Frame 1 (126 bytes on wire, 126 bytes captured) Arrival Time: May 19, 2005 15:55:56.015399000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:3d:1a:a9:44 Destination: 00:0f:3d:1a:a9:44 (00:0f:3d:1a:a9:44) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x9dfc1c0d (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x167a (5754) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2546 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.143 (165.227.249.143) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x14c9 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xCC404329132D0EA4 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0f 3d 1a a9 44 00 a0 8e 72 1e 40 08 00 45 00 ..=..D...r.@..E. 0010 00 6c 16 7a 00 00 40 11 25 46 a5 e3 f9 6a a5 e3 .l.z..@.%F...j.. 0020 f9 8f 01 f4 01 f4 00 58 14 c9 cc 40 43 29 13 2d .......X...@C).- 0030 0e a4 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 9d fc 1c 0d ........p..... Frame 2 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 15:55:56.173747000 Time delta from previous packet: 0.158348000 seconds Time since reference or first frame: 0.158348000 seconds Frame Number: 2 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:3d:1a:a9:44, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:3d:1a:a9:44 (00:0f:3d:1a:a9:44) Type: IP (0x0800) Frame check sequence: 0xeb2c3a45 (correct) Internet Protocol, Src Addr: 165.227.249.143 (165.227.249.143), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x00a4 (164) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b18 (correct) Source: 165.227.249.143 (165.227.249.143) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x2fab (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xCC404329132D0EA4 Responder cookie: 0xDA82AB2F5E6480EB Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 a0 8e 72 1e 40 00 0f 3d 1a a9 44 08 00 45 00 ...r.@..=..D..E. 0010 00 70 00 a4 00 00 40 11 3b 18 a5 e3 f9 8f a5 e3 .p....@.;....... 0020 f9 6a 01 f4 01 f4 00 5c 2f ab cc 40 43 29 13 2d .j.....\/..@C).- 0030 0e a4 da 82 ab 2f 5e 64 80 eb 01 10 02 00 00 00 ...../^d........ 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 eb 2c ............p.., 0080 3a 45 :E Frame 3 (262 bytes on wire, 262 bytes captured) Arrival Time: May 19, 2005 15:55:56.297074000 Time delta from previous packet: 0.123327000 seconds Time since reference or first frame: 0.281675000 seconds Frame Number: 3 Packet Length: 262 bytes Capture Length: 262 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:3d:1a:a9:44 Destination: 00:0f:3d:1a:a9:44 (00:0f:3d:1a:a9:44) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x5e687010 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0x167b (5755) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x24bd (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.143 (165.227.249.143) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0x573b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xCC404329132D0EA4 Responder cookie: 0xDA82AB2F5E6480EB Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x03000014CA7DB73A8284170680E30353... 0000 00 0f 3d 1a a9 44 00 a0 8e 72 1e 40 08 00 45 00 ..=..D...r.@..E. 0010 00 f4 16 7b 00 00 40 11 24 bd a5 e3 f9 6a a5 e3 ...{..@.$....j.. 0020 f9 8f 01 f4 01 f4 00 e0 57 3b cc 40 43 29 13 2d ........W;.@C).- 0030 0e a4 da 82 ab 2f 5e 64 80 eb 04 10 02 00 00 00 ...../^d........ 0040 00 00 00 00 00 d8 0a 00 00 84 c9 40 9e ba a7 7b ...........@...{ 0050 52 c9 1b 97 f4 7b 78 81 74 c3 45 43 23 da 15 44 R....{x.t.EC#..D 0060 46 28 de 90 a3 26 95 43 05 4c 1f ec cf b6 95 94 F(...&.C.L...... 0070 8e 18 a7 8f cf b2 a3 d7 4e c7 80 a4 33 ff ce 13 ........N...3... 0080 6e 0c 74 30 cc 6c 59 f3 b6 98 f4 fe 47 06 fd dc n.t0.lY.....G... 0090 a7 22 39 d9 3f 7a 27 a8 7f 3c 79 f1 e1 0e c5 ea ."9.?z'.....% 0070 02 43 41 38 58 7a 48 59 b3 ef 59 f4 50 cf 09 41 .CA8XzHY..Y.P..A 0080 28 18 46 f0 ad de 5f 3c 0f d4 8c e9 9c 3b 6c ec (.F..._<.....;l. 0090 4b 3e ac 2b db b6 9d e5 13 21 35 e8 89 64 fe b4 K>.+.....!5..d.. 00a0 d8 8d c6 23 80 e9 2e 14 d0 6a 2e 08 a1 48 7a 9c ...#.....j...Hz. 00b0 14 ca e2 86 ab 5e 16 f7 b3 21 57 3c 7c 2f 98 c5 .....^...!W<|/.. 00c0 db 2f 10 6e db 75 b9 1e af 9a a0 27 83 49 3a f1 ./.n.u.....'.I:. 00d0 56 fb 46 88 1e b9 2b a2 1b 3a c7 7c 17 f9 e0 79 V.F...+..:.|...y 00e0 10 eb 5e 69 ff 76 ee fc 45 ab 96 60 96 7b 1d 99 ..^i.v..E..`.{.. 00f0 52 17 cf ea 29 0f 83 eb ea 37 97 0a 73 b8 4e 33 R...)....7..s.N3 0100 a3 88 8b 53 b1 4c 46 d1 0c b0 b1 dd ef 24 22 7d ...S.LF......$"} 0110 8d ac ac 1b 60 cd 0a 2d d6 e3 8f 46 8d 30 b5 96 ....`..-...F.0.. 0120 a7 fd eb 4d 68 97 4b 4d 74 fb ad 4e b8 c1 30 84 ...Mh.KMt..N..0. 0130 ec be 4e 4c 16 ec 29 19 aa a8 bf 2f 09 2b c6 f7 ..NL..)..../.+.. 0140 5f d4 46 c1 fd 9c d3 9e 8e a1 56 05 5a 14 a7 c2 _.F.......V.Z... 0150 ff a7 62 49 e3 b6 74 ff 60 f1 ..bI..t.`. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: May 19, 2005 15:55:57.186481000 Time delta from previous packet: 0.159738000 seconds Time since reference or first frame: 1.171082000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:3d:1a:a9:44 Destination: 00:0f:3d:1a:a9:44 (00:0f:3d:1a:a9:44) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xe6d6700a (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x167e (5758) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x255e (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.143 (165.227.249.143) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0xd464 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xCC404329132D0EA4 Responder cookie: 0xDA82AB2F5E6480EB Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x270502BF Length: 52 Encrypted payload (24 bytes) 0000 00 0f 3d 1a a9 44 00 a0 8e 72 1e 40 08 00 45 00 ..=..D...r.@..E. 0010 00 50 16 7e 00 00 40 11 25 5e a5 e3 f9 6a a5 e3 .P.~..@.%^...j.. 0020 f9 8f 01 f4 01 f4 00 3c d4 64 cc 40 43 29 13 2d .......<.d.@C).- 0030 0e a4 da 82 ab 2f 5e 64 80 eb 08 10 20 01 27 05 ...../^d.... .'. 0040 02 bf 00 00 00 34 0f 1d 60 4a 2e 6e 28 ea 44 2c .....4..`J.n(.D, 0050 0f 58 b2 45 14 01 a7 34 4e 29 f9 f3 30 44 e6 d6 .X.E...4N)..0D.. 0060 70 0a p. Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 15:55:57.688549000 Time delta from previous packet: 0.502068000 seconds Time since reference or first frame: 1.673150000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:3d:1a:a9:44 Destination: 00:0f:3d:1a:a9:44 (00:0f:3d:1a:a9:44) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xcb8aabeb (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x167f (5759) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x251c (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.143 (165.227.249.143) Encapsulating Security Payload SPI: 0x05000010 Sequence: 1 Data (84 bytes) 0000 00 0f 3d 1a a9 44 00 a0 8e 72 1e 40 08 00 45 00 ..=..D...r.@..E. 0010 00 70 16 7f 00 00 40 32 25 1c a5 e3 f9 6a a5 e3 .p....@2%....j.. 0020 f9 8f 05 00 00 10 00 00 00 01 40 c1 e0 a1 3d 8b ..........@...=. 0030 82 78 52 8e 6c ba dc 89 21 79 10 e2 73 51 0d a8 .xR.l...!y..sQ.. 0040 7f d8 a0 d2 ef ac 32 4c d6 9f 13 13 f2 a6 31 2e ......2L......1. 0050 ad a3 ff b3 b0 1b 9c 2e d2 eb a6 5d c8 43 a1 29 ...........].C.) 0060 8e b4 3f 60 a8 66 a0 42 18 e4 3e 04 20 cc 09 a3 ..?`.f.B..>. ... 0070 41 0c 67 da d5 f1 96 b9 11 c0 17 1b da c4 cb 8a A.g............. 0080 ab eb .. Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 15:55:57.690127000 Time delta from previous packet: 0.001578000 seconds Time since reference or first frame: 1.674728000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:3d:1a:a9:44, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:3d:1a:a9:44 (00:0f:3d:1a:a9:44) Type: IP (0x0800) Frame check sequence: 0xf346f1cc (correct) Internet Protocol, Src Addr: 165.227.249.143 (165.227.249.143), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x00a8 (168) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7cf2 (correct) Source: 165.227.249.143 (165.227.249.143) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x705b4800 Sequence: 1 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 0f 3d 1a a9 44 08 00 45 00 ...r.@..=..D..E. 0010 00 70 00 a8 00 00 fe 32 7c f2 a5 e3 f9 8f a5 e3 .p.....2|....... 0020 f9 6a 70 5b 48 00 00 00 00 01 00 76 41 19 6f 38 .jp[H......vA.o8 0030 50 1f 18 b1 ab 1d 7b 4c dd 67 17 73 03 a0 08 93 P.....{L.g.s.... 0040 c2 40 8c a8 14 74 8d 1b 16 09 80 65 f5 63 f2 2d .@...t.....e.c.- 0050 94 f3 d1 2f 43 04 f1 4b 1a 25 f3 7f 30 59 9d 3a .../C..K.%..0Y.: 0060 78 83 9e 6f 84 fe 7f c8 53 8d be 2e d3 8b 27 ea x..o....S.....'. 0070 0a 73 44 dc 3f df de d5 52 0a f5 2e b8 d4 f3 46 .sD.?...R......F 0080 f1 cc .. Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 15:55:57.692805000 Time delta from previous packet: 0.002678000 seconds Time since reference or first frame: 1.677406000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:3d:1a:a9:44 Destination: 00:0f:3d:1a:a9:44 (00:0f:3d:1a:a9:44) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x973b51f4 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x1680 (5760) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x251b (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.143 (165.227.249.143) Encapsulating Security Payload SPI: 0x05000010 Sequence: 2 Data (84 bytes) 0000 00 0f 3d 1a a9 44 00 a0 8e 72 1e 40 08 00 45 00 ..=..D...r.@..E. 0010 00 70 16 80 00 00 40 32 25 1b a5 e3 f9 6a a5 e3 .p....@2%....j.. 0020 f9 8f 05 00 00 10 00 00 00 02 42 83 8f 9a 93 e9 ..........B..... 0030 48 4b 70 ce c4 c3 c1 07 d9 14 87 7f c2 19 25 f5 HKp...........%. 0040 55 99 ef ba 52 eb 06 d6 8e 5a 60 0e b5 82 08 37 U...R....Z`....7 0050 28 a4 c4 a2 71 26 a2 d7 7c 63 2c 05 a9 e6 fc 02 (...q&..|c,..... 0060 2b 20 f8 d6 15 0c 6c 67 f0 89 a8 cf cb 3d 1b de + ....lg.....=.. 0070 b4 aa ba a6 0d c7 52 9d 20 d4 f7 a4 64 3e 97 3b ......R. ...d>.; 0080 51 f4 Q. Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 15:55:57.694293000 Time delta from previous packet: 0.001488000 seconds Time since reference or first frame: 1.678894000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:3d:1a:a9:44, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:3d:1a:a9:44 (00:0f:3d:1a:a9:44) Type: IP (0x0800) Frame check sequence: 0x817e948c (correct) Internet Protocol, Src Addr: 165.227.249.143 (165.227.249.143), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x00a9 (169) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7cf1 (correct) Source: 165.227.249.143 (165.227.249.143) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x705b4800 Sequence: 2 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 0f 3d 1a a9 44 08 00 45 00 ...r.@..=..D..E. 0010 00 70 00 a9 00 00 fe 32 7c f1 a5 e3 f9 8f a5 e3 .p.....2|....... 0020 f9 6a 70 5b 48 00 00 00 00 02 00 76 41 19 6f 38 .jp[H......vA.o8 0030 50 1f 5b fd 64 8b 5f 50 1b 7e c3 61 cb f8 38 ec P.[.d._P.~.a..8. 0040 59 a2 50 47 af a3 42 13 b7 52 58 a9 4d e1 5a b0 Y.PG..B..RX.M.Z. 0050 c9 99 2b 53 e4 fb 1a bc 50 9c 07 71 25 1f e1 ab ..+S....P..q%... 0060 f8 1a ac 60 77 07 ee f8 d8 d3 09 9c cb b3 69 9e ...`w.........i. 0070 f2 84 83 7b d1 3e 4d b9 a0 65 91 f6 6f e3 81 7e ...{.>M..e..o..~ 0080 94 8c .. Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 15:55:58.687181000 Time delta from previous packet: 0.992888000 seconds Time since reference or first frame: 2.671782000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:3d:1a:a9:44 Destination: 00:0f:3d:1a:a9:44 (00:0f:3d:1a:a9:44) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x3b063b18 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x1681 (5761) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x251a (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.143 (165.227.249.143) Encapsulating Security Payload SPI: 0x05000010 Sequence: 3 Data (84 bytes) 0000 00 0f 3d 1a a9 44 00 a0 8e 72 1e 40 08 00 45 00 ..=..D...r.@..E. 0010 00 70 16 81 00 00 40 32 25 1a a5 e3 f9 6a a5 e3 .p....@2%....j.. 0020 f9 8f 05 00 00 10 00 00 00 03 7c 7e 4d d7 1b 9e ..........|~M... 0030 28 48 2f 77 14 c9 22 e8 c7 6e a0 91 2e 98 2f 1e (H/w.."..n..../. 0040 64 60 da ab 99 e0 8e 84 b1 fb 83 b9 d9 ba 10 17 d`.............. 0050 87 fa a8 25 8b f6 06 ce 2f 22 8c 14 0c c7 39 51 ...%..../"....9Q 0060 7a 96 8c af 83 36 1b 86 cb de 4d 7e 24 51 9d ff z....6....M~$Q.. 0070 75 81 04 35 06 3c 71 7d 18 24 b6 32 f5 eb 3b 06 u..5.. Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 15:55:59.687213000 Time delta from previous packet: 0.998418000 seconds Time since reference or first frame: 3.671814000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0f:3d:1a:a9:44 Destination: 00:0f:3d:1a:a9:44 (00:0f:3d:1a:a9:44) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x54b34ef2 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.143 (165.227.249.143) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x1682 (5762) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x2519 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.143 (165.227.249.143) Encapsulating Security Payload SPI: 0x05000010 Sequence: 4 Data (84 bytes) 0000 00 0f 3d 1a a9 44 00 a0 8e 72 1e 40 08 00 45 00 ..=..D...r.@..E. 0010 00 70 16 82 00 00 40 32 25 19 a5 e3 f9 6a a5 e3 .p....@2%....j.. 0020 f9 8f 05 00 00 10 00 00 00 04 25 e4 6a 4e 51 3a ..........%.jNQ: 0030 ff 36 d6 6e ad 21 3d 41 64 1b b1 e0 c7 3d d4 4b .6.n.!=Ad....=.K 0040 34 61 b0 25 1c 7c 51 66 3e f5 b7 70 7d 25 b0 c3 4a.%.|Qf>..p}%.. 0050 47 34 fa 76 4a c7 37 14 93 55 77 9d 24 51 f6 ad G4.vJ.7..Uw.$Q.. 0060 a5 fa 0d 3e 68 cc cc 25 a0 96 d8 86 37 73 d1 a2 ...>h..%....7s.. 0070 de 2c 1a 39 79 ba 82 74 d7 59 4e b6 af ae 54 b3 .,.9y..t.YN...T. 0080 4e f2 N. Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: May 19, 2005 15:55:59.688928000 Time delta from previous packet: 0.001715000 seconds Time since reference or first frame: 3.673529000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:3d:1a:a9:44, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0f:3d:1a:a9:44 (00:0f:3d:1a:a9:44) Type: IP (0x0800) Frame check sequence: 0x087126e0 (correct) Internet Protocol, Src Addr: 165.227.249.143 (165.227.249.143), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x00ab (171) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7cef (correct) Source: 165.227.249.143 (165.227.249.143) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x705b4800 Sequence: 4 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 0f 3d 1a a9 44 08 00 45 00 ...r.@..=..D..E. 0010 00 70 00 ab 00 00 fe 32 7c ef a5 e3 f9 8f a5 e3 .p.....2|....... 0020 f9 6a 70 5b 48 00 00 00 00 04 00 76 41 19 6f 38 .jp[H......vA.o8 0030 50 1f 1e c2 38 27 1e 9c 52 1e 60 16 66 3e bf ec P...8'..R.`.f>.. 0040 a6 ab 48 05 37 dd 0f b9 68 d4 32 22 85 94 8a 28 ..H.7...h.2"...( 0050 d3 b2 73 a5 95 32 be f4 38 33 32 ab bc 62 e7 2d ..s..2..832..b.- 0060 ea 87 6b 88 23 99 08 9f 54 ec 84 62 4f 36 25 ac ..k.#...T..bO6%. 0070 1a e3 48 b5 f8 e6 90 a4 5f 1d 16 e4 c7 dc 08 71 ..H....._......q 0080 26 e0 &.