Frame 1 (142 bytes on wire, 142 bytes captured) Arrival Time: Oct 3, 2007 17:00:12.281684000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Destination: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x3e05 (15877) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfdb2 [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.131 (165.227.249.131) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0xdaa0 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x38913DEA989CF2E2 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 1b 2f 37 c7 b9 00 a0 8e 72 1e 40 08 00 45 00 ../7.....r.@..E. 0010 00 80 3e 05 00 00 40 11 fd b2 a5 e3 f9 6a a5 e3 ..>...@......j.. 0020 f9 83 01 f4 01 f4 00 6c da a0 38 91 3d ea 98 9c .......l..8.=... 0030 f2 e2 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 00 00 00 14 af ca ........p....... 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 2 (142 bytes on wire, 142 bytes captured) Arrival Time: Oct 3, 2007 17:00:12.593999000 Time delta from previous packet: 0.312315000 seconds Time since reference or first frame: 0.312315000 seconds Frame Number: 2 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbb7 [correct] Good: True Bad : False Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x9135 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x38913DEA989CF2E2 Responder cookie: 0x8CDE4218D991A0E2 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 a0 8e 72 1e 40 00 1b 2f 37 c7 b9 08 00 45 00 ...r.@../7....E. 0010 00 80 00 00 40 00 40 11 fb b7 a5 e3 f9 83 a5 e3 ....@.@......... 0020 f9 6a 01 f4 01 f4 00 6c 91 35 38 91 3d ea 98 9c .j.....l.58.=... 0030 f2 e2 8c de 42 18 d9 91 a0 e2 01 10 02 00 00 00 ....B........... 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 00 00 00 14 af ca ........p....... 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 3 (258 bytes on wire, 258 bytes captured) Arrival Time: Oct 3, 2007 17:00:12.716455000 Time delta from previous packet: 0.122456000 seconds Time since reference or first frame: 0.434771000 seconds Frame Number: 3 Packet Length: 258 bytes Capture Length: 258 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Destination: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0x3e06 (15878) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfd3d [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.131 (165.227.249.131) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0xa461 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x38913DEA989CF2E2 Responder cookie: 0x8CDE4218D991A0E2 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x030000143EACC9F90935EB40D6BFEA649C93FF4D00000008... 0000 00 1b 2f 37 c7 b9 00 a0 8e 72 1e 40 08 00 45 00 ../7.....r.@..E. 0010 00 f4 3e 06 00 00 40 11 fd 3d a5 e3 f9 6a a5 e3 ..>...@..=...j.. 0020 f9 83 01 f4 01 f4 00 e0 a4 61 38 91 3d ea 98 9c .........a8.=... 0030 f2 e2 8c de 42 18 d9 91 a0 e2 04 10 02 00 00 00 ....B........... 0040 00 00 00 00 00 d8 0a 00 00 84 b6 4c 3e 0d 4e 24 ...........L>.N$ 0050 c4 b5 2b 00 2f 57 1c 96 b8 fd 48 12 f1 1f 1f 91 ..+./W....H..... 0060 a0 29 cf ff 0b c7 e7 d0 40 07 55 46 96 2f dc 47 .)......@.UF./.G 0070 b0 ac 58 88 e5 92 b4 a0 49 09 d1 8a 72 6d 76 ec ..X.....I...rmv. 0080 d7 a4 88 82 2b a0 1f bd 8a 5d f6 6d a0 ec cf 96 ....+....].m.... 0090 d4 93 9d 8f b3 53 d7 bb 89 b0 d1 a4 93 bb a5 ed .....S.......... 00a0 7d 84 df f0 0f 39 03 c8 33 89 c5 8e 98 60 ba ef }....9..3....`.. 00b0 50 87 dc 78 e1 64 25 79 4c 64 4a 33 2c 03 aa 79 P..x.d%yLdJ3,..y 00c0 de 96 4b 95 c7 d6 28 d8 0d 14 0d 00 00 18 42 3a ..K...(.......B: 00d0 c6 91 f6 15 c1 30 fd fd 9b e0 9e f5 99 f0 55 d8 .....0........U. 00e0 0f a8 00 00 00 20 03 00 00 14 3e ac c9 f9 09 35 ..... ....>....5 00f0 eb 40 d6 bf ea 64 9c 93 ff 4d 00 00 00 08 00 06 .@...d...M...... 0100 00 03 .. Frame 4 (222 bytes on wire, 222 bytes captured) Arrival Time: Oct 3, 2007 17:00:13.011293000 Time delta from previous packet: 0.294838000 seconds Time since reference or first frame: 0.729609000 seconds Frame Number: 4 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb67 [correct] Good: True Bad : False Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xe92d [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x38913DEA989CF2E2 Responder cookie: 0x8CDE4218D991A0E2 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 a0 8e 72 1e 40 00 1b 2f 37 c7 b9 08 00 45 00 ...r.@../7....E. 0010 00 d0 00 00 40 00 40 11 fb 67 a5 e3 f9 83 a5 e3 ....@.@..g...... 0020 f9 6a 01 f4 01 f4 00 bc e9 2d 38 91 3d ea 98 9c .j.......-8.=... 0030 f2 e2 8c de 42 18 d9 91 a0 e2 04 10 02 00 00 00 ....B........... 0040 00 00 00 00 00 b4 0a 00 00 84 ac 25 35 38 2f 5d ...........%58/] 0050 d2 09 5d 11 d7 64 fc 08 09 67 a8 fb 84 8a b7 6f ..]..d...g.....o 0060 62 15 39 33 89 77 70 6c 62 1c 2b 58 8f 96 c5 1f b.93.wplb.+X.... 0070 fb f1 29 f4 2a c0 bc f2 0e 84 c9 97 9a 4c eb ad ..).*........L.. 0080 f8 74 82 8b e6 2a 3c a5 42 d3 d2 a9 3a 5f 1f 90 .t...*<.B...:_.. 0090 db 05 15 ec 4a 90 86 15 0a bf 59 14 3d 76 69 d7 ....J.....Y.=vi. 00a0 61 c8 12 79 d6 84 fb de 78 4f 0b aa 90 f8 12 db a..y....xO...... 00b0 5b 29 6d f0 65 7f a6 49 d6 86 dd f2 4b 25 9f b6 [)m.e..I....K%.. 00c0 fd cd 34 3a 45 b5 5e 44 37 28 00 00 00 14 e0 26 ..4:E.^D7(.....& 00d0 a1 98 23 50 cc 66 75 18 e6 6b 12 a6 e7 d4 ..#P.fu..k.... Frame 5 (134 bytes on wire, 134 bytes captured) Arrival Time: Oct 3, 2007 17:00:13.161658000 Time delta from previous packet: 0.150365000 seconds Time since reference or first frame: 0.879974000 seconds Frame Number: 5 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Destination: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x3e07 (15879) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfdb8 [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.131 (165.227.249.131) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x2509 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x38913DEA989CF2E2 Responder cookie: 0x8CDE4218D991A0E2 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 1b 2f 37 c7 b9 00 a0 8e 72 1e 40 08 00 45 00 ../7.....r.@..E. 0010 00 78 3e 07 00 00 40 11 fd b8 a5 e3 f9 6a a5 e3 .x>...@......j.. 0020 f9 83 01 f4 01 f4 00 64 25 09 38 91 3d ea 98 9c .......d%.8.=... 0030 f2 e2 8c de 42 18 d9 91 a0 e2 05 10 02 01 00 00 ....B........... 0040 00 00 00 00 00 5c 15 52 6c 75 cc 3c 58 fa 12 a4 .....\.Rlu....@......j.. 0020 f9 83 01 f4 01 f4 01 2c de cf 38 91 3d ea 98 9c .......,..8.=... 0030 f2 e2 8c de 42 18 d9 91 a0 e2 08 10 20 01 b1 d9 ....B....... ... 0040 6e 9b 00 00 01 24 cd 3b 06 43 63 e0 c0 17 d9 46 n....$.;.Cc....F 0050 b3 e1 a8 ee 63 65 f8 f6 a9 40 33 d7 00 f1 44 fb ....ce...@3...D. 0060 76 8c 8a de 5c 3e eb cd e7 01 66 29 9f 49 ba 9f v...\>....f).I.. 0070 9a 85 0a 3c a6 af 28 74 a9 f4 a3 79 6c e1 e5 c4 ...<..(t...yl... 0080 b8 0f fa 2c fd 30 d7 64 8b 02 95 ba 11 b7 3d 0b ...,.0.d......=. 0090 80 f9 65 a7 8f 0c 7e 1e 71 5e 44 e6 b7 52 e1 58 ..e...~.q^D..R.X 00a0 8c 7b c0 24 e1 3f df 20 1b 8b 94 f2 20 f4 2d c5 .{.$.?. .... .-. 00b0 1b 6f 75 da 91 32 55 90 7b 55 c2 cc 5c 00 f9 cf .ou..2U.{U..\... 00c0 b4 24 d4 b2 a1 33 d6 2f 2a 44 d5 2e 35 11 14 a3 .$...3./*D..5... 00d0 45 7c 79 38 cb 60 03 20 81 f3 8b b2 32 e0 d6 12 E|y8.`. ....2... 00e0 7e d6 db 59 39 67 98 e7 60 05 14 b5 ce c4 9a 9e ~..Y9g..`....... 00f0 36 91 d6 89 a6 2f aa 26 b7 b2 fc fe fa 98 9c ec 6..../.&........ 0100 e9 03 ea 49 75 6c a0 d5 ed de f6 b5 63 fd d7 12 ...Iul......c... 0110 61 47 3a b9 35 03 bd ea fd a7 85 75 86 5b 3e 47 aG:.5......u.[>G 0120 c5 df 6f 33 bc bc 59 f3 8c f5 b1 d2 3f 76 9d 2d ..o3..Y.....?v.- 0130 17 ae b9 9e ec 0c cd 48 b8 ea 07 3d 45 87 40 5e .......H...=E.@^ 0140 67 ad 0d ad c3 11 47 89 2b 53 0b f1 d3 ea g.....G.+S.... Frame 8 (334 bytes on wire, 334 bytes captured) Arrival Time: Oct 3, 2007 17:00:13.767698000 Time delta from previous packet: 0.373195000 seconds Time since reference or first frame: 1.486014000 seconds Frame Number: 8 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfaf7 [correct] Good: True Bad : False Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x5acf [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x38913DEA989CF2E2 Responder cookie: 0x8CDE4218D991A0E2 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB1D96E9B Length: 292 Encrypted payload (264 bytes) 0000 00 a0 8e 72 1e 40 00 1b 2f 37 c7 b9 08 00 45 00 ...r.@../7....E. 0010 01 40 00 00 40 00 40 11 fa f7 a5 e3 f9 83 a5 e3 .@..@.@......... 0020 f9 6a 01 f4 01 f4 01 2c 5a cf 38 91 3d ea 98 9c .j.....,Z.8.=... 0030 f2 e2 8c de 42 18 d9 91 a0 e2 08 10 20 01 b1 d9 ....B....... ... 0040 6e 9b 00 00 01 24 2d 8a 4b b0 a2 9d 42 4b a5 f5 n....$-.K...BK.. 0050 5f 1e b5 5c 09 ee 88 68 1f 6f 0a 28 e4 5e 37 19 _..\...h.o.(.^7. 0060 d0 78 0f af 7c ec 49 b3 c0 96 f4 d1 2c 66 0d de .x..|.I.....,f.. 0070 d9 d8 65 46 43 30 e2 ed 1f c6 fc 13 9a f0 eb 0d ..eFC0.......... 0080 11 5e 9a 96 67 11 56 b8 ac f7 03 08 d1 a2 a5 ed .^..g.V......... 0090 a2 62 88 06 f9 99 1f 0f ee 89 5d 58 ed 02 7a ae .b........]X..z. 00a0 ee a0 0f d8 be f9 1b 7d 5d a0 e3 75 fb 8b d0 a8 .......}]..u.... 00b0 59 29 25 f6 36 03 bb cc 68 a5 cd 0d ba e2 ad c9 Y)%.6...h....... 00c0 be e9 69 ae c2 c1 0e 3b ed a0 37 3a c4 dc 50 21 ..i....;..7:..P! 00d0 23 92 53 18 b2 71 23 45 49 30 16 a7 1f 29 ce 5d #.S..q#EI0...).] 00e0 47 9a ee 1d 3b 55 c6 dd 18 04 2e aa 9a 3a 1b 66 G...;U.......:.f 00f0 c8 40 8c a2 c1 d6 d0 16 eb f1 65 95 95 6a 1e 5c .@........e..j.\ 0100 10 f3 ba c3 80 89 6c bd e1 1b 55 4d 9c 17 2d fd ......l...UM..-. 0110 f5 59 65 09 13 f2 ca 85 e4 1a 1e f9 a7 29 d6 40 .Ye..........).@ 0120 b0 e8 d3 8e af 09 e2 04 78 14 c7 3b c3 81 aa 5d ........x..;...] 0130 fb dd e8 b4 84 95 20 f4 1f c8 d0 c4 bd e9 11 0b ...... ......... 0140 26 78 97 8d f8 e9 a9 45 05 a8 af 0b 3e 7c &x.....E....>| Frame 9 (94 bytes on wire, 94 bytes captured) Arrival Time: Oct 3, 2007 17:00:13.928279000 Time delta from previous packet: 0.160581000 seconds Time since reference or first frame: 1.646595000 seconds Frame Number: 9 Packet Length: 94 bytes Capture Length: 94 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Destination: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x3e09 (15881) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfdde [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.131 (165.227.249.131) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0xe328 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x38913DEA989CF2E2 Responder cookie: 0x8CDE4218D991A0E2 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB1D96E9B Length: 52 Encrypted payload (24 bytes) 0000 00 1b 2f 37 c7 b9 00 a0 8e 72 1e 40 08 00 45 00 ../7.....r.@..E. 0010 00 50 3e 09 00 00 40 11 fd de a5 e3 f9 6a a5 e3 .P>...@......j.. 0020 f9 83 01 f4 01 f4 00 3c e3 28 38 91 3d ea 98 9c .......<.(8.=... 0030 f2 e2 8c de 42 18 d9 91 a0 e2 08 10 20 01 b1 d9 ....B....... ... 0040 6e 9b 00 00 00 34 42 fd 99 d7 72 7f 9f ae e2 01 n....4B...r..... 0050 15 07 7f 09 77 37 1d f6 5c 15 cb 39 23 fd ....w7..\..9#. Frame 10 (126 bytes on wire, 126 bytes captured) Arrival Time: Oct 3, 2007 17:00:14.459346000 Time delta from previous packet: 0.531067000 seconds Time since reference or first frame: 2.177662000 seconds Frame Number: 10 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Destination: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x3e0a (15882) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xfd9c [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.131 (165.227.249.131) Encapsulating Security Payload SPI: 0x981a6cd4 Sequence: 1 Data (84 bytes) 0000 00 1b 2f 37 c7 b9 00 a0 8e 72 1e 40 08 00 45 00 ../7.....r.@..E. 0010 00 70 3e 0a 00 00 40 32 fd 9c a5 e3 f9 6a a5 e3 .p>...@2.....j.. 0020 f9 83 98 1a 6c d4 00 00 00 01 03 0c 5a ab 1d 92 ....l.......Z... 0030 14 20 cb eb 7f 08 69 69 3b 17 06 4a af 4a 39 ed . ....ii;..J.J9. 0040 9b 6c c6 53 f7 b3 98 97 03 5d 4b c2 b8 2f bd 6e .l.S.....]K../.n 0050 5b 0b a3 18 69 62 71 76 78 ae 0e 52 c3 d4 34 2d [...ibqvx..R..4- 0060 db fd 8a 76 fa e2 e6 fc 1f 53 34 8a d2 3e 16 f1 ...v.....S4..>.. 0070 af 48 e3 49 8b 13 b9 d0 96 31 75 7b 74 f0 .H.I.....1u{t. Frame 11 (126 bytes on wire, 126 bytes captured) Arrival Time: Oct 3, 2007 17:00:14.575830000 Time delta from previous packet: 0.116484000 seconds Time since reference or first frame: 2.294146000 seconds Frame Number: 11 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x35ca (13770) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x05dd [correct] Good: True Bad : False Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x2472dc00 Sequence: 1 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 1b 2f 37 c7 b9 08 00 45 00 ...r.@../7....E. 0010 00 70 35 ca 00 00 40 32 05 dd a5 e3 f9 83 a5 e3 .p5...@2........ 0020 f9 6a 24 72 dc 00 00 00 00 01 43 e2 f1 d7 45 e0 .j$r......C...E. 0030 e9 50 4f 7e 74 e6 94 a4 94 30 cd af 8c ec c3 7e .PO~t....0.....~ 0040 a9 db c8 b1 67 9d 62 0c f5 cc b8 99 7b 3b 34 00 ....g.b.....{;4. 0050 22 ff 28 9a fb db 3c 5b a1 6e 20 41 ce b6 42 65 ".(...<[.n A..Be 0060 78 1c 38 db 6b d4 73 04 0f dc c7 4d be c3 14 0d x.8.k.s....M.... 0070 a4 ca 61 3a 75 5f 90 3b 40 8c db b8 f9 41 ..a:u_.;@....A Frame 12 (126 bytes on wire, 126 bytes captured) Arrival Time: Oct 3, 2007 17:00:14.581997000 Time delta from previous packet: 0.006167000 seconds Time since reference or first frame: 2.300313000 seconds Frame Number: 12 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Destination: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x3e0b (15883) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xfd9b [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.131 (165.227.249.131) Encapsulating Security Payload SPI: 0x981a6cd4 Sequence: 2 Data (84 bytes) 0000 00 1b 2f 37 c7 b9 00 a0 8e 72 1e 40 08 00 45 00 ../7.....r.@..E. 0010 00 70 3e 0b 00 00 40 32 fd 9b a5 e3 f9 6a a5 e3 .p>...@2.....j.. 0020 f9 83 98 1a 6c d4 00 00 00 02 6e 93 cc e5 1a 07 ....l.....n..... 0030 71 29 41 f5 ec ca 67 b2 e2 bf 03 08 d9 6d 5a ad q)A...g......mZ. 0040 e6 3d e6 8b 93 85 61 61 7c 4d cd 6b 55 b3 d3 74 .=....aa|M.kU..t 0050 43 9a 20 5e 15 f2 bb 53 b3 63 ae c1 fc 64 57 9d C. ^...S.c...dW. 0060 e0 f4 93 cc af 23 cc 48 c7 3f 13 51 c9 5b 87 cb .....#.H.?.Q.[.. 0070 b9 f3 f9 ca 8d 64 ea ca c4 24 4f ca 09 e4 .....d...$O... Frame 13 (126 bytes on wire, 126 bytes captured) Arrival Time: Oct 3, 2007 17:00:14.708140000 Time delta from previous packet: 0.126143000 seconds Time since reference or first frame: 2.426456000 seconds Frame Number: 13 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x35cb (13771) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x05dc [correct] Good: True Bad : False Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x2472dc00 Sequence: 2 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 1b 2f 37 c7 b9 08 00 45 00 ...r.@../7....E. 0010 00 70 35 cb 00 00 40 32 05 dc a5 e3 f9 83 a5 e3 .p5...@2........ 0020 f9 6a 24 72 dc 00 00 00 00 02 c7 4d be c3 14 0d .j$r.......M.... 0030 a4 ca bb da e7 0e a9 5a 22 5f 73 c1 b3 0c a1 99 .......Z"_s..... 0040 c8 6d 81 8f dc 88 29 d0 1d b3 ce c0 cd 4b 0d 3d .m....)......K.= 0050 d1 5f e9 5c 8a d3 91 58 59 ef 92 42 e0 e6 a0 99 ._.\...XY..B.... 0060 85 f5 26 9d 04 14 ef 70 14 75 54 37 4f 39 ff da ..&....p.uT7O9.. 0070 d7 6f d0 89 a8 70 ee ad 45 66 a9 7c ec 6a .o...p..Ef.|.j Frame 14 (126 bytes on wire, 126 bytes captured) Arrival Time: Oct 3, 2007 17:00:15.542497000 Time delta from previous packet: 0.834357000 seconds Time since reference or first frame: 3.260813000 seconds Frame Number: 14 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Destination: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x3e0c (15884) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xfd9a [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.131 (165.227.249.131) Encapsulating Security Payload SPI: 0x981a6cd4 Sequence: 3 Data (84 bytes) 0000 00 1b 2f 37 c7 b9 00 a0 8e 72 1e 40 08 00 45 00 ../7.....r.@..E. 0010 00 70 3e 0c 00 00 40 32 fd 9a a5 e3 f9 6a a5 e3 .p>...@2.....j.. 0020 f9 83 98 1a 6c d4 00 00 00 03 31 87 55 a8 ff a1 ....l.....1.U... 0030 08 2c 02 43 90 6b 67 ef 0c f9 bc 45 5d d3 24 9d .,.C.kg....E].$. 0040 99 45 5c 00 15 20 48 d5 96 06 f3 62 f7 04 1d 7b .E\.. H....b...{ 0050 e1 b7 ff cd ec b0 32 f3 03 f1 1e b1 63 7b 61 28 ......2.....c{a( 0060 f2 89 74 5c 84 f0 2e 66 c9 fa af 99 bc 41 42 d8 ..t\...f.....AB. 0070 a0 fe 30 68 d2 47 65 b9 8f bb d3 56 a4 7c ..0h.Ge....V.| Frame 15 (126 bytes on wire, 126 bytes captured) Arrival Time: Oct 3, 2007 17:00:15.660324000 Time delta from previous packet: 0.117827000 seconds Time since reference or first frame: 3.378640000 seconds Frame Number: 15 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x35cc (13772) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x05db [correct] Good: True Bad : False Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x2472dc00 Sequence: 3 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 1b 2f 37 c7 b9 08 00 45 00 ...r.@../7....E. 0010 00 70 35 cc 00 00 40 32 05 db a5 e3 f9 83 a5 e3 .p5...@2........ 0020 f9 6a 24 72 dc 00 00 00 00 03 54 37 4f 39 ff da .j$r......T7O9.. 0030 d7 6f 4e b2 69 dc 4b d3 1b 88 5a c1 aa 5b 83 85 .oN.i.K...Z..[.. 0040 52 2e 67 12 db f8 b3 e0 64 c1 d7 3b 9d 1f 4a 19 R.g.....d..;..J. 0050 21 d6 63 24 e5 f6 75 10 dd 1d 5f 64 8f 56 40 81 !.c$..u..._d.V@. 0060 06 24 fd 17 e8 a6 f5 dc 8e 8b 51 22 78 c8 53 9a .$........Q"x.S. 0070 c7 9c 6c 50 45 81 49 53 90 85 5c f9 d5 d5 ..lPE.IS..\... Frame 16 (126 bytes on wire, 126 bytes captured) Arrival Time: Oct 3, 2007 17:00:16.502793000 Time delta from previous packet: 0.842469000 seconds Time since reference or first frame: 4.221109000 seconds Frame Number: 16 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Destination: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x3e0d (15885) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xfd99 [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.131 (165.227.249.131) Encapsulating Security Payload SPI: 0x981a6cd4 Sequence: 4 Data (84 bytes) 0000 00 1b 2f 37 c7 b9 00 a0 8e 72 1e 40 08 00 45 00 ../7.....r.@..E. 0010 00 70 3e 0d 00 00 40 32 fd 99 a5 e3 f9 6a a5 e3 .p>...@2.....j.. 0020 f9 83 98 1a 6c d4 00 00 00 04 17 31 72 3a bb 49 ....l......1r:.I 0030 42 2f e2 f4 55 c1 e0 45 db bf 43 4b 27 d6 99 93 B/..U..E..CK'... 0040 77 f8 e8 03 67 c2 5b 9b 8d 61 30 e1 e8 78 ab eb w...g.[..a0..x.. 0050 14 5b ee b6 ef 08 2a 23 3f 31 e8 fd d3 94 e4 0c .[....*#?1...... 0060 65 82 9b b8 ae 20 00 3d a7 13 48 02 cb 7b da 57 e.... .=..H..{.W 0070 59 8b f5 33 29 cb 72 b2 ff 62 5d c3 62 2d Y..3).r..b].b- Frame 17 (126 bytes on wire, 126 bytes captured) Arrival Time: Oct 3, 2007 17:00:16.674067000 Time delta from previous packet: 0.171274000 seconds Time since reference or first frame: 4.392383000 seconds Frame Number: 17 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x35cd (13773) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x05da [correct] Good: True Bad : False Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x2472dc00 Sequence: 4 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 1b 2f 37 c7 b9 08 00 45 00 ...r.@../7....E. 0010 00 70 35 cd 00 00 40 32 05 da a5 e3 f9 83 a5 e3 .p5...@2........ 0020 f9 6a 24 72 dc 00 00 00 00 04 51 22 78 c8 53 9a .j$r......Q"x.S. 0030 c7 9c 6e a3 68 2c bf a1 03 5d af f7 49 23 73 f1 ..n.h,...]..I#s. 0040 ee af 5b 07 49 52 a2 24 7e 3b 55 f8 8d 8c d8 d2 ..[.IR.$~;U..... 0050 5d 6e c3 92 f0 b4 dc 42 3b 11 64 61 37 99 98 a3 ]n.....B;.da7... 0060 89 dc 3c 82 56 11 2b 12 8b 31 49 09 f1 10 cc 16 ..<.V.+..1I..... 0070 da 62 aa f0 c9 1e 4a 01 e1 b6 eb 01 4b 61 .b....J.....Ka