Frame 1 (126 bytes on wire, 126 bytes captured) Arrival Time: May 19, 2005 14:27:58.634360000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xacb27da6 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0xfb84 (64388) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x403d (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.141 (165.227.249.141) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0xeae8 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x33F6E68A5871E82A Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 00 d1 ed e3 ad 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 6c fb 84 00 00 40 11 40 3d a5 e3 f9 6a a5 e3 .l....@.@=...j.. 0020 f9 8d 01 f4 01 f4 00 58 ea e8 33 f6 e6 8a 58 71 .......X..3...Xq 0030 e8 2a 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .*.............. 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 ac b2 7d a6 ........p...}. Frame 2 (266 bytes on wire, 266 bytes captured) Arrival Time: May 19, 2005 14:27:58.727256000 Time delta from previous packet: 0.092896000 seconds Time since reference or first frame: 0.092896000 seconds Frame Number: 2 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0x9f140fc3 (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb35 (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0xe498 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x33F6E68A5871E82A Responder cookie: 0x20C033401BA798AD Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 a0 8e 72 1e 40 00 00 d1 ed e3 ad 08 00 45 00 ...r.@........E. 0010 00 f8 00 00 40 00 40 11 fb 35 a5 e3 f9 8d a5 e3 ....@.@..5...... 0020 f9 6a 01 f4 01 f4 00 e4 e4 98 33 f6 e6 8a 58 71 .j........3...Xq 0030 e8 2a 20 c0 33 40 1b a7 98 ad 01 10 02 00 00 00 .* .3@.......... 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 9f 14 0f c3 ...R.V.... Frame 3 (262 bytes on wire, 262 bytes captured) Arrival Time: May 19, 2005 14:27:58.852229000 Time delta from previous packet: 0.124973000 seconds Time since reference or first frame: 0.217869000 seconds Frame Number: 3 Packet Length: 262 bytes Capture Length: 262 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x6b6178f6 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0xfb85 (64389) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3fb4 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.141 (165.227.249.141) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0xcd5a (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x33F6E68A5871E82A Responder cookie: 0x20C033401BA798AD Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x0300001435CB1299C9D8F1887AA19B3C... 0000 00 00 d1 ed e3 ad 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 f4 fb 85 00 00 40 11 3f b4 a5 e3 f9 6a a5 e3 ......@.?....j.. 0020 f9 8d 01 f4 01 f4 00 e0 cd 5a 33 f6 e6 8a 58 71 .........Z3...Xq 0030 e8 2a 20 c0 33 40 1b a7 98 ad 04 10 02 00 00 00 .* .3@.......... 0040 00 00 00 00 00 d8 0a 00 00 84 38 87 bf 2f 59 9e ..........8../Y. 0050 e9 00 63 2c f6 95 26 36 25 e1 1e ce e8 aa b4 1f ..c,..&6%....... 0060 97 6f ac b8 a7 0b cf 3d 17 92 36 04 a2 de 80 2a .o.....=..6....* 0070 2e 57 37 b9 c2 c9 3b a7 77 1a 61 5c 1a 6c 39 11 .W7...;.w.a\.l9. 0080 4d f0 89 b7 92 eb f8 95 e8 0b 01 8a f8 8f bc 8b M............... 0090 65 9d f3 43 ea a1 ed e4 e0 1c 70 51 02 fb ec 7c e..C......pQ...| 00a0 e3 99 22 45 71 18 d3 7b e0 84 27 59 44 68 c3 02 .."Eq..{..'YDh.. 00b0 db ce eb e4 f5 22 08 d8 59 5d 62 0d 7f 42 08 19 ....."..Y]b..B.. 00c0 89 0e df 8b 58 d8 c2 a3 9d 70 0d 00 00 18 cc 3d ....X....p.....= 00d0 10 8e f5 32 d7 6e 4d ce bb 12 a2 4a 87 d1 a2 4c ...2.nM....J...L 00e0 5c bc 00 00 00 20 03 00 00 14 35 cb 12 99 c9 d8 \.... ....5..... 00f0 f1 88 7a a1 9b 3c 5e a5 c7 02 00 00 00 08 00 06 ..z..<^......... 0100 00 02 6b 61 78 f6 ..kax. Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: May 19, 2005 14:27:58.865674000 Time delta from previous packet: 0.013445000 seconds Time since reference or first frame: 0.231314000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0xa5eb087b (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb5d (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x52ea (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x33F6E68A5871E82A Responder cookie: 0x20C033401BA798AD Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 a0 8e 72 1e 40 00 00 d1 ed e3 ad 08 00 45 00 ...r.@........E. 0010 00 d0 00 00 40 00 40 11 fb 5d a5 e3 f9 8d a5 e3 ....@.@..]...... 0020 f9 6a 01 f4 01 f4 00 bc 52 ea 33 f6 e6 8a 58 71 .j......R.3...Xq 0030 e8 2a 20 c0 33 40 1b a7 98 ad 04 10 02 00 00 00 .* .3@.......... 0040 00 00 00 00 00 b4 0a 00 00 84 6c 10 36 4d fa ac ..........l.6M.. 0050 53 50 78 00 01 5e 3c 1a 4c 8d 90 68 bd 89 e4 cb SPx..^<.L..h.... 0060 54 cd ad 42 1b 44 02 ac 09 cc 85 36 67 b4 98 42 T..B.D.....6g..B 0070 bf 5a 24 97 ec 11 4b 88 04 5a 79 df 66 fe e1 59 .Z$...K..Zy.f..Y 0080 e1 58 b7 bb 26 dd e5 c0 fb d6 08 d2 e7 ca 9c f0 .X..&........... 0090 3d e9 87 c6 8e ec 47 03 8a 57 89 80 f8 a9 aa 0d =.....G..W...... 00a0 8a 13 64 78 8d cf 2b f5 ca de ee 7a 64 19 80 02 ..dx..+....zd... 00b0 ec 07 76 2f 7a 33 23 4a 5f 87 55 60 48 d7 c4 fe ..v/z3#J_.U`H... 00c0 cb 15 d4 6d 11 4e 93 a4 dc 0d 00 00 00 14 bf 0a ...m.N.......... 00d0 69 c0 70 c7 66 21 25 12 de 12 7b 9b 15 67 a5 eb i.p.f!%...{..g.. 00e0 08 7b .{ Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: May 19, 2005 14:27:59.018488000 Time delta from previous packet: 0.152814000 seconds Time since reference or first frame: 0.384128000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x43d00302 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0xfb86 (64390) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x402f (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.141 (165.227.249.141) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x37b7 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x33F6E68A5871E82A Responder cookie: 0x20C033401BA798AD Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 00 d1 ed e3 ad 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 78 fb 86 00 00 40 11 40 2f a5 e3 f9 6a a5 e3 .x....@.@/...j.. 0020 f9 8d 01 f4 01 f4 00 64 37 b7 33 f6 e6 8a 58 71 .......d7.3...Xq 0030 e8 2a 20 c0 33 40 1b a7 98 ad 05 10 02 01 00 00 .* .3@.......... 0040 00 00 00 00 00 5c a9 1c 26 58 3d 71 c1 98 b8 b1 .....\..&X=q.... 0050 2b 5f 95 4c f3 b4 ae cf 22 89 02 42 18 8e 7f 14 +_.L...."..B.... 0060 f6 86 cd 5b 61 51 12 d0 1a 6b 16 e0 e5 cc 9a 0c ...[aQ...k...... 0070 2b 61 c8 37 05 d5 74 15 86 b0 1f 6d fc bf 80 cd +a.7..t....m.... 0080 ee b1 bf ec 4a 23 43 d0 03 02 ....J#C... Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: May 19, 2005 14:27:59.019108000 Time delta from previous packet: 0.000620000 seconds Time since reference or first frame: 0.384748000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0x2d45e856 (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbcd (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x78a1 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x33F6E68A5871E82A Responder cookie: 0x20C033401BA798AD Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 a0 8e 72 1e 40 00 00 d1 ed e3 ad 08 00 45 00 ...r.@........E. 0010 00 60 00 00 40 00 40 11 fb cd a5 e3 f9 8d a5 e3 .`..@.@......... 0020 f9 6a 01 f4 01 f4 00 4c 78 a1 33 f6 e6 8a 58 71 .j.....Lx.3...Xq 0030 e8 2a 20 c0 33 40 1b a7 98 ad 05 10 02 01 00 00 .* .3@.......... 0040 00 00 00 00 00 44 d0 30 c9 2b ad 9e 00 9d bd e0 .....D.0.+...... 0050 be a4 5c 94 7d 2f 39 0d f9 8d 75 5c 9f 5b 2a e2 ..\.}/9...u\.[*. 0060 c3 c7 5f aa 13 c7 4b 31 f6 c1 f1 d9 5e 28 2d 45 .._...K1....^(-E 0070 e8 56 .V Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: May 19, 2005 14:27:59.145169000 Time delta from previous packet: 0.126061000 seconds Time since reference or first frame: 0.510809000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xfd9b5c82 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0xfb87 (64391) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3f66 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.141 (165.227.249.141) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x9b4b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x33F6E68A5871E82A Responder cookie: 0x20C033401BA798AD Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x3C351203 Length: 292 Encrypted payload (264 bytes) 0000 00 00 d1 ed e3 ad 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 01 40 fb 87 00 00 40 11 3f 66 a5 e3 f9 6a a5 e3 .@....@.?f...j.. 0020 f9 8d 01 f4 01 f4 01 2c 9b 4b 33 f6 e6 8a 58 71 .......,.K3...Xq 0030 e8 2a 20 c0 33 40 1b a7 98 ad 08 10 20 01 3c 35 .* .3@...... .<5 0040 12 03 00 00 01 24 ef 37 8d 03 65 2a 5e 9c ed 1e .....$.7..e*^... 0050 28 59 bb bb 97 3c 81 79 0f 04 e9 bd af 15 2b b7 (Y...<.y......+. 0060 8b 93 8a 33 c4 c8 54 84 0c c1 75 e2 7a 05 d8 a9 ...3..T...u.z... 0070 e0 06 20 85 3b 22 fe 9d fb 5b 3c 93 da d4 b1 ee .. .;"...[<..... 0080 8c 01 bd 8c 32 6c f0 a8 37 c3 b4 85 f0 53 9c c5 ....2l..7....S.. 0090 df 70 1a b7 35 36 19 d3 c2 09 ed b2 55 a6 48 c3 .p..56......U.H. 00a0 12 b7 a0 09 71 6b 06 a9 67 dc a4 00 8b 30 c4 c5 ....qk..g....0.. 00b0 c4 1f 8b 91 a1 27 d8 b2 45 fc 06 1d a4 4c fc e9 .....'..E....L.. 00c0 2b 7d 3e 13 df 2d 37 6e cc a3 d9 69 46 ec f0 5b +}>..-7n...iF..[ 00d0 31 80 47 81 b3 e8 90 ca 26 7f 6a af c9 9e 66 b6 1.G.....&.j...f. 00e0 61 fe bf f7 81 a7 06 2e 3a 57 27 11 63 60 c3 82 a.......:W'.c`.. 00f0 6c 72 3c 2a 09 25 2b 8f ef ee a7 9a 78 08 fc 52 lr<*.%+.....x..R 0100 09 c3 9a e8 db 84 cd 4e aa 17 60 f2 86 15 03 b2 .......N..`..... 0110 59 ab 78 ad af ca 53 d0 bd 1c 6f b7 82 cf 84 f1 Y.x...S...o..... 0120 fb 15 dd 83 ed 34 20 99 40 72 dc f3 5b 74 27 0f .....4 .@r..[t'. 0130 f5 ee b1 b6 16 fc a0 ca 80 f4 99 9a 13 cd 37 66 ..............7f 0140 28 e4 89 c2 87 ff 33 9a 48 e1 bc ca e4 b1 fd 9b (.....3.H....... 0150 5c 82 \. Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: May 19, 2005 14:27:59.153009000 Time delta from previous packet: 0.007840000 seconds Time since reference or first frame: 0.518649000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0x22f00014 (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfaed (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x7b96 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x33F6E68A5871E82A Responder cookie: 0x20C033401BA798AD Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x3C351203 Length: 292 Encrypted payload (264 bytes) 0000 00 a0 8e 72 1e 40 00 00 d1 ed e3 ad 08 00 45 00 ...r.@........E. 0010 01 40 00 00 40 00 40 11 fa ed a5 e3 f9 8d a5 e3 .@..@.@......... 0020 f9 6a 01 f4 01 f4 01 2c 7b 96 33 f6 e6 8a 58 71 .j.....,{.3...Xq 0030 e8 2a 20 c0 33 40 1b a7 98 ad 08 10 20 01 3c 35 .* .3@...... .<5 0040 12 03 00 00 01 24 98 f6 f5 4c 07 26 30 b8 ea e7 .....$...L.&0... 0050 ce d6 05 55 04 2b eb f9 f4 16 e6 95 9e e8 52 fb ...U.+........R. 0060 e5 bc 86 1e 80 d4 ee e1 71 7c aa ef 85 b9 13 ce ........q|...... 0070 0d ef 33 32 d3 ed b0 39 b0 71 de 9d 1b ab 7e 2b ..32...9.q....~+ 0080 4e b2 27 08 55 c4 4d 54 75 c1 03 e7 d4 27 4d 5b N.'.U.MTu....'M[ 0090 40 0c ea 20 a2 be 13 a9 9a 90 a1 32 95 2a 11 58 @.. .......2.*.X 00a0 16 47 dc a0 44 0b 0c 70 51 dc f4 85 9a 2a 50 6f .G..D..pQ....*Po 00b0 10 42 33 82 c9 1e 92 85 78 4f a6 4c 78 64 c9 41 .B3.....xO.Lxd.A 00c0 9a 5b b2 2c e7 0d 06 cf 88 d0 d7 40 7a ef fc 5d .[.,.......@z..] 00d0 8f 7b 27 a9 21 2a 3a cc 2a 3a 04 97 fb 0f ec 78 .{'.!*:.*:.....x 00e0 b4 8e 6f 09 2e 85 28 a3 f5 7b 8e a2 36 6a 90 d3 ..o...(..{..6j.. 00f0 bf 4e 15 51 27 71 ce 35 a9 f8 c3 46 6c 07 3e 98 .N.Q'q.5...Fl.>. 0100 09 2b 0b 6e dc a9 61 2b ff ce fc dd 41 85 b9 64 .+.n..a+....A..d 0110 06 a6 d4 a8 69 06 a3 8c 8e 62 a6 73 55 d4 f6 b8 ....i....b.sU... 0120 59 3e 06 b8 26 69 a5 24 85 a7 7f a5 6f 88 02 f3 Y>..&i.$....o... 0130 fa 83 d1 85 59 e5 7c 1f 77 2d b4 94 3f cb aa cf ....Y.|.w-..?... 0140 c2 87 5b f6 9f b9 05 53 be ad 51 c3 f1 79 22 f0 ..[....S..Q..y". 0150 00 14 .. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: May 19, 2005 14:27:59.314465000 Time delta from previous packet: 0.161456000 seconds Time since reference or first frame: 0.680105000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x2dd60ee6 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0xfb88 (64392) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x4055 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.141 (165.227.249.141) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x08a8 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x33F6E68A5871E82A Responder cookie: 0x20C033401BA798AD Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x3C351203 Length: 52 Encrypted payload (24 bytes) 0000 00 00 d1 ed e3 ad 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 50 fb 88 00 00 40 11 40 55 a5 e3 f9 6a a5 e3 .P....@.@U...j.. 0020 f9 8d 01 f4 01 f4 00 3c 08 a8 33 f6 e6 8a 58 71 .......<..3...Xq 0030 e8 2a 20 c0 33 40 1b a7 98 ad 08 10 20 01 3c 35 .* .3@...... .<5 0040 12 03 00 00 00 34 e8 9f d3 a8 95 02 e3 28 d0 78 .....4.......(.x 0050 98 99 9f 79 6d 56 82 14 8b 48 53 55 cf 2d 2d d6 ...ymV...HSU.--. 0060 0e e6 .. Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:27:59.814883000 Time delta from previous packet: 0.500418000 seconds Time since reference or first frame: 1.180523000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xe563bc96 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfb89 (64393) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x4013 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.141 (165.227.249.141) Encapsulating Security Payload SPI: 0x455103fd Sequence: 1 Data (84 bytes) 0000 00 00 d1 ed e3 ad 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 70 fb 89 00 00 40 32 40 13 a5 e3 f9 6a a5 e3 .p....@2@....j.. 0020 f9 8d 45 51 03 fd 00 00 00 01 35 29 26 c0 84 22 ..EQ......5)&.." 0030 af 20 f3 65 c8 08 eb b5 e8 2b 01 be 29 7c 82 52 . .e.....+..)|.R 0040 95 77 26 db ae 4d cb cd 14 be f9 4e a2 7c e8 a0 .w&..M.....N.|.. 0050 32 34 ad bc 38 53 48 20 eb 18 59 68 60 22 3a cc 24..8SH ..Yh`":. 0060 6d 23 88 a7 ae fb 0d 2c b0 3c 40 87 eb bb 14 8d m#.....,.<@..... 0070 64 57 b9 e0 ad f5 c2 c2 4c 59 d4 90 a4 e0 e5 63 dW......LY.....c 0080 bc 96 .. Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:27:59.820413000 Time delta from previous packet: 0.005530000 seconds Time since reference or first frame: 1.186053000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0x4f8bd2b7 (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0004 (4) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b98 (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x2f45f800 Sequence: 2 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 00 d1 ed e3 ad 08 00 45 00 ...r.@........E. 0010 00 70 00 04 00 00 f0 32 8b 98 a5 e3 f9 8d a5 e3 .p.....2........ 0020 f9 6a 2f 45 f8 00 00 00 00 02 69 29 96 85 88 4b .j/E......i)...K 0030 95 30 80 84 e0 c1 ba af ac 04 31 a0 95 14 59 be .0........1...Y. 0040 c9 fc ca 64 aa c2 65 c6 6a 16 ac ee f1 7b 29 26 ...d..e.j....{)& 0050 55 ca 0a 25 4d 84 aa 53 a6 73 26 dc 27 9e 08 34 U..%M..S.s&.'..4 0060 eb 65 8c 38 3b 1e 4e 1d 37 99 d1 9c 17 a0 fe d2 .e.8;.N.7....... 0070 6e de a4 b1 1b 94 cd ce 4a 3a 43 ee 20 ac 4f 8b n.......J:C. .O. 0080 d2 b7 .. Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:27:59.822943000 Time delta from previous packet: 0.002530000 seconds Time since reference or first frame: 1.188583000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x67171353 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfb8a (64394) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x4012 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.141 (165.227.249.141) Encapsulating Security Payload SPI: 0x455103fd Sequence: 2 Data (84 bytes) 0000 00 00 d1 ed e3 ad 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 70 fb 8a 00 00 40 32 40 12 a5 e3 f9 6a a5 e3 .p....@2@....j.. 0020 f9 8d 45 51 03 fd 00 00 00 02 4a 03 18 df 6f fe ..EQ......J...o. 0030 55 11 24 87 b3 08 30 a8 47 22 9f 28 70 ec 73 2f U.$...0.G".(p.s/ 0040 46 44 7a f0 06 f2 35 dd 2c d9 be 36 0f e9 41 6c FDz...5.,..6..Al 0050 b0 13 fc 77 ca 84 5e ee 2e eb 66 01 23 5b af a0 ...w..^...f.#[.. 0060 ad de 51 26 31 55 61 ce e1 ae e0 fa 87 da 1f a7 ..Q&1Ua......... 0070 63 d4 11 89 d7 97 98 f8 36 9c 61 0e 2a 6b 67 17 c.......6.a.*kg. 0080 13 53 .S Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:27:59.823295000 Time delta from previous packet: 0.000352000 seconds Time since reference or first frame: 1.188935000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0x53759640 (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0005 (5) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b97 (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x2f45f800 Sequence: 3 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 00 d1 ed e3 ad 08 00 45 00 ...r.@........E. 0010 00 70 00 05 00 00 f0 32 8b 97 a5 e3 f9 8d a5 e3 .p.....2........ 0020 f9 6a 2f 45 f8 00 00 00 00 03 1b 6a 34 80 f6 34 .j/E.......j4..4 0030 e9 96 05 ee a0 09 80 a6 82 22 86 9c 45 d3 f2 a4 ........."..E... 0040 a4 71 96 b8 1c db 1b c4 bf 18 cd f5 78 36 19 e8 .q..........x6.. 0050 3b a7 90 ca bf b8 4e d3 17 2e 3b dc 57 27 9b 2d ;.....N...;.W'.- 0060 c9 eb 9f 38 49 03 7c 9f 3a cb 27 05 66 6b 66 dd ...8I.|.:.'.fkf. 0070 1e d5 e1 85 56 47 6b 2a 1c 61 9e 87 1a 96 53 75 ....VGk*.a....Su 0080 96 40 .@ Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:28:00.824106000 Time delta from previous packet: 1.000811000 seconds Time since reference or first frame: 2.189746000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xd8bee2c5 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfb8b (64395) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x4011 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.141 (165.227.249.141) Encapsulating Security Payload SPI: 0x455103fd Sequence: 3 Data (84 bytes) 0000 00 00 d1 ed e3 ad 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 70 fb 8b 00 00 40 32 40 11 a5 e3 f9 6a a5 e3 .p....@2@....j.. 0020 f9 8d 45 51 03 fd 00 00 00 03 66 ac 08 49 48 25 ..EQ......f..IH% 0030 54 28 33 43 59 d3 b5 2d c7 66 b2 4e e0 a3 e9 ad T(3CY..-.f.N.... 0040 dd e5 13 e5 9e 2b c6 4a a5 45 39 0f 2d 57 5a 7f .....+.J.E9.-WZ. 0050 ac 7c 27 09 3d e1 09 ee fd 02 3e 7d aa a0 fb 21 .|'.=.....>}...! 0060 d7 25 09 0e 19 01 89 4e 6a 67 a4 f2 13 b9 b8 ed .%.....Njg...... 0070 36 2b c5 59 af 14 06 ff 8c f8 e3 7c 79 15 d8 be 6+.Y.......|y... 0080 e2 c5 .. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:28:00.824561000 Time delta from previous packet: 0.000455000 seconds Time since reference or first frame: 2.190201000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0x21b3543c (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0006 (6) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b96 (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x2f45f800 Sequence: 4 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 00 d1 ed e3 ad 08 00 45 00 ...r.@........E. 0010 00 70 00 06 00 00 f0 32 8b 96 a5 e3 f9 8d a5 e3 .p.....2........ 0020 f9 6a 2f 45 f8 00 00 00 00 04 f7 85 72 91 f0 1c .j/E........r... 0030 14 af 98 41 10 25 69 89 33 8a 13 7b 2e 9b b3 d8 ...A.%i.3..{.... 0040 2d 3e 88 5d 1b 14 e8 9a 2b 1d ba 5a 8c 4d 53 64 ->.]....+..Z.MSd 0050 e8 aa 24 e5 c7 d6 e6 5b a9 b6 e4 8c 95 fb 22 0d ..$....[......". 0060 01 08 a3 09 b7 56 15 d2 69 ba aa ed 90 e9 c4 52 .....V..i......R 0070 7d 22 e2 72 83 75 a0 ce 01 08 4f ab ca b4 21 b3 }".r.u....O...!. 0080 54 3c T< Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:28:01.824082000 Time delta from previous packet: 0.999521000 seconds Time since reference or first frame: 3.189722000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:00:d1:ed:e3:ad Destination: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xdf4a1422 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.141 (165.227.249.141) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfb8c (64396) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x4010 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.141 (165.227.249.141) Encapsulating Security Payload SPI: 0x455103fd Sequence: 4 Data (84 bytes) 0000 00 00 d1 ed e3 ad 00 a0 8e 72 1e 40 08 00 45 00 .........r.@..E. 0010 00 70 fb 8c 00 00 40 32 40 10 a5 e3 f9 6a a5 e3 .p....@2@....j.. 0020 f9 8d 45 51 03 fd 00 00 00 04 1f fb 16 ca 2d 38 ..EQ..........-8 0030 95 1d 08 5c 58 79 f2 a9 ea c0 2f e9 42 07 eb 4c ...\Xy..../.B..L 0040 db 1a be 53 6c ce be 40 16 c9 d1 61 b1 0c df cd ...Sl..@...a.... 0050 10 55 3e a6 ea fc b2 ec ff 20 54 bb 7e 1f be f5 .U>...... T.~... 0060 34 eb 5a 7d 07 5a 91 74 24 f3 f2 0a 5a 11 ec ea 4.Z}.Z.t$...Z... 0070 b2 30 44 8a 8c ba 94 ad a7 f8 68 18 d1 78 df 4a .0D.......h..x.J 0080 14 22 ." Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 14:28:01.824637000 Time delta from previous packet: 0.000555000 seconds Time since reference or first frame: 3.190277000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:00:d1:ed:e3:ad, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:00:d1:ed:e3:ad (00:00:d1:ed:e3:ad) Type: IP (0x0800) Frame check sequence: 0x5cbd6914 (correct) Internet Protocol, Src Addr: 165.227.249.141 (165.227.249.141), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0007 (7) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b95 (correct) Source: 165.227.249.141 (165.227.249.141) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x2f45f800 Sequence: 5 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 00 d1 ed e3 ad 08 00 45 00 ...r.@........E. 0010 00 70 00 07 00 00 f0 32 8b 95 a5 e3 f9 8d a5 e3 .p.....2........ 0020 f9 6a 2f 45 f8 00 00 00 00 05 94 bb c6 e5 60 44 .j/E..........`D 0030 12 19 b1 61 e7 d3 90 75 20 01 20 6b 7f 3a 8b 73 ...a...u . k.:.s 0040 d6 a2 b6 6d 70 f2 97 99 3c 5b f3 fc 87 be ca fd ...mp...<[...... 0050 92 ab 53 8b 7c 23 32 f5 2f 51 e4 0b 24 9e f8 b7 ..S.|#2./Q..$... 0060 45 78 b3 21 d9 0f e9 7a 82 71 4d e8 6c 44 39 02 Ex.!...z.qM.lD9. 0070 7e 70 9d fa 50 46 ca 7e 94 b9 a8 27 13 71 5c bd ~p..PF.~...'.q\. 0080 69 14 i.