Frame 1 (126 bytes on wire, 126 bytes captured) Arrival Time: May 19, 2005 14:01:19.301986000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:05:00:b8:00:e0 Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x3e7de508 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0xfac3 (64195) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x410d (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.126 (165.227.249.126) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x09a5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBDE7CE34686147F2 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 05 00 b8 00 e0 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 6c fa c3 00 00 40 11 41 0d a5 e3 f9 6a a5 e3 .l....@.A....j.. 0020 f9 7e 01 f4 01 f4 00 58 09 a5 bd e7 ce 34 68 61 .~.....X.....4ha 0030 47 f2 00 00 00 00 00 00 00 00 01 10 02 00 00 00 G............... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 3e 7d e5 08 ........p.>}.. Frame 2 (150 bytes on wire, 150 bytes captured) Arrival Time: May 19, 2005 14:01:19.409819000 Time delta from previous packet: 0.107833000 seconds Time since reference or first frame: 0.107833000 seconds Frame Number: 2 Packet Length: 150 bytes Capture Length: 150 bytes Ethernet II, Src: 00:05:00:b8:00:e0, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Type: IP (0x0800) Frame check sequence: 0x907e760d (correct) Internet Protocol, Src Addr: 165.227.249.126 (165.227.249.126), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 132 Identification: 0x0007 (7) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfbb1 (correct) Source: 165.227.249.126 (165.227.249.126) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 112 Checksum: 0x528e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBDE7CE34686147F2 Responder cookie: 0x1A4CBF127A737E72 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 104 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 24 Vendor ID: Microsoft L2TP/IPSec VPN Client 0000 00 a0 8e 72 1e 40 00 05 00 b8 00 e0 08 00 45 00 ...r.@........E. 0010 00 84 00 07 00 00 80 11 fb b1 a5 e3 f9 7e a5 e3 .............~.. 0020 f9 6a 01 f4 01 f4 00 70 52 8e bd e7 ce 34 68 61 .j.....pR....4ha 0030 47 f2 1a 4c bf 12 7a 73 7e 72 01 10 02 00 00 00 G..L..zs~r...... 0040 00 00 00 00 00 68 0d 00 00 34 00 00 00 01 00 00 .....h...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 00 00 00 18 40 48 ........p.....@H 0080 b7 d5 6e bc e8 85 25 e7 de 7f 00 d6 c2 d3 c0 00 ..n...%......... 0090 00 00 90 7e 76 0d ...~v. Frame 3 (262 bytes on wire, 262 bytes captured) Arrival Time: May 19, 2005 14:01:19.533161000 Time delta from previous packet: 0.123342000 seconds Time since reference or first frame: 0.231175000 seconds Frame Number: 3 Packet Length: 262 bytes Capture Length: 262 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:05:00:b8:00:e0 Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xf54eccc4 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0xfac4 (64196) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x4084 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.126 (165.227.249.126) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0x3d74 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBDE7CE34686147F2 Responder cookie: 0x1A4CBF127A737E72 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x03000014BBDA3A27F9C85E50402D176E... 0000 00 05 00 b8 00 e0 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 f4 fa c4 00 00 40 11 40 84 a5 e3 f9 6a a5 e3 ......@.@....j.. 0020 f9 7e 01 f4 01 f4 00 e0 3d 74 bd e7 ce 34 68 61 .~......=t...4ha 0030 47 f2 1a 4c bf 12 7a 73 7e 72 04 10 02 00 00 00 G..L..zs~r...... 0040 00 00 00 00 00 d8 0a 00 00 84 83 5b fe 90 20 1c ...........[.. . 0050 62 08 d2 e8 a7 69 3d 7a 1c 79 dc c1 2c db b9 ba b....i=z.y..,... 0060 f2 dd 65 34 c6 d9 59 10 fe 82 b7 39 26 99 d5 e5 ..e4..Y....9&... 0070 67 f6 ee 80 5d b9 0f 72 07 5a e2 24 03 50 c5 eb g...]..r.Z.$.P.. 0080 2b ee 32 6a 52 66 a3 6e 0b 46 b8 66 cf 6c a2 04 +.2jRf.n.F.f.l.. 0090 59 86 b6 18 50 87 54 64 21 71 c7 cd 86 d8 d9 52 Y...P.Td!q.....R 00a0 9b 97 a1 b2 7f 7c d9 e4 1f 75 6d 4b e7 cb 66 b1 .....|...umK..f. 00b0 1e 55 81 9c a3 f9 41 6b 61 c6 cd 7b e1 7f ba f6 .U....Aka..{.... 00c0 73 5d ff f8 c5 b5 fe 0a f5 ef 0d 00 00 18 d1 21 s].............! 00d0 43 98 83 b4 ea 56 39 12 3f 45 f7 15 4e 78 94 e6 C....V9.?E..Nx.. 00e0 bd 88 00 00 00 20 03 00 00 14 bb da 3a 27 f9 c8 ..... ......:'.. 00f0 5e 50 40 2d 17 6e 3f 71 21 dd 00 00 00 08 00 06 ^P@-.n?q!....... 0100 00 02 f5 4e cc c4 ...N.. Frame 4 (302 bytes on wire, 302 bytes captured) Arrival Time: May 19, 2005 14:01:19.662550000 Time delta from previous packet: 0.129389000 seconds Time since reference or first frame: 0.360564000 seconds Frame Number: 4 Packet Length: 302 bytes Capture Length: 302 bytes Ethernet II, Src: 00:05:00:b8:00:e0, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Type: IP (0x0800) Frame check sequence: 0xa46dcf09 (correct) Internet Protocol, Src Addr: 165.227.249.126 (165.227.249.126), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x0008 (8) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb18 (correct) Source: 165.227.249.126 (165.227.249.126) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0xb516 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBDE7CE34686147F2 Responder cookie: 0x1A4CBF127A737E72 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x12F5F28C457168A9702D9FE274CC0100 Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0xEF8B180F7A727E726724335F93639057 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x1F07F70EAA6514D3B0FA96542A500401 0000 00 a0 8e 72 1e 40 00 05 00 b8 00 e0 08 00 45 00 ...r.@........E. 0010 01 1c 00 08 00 00 80 11 fb 18 a5 e3 f9 7e a5 e3 .............~.. 0020 f9 6a 01 f4 01 f4 01 08 b5 16 bd e7 ce 34 68 61 .j...........4ha 0030 47 f2 1a 4c bf 12 7a 73 7e 72 04 10 02 00 00 00 G..L..zs~r...... 0040 00 00 00 00 01 00 0a 00 00 84 b1 55 5f cd 89 e9 ...........U_... 0050 13 92 b5 f7 df 23 dd 46 d9 36 f1 72 0c 92 f9 f5 .....#.F.6.r.... 0060 ce 2b ca 0a 26 23 2d 3b e3 8f d6 1b 9c 8a 22 5a .+..&#-;......"Z 0070 b8 70 92 48 5e 1e 03 7a f7 42 d0 3b f4 42 b7 40 .p.H^..z.B.;.B.@ 0080 7a 38 a7 27 89 f2 c2 81 87 4a 83 fd c6 01 90 7d z8.'.....J.....} 0090 d0 4c df 86 bf 78 de 79 6f 8a 51 6e 7f 5a c2 9a .L...x.yo.Qn.Z.. 00a0 d8 db 6a a1 24 3d 7e 84 ad d1 cc 6a 55 c6 bd 7d ..j.$=~....jU..} 00b0 53 ff 3f 59 4f 35 06 b4 38 80 cf 08 30 5a 5f 95 S.?YO5..8...0Z_. 00c0 28 87 02 4b 7d d6 56 7c 69 7f 0d 00 00 18 93 ff (..K}.V|i....... 00d0 7f 17 b9 81 4b ff ff b1 f5 ee 9d 89 4a 71 51 27 ....K.......JqQ' 00e0 6d 75 0d 00 00 14 12 f5 f2 8c 45 71 68 a9 70 2d mu........Eqh.p- 00f0 9f e2 74 cc 01 00 0d 00 00 0c 09 00 26 89 df d6 ..t.........&... 0100 b7 12 0d 00 00 14 ef 8b 18 0f 7a 72 7e 72 67 24 ..........zr~rg$ 0110 33 5f 93 63 90 57 00 00 00 14 1f 07 f7 0e aa 65 3_.c.W.........e 0120 14 d3 b0 fa 96 54 2a 50 04 01 a4 6d cf 09 .....T*P...m.. Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: May 19, 2005 14:01:19.816436000 Time delta from previous packet: 0.153886000 seconds Time since reference or first frame: 0.514450000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:05:00:b8:00:e0 Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x95277d2d (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0xfac5 (64197) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x40ff (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.126 (165.227.249.126) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x8e4b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBDE7CE34686147F2 Responder cookie: 0x1A4CBF127A737E72 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 05 00 b8 00 e0 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 78 fa c5 00 00 40 11 40 ff a5 e3 f9 6a a5 e3 .x....@.@....j.. 0020 f9 7e 01 f4 01 f4 00 64 8e 4b bd e7 ce 34 68 61 .~.....d.K...4ha 0030 47 f2 1a 4c bf 12 7a 73 7e 72 05 10 02 01 00 00 G..L..zs~r...... 0040 00 00 00 00 00 5c d7 f1 b2 1b a3 c2 4b a8 ac ed .....\......K... 0050 63 7a 79 68 f9 dc f5 57 b1 f8 37 9c e7 da 96 d7 czyh...W..7..... 0060 c7 5c 04 51 a5 d7 96 88 a5 a2 d5 ee d0 4d 58 81 .\.Q.........MX. 0070 d4 58 bd 57 57 c3 81 63 b7 7c 7e 95 de e0 49 3b .X.WW..c.|~...I; 0080 d6 cd 20 29 50 ef 95 27 7d 2d .. )P..'}- Frame 6 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:01:19.916708000 Time delta from previous packet: 0.100272000 seconds Time since reference or first frame: 0.614722000 seconds Frame Number: 6 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:05:00:b8:00:e0, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Type: IP (0x0800) Frame check sequence: 0x7ec24259 (correct) Internet Protocol, Src Addr: 165.227.249.126 (165.227.249.126), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0009 (9) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfbc3 (correct) Source: 165.227.249.126 (165.227.249.126) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x2db3 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBDE7CE34686147F2 Responder cookie: 0x1A4CBF127A737E72 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Encrypted payload (56 bytes) 0000 00 a0 8e 72 1e 40 00 05 00 b8 00 e0 08 00 45 00 ...r.@........E. 0010 00 70 00 09 00 00 80 11 fb c3 a5 e3 f9 7e a5 e3 .p...........~.. 0020 f9 6a 01 f4 01 f4 00 5c 2d b3 bd e7 ce 34 68 61 .j.....\-....4ha 0030 47 f2 1a 4c bf 12 7a 73 7e 72 05 10 02 01 00 00 G..L..zs~r...... 0040 00 00 00 00 00 54 d8 97 14 f8 6e 79 10 f4 00 42 .....T....ny...B 0050 68 6d 72 ce 33 6f 99 1a 29 36 97 1f 2e c5 fa 4b hmr.3o..)6.....K 0060 0a cf f7 fb fb 15 00 07 ca 09 6a bc 7b f5 b8 3b ..........j.{..; 0070 63 9a cc a8 9a 98 d4 b6 01 20 f7 1e 7b b3 7e c2 c........ ..{.~. 0080 42 59 BY Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: May 19, 2005 14:01:20.043391000 Time delta from previous packet: 0.126683000 seconds Time since reference or first frame: 0.741405000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:05:00:b8:00:e0 Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xd3dc76a3 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0xfac6 (64198) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x4036 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.126 (165.227.249.126) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x2198 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBDE7CE34686147F2 Responder cookie: 0x1A4CBF127A737E72 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xCCF35E12 Length: 292 Encrypted payload (264 bytes) 0000 00 05 00 b8 00 e0 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 01 40 fa c6 00 00 40 11 40 36 a5 e3 f9 6a a5 e3 .@....@.@6...j.. 0020 f9 7e 01 f4 01 f4 01 2c 21 98 bd e7 ce 34 68 61 .~.....,!....4ha 0030 47 f2 1a 4c bf 12 7a 73 7e 72 08 10 20 01 cc f3 G..L..zs~r.. ... 0040 5e 12 00 00 01 24 9e e9 d6 6d cf c8 3e 07 29 0d ^....$...m..>.). 0050 56 35 1f c9 e5 7f f3 84 48 8c 18 4a db fa a8 86 V5......H..J.... 0060 97 48 3a 61 09 30 4c f1 5b 15 a0 32 8c e3 fc fe .H:a.0L.[..2.... 0070 b4 51 a9 ab 3a a9 76 ad 97 2d 71 b8 56 5d c0 fa .Q..:.v..-q.V].. 0080 30 85 b4 77 8a af f2 d6 b3 15 d9 51 fa a3 a8 14 0..w.......Q.... 0090 92 96 78 e7 10 da bc 09 c0 d4 d0 06 d9 7a 31 fb ..x..........z1. 00a0 ea e1 35 41 be a3 d3 b4 62 cb a5 fe 4a 9f 7a 14 ..5A....b...J.z. 00b0 d8 09 15 a1 cf 40 84 5c 58 bd 7d 8c 30 d2 f2 c8 .....@.\X.}.0... 00c0 72 0c 8c ea 8f 41 5a cf 4a 3d 81 34 e3 a1 36 4c r....AZ.J=.4..6L 00d0 36 dd 3b 33 09 4d 92 22 db e2 39 62 a2 ea 15 a2 6.;3.M."..9b.... 00e0 08 f7 99 7c d8 b9 a9 ba 4c 75 3e 05 b0 d5 6e 27 ...|....Lu>...n' 00f0 44 83 92 a0 de ce 87 3b fc 00 a5 fa d0 09 f5 ce D......;........ 0100 a1 c9 b9 9e 7f f9 e9 ea 34 58 04 7e a2 4e 18 66 ........4X.~.N.f 0110 4f c4 34 ce 8f 4d db a9 9e 14 34 4b e3 40 e2 56 O.4..M....4K.@.V 0120 fd e5 c2 e5 af 86 69 94 6d 78 3f c6 04 d5 cb 99 ......i.mx?..... 0130 9e 1c 7d 86 e1 35 97 25 fb 81 49 39 78 11 67 2f ..}..5.%..I9x.g/ 0140 36 a8 9e 8b 48 bc 2a cb 0f 8a fe f1 f3 a3 d3 dc 6...H.*......... 0150 76 a3 v. Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: May 19, 2005 14:01:20.269209000 Time delta from previous packet: 0.225818000 seconds Time since reference or first frame: 0.967223000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:05:00:b8:00:e0, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Type: IP (0x0800) Frame check sequence: 0x4acd4c40 (correct) Internet Protocol, Src Addr: 165.227.249.126 (165.227.249.126), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x000a (10) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfaf2 (correct) Source: 165.227.249.126 (165.227.249.126) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xeb0a (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBDE7CE34686147F2 Responder cookie: 0x1A4CBF127A737E72 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xCCF35E12 Length: 292 Encrypted payload (264 bytes) 0000 00 a0 8e 72 1e 40 00 05 00 b8 00 e0 08 00 45 00 ...r.@........E. 0010 01 40 00 0a 00 00 80 11 fa f2 a5 e3 f9 7e a5 e3 .@...........~.. 0020 f9 6a 01 f4 01 f4 01 2c eb 0a bd e7 ce 34 68 61 .j.....,.....4ha 0030 47 f2 1a 4c bf 12 7a 73 7e 72 08 10 20 01 cc f3 G..L..zs~r.. ... 0040 5e 12 00 00 01 24 f9 60 5b 33 c8 b3 b6 7b 15 df ^....$.`[3...{.. 0050 8d 55 11 6a 5b 29 f4 e3 25 b1 a8 27 88 75 db ef .U.j[)..%..'.u.. 0060 a5 0e c1 0a 7a 56 3d 9a e5 c7 2d 16 eb 85 32 ea ....zV=...-...2. 0070 9a d3 16 22 86 60 d9 d8 3b 9d 44 16 63 6b 4a 0e ...".`..;.D.ckJ. 0080 06 d6 51 5f 71 33 f0 0a ab 36 54 c8 4a d4 47 0f ..Q_q3...6T.J.G. 0090 ab 4c ad 56 90 67 62 53 59 5d b8 ff d1 ea ff 3d .L.V.gbSY].....= 00a0 8e 3e 86 db 9e 64 ed 30 8c ad ef 89 a1 19 99 99 .>...d.0........ 00b0 5c c0 04 a1 9b ba 67 45 58 a5 b3 62 aa 66 f2 64 \.....gEX..b.f.d 00c0 0a 9d 59 2c ee 19 4e b3 17 42 26 59 b1 76 97 4d ..Y,..N..B&Y.v.M 00d0 90 ce a6 a1 55 b2 33 b4 c0 e3 5a b9 90 c9 71 a6 ....U.3...Z...q. 00e0 5a ad 65 79 7d b7 6b 8b 10 22 94 5a 98 76 c8 87 Z.ey}.k..".Z.v.. 00f0 32 12 40 4e c3 b2 02 33 57 8d 66 41 29 41 92 9e 2.@N...3W.fA)A.. 0100 b7 15 43 56 06 44 9b 2e a5 04 8e 11 f4 2c a9 7f ..CV.D.......,.. 0110 dc 7a 1b ff a8 12 06 3a e8 8b 76 aa 27 e8 74 e6 .z.....:..v.'.t. 0120 57 40 d3 a4 c4 5e f8 d1 ff 06 b2 ee 6a c4 96 4c W@...^......j..L 0130 86 06 ae 09 92 32 66 b8 d1 be 45 07 23 78 e5 e1 .....2f...E.#x.. 0140 bb 98 98 02 da be fe 39 5b 8f 09 76 05 a4 4a cd .......9[..v..J. 0150 4c 40 L@ Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: May 19, 2005 14:01:20.428144000 Time delta from previous packet: 0.158935000 seconds Time since reference or first frame: 1.126158000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:05:00:b8:00:e0 Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x31d699f7 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0xfac7 (64199) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x4125 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.126 (165.227.249.126) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0xbdc3 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xBDE7CE34686147F2 Responder cookie: 0x1A4CBF127A737E72 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xCCF35E12 Length: 52 Encrypted payload (24 bytes) 0000 00 05 00 b8 00 e0 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 50 fa c7 00 00 40 11 41 25 a5 e3 f9 6a a5 e3 .P....@.A%...j.. 0020 f9 7e 01 f4 01 f4 00 3c bd c3 bd e7 ce 34 68 61 .~.....<.....4ha 0030 47 f2 1a 4c bf 12 7a 73 7e 72 08 10 20 01 cc f3 G..L..zs~r.. ... 0040 5e 12 00 00 00 34 d9 cb a3 73 17 9c 69 24 ef 77 ^....4...s..i$.w 0050 32 1f 7a e9 16 27 e6 e3 ba 38 28 97 22 be 31 d6 2.z..'...8(.".1. 0060 99 f7 .. Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:01:20.930066000 Time delta from previous packet: 0.501922000 seconds Time since reference or first frame: 1.628080000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:05:00:b8:00:e0 Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xc068d035 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfac8 (64200) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x40e3 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.126 (165.227.249.126) Encapsulating Security Payload SPI: 0x08ad516e Sequence: 1 Data (84 bytes) 0000 00 05 00 b8 00 e0 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 70 fa c8 00 00 40 32 40 e3 a5 e3 f9 6a a5 e3 .p....@2@....j.. 0020 f9 7e 08 ad 51 6e 00 00 00 01 0a 3c c7 95 73 0c .~..Qn.....<..s. 0030 53 1c d8 e4 2d 1e af 0b 5f a8 06 3a e2 e5 ee 5f S...-..._..:..._ 0040 cc 81 bb f2 82 a9 0e 86 52 50 8f b3 96 a4 3e fe ........RP....>. 0050 b1 32 f9 24 8d a2 83 bf d5 08 cf 76 92 68 2a 8f .2.$.......v.h*. 0060 9b 65 b2 67 c9 56 78 9d 0a b9 4e b0 8e c2 c0 1a .e.g.Vx...N..... 0070 78 be 3e 2b 33 a5 79 2d b0 b3 8e 44 8b f6 c0 68 x.>+3.y-...D...h 0080 d0 35 .5 Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:01:20.931987000 Time delta from previous packet: 0.001921000 seconds Time since reference or first frame: 1.630001000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:05:00:b8:00:e0, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Type: IP (0x0800) Frame check sequence: 0x6b90723c (correct) Internet Protocol, Src Addr: 165.227.249.126 (165.227.249.126), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0004 (4) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3ba8 (correct) Source: 165.227.249.126 (165.227.249.126) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x27bb3800 Sequence: 1 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 05 00 b8 00 e0 08 00 45 00 ...r.@........E. 0010 00 70 00 04 00 00 40 32 3b a8 a5 e3 f9 7e a5 e3 .p....@2;....~.. 0020 f9 6a 27 bb 38 00 00 00 00 01 c4 f5 54 25 19 38 .j'.8.......T%.8 0030 e2 eb be 6e c8 e9 a7 e5 62 2a 1b ef 12 a6 74 81 ...n....b*....t. 0040 1d 16 6d a2 8f 8f d8 c9 12 8f 32 98 12 07 7b bd ..m.......2...{. 0050 68 96 d7 c4 a0 b5 c8 a3 de 7d fb 2e 8e 20 55 10 h........}... U. 0060 4b 79 8b 95 12 9b de 05 e6 55 27 94 2f b6 34 2a Ky.......U'./.4* 0070 7d 43 6d 30 9c 2d 47 fb 1e ef 4b 33 79 bc 6b 90 }Cm0.-G...K3y.k. 0080 72 3c r< Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:01:20.934736000 Time delta from previous packet: 0.002749000 seconds Time since reference or first frame: 1.632750000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:05:00:b8:00:e0 Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x760d58f8 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfac9 (64201) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x40e2 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.126 (165.227.249.126) Encapsulating Security Payload SPI: 0x08ad516e Sequence: 2 Data (84 bytes) 0000 00 05 00 b8 00 e0 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 70 fa c9 00 00 40 32 40 e2 a5 e3 f9 6a a5 e3 .p....@2@....j.. 0020 f9 7e 08 ad 51 6e 00 00 00 02 10 56 60 8c b5 8f .~..Qn.....V`... 0030 dc 16 5c f3 25 75 4e 69 6a 1b 73 38 bd cd a7 33 ..\.%uNij.s8...3 0040 10 43 c4 15 ed ca 43 06 fd 7c 62 05 c7 9c dc f5 .C....C..|b..... 0050 df 2a b2 fb 5f 8e ff 78 a9 af 8c 41 b4 e7 f0 c5 .*.._..x...A.... 0060 a2 d2 30 f4 6f ad c5 8a 7d 8a 02 de 51 54 67 47 ..0.o...}...QTgG 0070 92 4a fc 12 53 fd fb ce 99 c5 de 4f 6e b0 76 0d .J..S......On.v. 0080 58 f8 X. Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:01:20.937424000 Time delta from previous packet: 0.002688000 seconds Time since reference or first frame: 1.635438000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:05:00:b8:00:e0, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Type: IP (0x0800) Frame check sequence: 0xee93ce2b (correct) Internet Protocol, Src Addr: 165.227.249.126 (165.227.249.126), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0005 (5) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3ba7 (correct) Source: 165.227.249.126 (165.227.249.126) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x27bb3800 Sequence: 2 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 05 00 b8 00 e0 08 00 45 00 ...r.@........E. 0010 00 70 00 05 00 00 40 32 3b a7 a5 e3 f9 7e a5 e3 .p....@2;....~.. 0020 f9 6a 27 bb 38 00 00 00 00 02 27 94 2f b6 34 2a .j'.8.....'./.4* 0030 7d 43 60 7e f7 65 f7 27 e1 d5 70 7e b0 3a a4 fd }C`~.e.'..p~.:.. 0040 a4 7e 92 d6 2d 05 0f b7 d5 0d a8 95 09 dc 2f 63 .~..-........./c 0050 ae f7 ae d2 4c e4 7c 14 e4 42 35 01 66 5c a5 dd ....L.|..B5.f\.. 0060 83 6a 55 21 5a c7 3e ed f9 8a 04 7f a5 32 c1 08 .jU!Z.>......2.. 0070 82 f2 9d f6 54 6e d4 15 0d e8 53 de 73 2d ee 93 ....Tn....S.s-.. 0080 ce 2b .+ Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:01:21.933364000 Time delta from previous packet: 0.995940000 seconds Time since reference or first frame: 2.631378000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:05:00:b8:00:e0 Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x920dc8e7 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfaca (64202) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x40e1 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.126 (165.227.249.126) Encapsulating Security Payload SPI: 0x08ad516e Sequence: 3 Data (84 bytes) 0000 00 05 00 b8 00 e0 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 70 fa ca 00 00 40 32 40 e1 a5 e3 f9 6a a5 e3 .p....@2@....j.. 0020 f9 7e 08 ad 51 6e 00 00 00 03 2f 6b fb 95 85 0b .~..Qn..../k.... 0030 52 5a f2 50 8b eb a3 57 19 4c f0 3f e7 c8 09 c2 RZ.P...W.L.?.... 0040 d0 88 12 77 1a aa 3b 38 63 8f ea 08 ee be 85 fb ...w..;8c....... 0050 0d 29 09 d7 e1 d4 68 6f b9 d9 bb 98 9a 3d 5e d5 .)....ho.....=^. 0060 84 1d 59 31 4e f6 9e 4b 0d 82 5e 47 d4 f4 c4 50 ..Y1N..K..^G...P 0070 f6 c6 e1 b3 37 69 b4 be 12 9b 1d a8 68 87 92 0d ....7i......h... 0080 c8 e7 .. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:01:21.937565000 Time delta from previous packet: 0.004201000 seconds Time since reference or first frame: 2.635579000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:05:00:b8:00:e0, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Type: IP (0x0800) Frame check sequence: 0x8468501d (correct) Internet Protocol, Src Addr: 165.227.249.126 (165.227.249.126), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0006 (6) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3ba6 (correct) Source: 165.227.249.126 (165.227.249.126) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x27bb3800 Sequence: 3 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 05 00 b8 00 e0 08 00 45 00 ...r.@........E. 0010 00 70 00 06 00 00 40 32 3b a6 a5 e3 f9 7e a5 e3 .p....@2;....~.. 0020 f9 6a 27 bb 38 00 00 00 00 03 04 7f a5 32 c1 08 .j'.8........2.. 0030 82 f2 aa 08 9f 27 66 87 8b dd 6f 15 56 f5 90 69 .....'f...o.V..i 0040 ba 6a 0e 51 6f 82 8e 11 9b 3c b0 44 fe df 58 5c .j.Qo....<.D..X\ 0050 52 4b 1f b2 b4 8f 1b 6e 51 a7 0b 57 85 ba 5c 28 RK.....nQ..W..\( 0060 79 f8 08 8a 05 26 9f 98 47 61 0a 6a 17 3b cf 34 y....&..Ga.j.;.4 0070 fa 6d 21 01 49 63 62 fd b7 4b c6 e7 f9 32 84 68 .m!.Icb..K...2.h 0080 50 1d P. Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:01:22.933422000 Time delta from previous packet: 0.995857000 seconds Time since reference or first frame: 3.631436000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:05:00:b8:00:e0 Destination: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x42f0197b (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfacb (64203) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x40e0 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.126 (165.227.249.126) Encapsulating Security Payload SPI: 0x08ad516e Sequence: 4 Data (84 bytes) 0000 00 05 00 b8 00 e0 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 70 fa cb 00 00 40 32 40 e0 a5 e3 f9 6a a5 e3 .p....@2@....j.. 0020 f9 7e 08 ad 51 6e 00 00 00 04 13 76 42 c2 89 d8 .~..Qn.....vB... 0030 18 39 97 6e 27 27 74 e4 10 94 3f 20 9f 05 0c 59 .9.n''t...? ...Y 0040 e9 fd a1 da 1c 04 73 4e 7e 87 f7 6c b0 80 58 9b ......sN~..l..X. 0050 be 3d bb 08 21 2f 3e 80 da ad eb b7 de 21 1b 02 .=..!/>......!.. 0060 a0 ea 8c a2 eb 05 f7 af 66 db f0 b9 16 1b 08 44 ........f......D 0070 74 ea 1c 6f e3 13 ed 2c 2b 76 8f 8d 19 8f 42 f0 t..o...,+v....B. 0080 19 7b .{ Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:01:22.937294000 Time delta from previous packet: 0.003872000 seconds Time since reference or first frame: 3.635308000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:05:00:b8:00:e0, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:05:00:b8:00:e0 (00:05:00:b8:00:e0) Type: IP (0x0800) Frame check sequence: 0x4e7207e8 (correct) Internet Protocol, Src Addr: 165.227.249.126 (165.227.249.126), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0007 (7) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3ba5 (correct) Source: 165.227.249.126 (165.227.249.126) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x27bb3800 Sequence: 4 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 05 00 b8 00 e0 08 00 45 00 ...r.@........E. 0010 00 70 00 07 00 00 40 32 3b a5 a5 e3 f9 7e a5 e3 .p....@2;....~.. 0020 f9 6a 27 bb 38 00 00 00 00 04 0a 6a 17 3b cf 34 .j'.8......j.;.4 0030 fa 6d 8a 47 bd 30 f3 a1 96 16 55 ed 66 f7 43 81 .m.G.0....U.f.C. 0040 f7 88 b9 31 06 57 93 7c 58 9b e2 b8 33 8b c0 d6 ...1.W.|X...3... 0050 dd 5f 99 4a c0 0d 3b cb 21 6a 59 90 07 ea ee 30 ._.J..;.!jY....0 0060 c6 61 35 32 61 94 f1 af f7 8a 02 c8 d1 b9 30 41 .a52a.........0A 0070 67 4d 11 60 85 cd eb 01 59 34 25 c1 ce f8 4e 72 gM.`....Y4%...Nr 0080 07 e8 ..