Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Jun 16, 2005 14:54:29.413968000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 166 bytes Capture Length: 166 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:0f:b5:4b:45:e0 Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x91778778 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x02ba (698) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8fe (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.101 (165.227.249.101) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0xb3d8 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x3B232701B40BC33F Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 0000 00 0f b5 4b 45 e0 00 0c 29 1d cf fc 08 00 45 00 ...KE...).....E. 0010 00 94 02 ba 00 00 80 11 f8 fe a5 e3 f9 73 a5 e3 .............s.. 0020 f9 65 01 f4 01 f4 00 80 b3 d8 3b 23 27 01 b4 0b .e........;#'... 0030 c3 3f 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .?.............. 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 44 85 ..............D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 0090 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00a0 7b 1f 91 77 87 78 {..w.x Frame 2 (186 bytes on wire, 186 bytes captured) Arrival Time: Jun 16, 2005 14:54:29.417195000 Time delta from previous packet: 0.003227000 seconds Time since reference or first frame: 0.003227000 seconds Frame Number: 2 Packet Length: 186 bytes Capture Length: 186 bytes Ethernet II, Src: 00:0f:b5:4b:45:e0, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Type: IP (0x0800) Frame check sequence: 0xbb36c075 (correct) Internet Protocol, Src Addr: 165.227.249.101 (165.227.249.101), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 168 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfba4 (correct) Source: 165.227.249.101 (165.227.249.101) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 148 Checksum: 0xe626 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x3B232701B40BC33F Responder cookie: 0x235E5AEFF875B2BB Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 140 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x648982785BEDBDD66A6DD356F0E160FD 0000 00 0c 29 1d cf fc 00 0f b5 4b 45 e0 08 00 45 00 ..)......KE...E. 0010 00 a8 00 00 40 00 40 11 fb a4 a5 e3 f9 65 a5 e3 ....@.@......e.. 0020 f9 73 01 f4 01 f4 00 94 e6 26 3b 23 27 01 b4 0b .s.......&;#'... 0030 c3 3f 23 5e 5a ef f8 75 b2 bb 01 10 02 00 00 00 .?#^Z..u........ 0040 00 00 00 00 00 8c 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 90 cb ................ 0080 80 91 3e bb 69 6e 08 63 81 b5 ec 42 7b 1f 0d 00 ..>.in.c...B{... 0090 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 00a0 01 00 00 00 00 14 64 89 82 78 5b ed bd d6 6a 6d ......d..x[...jm 00b0 d3 56 f0 e1 60 fd bb 36 c0 75 .V..`..6.u Frame 3 (350 bytes on wire, 350 bytes captured) Arrival Time: Jun 16, 2005 14:54:30.377719000 Time delta from previous packet: 0.960524000 seconds Time since reference or first frame: 0.963751000 seconds Frame Number: 3 Packet Length: 350 bytes Capture Length: 350 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:0f:b5:4b:45:e0 Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x0e0b50a5 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x02bb (699) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf845 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.101 (165.227.249.101) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0x9675 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x3B232701B40BC33F Responder cookie: 0x235E5AEFF875B2BB Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 304 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 24 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Vendor ID (13) Length: 24 Payload Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 0f b5 4b 45 e0 00 0c 29 1d cf fc 08 00 45 00 ...KE...).....E. 0010 01 4c 02 bb 00 00 80 11 f8 45 a5 e3 f9 73 a5 e3 .L.......E...s.. 0020 f9 65 01 f4 01 f4 01 38 96 75 3b 23 27 01 b4 0b .e.....8.u;#'... 0030 c3 3f 23 5e 5a ef f8 75 b2 bb 04 10 02 00 00 00 .?#^Z..u........ 0040 00 00 00 00 01 30 0a 00 00 84 d4 c1 36 f8 d7 05 .....0......6... 0050 f5 2a 16 21 0a 88 d3 00 f0 53 8b ae d6 ea f0 03 .*.!.....S...... 0060 dd 22 37 eb 33 d8 cf 7d 2b 83 0b b3 f5 89 ca 85 ."7.3..}+....... 0070 b2 e3 d2 36 5b c2 35 68 70 54 13 d4 20 1f a5 1c ...6[.5hpT.. ... 0080 ca 2d 9b eb 95 96 a2 0a 52 8f cd 0e 20 09 47 84 .-......R... .G. 0090 79 c3 3e 1a 24 17 a5 1a 61 d9 b5 4c d6 86 14 0c y.>.$...a..L.... 00a0 39 df eb 4f 97 57 f5 b9 b4 3a 93 f0 c0 39 5d 55 9..O.W...:...9]U 00b0 06 0e 73 4d 30 3e 6e 0e 85 b7 d7 a1 e0 c9 42 8d ..sM0>n.......B. 00c0 f4 45 48 91 86 09 f2 f0 fa 8b 82 00 00 18 fe 7e .EH............~ 00d0 90 1b d0 53 5d 20 d1 c0 0e f7 50 09 c9 cb e1 6d ...S] ....P....m 00e0 60 5b 82 00 00 18 90 e3 e8 7b 89 94 9c 1a 85 6e `[.......{.....n 00f0 00 b1 af 2a 11 01 45 97 59 f1 0d 00 00 18 e1 0a ...*..E.Y....... 0100 ff 59 e4 33 f8 98 33 ed 8f 2f f4 6b 75 1e f3 8f .Y.3..3../.ku... 0110 47 28 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 G(...0G......... 0120 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0130 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0140 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0150 00 0c 09 00 26 89 df d6 b7 12 0e 0b 50 a5 ....&.......P. Frame 4 (266 bytes on wire, 266 bytes captured) Arrival Time: Jun 16, 2005 14:54:30.573388000 Time delta from previous packet: 0.195669000 seconds Time since reference or first frame: 1.159420000 seconds Frame Number: 4 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0f:b5:4b:45:e0, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Type: IP (0x0800) Frame check sequence: 0x8953b219 (correct) Internet Protocol, Src Addr: 165.227.249.101 (165.227.249.101), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb54 (correct) Source: 165.227.249.101 (165.227.249.101) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0xdc6a (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x3B232701B40BC33F Responder cookie: 0x235E5AEFF875B2BB Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 12 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0c 29 1d cf fc 00 0f b5 4b 45 e0 08 00 45 00 ..)......KE...E. 0010 00 f8 00 00 40 00 40 11 fb 54 a5 e3 f9 65 a5 e3 ....@.@..T...e.. 0020 f9 73 01 f4 01 f4 00 e4 dc 6a 3b 23 27 01 b4 0b .s.......j;#'... 0030 c3 3f 23 5e 5a ef f8 75 b2 bb 04 10 02 00 00 00 .?#^Z..u........ 0040 00 00 00 00 00 dc 0a 00 00 84 6c 51 e8 dd d0 72 ..........lQ...r 0050 74 b0 5a b0 da bc 67 b9 91 f1 b2 c6 36 80 cf 52 t.Z...g.....6..R 0060 36 ed c3 06 1e 05 f5 00 b3 20 c0 d9 84 0b 16 0b 6........ ...... 0070 57 5b f4 cb 11 98 87 51 dd ac 00 28 92 8e a6 c4 W[.....Q...(.... 0080 e3 9a 6e f7 e4 e4 d8 bc 75 26 30 82 0e 5a 82 a4 ..n.....u&0..Z.. 0090 26 eb e1 57 0d 88 32 83 cd 4b f6 9e 7b 5e 18 c7 &..W..2..K..{^.. 00a0 65 ac d8 3d f4 4d d8 3c 6e 0e 0b 9b b5 59 f9 eb e..=.M...*..1.t.u. 0120 43 9f 84 a1 65 bd ba 50 71 0c 92 71 26 62 99 fa C...e..Pq..q&b.. 0130 37 48 e1 04 ef 9e de cf 6c 3b 48 96 03 43 04 2c 7H......l;H..C., 0140 4e 0a N. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Jun 16, 2005 14:54:32.732745000 Time delta from previous packet: 0.025862000 seconds Time since reference or first frame: 3.318777000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:0f:b5:4b:45:e0 Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x92770764 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x02c1 (705) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf93b (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.101 (165.227.249.101) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0xc646 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x3B232701B40BC33F Responder cookie: 0x235E5AEFF875B2BB Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x4183CC82 Length: 52 Encrypted payload (24 bytes) 0000 00 0f b5 4b 45 e0 00 0c 29 1d cf fc 08 00 45 00 ...KE...).....E. 0010 00 50 02 c1 00 00 80 11 f9 3b a5 e3 f9 73 a5 e3 .P.......;...s.. 0020 f9 65 01 f4 01 f4 00 3c c6 46 3b 23 27 01 b4 0b .e.....<.F;#'... 0030 c3 3f 23 5e 5a ef f8 75 b2 bb 08 10 20 01 41 83 .?#^Z..u.... .A. 0040 cc 82 00 00 00 34 ea 4f 7c aa 35 56 98 a7 69 c2 .....4.O|.5V..i. 0050 24 8e 09 00 4e dc e3 dc ab 7a b9 01 59 ee 92 77 $...N....z..Y..w 0060 07 64 .d Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 16, 2005 14:54:35.655470000 Time delta from previous packet: 2.922725000 seconds Time since reference or first frame: 6.241502000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:0f:b5:4b:45:e0 Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0xb953abbe (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfbba (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.101 (165.227.249.101) Encapsulating Security Payload SPI: 0xba963685 Sequence: 1 Data (84 bytes) 0000 00 0f b5 4b 45 e0 00 0c 29 1d cf fc 08 00 45 00 ...KE...).....E. 0010 00 70 00 01 00 00 80 32 fb ba a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 65 ba 96 36 85 00 00 00 01 ea 31 8b 87 16 c0 .e..6......1.... 0030 2e f5 83 1f 96 4c b4 71 df 9a 38 58 b8 b9 cd ae .....L.q..8X.... 0040 aa b5 89 6f 8f b1 8b 97 ac 75 e8 5b 7e 00 03 c1 ...o.....u.[~... 0050 7c b2 9d 55 2d 20 44 f1 a7 b6 12 16 b2 53 7e 59 |..U- D......S~Y 0060 49 10 44 2b 29 54 ef 3f 4b fa 50 4a 3f cc a5 99 I.D+)T.?K.PJ?... 0070 bf cc 9e d2 35 1f 2e 5b 9e b0 60 d7 0c 67 b9 53 ....5..[..`..g.S 0080 ab be .. Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 16, 2005 14:54:36.656999000 Time delta from previous packet: 1.001529000 seconds Time since reference or first frame: 7.243031000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:b5:4b:45:e0, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Type: IP (0x0800) Frame check sequence: 0xc7fb5b2d (correct) Internet Protocol, Src Addr: 165.227.249.101 (165.227.249.101), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0020 (32) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5d9c (correct) Source: 165.227.249.101 (165.227.249.101) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0x2c935b84 Sequence: 1 Data (84 bytes) 0000 00 0c 29 1d cf fc 00 0f b5 4b 45 e0 08 00 45 00 ..)......KE...E. 0010 00 70 00 20 00 00 1e 32 5d 9c a5 e3 f9 65 a5 e3 .p. ...2]....e.. 0020 f9 73 2c 93 5b 84 00 00 00 01 f7 d8 ba a9 1d c2 .s,.[........... 0030 d8 a5 32 02 57 80 6c d6 87 59 44 ad 11 5c 9f 01 ..2.W.l..YD..\.. 0040 7f 18 e0 ff ff 5a cc 9e 08 c8 71 82 cd 3b 64 d0 .....Z....q..;d. 0050 87 36 7b c9 ed dc ff f4 b5 8e e0 39 8c c3 24 71 .6{........9..$q 0060 1c d1 81 34 c3 62 5a d2 2d 89 9c 7b 5a 02 d4 68 ...4.bZ.-..{Z..h 0070 38 98 50 f8 13 9f 41 89 92 29 9e f1 6a 61 c7 fb 8.P...A..)..ja.. 0080 5b 2d [-