Frame 1 (126 bytes on wire, 126 bytes captured) Arrival Time: May 19, 2005 16:05:50.348689000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xd9ee9d82 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x16ab (5803) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x251e (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x42a1 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1B1151617E0018F9 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 01 02 46 6a 04 00 a0 8e 72 1e 40 08 00 45 00 ...Fj....r.@..E. 0010 00 6c 16 ab 00 00 40 11 25 1e a5 e3 f9 6a a5 e3 .l....@.%....j.. 0020 f9 86 01 f4 01 f4 00 58 42 a1 1b 11 51 61 7e 00 .......XB...Qa~. 0030 18 f9 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 d9 ee 9d 82 ........p..... Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: May 19, 2005 16:05:50.672930000 Time delta from previous packet: 0.324241000 seconds Time since reference or first frame: 0.324241000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0x5b16fe7c (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x0032 (50) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b97 (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x1a0c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1B1151617E0018F9 Responder cookie: 0x24760F3476DF7E0B Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 a0 8e 72 1e 40 00 01 02 46 6a 04 08 00 45 00 ...r.@...Fj...E. 0010 00 6c 00 32 00 00 40 11 3b 97 a5 e3 f9 86 a5 e3 .l.2..@.;....... 0020 f9 6a 01 f4 01 f4 00 58 1a 0c 1b 11 51 61 7e 00 .j.....X....Qa~. 0030 18 f9 24 76 0f 34 76 df 7e 0b 01 10 02 00 00 00 ..$v.4v.~....... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 5b 16 fe 7c ........p.[..| Frame 3 (262 bytes on wire, 262 bytes captured) Arrival Time: May 19, 2005 16:05:50.797087000 Time delta from previous packet: 0.124157000 seconds Time since reference or first frame: 0.448398000 seconds Frame Number: 3 Packet Length: 262 bytes Capture Length: 262 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xda78192c (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0x16ac (5804) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2495 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0x8067 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1B1151617E0018F9 Responder cookie: 0x24760F3476DF7E0B Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x030000141D2CA572EFA9015B7E17A748... 0000 00 01 02 46 6a 04 00 a0 8e 72 1e 40 08 00 45 00 ...Fj....r.@..E. 0010 00 f4 16 ac 00 00 40 11 24 95 a5 e3 f9 6a a5 e3 ......@.$....j.. 0020 f9 86 01 f4 01 f4 00 e0 80 67 1b 11 51 61 7e 00 .........g..Qa~. 0030 18 f9 24 76 0f 34 76 df 7e 0b 04 10 02 00 00 00 ..$v.4v.~....... 0040 00 00 00 00 00 d8 0a 00 00 84 15 5a 82 44 60 0f ...........Z.D`. 0050 7c 9f 03 3d fb 41 83 21 4a 2c c0 d3 cf b9 7c be |..=.A.!J,....|. 0060 07 2c fd f3 46 77 6a 55 3b 1c 7a 5f 28 a6 85 89 .,..FwjU;.z_(... 0070 b0 01 cb cc 35 39 d6 1d ad 6f dd af 7f 7b 1d cb ....59...o...{.. 0080 82 ce 22 39 3d 49 c1 ee c0 0c 74 47 21 45 e4 ca .."9=I....tG!E.. 0090 fd 05 d2 01 45 85 2b 44 22 a9 8e dd 90 6e 81 94 ....E.+D"....n.. 00a0 69 c7 50 e2 ad 6c 21 e3 c3 56 ea 50 e7 43 a9 c3 i.P..l!..V.P.C.. 00b0 85 ce 78 92 04 49 d8 89 2a a0 1c 03 b4 db 12 50 ..x..I..*......P 00c0 ad b4 f9 61 91 c6 b8 d1 d2 f3 0d 00 00 18 da 71 ...a...........q 00d0 02 3b 90 1b 2b 5e 0d 17 5a d0 ee d3 b9 55 e9 33 .;..+^..Z....U.3 00e0 be 94 00 00 00 20 03 00 00 14 1d 2c a5 72 ef a9 ..... .....,.r.. 00f0 01 5b 7e 17 a7 48 33 dd 21 a4 00 00 00 08 00 06 .[~..H3.!....... 0100 00 02 da 78 19 2c ...x., Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: May 19, 2005 16:05:51.059309000 Time delta from previous packet: 0.262222000 seconds Time since reference or first frame: 0.710620000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0x3cb144aa (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0034 (52) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b31 (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x135d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1B1151617E0018F9 Responder cookie: 0x24760F3476DF7E0B Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 a0 8e 72 1e 40 00 01 02 46 6a 04 08 00 45 00 ...r.@...Fj...E. 0010 00 d0 00 34 00 00 40 11 3b 31 a5 e3 f9 86 a5 e3 ...4..@.;1...... 0020 f9 6a 01 f4 01 f4 00 bc 13 5d 1b 11 51 61 7e 00 .j.......]..Qa~. 0030 18 f9 24 76 0f 34 76 df 7e 0b 04 10 02 00 00 00 ..$v.4v.~....... 0040 00 00 00 00 00 b4 0a 00 00 84 41 96 fb c6 06 3a ..........A....: 0050 de 3a ca 0f 74 9c 59 ec 5b 2d b0 1b 3b 0b 83 ba .:..t.Y.[-..;... 0060 99 4f 7f 34 19 ba c0 90 66 1f e1 fc 77 01 e3 1a .O.4....f...w... 0070 ec 70 78 bc d5 f1 89 c7 03 15 46 f3 f9 80 50 2c .px.......F...P, 0080 2a fa b2 52 27 5a 6f 56 57 7f d1 bc 1b 68 71 41 *..R'ZoVW....hqA 0090 c2 e1 2e 07 23 1e ed f1 5a 5b a2 59 83 83 ea 60 ....#...Z[.Y...` 00a0 55 b4 18 60 5f 3a fd 42 16 d6 1f bb ed 4c 8c ab U..`_:.B.....L.. 00b0 38 aa 62 9c e8 67 ff 6e 8a 8e 10 67 cc 3d 32 88 8.b..g.n...g.=2. 00c0 19 be 2c 28 ad 07 75 2f ca 0f 00 00 00 14 c6 1d ..,(..u/........ 00d0 da 3b fb c8 7d 64 ba d7 e3 0d a7 fb 38 fe 3c b1 .;..}d......8.<. 00e0 44 aa D. Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: May 19, 2005 16:05:51.211418000 Time delta from previous packet: 0.152109000 seconds Time since reference or first frame: 0.862729000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x339ce4ca (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x16ad (5805) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2510 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xf98c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1B1151617E0018F9 Responder cookie: 0x24760F3476DF7E0B Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 01 02 46 6a 04 00 a0 8e 72 1e 40 08 00 45 00 ...Fj....r.@..E. 0010 00 78 16 ad 00 00 40 11 25 10 a5 e3 f9 6a a5 e3 .x....@.%....j.. 0020 f9 86 01 f4 01 f4 00 64 f9 8c 1b 11 51 61 7e 00 .......d....Qa~. 0030 18 f9 24 76 0f 34 76 df 7e 0b 05 10 02 01 00 00 ..$v.4v.~....... 0040 00 00 00 00 00 5c 35 7d e6 08 82 13 36 98 d0 27 .....\5}....6..' 0050 a5 a4 ce dc a5 9d ac f6 8f 22 53 48 d9 4f 8b a1 ........."SH.O.. 0060 85 1d b0 0d 19 8f f8 b7 4f f9 c5 4c c9 d2 34 cf ........O..L..4. 0070 2e 44 e0 1d 21 ca 37 30 a0 d2 44 17 97 1f 9c fe .D..!.70..D..... 0080 21 32 3e 49 a1 84 33 9c e4 ca !2>I..3... Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: May 19, 2005 16:05:51.236956000 Time delta from previous packet: 0.025538000 seconds Time since reference or first frame: 0.888267000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0x5f059dca (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0036 (54) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b9f (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x77b7 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1B1151617E0018F9 Responder cookie: 0x24760F3476DF7E0B Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 a0 8e 72 1e 40 00 01 02 46 6a 04 08 00 45 00 ...r.@...Fj...E. 0010 00 60 00 36 00 00 40 11 3b 9f a5 e3 f9 86 a5 e3 .`.6..@.;....... 0020 f9 6a 01 f4 01 f4 00 4c 77 b7 1b 11 51 61 7e 00 .j.....Lw...Qa~. 0030 18 f9 24 76 0f 34 76 df 7e 0b 05 10 02 01 00 00 ..$v.4v.~....... 0040 00 00 00 00 00 44 26 f2 60 17 c4 11 6d a2 3d 3e .....D&.`...m.=> 0050 db ca 7f 1d 14 c8 62 fc f9 b3 e3 ea ca 25 5e 62 ......b......%^b 0060 84 69 15 3a ea 67 88 13 9e 76 db 51 bc f0 5f 05 .i.:.g...v.Q.._. 0070 9d ca .. Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: May 19, 2005 16:05:51.364238000 Time delta from previous packet: 0.127282000 seconds Time since reference or first frame: 1.015549000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xeb8cb058 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x16ae (5806) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2447 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x92c8 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1B1151617E0018F9 Responder cookie: 0x24760F3476DF7E0B Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x1734CCAB Length: 292 Encrypted payload (264 bytes) 0000 00 01 02 46 6a 04 00 a0 8e 72 1e 40 08 00 45 00 ...Fj....r.@..E. 0010 01 40 16 ae 00 00 40 11 24 47 a5 e3 f9 6a a5 e3 .@....@.$G...j.. 0020 f9 86 01 f4 01 f4 01 2c 92 c8 1b 11 51 61 7e 00 .......,....Qa~. 0030 18 f9 24 76 0f 34 76 df 7e 0b 08 10 20 01 17 34 ..$v.4v.~... ..4 0040 cc ab 00 00 01 24 26 dd 65 e0 3c 54 64 7e 50 4e .....$&.e. 0080 27 7d ec 3a 7a be bd fc 88 de 8d d9 f3 f4 09 0a '}.:z........... 0090 3c fb 14 7b cc 7c c4 7f d6 b7 2a 5f dc 56 4e ce <..{.|....*_.VN. 00a0 ae 8a e7 fe f2 01 8e 24 12 a2 b7 aa f1 bd c3 db .......$........ 00b0 ed 0c 12 e5 af 2c ad 43 5e 70 7c 4c 57 6b 28 bf .....,.C^p|LWk(. 00c0 ec 29 4a 8e 45 db a0 30 72 ea a0 73 d2 99 ca 07 .)J.E..0r..s.... 00d0 9f ab ed ee 77 35 22 d0 b7 dc 11 bc c6 0d 4a 2f ....w5".......J/ 00e0 89 00 e0 5d 6b 78 b3 87 fd 09 ad 8d b1 ce b4 b3 ...]kx.......... 00f0 18 6d a3 eb d0 6b b3 ad b2 b1 43 ce db 59 ee fe .m...k....C..Y.. 0100 07 c5 27 88 2b 25 7a 03 f3 98 8a 6b e5 9f e9 92 ..'.+%z....k.... 0110 21 4b 53 72 5e c4 b7 d4 b8 3b 22 c6 4b 7e 80 59 !KSr^....;".K~.Y 0120 4b 97 58 54 c1 a6 23 60 19 5d 67 15 d8 5c f9 76 K.XT..#`.]g..\.v 0130 ac 5a 21 8c 33 50 b2 f8 c2 94 3c f5 8c 30 b6 c2 .Z!.3P....<..0.. 0140 33 08 c2 ad e0 9d 6e 16 1f 4e ae f3 0f 3a eb 8c 3.....n..N...:.. 0150 b0 58 .X Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: May 19, 2005 16:05:51.907477000 Time delta from previous packet: 0.543239000 seconds Time since reference or first frame: 1.558788000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0xda4c41ac (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0038 (56) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3abd (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xe91d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1B1151617E0018F9 Responder cookie: 0x24760F3476DF7E0B Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x1734CCAB Length: 292 Encrypted payload (264 bytes) 0000 00 a0 8e 72 1e 40 00 01 02 46 6a 04 08 00 45 00 ...r.@...Fj...E. 0010 01 40 00 38 00 00 40 11 3a bd a5 e3 f9 86 a5 e3 .@.8..@.:....... 0020 f9 6a 01 f4 01 f4 01 2c e9 1d 1b 11 51 61 7e 00 .j.....,....Qa~. 0030 18 f9 24 76 0f 34 76 df 7e 0b 08 10 20 01 17 34 ..$v.4v.~... ..4 0040 cc ab 00 00 01 24 b1 4d 24 19 79 26 65 f4 9d 40 .....$.M$.y&e..@ 0050 28 21 4d 9f 08 07 75 96 0e 4d 6b ae 8c be 43 2c (!M...u..Mk...C, 0060 4e 95 c0 4e 34 4d ab f1 7f bc 45 ef 4e 9c de e5 N..N4M....E.N... 0070 c4 37 9a eb db aa 42 0f 89 6c 13 1d 61 26 88 85 .7....B..l..a&.. 0080 e6 85 c9 14 3f 17 1c c1 b0 77 2a b6 ed 0c 57 cd ....?....w*...W. 0090 99 e8 b6 e5 e6 5a 35 d8 7b 9d 77 fb e8 b1 bf fc .....Z5.{.w..... 00a0 29 6a 5e 61 92 e8 41 b8 c9 9e a4 f3 17 d0 d4 44 )j^a..A........D 00b0 78 31 f8 d1 86 d8 44 4c f7 f4 78 e2 87 37 96 cc x1....DL..x..7.. 00c0 74 09 ae 66 29 11 44 eb f3 11 34 4c 07 ab 50 a2 t..f).D...4L..P. 00d0 c0 e2 d7 cb fe da 29 4a f9 b2 ce ab b8 a9 c3 52 ......)J.......R 00e0 47 46 63 7f 7f e6 c4 45 ed 3a 93 65 ba 16 24 45 GFc....E.:.e..$E 00f0 10 87 c4 0f 1a c8 f0 a0 a2 89 78 9e 01 70 a0 27 ..........x..p.' 0100 e4 1f b1 ae 99 e7 99 6e b3 6f 7d 6e 0a 8c d4 0d .......n.o}n.... 0110 de 5a fb c0 f6 8c e4 a7 ee d0 27 73 b3 6f 11 55 .Z........'s.o.U 0120 5a fa 2e 49 5f 71 3b 0e 67 fa e6 d0 aa ec 12 da Z..I_q;.g....... 0130 84 d8 e9 b0 2d dc 06 2b 92 85 ec 1a c6 5b 26 8f ....-..+.....[&. 0140 96 a0 37 0a 73 81 8d 01 53 c8 9b 64 08 c4 da 4c ..7.s...S..d...L 0150 41 ac A. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: May 19, 2005 16:05:52.067882000 Time delta from previous packet: 0.160405000 seconds Time since reference or first frame: 1.719193000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xddffda27 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x16af (5807) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2536 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0xcf20 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1B1151617E0018F9 Responder cookie: 0x24760F3476DF7E0B Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x1734CCAB Length: 52 Encrypted payload (24 bytes) 0000 00 01 02 46 6a 04 00 a0 8e 72 1e 40 08 00 45 00 ...Fj....r.@..E. 0010 00 50 16 af 00 00 40 11 25 36 a5 e3 f9 6a a5 e3 .P....@.%6...j.. 0020 f9 86 01 f4 01 f4 00 3c cf 20 1b 11 51 61 7e 00 .......<. ..Qa~. 0030 18 f9 24 76 0f 34 76 df 7e 0b 08 10 20 01 17 34 ..$v.4v.~... ..4 0040 cc ab 00 00 00 34 df 03 ed 73 b9 34 e5 a1 e3 3e .....4...s.4...> 0050 77 69 fa 80 43 ad f0 43 a6 c5 3d c0 dc 9f dd ff wi..C..C..=..... 0060 da 27 .' Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 16:05:52.574533000 Time delta from previous packet: 0.506651000 seconds Time since reference or first frame: 2.225844000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xe2b27aa4 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x16b0 (5808) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x24f4 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x00002d16 Sequence: 1 Data (84 bytes) 0000 00 01 02 46 6a 04 00 a0 8e 72 1e 40 08 00 45 00 ...Fj....r.@..E. 0010 00 70 16 b0 00 00 40 32 24 f4 a5 e3 f9 6a a5 e3 .p....@2$....j.. 0020 f9 86 00 00 2d 16 00 00 00 01 4b e0 bc f9 5a a6 ....-.....K...Z. 0030 96 0f 6b 5e 11 e0 8a 06 ef 44 c1 67 74 1b ed 4e ..k^.....D.gt..N 0040 84 da dd 8c 6d 2a fb cf 30 4b 4e bd b8 89 3f e6 ....m*..0KN...?. 0050 dc 9f 41 21 fe db 4e 56 22 8c cf 33 d6 da ba 87 ..A!..NV"..3.... 0060 d1 ff 3c 17 b7 ec 53 14 b8 05 f4 59 33 12 2d 9e ..<...S....Y3.-. 0070 01 35 c2 a6 e0 19 d8 51 e1 76 cd 62 e6 31 e2 b2 .5.....Q.v.b.1.. 0080 7a a4 z. Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 16:05:55.677504000 Time delta from previous packet: 3.102971000 seconds Time since reference or first frame: 5.328815000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x849587ff (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x16b1 (5809) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x24f3 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x00002d16 Sequence: 2 Data (84 bytes) 0000 00 01 02 46 6a 04 00 a0 8e 72 1e 40 08 00 45 00 ...Fj....r.@..E. 0010 00 70 16 b1 00 00 40 32 24 f3 a5 e3 f9 6a a5 e3 .p....@2$....j.. 0020 f9 86 00 00 2d 16 00 00 00 02 1a d1 67 4d fc fd ....-.......gM.. 0030 d4 29 23 0c ad 88 c7 ed ac 77 e8 2d 4e 8c 85 11 .)#......w.-N... 0040 7f ff 81 a3 d3 4d 02 9d c4 40 57 19 e4 21 20 5c .....M...@W..! \ 0050 8f 27 74 2f 5f 5d 8e d9 3e 52 a2 9b c8 b6 1a 53 .'t/_]..>R.....S 0060 ee 75 0a 1e 08 57 be ae dc f1 f6 52 cb de 22 6e .u...W.....R.."n 0070 23 1e 7d f7 bf 3d eb c6 57 fe a1 c1 0f 68 84 95 #.}..=..W....h.. 0080 87 ff .. Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 16:05:55.678664000 Time delta from previous packet: 0.001160000 seconds Time since reference or first frame: 5.329975000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0x9afb7347 (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x003a (58) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: ESP (0x32) Header checksum: 0x5b6a (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0xd536d800 Sequence: 1 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 01 02 46 6a 04 08 00 45 00 ...r.@...Fj...E. 0010 00 70 00 3a 00 00 20 32 5b 6a a5 e3 f9 86 a5 e3 .p.:.. 2[j...... 0020 f9 6a d5 36 d8 00 00 00 00 01 17 8c 6b df c1 f3 .j.6........k... 0030 fb 9e d4 81 92 c7 3e 3a bd 52 20 51 3d 18 db f9 ......>:.R Q=... 0040 e3 ab 22 7a 50 a2 06 14 60 1f 0e e2 28 a8 45 4b .."zP...`...(.EK 0050 2e a2 a3 c5 b4 e8 3d 47 17 30 77 6e 3a 5e fb ac ......=G.0wn:^.. 0060 27 07 a8 e4 7b 72 41 95 fc c6 33 60 67 e3 d9 ae '...{rA...3`g... 0070 e9 e2 27 03 a9 a1 2f 5a bf 6f de a7 ee 1d 9a fb ..'.../Z.o...... 0080 73 47 sG Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 16:05:56.677496000 Time delta from previous packet: 0.998832000 seconds Time since reference or first frame: 6.328807000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xb692c843 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x16b2 (5810) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x24f2 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x00002d16 Sequence: 3 Data (84 bytes) 0000 00 01 02 46 6a 04 00 a0 8e 72 1e 40 08 00 45 00 ...Fj....r.@..E. 0010 00 70 16 b2 00 00 40 32 24 f2 a5 e3 f9 6a a5 e3 .p....@2$....j.. 0020 f9 86 00 00 2d 16 00 00 00 03 50 7b e1 88 ff d0 ....-.....P{.... 0030 13 75 4d ce fb 36 1e 3c 1e 87 e8 18 5e 7e 3d 51 .uM..6.<....^~=Q 0040 c6 89 76 86 1a b0 57 48 5b a9 dd 1b cb fc cd 38 ..v...WH[......8 0050 02 79 33 e9 01 89 2b c0 c2 03 f2 6f 96 c5 af 77 .y3...+....o...w 0060 f5 36 de 57 df a7 2d eb 65 05 86 0e bf ac 73 2b .6.W..-.e.....s+ 0070 ad 99 53 24 71 75 18 af 1f 41 71 0e 38 99 b6 92 ..S$qu...Aq.8... 0080 c8 43 .C Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 16:05:56.678568000 Time delta from previous packet: 0.001072000 seconds Time since reference or first frame: 6.329879000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0x956d128f (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x003b (59) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: ESP (0x32) Header checksum: 0x5b69 (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0xd536d800 Sequence: 2 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 01 02 46 6a 04 08 00 45 00 ...r.@...Fj...E. 0010 00 70 00 3b 00 00 20 32 5b 69 a5 e3 f9 86 a5 e3 .p.;.. 2[i...... 0020 f9 6a d5 36 d8 00 00 00 00 02 30 ca c1 8f 7b 65 .j.6......0...{e 0030 7f 41 51 5b 4e 3f 5b 84 65 8b b2 6c ef 60 b4 6a .AQ[N?[.e..l.`.j 0040 b6 51 2e 5b 45 6e d1 70 eb a5 8e 29 68 9e c8 3a .Q.[En.p...)h..: 0050 85 9d 74 39 b3 1c 87 46 dd 6e 90 ab 9e 7f 9a 2c ..t9...F.n....., 0060 3a 65 72 7f 66 c7 32 e1 37 de b9 a8 59 e9 5e ce :er.f.2.7...Y.^. 0070 52 31 b2 36 3c e2 12 1e 85 10 e5 4f 47 d9 95 6d R1.6<......OG..m 0080 12 8f .. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 16:05:57.677553000 Time delta from previous packet: 0.998985000 seconds Time since reference or first frame: 7.328864000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:01:02:46:6a:04 Destination: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xd0059c1f (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x16b3 (5811) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x24f1 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x00002d16 Sequence: 4 Data (84 bytes) 0000 00 01 02 46 6a 04 00 a0 8e 72 1e 40 08 00 45 00 ...Fj....r.@..E. 0010 00 70 16 b3 00 00 40 32 24 f1 a5 e3 f9 6a a5 e3 .p....@2$....j.. 0020 f9 86 00 00 2d 16 00 00 00 04 5b 22 cc 61 05 23 ....-.....[".a.# 0030 98 49 28 5d e5 07 be 7f 10 cb 7c bb 4e 2b f4 67 .I(]......|.N+.g 0040 b0 75 97 ac 05 1f ac 88 6a 53 9a 40 47 14 e9 62 .u......jS.@G..b 0050 f4 4e 63 55 eb 8a 10 2c 4f 04 77 c6 e8 63 7c 51 .NcU...,O.w..c|Q 0060 32 88 1c 5c 20 a9 cb 55 fb 40 ba ef 5f e6 94 7d 2..\ ..U.@.._..} 0070 9c 25 da b8 cf 55 1b 48 c3 fa 84 7b 7a cb d0 05 .%...U.H...{z... 0080 9c 1f .. Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 16:05:57.678647000 Time delta from previous packet: 0.001094000 seconds Time since reference or first frame: 7.329958000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:01:02:46:6a:04, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:01:02:46:6a:04 (00:01:02:46:6a:04) Type: IP (0x0800) Frame check sequence: 0x0cdfec48 (correct) Internet Protocol, Src Addr: 165.227.249.134 (165.227.249.134), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x003c (60) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 32 Protocol: ESP (0x32) Header checksum: 0x5b68 (correct) Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0xd536d800 Sequence: 3 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 01 02 46 6a 04 08 00 45 00 ...r.@...Fj...E. 0010 00 70 00 3c 00 00 20 32 5b 68 a5 e3 f9 86 a5 e3 .p.<.. 2[h...... 0020 f9 6a d5 36 d8 00 00 00 00 03 aa f3 a2 09 bf 84 .j.6............ 0030 68 54 2e d3 16 66 8f 06 15 b7 5b 92 bb b8 91 fd hT...f....[..... 0040 f2 98 22 fc 2f 72 a5 85 c7 4b 00 29 92 c1 c5 80 .."./r...K.).... 0050 fb e4 d7 49 87 1a 6b 4e ef 10 3c aa 55 19 71 a9 ...I..kN..<.U.q. 0060 19 a7 b7 67 ab b2 08 49 8c 2d ca a9 45 35 c7 ef ...g...I.-..E5.. 0070 af 7c 3c 95 8c 45 d9 20 6c 3e 7b 3b ca a9 0c df .|<..E. l>{;.... 0080 ec 48 .H