Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: May 18, 2005 11:00:24.223395000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 166 bytes Capture Length: 166 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x5ee3c2e8 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x00dd (221) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfad6 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0xf528 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1E4372183252D56C Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 0000 00 a0 8e 72 1e 40 00 0c 29 1d cf fc 08 00 45 00 ...r.@..).....E. 0010 00 94 00 dd 00 00 80 11 fa d6 a5 e3 f9 73 a5 e3 .............s.. 0020 f9 6a 01 f4 01 f4 00 80 f5 28 1e 43 72 18 32 52 .j.......(.Cr.2R 0030 d5 6c 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .l.............. 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 44 85 ..............D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 0090 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00a0 7b 1f 5e e3 c2 e8 {.^... Frame 2 (126 bytes on wire, 126 bytes captured) Arrival Time: May 18, 2005 11:00:24.340926000 Time delta from previous packet: 0.117531000 seconds Time since reference or first frame: 0.117531000 seconds Frame Number: 2 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xc44516eb (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x722e (29230) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc9ad (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x2da0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1E4372183252D56C Responder cookie: 0x8BEBD6AFFC108429 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) 0000 00 0c 29 1d cf fc 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 6c 72 2e 00 00 40 11 c9 ad a5 e3 f9 6a a5 e3 .lr...@......j.. 0020 f9 73 01 f4 01 f4 00 58 2d a0 1e 43 72 18 32 52 .s.....X-..Cr.2R 0030 d5 6c 8b eb d6 af fc 10 84 29 01 10 02 00 00 00 .l.......)...... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 0e 10 c4 45 16 eb ...........E.. Frame 3 (302 bytes on wire, 302 bytes captured) Arrival Time: May 18, 2005 11:00:26.438825000 Time delta from previous packet: 2.097899000 seconds Time since reference or first frame: 2.215430000 seconds Frame Number: 3 Packet Length: 302 bytes Capture Length: 302 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x6a7dbf53 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x00df (223) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa4c (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0x21db (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1E4372183252D56C Responder cookie: 0x8BEBD6AFFC108429 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 a0 8e 72 1e 40 00 0c 29 1d cf fc 08 00 45 00 ...r.@..).....E. 0010 01 1c 00 df 00 00 80 11 fa 4c a5 e3 f9 73 a5 e3 .........L...s.. 0020 f9 6a 01 f4 01 f4 01 08 21 db 1e 43 72 18 32 52 .j......!..Cr.2R 0030 d5 6c 8b eb d6 af fc 10 84 29 04 10 02 00 00 00 .l.......)...... 0040 00 00 00 00 01 00 0a 00 00 84 1d 2a 9d dc fd 47 ...........*...G 0050 07 38 c7 f9 ee 4c 20 2e 63 f0 3c 89 22 91 2a d1 .8...L .c.<.".*. 0060 a3 fc 23 3c 2f 7d ad 77 34 6f 14 65 d6 1e 1e e1 ..#@.T.[..U.. 0080 45 3a a2 95 46 e9 42 ab f5 d3 7a 04 d4 e7 ca 74 E:..F.B...z....t 0090 ad bd a0 e2 84 54 f4 7b 02 fc 10 33 12 d4 1a 89 .....T.{...3.... 00a0 13 d5 e8 b3 99 1d e7 5e 2a f7 9b 24 5d f3 e0 d2 .......^*..$]... 00b0 28 7e 37 81 39 99 2f c4 ed 11 de 9b bb e1 89 b1 (~7.9./......... 00c0 3d 93 ca 65 25 2a 6a 03 d7 93 0d 00 00 18 33 87 =..e%*j.......3. 00d0 3d 21 b4 b9 2c c0 00 2b 65 e4 00 62 61 e4 7e a2 =!..,..+e..ba.~. 00e0 7c 1d 00 00 00 20 03 00 00 14 18 7e 86 0b a3 fb |.... .....~.... 00f0 cc ce d1 8a 7e d3 b9 12 db 86 00 00 00 08 00 06 ....~........... 0100 00 02 67 6e 46 b5 ..gnF. Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: May 18, 2005 11:00:28.362934000 Time delta from previous packet: 1.777472000 seconds Time since reference or first frame: 4.139539000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0xd2521262 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x00e0 (224) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfaef (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xd6df (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1E4372183252D56C Responder cookie: 0x8BEBD6AFFC108429 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 1d cf fc 08 00 45 00 ...r.@..).....E. 0010 00 78 00 e0 00 00 80 11 fa ef a5 e3 f9 73 a5 e3 .x...........s.. 0020 f9 6a 01 f4 01 f4 00 64 d6 df 1e 43 72 18 32 52 .j.....d...Cr.2R 0030 d5 6c 8b eb d6 af fc 10 84 29 05 10 02 01 00 00 .l.......)...... 0040 00 00 00 00 00 5c e8 70 3e 29 e2 18 52 0b 97 d4 .....\.p>)..R... 0050 ef 8f a7 7b 5e cc 7a bf 2a b2 3b e1 21 6b b7 43 ...{^.z.*.;.!k.C 0060 0f e5 a6 f1 57 79 d1 bd be 8c a6 21 c7 a8 ab 00 ....Wy.....!.... 0070 7c 89 e7 58 f0 a1 97 71 4f ef 09 e9 9b 94 1a ab |..X...qO....... 0080 de 6e e2 45 4c c6 d2 52 12 62 .n.EL..R.b Frame 6 (138 bytes on wire, 138 bytes captured) Arrival Time: May 18, 2005 11:00:28.365922000 Time delta from previous packet: 0.002988000 seconds Time since reference or first frame: 4.142527000 seconds Frame Number: 6 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xdd9dc0e5 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x7230 (29232) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc99f (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x0928 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1E4372183252D56C Responder cookie: 0x8BEBD6AFFC108429 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 1d cf fc 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 78 72 30 00 00 40 11 c9 9f a5 e3 f9 6a a5 e3 .xr0..@......j.. 0020 f9 73 01 f4 01 f4 00 64 09 28 1e 43 72 18 32 52 .s.....d.(.Cr.2R 0030 d5 6c 8b eb d6 af fc 10 84 29 05 10 02 01 00 00 .l.......)...... 0040 00 00 00 00 00 5c 1f 7c b2 81 77 67 cc d9 5e 87 .....\.|..wg..^. 0050 62 be 7f 6f 05 f3 31 19 0d fd 36 da c2 63 8a 2b b..o..1...6..c.+ 0060 22 05 e8 64 2b df bc 26 87 3e c4 6e 3a 79 7e 07 "..d+..&.>.n:y~. 0070 dc e6 b7 c1 bd 06 bb 7f c1 30 04 3f 3f c0 1b a8 .........0.??... 0080 f2 cb 97 d8 62 62 dd 9d c0 e5 ....bb.... Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: May 18, 2005 11:00:30.553712000 Time delta from previous packet: 2.187790000 seconds Time since reference or first frame: 6.330317000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x2b83fa21 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x00e1 (225) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa26 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xba8d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1E4372183252D56C Responder cookie: 0x8BEBD6AFFC108429 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x3B2C2772 Length: 292 Encrypted payload (264 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 1d cf fc 08 00 45 00 ...r.@..).....E. 0010 01 40 00 e1 00 00 80 11 fa 26 a5 e3 f9 73 a5 e3 .@.......&...s.. 0020 f9 6a 01 f4 01 f4 01 2c ba 8d 1e 43 72 18 32 52 .j.....,...Cr.2R 0030 d5 6c 8b eb d6 af fc 10 84 29 08 10 20 01 3b 2c .l.......).. .;, 0040 27 72 00 00 01 24 0e d4 9e bf c7 57 6c de 66 c7 'r...$.....Wl.f. 0050 a8 31 65 16 86 1a 5e 24 4b d8 50 f7 a2 51 68 69 .1e...^$K.P..Qhi 0060 7f 72 e9 e4 08 e7 c5 34 44 4c 10 6b 46 34 d9 bb .r.....4DL.kF4.. 0070 c3 73 19 a4 c7 1a 86 51 00 12 77 85 a4 3b 22 4b .s.....Q..w..;"K 0080 62 6b b8 e3 5b cb 32 0e 59 9d 95 0d 78 68 16 2a bk..[.2.Y...xh.* 0090 7f 03 9a ef 74 89 e3 74 27 43 c0 ce 85 2c c9 ba ....t..t'C...,.. 00a0 a9 73 e4 82 2b c3 56 64 8b 8a 9d 02 2e 10 31 ae .s..+.Vd......1. 00b0 c5 83 d3 d0 53 4d 0d 72 62 c0 0b 98 4c da ee eb ....SM.rb...L... 00c0 8b 17 32 e5 12 f9 3c ca 77 bf b4 c8 f4 3a 01 ec ..2...<.w....:.. 00d0 93 16 07 ed 16 73 8d 52 e8 86 6c 80 17 4d 65 4b .....s.R..l..MeK 00e0 88 cc 2a 24 97 0e 21 39 04 18 3f 72 7f 75 db 45 ..*$..!9..?r.u.E 00f0 e7 5a 32 56 e6 76 05 2c e3 33 ca 00 7a ac df 3f .Z2V.v.,.3..z..? 0100 b6 1e 84 75 62 ff a0 a9 6f 35 a6 a2 e1 50 54 0c ...ub...o5...PT. 0110 7c 51 d2 1c cd 4e f3 5c f2 65 8f f3 4f cb ae 28 |Q...N.\.e..O..( 0120 a0 f4 1d 2c 9d 81 5b 14 b1 e7 c0 ac ef e4 52 a0 ...,..[.......R. 0130 b5 a6 05 85 d0 c3 3f 4d ad f4 77 66 f8 ed 67 fd ......?M..wf..g. 0140 a4 c5 af fc a1 fd ea a8 e1 b8 55 08 b2 46 2b 83 ..........U..F+. 0150 fa 21 .! Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: May 18, 2005 11:00:30.827849000 Time delta from previous packet: 0.274137000 seconds Time since reference or first frame: 6.604454000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x1fb82101 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x7246 (29254) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc8c1 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xe4ac (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1E4372183252D56C Responder cookie: 0x8BEBD6AFFC108429 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x3B2C2772 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 1d cf fc 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 01 40 72 46 00 00 40 11 c8 c1 a5 e3 f9 6a a5 e3 .@rF..@......j.. 0020 f9 73 01 f4 01 f4 01 2c e4 ac 1e 43 72 18 32 52 .s.....,...Cr.2R 0030 d5 6c 8b eb d6 af fc 10 84 29 08 10 20 01 3b 2c .l.......).. .;, 0040 27 72 00 00 01 24 b9 e8 c0 c7 14 99 d5 7d 0c a0 'r...$.......}.. 0050 06 ee e7 ca 2e 74 ef 47 f6 a3 ce d0 8c 23 f5 38 .....t.G.....#.8 0060 9e eb 9e 69 e5 d9 2d b2 75 c3 77 a1 85 94 5b ff ...i..-.u.w...[. 0070 12 ad ff 17 81 85 d6 05 09 09 be 7f f6 44 a0 9f .............D.. 0080 69 67 d3 bc de 57 66 de 2b d9 e7 39 55 6e a1 00 ig...Wf.+..9Un.. 0090 22 a3 71 17 2a 46 ba b3 c9 cf cb 82 63 6d 36 97 ".q.*F......cm6. 00a0 3b e1 a8 a6 38 c8 1c 60 06 d8 3f f4 76 93 55 d4 ;...8..`..?.v.U. 00b0 1f d8 52 6f 51 83 d5 53 db e5 19 2d 55 49 70 10 ..RoQ..S...-UIp. 00c0 95 d2 45 dd a7 53 87 4a 36 f0 98 d1 62 f4 e2 bc ..E..S.J6...b... 00d0 d3 fd f3 e2 71 c9 5b 04 cc ea 91 06 92 35 4b 08 ....q.[......5K. 00e0 35 13 7c 3d f2 5f 3d 53 65 d7 f9 e7 66 ce 42 74 5.|=._=Se...f.Bt 00f0 48 b7 84 64 62 33 e1 dc 38 88 6a 8a a7 1a 75 74 H..db3..8.j...ut 0100 db ee 22 f8 35 c4 a2 a3 83 50 c5 4f 32 01 22 7e ..".5....P.O2."~ 0110 0c fc 76 16 26 85 a0 d2 20 22 37 de 88 14 21 a3 ..v.&... "7...!. 0120 0a 4f 64 11 0f ce 1c 03 81 fc 14 7a ad d5 c2 6a .Od........z...j 0130 78 e5 f7 f3 3f d8 96 47 e3 26 40 0b d6 a9 5e bd x...?..G.&@...^. 0140 12 21 d0 17 6f 8e f8 d9 60 53 2c 32 cc 54 1f b8 .!..o...`S,2.T.. 0150 21 01 !. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: May 18, 2005 11:00:30.834300000 Time delta from previous packet: 0.006451000 seconds Time since reference or first frame: 6.610905000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0xfea74b70 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x00e3 (227) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfb14 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0xef0f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1E4372183252D56C Responder cookie: 0x8BEBD6AFFC108429 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x3B2C2772 Length: 52 Encrypted payload (24 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 1d cf fc 08 00 45 00 ...r.@..).....E. 0010 00 50 00 e3 00 00 80 11 fb 14 a5 e3 f9 73 a5 e3 .P...........s.. 0020 f9 6a 01 f4 01 f4 00 3c ef 0f 1e 43 72 18 32 52 .j.....<...Cr.2R 0030 d5 6c 8b eb d6 af fc 10 84 29 08 10 20 01 3b 2c .l.......).. .;, 0040 27 72 00 00 00 34 6a 35 f9 dc 30 de a1 eb 6e f8 'r...4j5..0...n. 0050 8b b9 bd e7 70 66 bd e4 cc 99 84 71 59 38 fe a7 ....pf.....qY8.. 0060 4b 70 Kp Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: May 18, 2005 11:00:43.599025000 Time delta from previous packet: 12.764725000 seconds Time since reference or first frame: 19.375630000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x10d5b0ff (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfbb5 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x76f40400 Sequence: 1 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 1d cf fc 08 00 45 00 ...r.@..).....E. 0010 00 70 00 01 00 00 80 32 fb b5 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 6a 76 f4 04 00 00 00 00 01 05 c4 e9 5d f8 9b .jv..........].. 0030 60 68 5a 2e fa 9f e0 c9 f9 53 5e 00 2d a0 01 a4 `hZ......S^.-... 0040 c3 92 40 99 24 fd b0 b6 d0 42 af 16 22 3b 90 a4 ..@.$....B..";.. 0050 03 77 3a 00 40 f0 d5 24 ef 2e c0 7d 0f 6c e6 03 .w:.@..$...}.l.. 0060 89 7d f9 0d 40 7e ba 75 af 24 0a da f9 7f 50 f6 .}..@~.u.$....P. 0070 b9 51 f4 dc b8 6c 2c 4a 94 77 d0 62 52 25 10 d5 .Q...l,J.w.bR%.. 0080 b0 ff .. Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: May 18, 2005 11:00:43.600889000 Time delta from previous packet: 0.001864000 seconds Time since reference or first frame: 19.377494000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xe5d05466 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x7273 (29299) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xc943 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xc4dd9edb Sequence: 1 Data (84 bytes) 0000 00 0c 29 1d cf fc 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 70 72 73 00 00 40 32 c9 43 a5 e3 f9 6a a5 e3 .prs..@2.C...j.. 0020 f9 73 c4 dd 9e db 00 00 00 01 08 2c c4 4a 77 da .s.........,.Jw. 0030 0a 33 f9 10 f7 71 0c 34 47 a2 1c 06 44 ff dd 1b .3...q.4G...D... 0040 0e 1e 0d aa 4f 3f df b1 5a 23 eb ac ca 47 55 3a ....O?..Z#...GU: 0050 28 4e 11 88 e3 f9 61 09 41 8b 98 2b 6e 22 bd 7c (N....a.A..+n".| 0060 e9 12 6f 03 0a 34 ae 09 e7 e7 96 f1 67 89 72 bf ..o..4......g.r. 0070 a7 b4 75 6c bb 2e 67 cf 5b 07 f5 7d 95 46 e5 d0 ..ul..g.[..}.F.. 0080 54 66 Tf Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: May 18, 2005 11:00:44.607225000 Time delta from previous packet: 1.006336000 seconds Time since reference or first frame: 20.383830000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0xcb9d7916 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfbb4 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x76f40400 Sequence: 2 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 1d cf fc 08 00 45 00 ...r.@..).....E. 0010 00 70 00 02 00 00 80 32 fb b4 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 6a 76 f4 04 00 00 00 00 02 0a da f9 7f 50 f6 .jv...........P. 0030 b9 51 db b4 ab 25 39 97 70 d4 f5 67 0d ef 0a 01 .Q...%9.p..g.... 0040 24 5f 9c 8d d2 44 b3 07 ae e9 45 42 8d df b2 6b $_...D....EB...k 0050 89 80 5f f3 8e 30 46 b0 7f 74 36 bf d7 b3 20 d8 .._..0F..t6... . 0060 f7 65 20 30 d6 db f7 e5 e4 dd 46 72 0a ae cd 1f .e 0......Fr.... 0070 48 72 eb bd 39 c5 3b fc 34 a8 6d 5d 1a e7 cb 9d Hr..9.;.4.m].... 0080 79 16 y. Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: May 18, 2005 11:00:44.608326000 Time delta from previous packet: 0.001101000 seconds Time since reference or first frame: 20.384931000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x58978804 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x7274 (29300) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xc942 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xc4dd9edb Sequence: 2 Data (84 bytes) 0000 00 0c 29 1d cf fc 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 70 72 74 00 00 40 32 c9 42 a5 e3 f9 6a a5 e3 .prt..@2.B...j.. 0020 f9 73 c4 dd 9e db 00 00 00 02 55 94 4a 60 84 10 .s........U.J`.. 0030 9f 7a bc 7f e1 12 04 07 df d4 e6 85 39 60 d9 37 .z..........9`.7 0040 de f6 49 cf 9b 05 ef eb 90 2c 5d ff 0d 67 af 24 ..I......,]..g.$ 0050 76 a7 53 df 5f 90 60 f8 e3 0f 88 90 e1 53 5d f0 v.S._.`......S]. 0060 3b 94 25 21 d5 57 dc 14 47 84 4d ca e9 a2 c3 13 ;.%!.W..G.M..... 0070 93 4f 7c 67 33 4a b1 64 1b be 0a 55 ce 8c 58 97 .O|g3J.d...U..X. 0080 88 04 .. Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: May 18, 2005 11:00:45.607012000 Time delta from previous packet: 0.998686000 seconds Time since reference or first frame: 21.383617000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0xc6b4c442 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0003 (3) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfbb3 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x76f40400 Sequence: 3 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 1d cf fc 08 00 45 00 ...r.@..).....E. 0010 00 70 00 03 00 00 80 32 fb b3 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 6a 76 f4 04 00 00 00 00 03 46 72 0a ae cd 1f .jv.......Fr.... 0030 48 72 98 32 42 15 37 1e 22 9b 8c e2 37 f5 7a cb Hr.2B.7."...7.z. 0040 73 fc 81 94 f8 1c 94 f3 a3 0d b3 61 67 10 94 38 s..........ag..8 0050 fa 2a 54 ff 30 42 35 02 58 4d e8 4b 9c 1f df 49 .*T.0B5.XM.K...I 0060 10 f6 b8 65 fa 72 19 7b c4 9b a5 21 3c 8e f3 9b ...e.r.{...!<... 0070 2b 51 71 54 32 54 8b 35 42 80 18 0b 5e 81 c6 b4 +QqT2T.5B...^... 0080 c4 42 .B Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: May 18, 2005 11:00:45.607865000 Time delta from previous packet: 0.000853000 seconds Time since reference or first frame: 21.384470000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xc54f40b5 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x7275 (29301) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xc941 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xc4dd9edb Sequence: 3 Data (84 bytes) 0000 00 0c 29 1d cf fc 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 70 72 75 00 00 40 32 c9 41 a5 e3 f9 6a a5 e3 .pru..@2.A...j.. 0020 f9 73 c4 dd 9e db 00 00 00 03 24 41 64 e5 fb 08 .s........$Ad... 0030 47 41 e6 f1 6c 88 04 ab ac 6e e8 45 50 54 ef 06 GA..l....n.EPT.. 0040 c8 10 19 13 9a fc b5 16 f8 91 d2 36 6a 02 c3 5e ...........6j..^ 0050 a0 51 c9 23 76 4d 33 20 7f 6b 49 99 ca d5 cd e8 .Q.#vM3 .kI..... 0060 93 9d b3 02 d5 c7 70 ec 80 ae 9f 14 ec 11 54 ff ......p.......T. 0070 0a 0e e4 78 8f 1e c6 28 2e 34 06 11 11 e0 c5 4f ...x...(.4.....O 0080 40 b5 @. Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: May 18, 2005 11:00:46.611095000 Time delta from previous packet: 1.003230000 seconds Time since reference or first frame: 22.387700000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x2ddbb296 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0004 (4) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfbb2 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x76f40400 Sequence: 4 Data (84 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 1d cf fc 08 00 45 00 ...r.@..).....E. 0010 00 70 00 04 00 00 80 32 fb b2 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 6a 76 f4 04 00 00 00 00 04 a5 21 3c 8e f3 9b .jv........!<... 0030 2b 51 82 b8 50 e7 60 44 e1 7c 97 78 73 a2 0c 6c +Q..P.`D.|.xs..l 0040 79 7c 7f 13 d8 df 51 a5 b0 af 4c 1f 0b 03 ab 68 y|....Q...L....h 0050 e2 c9 88 c2 e8 ef f7 3b 27 7f 24 c1 4f f1 9a cb .......;'.$.O... 0060 c9 de e4 4e 76 fe a7 2e b3 10 65 ab a7 98 e8 6f ...Nv.....e....o 0070 23 ce 50 a2 d9 06 78 ee 6b 33 c4 af 7d 0f 2d db #.P...x.k3..}.-. 0080 b2 96 .. Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: May 18, 2005 11:00:46.612119000 Time delta from previous packet: 0.001024000 seconds Time since reference or first frame: 22.388724000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x25f72b5a (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x7276 (29302) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xc940 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xc4dd9edb Sequence: 4 Data (84 bytes) 0000 00 0c 29 1d cf fc 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 70 72 76 00 00 40 32 c9 40 a5 e3 f9 6a a5 e3 .prv..@2.@...j.. 0020 f9 73 c4 dd 9e db 00 00 00 04 24 d6 2d af 0d 4f .s........$.-..O 0030 51 69 0f 83 57 4a 2d 23 87 c7 fd d9 f9 67 f5 81 Qi..WJ-#.....g.. 0040 90 1e 73 20 4d 0e 0a 61 3e a6 e2 f8 74 3a c7 d0 ..s M..a>...t:.. 0050 e8 58 fe d4 2c 9b 08 ad 83 7a 21 21 c4 b9 3f 34 .X..,....z!!..?4 0060 51 6c 3f e2 1f d4 e5 48 25 83 d9 7d 33 7e 1c d2 Ql?....H%..}3~.. 0070 7f c1 49 bd 9d a5 bd 7a 17 45 2f 72 b7 71 25 f7 ..I....z.E/r.q%. 0080 2b 5a +Z