9 e4 31 18 .j.....$h.....1. 0030 d6 42 3c bc 9b 35 56 77 9f ce 08 10 20 01 2f c2 .B<..5Vw.... ./. 0040 c8 14 00 00 01 1c d4 67 6f e8 5d 8d 29 53 c3 02 .......go.].)S.. 0050 3c bb 95 77 a6 58 1d 82 8d ee 7c b1 3d 02 5f a6 <..w.X....|.=._. 0060 7f 46 e5 9d f4 25 86 a0 1a 10 39 66 0d 5a 83 f0 .F...%....9f.Z.. 0070 fd 1e 08 7b 1d 6a cc 4e 0b 17 67 21 fb 68 50 3b ...{.j.N..g!.hP; 0080 9b bb a3 c7 ae 9d 19 f7 a3 6f 1d ee 69 a7 05 16 .........o..i... 0090 95 53 6f f8 d8 19 77 19 57 e4 d4 13 87 38 d0 dc .So...w.W....8.. 00a0 91 07 75 fe f2 55 02 ff 37 6f 4a be 34 f8 c9 d2 ..u..U..7oJ.4... 00b0 95 40 31 be 3f 4f 8b d5 dc 15 fe 66 03 50 d8 61 .@1.?O.....f.P.a 00c0 30 5b 57 61 89 bc 4e 3d b5 c2 32 75 81 83 9c 34 0[Wa..N=..2u...4 00d0 74 1f 65 e3 71 c0 86 1d 46 63 8e ab 43 99 92 51 t.e.q...Fc..C..Q 00e0 59 42 76 e9 6a 74 68 9f f6 d4 f7 39 3b 95 ca 1b YBv.jth....9;... 00f0 9e 48 86 22 7b 6e 7a a7 7c c9 08 ef 2f 08 3d ca .H."{nz.|.../.=. 0100 d1 66 1c 7a b9 7c f4 2b 18 02 75 d5 25 32 61 b7 .f.z.|.+..u.%2a. 0110 74 77 24 2d 16 68 c2 4f 25 c5 3c 81 94 1c 7e b0 tw$-.h.O%.<...~. 0120 ee 70 5f ac 51 51 c3 61 17 99 05 05 8a f1 09 c0 .p_.QQ.a........ 0130 e3 e9 2c aa a5 41 4a 0c a5 a8 21 5a a3 7c 20 07 ..,..AJ...!Z.| . 0140 c0 48 b6 87 6b c8 0f 71 cf f3 .H..k..q.. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Dec 9, 2005 14:45:49.176255000 Time delta from previous packet: 0.162184000 seconds Time since reference or first frame: 1.034979000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Trailer: BEEFBF9C Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0901 (2305) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3303 [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x3313 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x009CA9E43118D642 Responder cookie: 0x3CBC9B3556779FCE Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x2FC2C814 Length: 52 Encrypted payload (24 bytes) 0000 00 d0 c9 94 ef f7 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 50 09 01 00 00 40 11 33 03 a5 e3 f9 6a a5 e3 .P....@.3....j.. 0020 f9 67 01 f4 01 f4 00 3c 33 13 00 9c a9 e4 31 18 .g.....<3.....1. 0030 d6 42 3c bc 9b 35 56 77 9f ce 08 10 20 01 2f c2 .B<..5Vw.... ./. 0040 c8 14 00 00 00 34 31 28 10 ba 59 e1 1e 73 78 62 .....41(..Y..sxb 0050 d4 8c 14 03 a8 90 53 10 ef 53 21 78 c2 1b be ef ......S..S!x.... 0060 bf 9c .. Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: Dec 9, 2005 14:45:49.678581000 Time delta from previous packet: 0.502326000 seconds Time since reference or first frame: 1.537305000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Trailer: EB9C71EC Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0902 (2306) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x32c1 [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.103 (165.227.249.103) Encapsulating Security Payload SPI: 0x3f701fa8 Sequence: 1 Data (84 bytes) 0000 00 d0 c9 94 ef f7 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 70 09 02 00 00 40 32 32 c1 a5 e3 f9 6a a5 e3 .p....@22....j.. 0020 f9 67 3f 70 1f a8 00 00 00 01 70 09 b9 3f 90 10 .g?p......p..?.. 0030 61 0e 3a 34 ab 0f f1 5c 53 25 be 16 c9 55 e8 73 a.:4...\S%...U.s 0040 b6 49 ac 3e 1c a7 ca 6d b1 d1 51 f0 b7 d5 0e 6f .I.>...m..Q....o 0050 68 10 4e c8 11 23 39 af 99 00 66 9f df ec b5 08 h.N..#9...f..... 0060 b4 4f da cd 65 09 67 a2 03 89 82 62 4e dd e1 e0 .O..e.g....bN... 0070 c3 57 a2 ed 44 40 59 15 f0 47 ab 7c 39 e6 eb 9c .W..D@Y..G.|9... 0080 71 ec q. Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: Dec 9, 2005 14:45:49.681776000 Time delta from previous packet: 0.003195000 seconds Time since reference or first frame: 1.540500000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Trailer: 5384DB5D Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0036 (54) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3b8d [correct] Good: True Bad : False Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x9a0bfc00 Sequence: 1 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 d0 c9 94 ef f7 08 00 45 00 ...r.@........E. 0010 00 70 00 36 00 00 40 32 3b 8d a5 e3 f9 67 a5 e3 .p.6..@2;....g.. 0020 f9 6a 9a 0b fc 00 00 00 00 01 b2 82 ae d4 20 f3 .j............ . 0030 f3 a8 f6 e6 84 b1 e4 d8 fd 34 73 27 a6 c1 c3 fd .........4s'.... 0040 e8 89 23 81 36 03 54 76 f2 bc 85 fc d0 7f dd 58 ..#.6.Tv.......X 0050 3c 1e fe d3 a4 ad e4 ad 44 20 a6 b1 ba 19 a3 07 <.......D ...... 0060 86 0b 5c 28 a5 95 f5 22 61 89 ed f0 70 12 c0 31 ..\(..."a...p..1 0070 d3 e4 6c 0c ac 3f ad 48 6d 95 64 33 05 b2 53 84 ..l..?.Hm.d3..S. 0080 db 5d .] Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Dec 9, 2005 14:45:49.692074000 Time delta from previous packet: 0.010298000 seconds Time since reference or first frame: 1.550798000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Trailer: 514D09A4 Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0903 (2307) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x32c0 [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.103 (165.227.249.103) Encapsulating Security Payload SPI: 0x3f701fa8 Sequence: 2 Data (84 bytes) 0000 00 d0 c9 94 ef f7 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 70 09 03 00 00 40 32 32 c0 a5 e3 f9 6a a5 e3 .p....@22....j.. 0020 f9 67 3f 70 1f a8 00 00 00 02 61 65 6a 88 ac 38 .g?p......aej..8 0030 35 49 69 54 87 3e e6 1d 0c 4d 77 5e 44 f6 0f d7 5IiT.>...Mw^D... 0040 eb c8 8c da 3e 1f 33 12 e3 1c 61 3a 9f 64 fe 9f ....>.3...a:.d.. 0050 45 78 a4 75 4e 24 54 ad a7 71 15 c9 1c c7 f4 2f Ex.uN$T..q...../ 0060 1f 40 0f e8 7f c0 c2 42 76 b3 35 01 70 74 02 b7 .@.....Bv.5.pt.. 0070 0e c7 6e 3d c9 fd 1d fb 7b ad 26 33 5e f3 51 4d ..n=....{.&3^.QM 0080 09 a4 .. Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Dec 9, 2005 14:45:49.695485000 Time delta from previous packet: 0.003411000 seconds Time since reference or first frame: 1.554209000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Trailer: 157720FE Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0037 (55) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3b8c [correct] Good: True Bad : False Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x9a0bfc00 Sequence: 2 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 d0 c9 94 ef f7 08 00 45 00 ...r.@........E. 0010 00 70 00 37 00 00 40 32 3b 8c a5 e3 f9 67 a5 e3 .p.7..@2;....g.. 0020 f9 6a 9a 0b fc 00 00 00 00 02 9d d4 7b 8e 7d 83 .j..........{.}. 0030 75 69 8f da 5c be 51 28 12 38 71 c5 bf b9 1e a3 ui..\.Q(.8q..... 0040 75 bc 52 ff fd 62 88 64 09 56 1a b8 c1 ad 82 fe u.R..b.d.V...... 0050 9a bb 32 1d 61 32 be c9 5c 9c 86 56 1f fc f0 a3 ..2.a2..\..V.... 0060 ae e7 86 a2 ca 7d 27 f8 8f 66 c4 08 a4 c9 3f cd .....}'..f....?. 0070 ca 03 f3 e9 f3 47 ae 12 15 cd 46 b7 2d 41 15 77 .....G....F.-A.w 0080 20 fe . Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: Dec 9, 2005 14:45:50.703546000 Time delta from previous packet: 1.008061000 seconds Time since reference or first frame: 2.562270000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Trailer: C42B3AEC Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0904 (2308) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x32bf [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.103 (165.227.249.103) Encapsulating Security Payload SPI: 0x3f701fa8 Sequence: 3 Data (84 bytes) 0000 00 d0 c9 94 ef f7 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 70 09 04 00 00 40 32 32 bf a5 e3 f9 6a a5 e3 .p....@22....j.. 0020 f9 67 3f 70 1f a8 00 00 00 03 71 24 e5 8e aa 07 .g?p......q$.... 0030 5b 2d 54 8b ab a5 a0 a6 b5 56 4e d2 6f c8 95 56 [-T......VN.o..V 0040 e5 f0 4f 6f 72 69 ec 7e c6 28 a0 2e 4f 00 f4 cb ..Oori.~.(..O... 0050 c1 c3 5b b8 18 3f b4 9b 6a 4b b4 72 05 52 59 20 ..[..?..jK.r.RY 0060 f4 a4 a8 f5 42 34 27 3a 69 cf 84 86 0a 7d e9 67 ....B4':i....}.g 0070 53 b8 81 97 95 82 f8 cf 12 dc af 0a 7f 3d c4 2b S............=.+ 0080 3a ec :. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: Dec 9, 2005 14:45:50.706990000 Time delta from previous packet: 0.003444000 seconds Time since reference or first frame: 2.565714000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Trailer: 5AB6E279 Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0038 (56) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3b8b [correct] Good: True Bad : False Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x9a0bfc00 Sequence: 3 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 d0 c9 94 ef f7 08 00 45 00 ...r.@........E. 0010 00 70 00 38 00 00 40 32 3b 8b a5 e3 f9 67 a5 e3 .p.8..@2;....g.. 0020 f9 6a 9a 0b fc 00 00 00 00 03 a6 3b 89 4c 46 38 .j.........;.LF8 0030 dd 8e d2 ef 16 c5 9d 66 7a 25 47 79 89 16 83 d2 .......fz%Gy.... 0040 83 50 e2 bf ff cf 5e b6 7a 55 6f 9a dd e8 ee 6e .P....^.zUo....n 0050 04 ff 52 3b 54 11 2d 0d a1 d9 5a 59 be f5 71 9a ..R;T.-...ZY..q. 0060 09 1e 32 d1 d4 d2 05 71 6f 6f 97 cf e3 5f 52 2f ..2....qoo..._R/ 0070 b2 d4 c6 b4 30 e6 15 76 7b 53 7c e1 7a ff 5a b6 ....0..v{S|.z.Z. 0080 e2 79 .y Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: Dec 9, 2005 14:45:51.703528000 Time delta from previous packet: 0.996538000 seconds Time since reference or first frame: 3.562252000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Destination: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Trailer: 813EA860 Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0905 (2309) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x32be [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.103 (165.227.249.103) Encapsulating Security Payload SPI: 0x3f701fa8 Sequence: 4 Data (84 bytes) 0000 00 d0 c9 94 ef f7 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 70 09 05 00 00 40 32 32 be a5 e3 f9 6a a5 e3 .p....@22....j.. 0020 f9 67 3f 70 1f a8 00 00 00 04 67 82 ff f7 38 e6 .g?p......g...8. 0030 72 49 fd ef 42 93 63 69 56 e6 4a 54 65 45 64 80 rI..B.ciV.JTeEd. 0040 ed f6 fb 01 f5 d4 88 38 57 7f 88 20 ab 1a 46 cb .......8W.. ..F. 0050 ad f3 dc e7 8f 87 4e 4e 4b 73 e9 82 5b a2 35 a8 ......NNKs..[.5. 0060 40 d9 57 8e 3f c5 e0 bc fd 96 bb 71 25 a7 91 e4 @.W.?......q%... 0070 27 47 2e 90 9e 33 f4 ce 1d f1 81 30 b4 1c 81 3e 'G...3.....0...> 0080 a8 60 .` Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: Dec 9, 2005 14:45:51.706841000 Time delta from previous packet: 0.003313000 seconds Time since reference or first frame: 3.565565000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:d0:c9:94:ef:f7 (00:d0:c9:94:ef:f7) Type: IP (0x0800) Trailer: E924E540 Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0039 (57) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3b8a [correct] Good: True Bad : False Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x9a0bfc00 Sequence: 4 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 d0 c9 94 ef f7 08 00 45 00 ...r.@........E. 0010 00 70 00 39 00 00 40 32 3b 8a a5 e3 f9 67 a5 e3 .p.9..@2;....g.. 0020 f9 6a 9a 0b fc 00 00 00 00 04 92 98 a0 22 ca c9 .j...........".. 0030 d4 50 58 97 be c0 18 1e f5 44 ff aa b5 36 2d b6 .PX......D...6-. 0040 0b bd 95 3d c4 59 4f e6 bb 3b 26 44 e4 06 3e 07 ...=.YO..;&D..>. 0050 77 4a 87 f0 ae e0 44 8d 48 9f b6 8e fe 66 b0 d8 wJ....D.H....f.. 0060 58 7d a9 35 41 25 d8 ed 5b 86 52 8c 67 d7 ff c2 X}.5A%..[.R.g... 0070 1e e3 33 50 3d 1b 5c 11 13 fd 9e 36 fd 20 e9 24 ..3P=.\....6. .$ 0080 e5 40 .@