Frame 1 (142 bytes on wire, 142 bytes captured) Arrival Time: Mar 6, 2007 15:07:52.681388000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0xfb73 (64371) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x4035 [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.146 (165.227.249.146) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x0bab [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x428BD24FA1B61A50 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 0c 29 af 74 f5 00 a0 8e 72 1e 40 08 00 45 00 ..).t....r.@..E. 0010 00 80 fb 73 00 00 40 11 40 35 a5 e3 f9 6a a5 e3 ...s..@.@5...j.. 0020 f9 92 01 f4 01 f4 00 6c 0b ab 42 8b d2 4f a1 b6 .......l..B..O.. 0030 1a 50 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .P.............. 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 00 00 00 14 af ca ........p....... 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 2 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 6, 2007 15:07:52.725278000 Time delta from previous packet: 0.043890000 seconds Time since reference or first frame: 0.043890000 seconds Frame Number: 2 Packet Length: 122 bytes Capture Length: 122 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.146 (165.227.249.146), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x073f (1855) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf47d [correct] Good: True Bad : False Source: 165.227.249.146 (165.227.249.146) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x30a1 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x428BD24FA1B61A50 Responder cookie: 0x6544F1BC83A569D7 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 a0 8e 72 1e 40 00 0c 29 af 74 f5 08 00 45 00 ...r.@..).t...E. 0010 00 6c 07 3f 00 00 80 11 f4 7d a5 e3 f9 92 a5 e3 .l.?.....}...... 0020 f9 6a 01 f4 01 f4 00 58 30 a1 42 8b d2 4f a1 b6 .j.....X0.B..O.. 0030 1a 50 65 44 f1 bc 83 a5 69 d7 01 10 02 00 00 00 .PeD....i....... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 ........p. Frame 3 (258 bytes on wire, 258 bytes captured) Arrival Time: Mar 6, 2007 15:07:52.948593000 Time delta from previous packet: 0.223315000 seconds Time since reference or first frame: 0.267205000 seconds Frame Number: 3 Packet Length: 258 bytes Capture Length: 258 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0xfb74 (64372) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3fc0 [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.146 (165.227.249.146) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0x36ec [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x428BD24FA1B61A50 Responder cookie: 0x6544F1BC83A569D7 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x0300001444B6265C301F03F23F2559C0C6A7367800000008... 0000 00 0c 29 af 74 f5 00 a0 8e 72 1e 40 08 00 45 00 ..).t....r.@..E. 0010 00 f4 fb 74 00 00 40 11 3f c0 a5 e3 f9 6a a5 e3 ...t..@.?....j.. 0020 f9 92 01 f4 01 f4 00 e0 36 ec 42 8b d2 4f a1 b6 ........6.B..O.. 0030 1a 50 65 44 f1 bc 83 a5 69 d7 04 10 02 00 00 00 .PeD....i....... 0040 00 00 00 00 00 d8 0a 00 00 84 96 db 8b 3f 6f 28 .............?o( 0050 0d f2 ee 95 c4 7d 43 c3 c8 6b ef aa c8 aa 7e 8d .....}C..k....~. 0060 39 1a 0e 84 bd a2 12 00 9e dd 72 97 cf 79 c9 65 9.........r..y.e 0070 19 10 a5 1e 64 b7 36 f9 73 c6 3f 49 a1 36 e3 25 ....d.6.s.?I.6.% 0080 66 23 5d 68 35 58 97 92 29 13 dd ec d9 f0 3f 18 f#]h5X..).....?. 0090 db c6 fa d0 4b be c5 b3 04 eb a3 02 05 01 c8 ba ....K........... 00a0 3d f9 d5 44 e5 04 93 a3 33 3d fe c1 ae b5 c4 d5 =..D....3=...... 00b0 16 ba 10 53 40 7d 43 e3 37 f7 86 80 43 0e 5b 4d ...S@}C.7...C.[M 00c0 da c5 e4 90 37 fd 9e 89 44 4d 0d 00 00 18 29 49 ....7...DM....)I 00d0 af ff 73 06 88 79 7e a6 56 30 4f 2e 96 30 2f 9e ..s..y~.V0O..0/. 00e0 4f 59 00 00 00 20 03 00 00 14 44 b6 26 5c 30 1f OY... ....D.&\0. 00f0 03 f2 3f 25 59 c0 c6 a7 36 78 00 00 00 08 00 06 ..?%Y...6x...... 0100 00 03 .. Frame 4 (222 bytes on wire, 222 bytes captured) Arrival Time: Mar 6, 2007 15:07:52.988591000 Time delta from previous packet: 0.039998000 seconds Time since reference or first frame: 0.307203000 seconds Frame Number: 4 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.146 (165.227.249.146), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0740 (1856) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf418 [correct] Good: True Bad : False Source: 165.227.249.146 (165.227.249.146) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x84bf [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x428BD24FA1B61A50 Responder cookie: 0x6544F1BC83A569D7 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 a0 8e 72 1e 40 00 0c 29 af 74 f5 08 00 45 00 ...r.@..).t...E. 0010 00 d0 07 40 00 00 80 11 f4 18 a5 e3 f9 92 a5 e3 ...@............ 0020 f9 6a 01 f4 01 f4 00 bc 84 bf 42 8b d2 4f a1 b6 .j........B..O.. 0030 1a 50 65 44 f1 bc 83 a5 69 d7 04 10 02 00 00 00 .PeD....i....... 0040 00 00 00 00 00 b4 0a 00 00 84 0d c1 f7 ec c1 e7 ................ 0050 2d 3c 5f 33 8f 78 b8 24 9b 78 08 0c 4b 32 4d 0e -<_3.x.$.x..K2M. 0060 68 bd 26 1d 1a e7 59 1e 68 00 16 74 18 72 96 d2 h.&...Y.h..t.r.. 0070 17 32 c4 87 63 19 4b d2 3e b0 e7 dc c0 30 99 16 .2..c.K.>....0.. 0080 6c ed 7e bb 10 1c 90 5e ae 12 ed 7c 3f e8 55 3b l.~....^...|?.U; 0090 02 8b 20 17 35 06 d9 51 a5 42 c6 3d 98 63 ad c9 .. .5..Q.B.=.c.. 00a0 fa 08 59 8d 62 16 b5 3c 82 54 87 02 8c af 66 ef ..Y.b..<.T....f. 00b0 ff ed 5f d3 c8 4c e6 83 c9 bc 5e 59 2c 8a 59 99 .._..L....^Y,.Y. 00c0 9b 14 44 ce 17 b6 a1 91 25 6d 00 00 00 14 1b 3c ..D.....%m.....< 00d0 74 3e b2 f5 64 85 6b 0e d5 c4 fc b4 96 93 t>..d.k....... Frame 5 (134 bytes on wire, 134 bytes captured) Arrival Time: Mar 6, 2007 15:07:53.281543000 Time delta from previous packet: 0.292952000 seconds Time since reference or first frame: 0.600155000 seconds Frame Number: 5 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0xfb75 (64373) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x403b [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.146 (165.227.249.146) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xa4b1 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x428BD24FA1B61A50 Responder cookie: 0x6544F1BC83A569D7 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 af 74 f5 00 a0 8e 72 1e 40 08 00 45 00 ..).t....r.@..E. 0010 00 78 fb 75 00 00 40 11 40 3b a5 e3 f9 6a a5 e3 .x.u..@.@;...j.. 0020 f9 92 01 f4 01 f4 00 64 a4 b1 42 8b d2 4f a1 b6 .......d..B..O.. 0030 1a 50 65 44 f1 bc 83 a5 69 d7 05 10 02 01 00 00 .PeD....i....... 0040 00 00 00 00 00 5c 7e 2d 41 47 da 1e 1f c5 ad 25 .....\~-AG.....% 0050 aa 4e 7a c6 93 16 4c 73 f9 1f 86 2e 93 4d 51 fb .Nz...Ls.....MQ. 0060 f3 ea 5e b4 30 e1 bd cf 9d a3 64 46 7b f3 7a 9e ..^.0.....dF{.z. 0070 34 21 f7 c0 00 b6 35 11 57 1a b3 ee f5 e2 c6 c1 4!....5.W....... 0080 e8 99 da 73 05 15 ...s.. Frame 6 (110 bytes on wire, 110 bytes captured) Arrival Time: Mar 6, 2007 15:07:53.290461000 Time delta from previous packet: 0.008918000 seconds Time since reference or first frame: 0.609073000 seconds Frame Number: 6 Packet Length: 110 bytes Capture Length: 110 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.146 (165.227.249.146), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0741 (1857) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf487 [correct] Good: True Bad : False Source: 165.227.249.146 (165.227.249.146) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xaeaf [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x428BD24FA1B61A50 Responder cookie: 0x6544F1BC83A569D7 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 af 74 f5 08 00 45 00 ...r.@..).t...E. 0010 00 60 07 41 00 00 80 11 f4 87 a5 e3 f9 92 a5 e3 .`.A............ 0020 f9 6a 01 f4 01 f4 00 4c ae af 42 8b d2 4f a1 b6 .j.....L..B..O.. 0030 1a 50 65 44 f1 bc 83 a5 69 d7 05 10 02 01 00 00 .PeD....i....... 0040 00 00 00 00 00 44 ea 2e 28 53 b7 69 67 de f0 31 .....D..(S.ig..1 0050 ff 99 d9 3a b8 c6 12 73 be 44 ed 05 68 87 58 69 ...:...s.D..h.Xi 0060 bb 0a ff 1d 9a c3 f1 db 27 40 d3 70 7d 85 ........'@.p}. Frame 7 (334 bytes on wire, 334 bytes captured) Arrival Time: Mar 6, 2007 15:07:53.500911000 Time delta from previous packet: 0.210450000 seconds Time since reference or first frame: 0.819523000 seconds Frame Number: 7 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0xfb76 (64374) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3f72 [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.146 (165.227.249.146) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x2d5f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x428BD24FA1B61A50 Responder cookie: 0x6544F1BC83A569D7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xF706E4B1 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 af 74 f5 00 a0 8e 72 1e 40 08 00 45 00 ..).t....r.@..E. 0010 01 40 fb 76 00 00 40 11 3f 72 a5 e3 f9 6a a5 e3 .@.v..@.?r...j.. 0020 f9 92 01 f4 01 f4 01 2c 2d 5f 42 8b d2 4f a1 b6 .......,-_B..O.. 0030 1a 50 65 44 f1 bc 83 a5 69 d7 08 10 20 01 f7 06 .PeD....i... ... 0040 e4 b1 00 00 01 24 8a 61 7c f9 f1 0f 43 68 36 b7 .....$.a|...Ch6. 0050 e9 d8 ae c8 1b 99 d8 f6 42 7f 26 29 45 39 83 4d ........B.&)E9.M 0060 5c d7 91 70 d6 16 35 a0 bd e6 e9 e0 88 02 e1 dd \..p..5......... 0070 14 7c 17 9f 05 4a bb 84 75 9d 28 71 e8 9b 82 b1 .|...J..u.(q.... 0080 49 81 00 97 37 96 8f 30 b1 ae e2 4a 4a 03 a4 f8 I...7..0...JJ... 0090 ca cf 57 ec 17 de d6 f5 3b af e9 d7 71 61 19 d0 ..W.....;...qa.. 00a0 59 94 9a d7 55 25 83 a1 ad e7 df c4 e3 1c 85 38 Y...U%.........8 00b0 58 c7 67 58 70 dd 3f 15 b6 a0 fd 80 83 f3 98 b0 X.gXp.?......... 00c0 97 64 bf 84 81 35 6b a2 aa 76 1c b1 76 b5 9d ff .d...5k..v..v... 00d0 fe 88 b8 fe c2 8d 2b bf fc 74 9d 9a 98 92 b9 5c ......+..t.....\ 00e0 22 31 2e 27 01 75 8b bd 6f cc a6 b3 fa ae 25 e5 "1.'.u..o.....%. 00f0 f1 3a cb f6 1e 74 ff fb 95 ac 1a e7 c1 d6 bb 4d .:...t.........M 0100 d0 63 89 9f 3f 23 85 78 26 c5 a6 62 c7 bd 42 73 .c..?#.x&..b..Bs 0110 34 7d 78 ac 36 82 aa 03 47 2d e3 bf 22 db 36 ac 4}x.6...G-..".6. 0120 50 d4 b7 2c b9 43 61 d9 95 ae f9 4a 94 c0 6f 85 P..,.Ca....J..o. 0130 7a 5e 3b b8 f6 ff 3f 62 43 d5 ba 65 4e 67 e6 9e z^;...?bC..eNg.. 0140 fa c3 71 95 c3 87 f6 c2 f2 6b d1 5b 4e 2f ..q......k.[N/ Frame 8 (334 bytes on wire, 334 bytes captured) Arrival Time: Mar 6, 2007 15:07:53.540494000 Time delta from previous packet: 0.039583000 seconds Time since reference or first frame: 0.859106000 seconds Frame Number: 8 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.146 (165.227.249.146), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0742 (1858) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf3a6 [correct] Good: True Bad : False Source: 165.227.249.146 (165.227.249.146) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xf701 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x428BD24FA1B61A50 Responder cookie: 0x6544F1BC83A569D7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xF706E4B1 Length: 292 Encrypted payload (264 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 af 74 f5 08 00 45 00 ...r.@..).t...E. 0010 01 40 07 42 00 00 80 11 f3 a6 a5 e3 f9 92 a5 e3 .@.B............ 0020 f9 6a 01 f4 01 f4 01 2c f7 01 42 8b d2 4f a1 b6 .j.....,..B..O.. 0030 1a 50 65 44 f1 bc 83 a5 69 d7 08 10 20 01 f7 06 .PeD....i... ... 0040 e4 b1 00 00 01 24 7e ac 98 93 50 46 b7 17 c5 76 .....$~...PF...v 0050 a1 84 41 2d 2b ef 15 36 eb 6a f3 90 e5 58 78 20 ..A-+..6.j...Xx 0060 14 59 23 ee 63 c7 62 88 96 38 d1 15 56 b1 cb b8 .Y#.c.b..8..V... 0070 91 77 2c 6b d8 64 ec d0 2e 70 ff 19 01 d3 61 a7 .w,k.d...p....a. 0080 0e 33 4c 25 5f a5 da a5 ce 0b e8 1c 32 53 76 91 .3L%_.......2Sv. 0090 f1 6e 85 e4 e1 89 84 71 08 71 86 3c 0b a0 7c 05 .n.....q.q.<..|. 00a0 0d 89 50 64 bb 0a bb 61 a6 60 45 91 ee cd 41 12 ..Pd...a.`E...A. 00b0 aa 46 0e 80 22 67 50 42 bd 24 c0 b9 af 0b 2a 4c .F.."gPB.$....*L 00c0 4b 9f 63 3d 4e 69 99 1d 43 a6 77 88 d1 5c ff f8 K.c=Ni..C.w..\.. 00d0 03 48 fe 3a 9b 55 31 f3 d2 46 33 46 2b a9 a1 f9 .H.:.U1..F3F+... 00e0 95 93 1c ee ea 33 72 8d 9b 1c d6 0f a6 d3 34 44 .....3r.......4D 00f0 f2 f9 36 07 39 97 8c 9d 04 46 6a ce 43 df 72 5f ..6.9....Fj.C.r_ 0100 25 ca 02 aa a0 5c 54 86 40 77 d3 ad 7c d3 d4 81 %....\T.@w..|... 0110 b1 b6 83 c4 2c fd 09 d8 f4 62 ff 43 b6 0b 67 ed ....,....b.C..g. 0120 de 0f 9b ed 9b fa b5 4a 5b ce ef 92 72 ef 01 2e .......J[...r... 0130 27 fd e6 5d 54 f3 2f f7 9e 22 8d 30 3d 20 5f 4d '..]T./..".0= _M 0140 58 33 c7 29 ba 97 9d 55 1a cc 06 7e ba 93 X3.)...U...~.. Frame 9 (94 bytes on wire, 94 bytes captured) Arrival Time: Mar 6, 2007 15:07:53.827938000 Time delta from previous packet: 0.287444000 seconds Time since reference or first frame: 1.146550000 seconds Frame Number: 9 Packet Length: 94 bytes Capture Length: 94 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0xfb77 (64375) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x4061 [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.146 (165.227.249.146) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0xe250 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x428BD24FA1B61A50 Responder cookie: 0x6544F1BC83A569D7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xF706E4B1 Length: 52 Encrypted payload (24 bytes) 0000 00 0c 29 af 74 f5 00 a0 8e 72 1e 40 08 00 45 00 ..).t....r.@..E. 0010 00 50 fb 77 00 00 40 11 40 61 a5 e3 f9 6a a5 e3 .P.w..@.@a...j.. 0020 f9 92 01 f4 01 f4 00 3c e2 50 42 8b d2 4f a1 b6 .......<.PB..O.. 0030 1a 50 65 44 f1 bc 83 a5 69 d7 08 10 20 01 f7 06 .PeD....i... ... 0040 e4 b1 00 00 00 34 22 6e 6d e1 ae 4e 68 7e 89 25 .....4"nm..Nh~.% 0050 c7 9d a1 f1 c3 01 85 00 ac 04 10 ad 22 95 ............". Frame 10 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 6, 2007 15:07:54.319970000 Time delta from previous packet: 0.492032000 seconds Time since reference or first frame: 1.638582000 seconds Frame Number: 10 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfb78 (64376) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x401f [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.146 (165.227.249.146) Encapsulating Security Payload SPI: 0xac655cbc Sequence: 1 Data (84 bytes) 0000 00 0c 29 af 74 f5 00 a0 8e 72 1e 40 08 00 45 00 ..).t....r.@..E. 0010 00 70 fb 78 00 00 40 32 40 1f a5 e3 f9 6a a5 e3 .p.x..@2@....j.. 0020 f9 92 ac 65 5c bc 00 00 00 01 5c e4 ca 37 86 10 ...e\.....\..7.. 0030 98 30 fe b5 9d f7 1d 8a 64 78 84 0a 1f c6 fe d0 .0......dx...... 0040 f2 03 6d e5 77 25 e0 c2 b9 20 15 91 a2 d1 df b0 ..m.w%... ...... 0050 64 24 6d d8 51 ea 78 7c cd 8d 01 ac 40 04 bd 1a d$m.Q.x|....@... 0060 53 3e e5 2b 44 f1 c9 81 71 e7 99 24 43 86 78 7e S>.+D...q..$C.x~ 0070 a5 76 d4 83 e8 4c e1 e0 dd a3 a8 2e d4 f7 .v...L........ Frame 11 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 6, 2007 15:07:54.321033000 Time delta from previous packet: 0.001063000 seconds Time since reference or first frame: 1.639645000 seconds Frame Number: 11 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.146 (165.227.249.146), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x394f (14671) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 126 Protocol: ESP (0x32) Header checksum: 0xc448 [correct] Good: True Bad : False Source: 165.227.249.146 (165.227.249.146) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x95f55000 Sequence: 1 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 af 74 f5 08 00 45 00 ...r.@..).t...E. 0010 00 70 39 4f 00 00 7e 32 c4 48 a5 e3 f9 92 a5 e3 .p9O..~2.H...... 0020 f9 6a 95 f5 50 00 00 00 00 01 df ea d9 93 98 87 .j..P........... 0030 9a a2 a4 a6 02 9d eb 33 24 e2 fa 78 30 27 74 c6 .......3$..x0't. 0040 4e 73 ea 32 eb fd 0a 72 df d9 ab 11 75 49 98 a3 Ns.2...r....uI.. 0050 69 c3 cc b0 e5 33 8a 1f 96 2d 31 16 1f 7f 05 24 i....3...-1....$ 0060 18 52 37 56 78 61 1f ce ea a4 c8 6f a5 cf eb d6 .R7Vxa.....o.... 0070 56 69 43 27 71 3e 03 48 fb 8e a1 6b 9c 2a ViC'q>.H...k.* Frame 12 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 6, 2007 15:07:54.335153000 Time delta from previous packet: 0.014120000 seconds Time since reference or first frame: 1.653765000 seconds Frame Number: 12 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfb79 (64377) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x401e [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.146 (165.227.249.146) Encapsulating Security Payload SPI: 0xac655cbc Sequence: 2 Data (84 bytes) 0000 00 0c 29 af 74 f5 00 a0 8e 72 1e 40 08 00 45 00 ..).t....r.@..E. 0010 00 70 fb 79 00 00 40 32 40 1e a5 e3 f9 6a a5 e3 .p.y..@2@....j.. 0020 f9 92 ac 65 5c bc 00 00 00 02 4f 64 e6 56 d2 40 ...e\.....Od.V.@ 0030 4e 69 90 11 44 28 13 41 15 90 f0 c6 2f 20 d1 13 Ni..D(.A..../ .. 0040 32 91 33 8c c1 08 b5 bf 2f a4 46 11 80 bf dd bc 2.3...../.F..... 0050 59 8c e5 a2 3a a3 26 45 83 53 ca 5d c6 37 9d 67 Y...:.&E.S.].7.g 0060 64 2a 0f 4a 25 05 cc 4b ab ad 1d de 94 f8 87 7b d*.J%..K.......{ 0070 b0 4c 62 96 41 b9 22 21 57 ee 3f 1a c9 43 .Lb.A."!W.?..C Frame 13 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 6, 2007 15:07:54.360083000 Time delta from previous packet: 0.024930000 seconds Time since reference or first frame: 1.678695000 seconds Frame Number: 13 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.146 (165.227.249.146), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x3950 (14672) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 126 Protocol: ESP (0x32) Header checksum: 0xc447 [correct] Good: True Bad : False Source: 165.227.249.146 (165.227.249.146) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x95f55000 Sequence: 2 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 af 74 f5 08 00 45 00 ...r.@..).t...E. 0010 00 70 39 50 00 00 7e 32 c4 47 a5 e3 f9 92 a5 e3 .p9P..~2.G...... 0020 f9 6a 95 f5 50 00 00 00 00 02 f3 97 8c 05 84 aa .j..P........... 0030 d9 b9 22 b2 16 9e 2d 31 3b b9 cc 82 09 b9 43 ad .."...-1;.....C. 0040 a2 fc 73 90 75 9f 8f 1c 7e 2d 4f 52 c9 6a e2 64 ..s.u...~-OR.j.d 0050 05 e1 5f e0 f4 9a 2c 27 24 56 f6 b4 2b c3 f5 ab .._...,'$V..+... 0060 5c b1 7f f5 9f 86 f4 0b ef 7d a4 17 2a bc 91 33 \........}..*..3 0070 be 85 37 cd 5a 6d 7b 69 c9 ed b9 92 f9 a4 ..7.Zm{i...... Frame 14 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 6, 2007 15:07:55.348946000 Time delta from previous packet: 0.988863000 seconds Time since reference or first frame: 2.667558000 seconds Frame Number: 14 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfb7a (64378) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x401d [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.146 (165.227.249.146) Encapsulating Security Payload SPI: 0xac655cbc Sequence: 3 Data (84 bytes) 0000 00 0c 29 af 74 f5 00 a0 8e 72 1e 40 08 00 45 00 ..).t....r.@..E. 0010 00 70 fb 7a 00 00 40 32 40 1d a5 e3 f9 6a a5 e3 .p.z..@2@....j.. 0020 f9 92 ac 65 5c bc 00 00 00 03 77 09 6a cc 22 b4 ...e\.....w.j.". 0030 42 0b 98 49 cc 43 89 43 c0 b3 57 50 96 fb 90 24 B..I.C.C..WP...$ 0040 3a 98 26 ba 3d 29 42 ed 3b dd 03 6c 2e c8 13 b7 :.&.=)B.;..l.... 0050 1c 72 86 ac 88 c2 45 73 07 6f 05 9d a8 66 b3 e1 .r....Es.o...f.. 0060 f2 c0 45 dd ac 30 c3 12 17 d4 40 a8 ce 9a 76 9d ..E..0....@...v. 0070 c2 06 85 3a a1 d7 80 b9 ee 14 99 df 42 e6 ...:........B. Frame 15 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 6, 2007 15:07:55.349485000 Time delta from previous packet: 0.000539000 seconds Time since reference or first frame: 2.668097000 seconds Frame Number: 15 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.146 (165.227.249.146), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x3951 (14673) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 126 Protocol: ESP (0x32) Header checksum: 0xc446 [correct] Good: True Bad : False Source: 165.227.249.146 (165.227.249.146) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x95f55000 Sequence: 3 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 af 74 f5 08 00 45 00 ...r.@..).t...E. 0010 00 70 39 51 00 00 7e 32 c4 46 a5 e3 f9 92 a5 e3 .p9Q..~2.F...... 0020 f9 6a 95 f5 50 00 00 00 00 03 41 d7 37 15 85 cf .j..P.....A.7... 0030 56 9a ed e9 3e 82 c5 cd 38 62 1d f0 b3 d8 13 7d V...>...8b.....} 0040 b4 9f 9e 4d 86 fe 03 b4 14 d5 fd 5b d1 9f 02 e3 ...M.......[.... 0050 1b c0 4f d7 e5 40 55 bd 47 f1 00 e1 ec 17 32 4a ..O..@U.G.....2J 0060 62 d6 35 bd f5 52 8c 04 14 47 58 99 1d 7a 02 92 b.5..R...GX..z.. 0070 87 8f 2c e9 b3 0d c9 d4 d4 3d 70 fa 5e ad ..,......=p.^. Frame 16 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 6, 2007 15:07:56.354189000 Time delta from previous packet: 1.004704000 seconds Time since reference or first frame: 3.672801000 seconds Frame Number: 16 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.106 (165.227.249.106), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xfb7b (64379) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x401c [correct] Good: True Bad : False Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.146 (165.227.249.146) Encapsulating Security Payload SPI: 0xac655cbc Sequence: 4 Data (84 bytes) 0000 00 0c 29 af 74 f5 00 a0 8e 72 1e 40 08 00 45 00 ..).t....r.@..E. 0010 00 70 fb 7b 00 00 40 32 40 1c a5 e3 f9 6a a5 e3 .p.{..@2@....j.. 0020 f9 92 ac 65 5c bc 00 00 00 04 51 64 76 4d fa e2 ...e\.....QdvM.. 0030 92 1a 4b 43 05 87 55 1e f6 f6 58 ad 91 21 8b d4 ..KC..U...X..!.. 0040 25 f5 8c da eb a7 32 21 c3 d2 3a 35 1e 60 97 e1 %.....2!..:5.`.. 0050 a0 ea f6 7b 0f 64 59 d9 75 1a 28 25 70 ef de 5b ...{.dY.u.(%p..[ 0060 6b c1 e3 2f 35 87 cc 70 36 7f 52 96 6f bb 51 00 k../5..p6.R.o.Q. 0070 1f bf 7e d1 36 2e 35 2e 50 45 15 91 ae 95 ..~.6.5.PE.... Frame 17 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 6, 2007 15:07:56.354642000 Time delta from previous packet: 0.000453000 seconds Time since reference or first frame: 3.673254000 seconds Frame Number: 17 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5), Dst: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.146 (165.227.249.146), Dst: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x3952 (14674) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 126 Protocol: ESP (0x32) Header checksum: 0xc445 [correct] Good: True Bad : False Source: 165.227.249.146 (165.227.249.146) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x95f55000 Sequence: 4 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 af 74 f5 08 00 45 00 ...r.@..).t...E. 0010 00 70 39 52 00 00 7e 32 c4 45 a5 e3 f9 92 a5 e3 .p9R..~2.E...... 0020 f9 6a 95 f5 50 00 00 00 00 04 ea ad da f1 d5 fe .j..P........... 0030 2d 27 91 bf 0b c0 ad 67 dd 32 68 64 23 b7 83 cc -'.....g.2hd#... 0040 a4 d0 30 87 60 31 e5 64 c3 32 f3 28 95 1d c0 a7 ..0.`1.d.2.(.... 0050 1b 22 28 ec 61 cf 86 42 67 8d 19 d6 4f 1c 9b 72 ."(.a..Bg...O..r 0060 49 26 4c 7a 04 e8 c4 68 6a 1b 30 20 89 75 26 6e I&Lz...hj.0 .u&n 0070 dc 90 23 17 80 90 3a 2e 8f 95 f2 fa 67 4a ..#...:.....gJ