Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Mar 14, 2006 10:45:59.747602000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 166 bytes Capture Length: 166 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc), Dst: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Destination: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x02f7b556 [correct] Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.148 (165.227.249.148) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 148 Identification: 0x09b0 (2480) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf1d9 [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.148 (165.227.249.148) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 128 Checksum: 0x9873 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE0A8E2B01B7115DB Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 120 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 0000 00 0b 0b 00 00 01 00 0c 29 1d cf fc 08 00 45 00 ........).....E. 0010 00 94 09 b0 00 00 80 11 f1 d9 a5 e3 f9 73 a5 e3 .............s.. 0020 f9 94 01 f4 01 f4 00 80 98 73 e0 a8 e2 b0 1b 71 .........s.....q 0030 15 db 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 78 0d 00 00 34 00 00 00 01 00 00 .....x...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 0e 10 0d 00 00 14 44 85 ..............D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 0090 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00a0 7b 1f 02 f7 b5 56 {....V Frame 2 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 14, 2006 10:45:59.764245000 Time delta from previous packet: 0.016643000 seconds Time since reference or first frame: 0.016643000 seconds Frame Number: 2 Packet Length: 130 bytes Capture Length: 130 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01), Dst: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Type: IP (0x0800) Frame check sequence: 0x347bfbe9 [correct] Internet Protocol, Src: 165.227.249.148 (165.227.249.148), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0002 (2) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7cab [correct] Good: True Bad : False Source: 165.227.249.148 (165.227.249.148) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0xfac3 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE0A8E2B01B7115DB Responder cookie: 0x7426103AA26F1211 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) 0000 00 0c 29 1d cf fc 00 0b 0b 00 00 01 08 00 45 00 ..)...........E. 0010 00 70 00 02 00 00 ff 11 7c ab a5 e3 f9 94 a5 e3 .p......|....... 0020 f9 73 01 f4 01 f4 00 5c fa c3 e0 a8 e2 b0 1b 71 .s.....\.......q 0030 15 db 74 26 10 3a a2 6f 12 11 01 10 02 00 00 00 ..t&.:.o........ 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 0e 10 34 7b ..............4{ 0080 fb e9 .. Frame 3 (302 bytes on wire, 302 bytes captured) Arrival Time: Mar 14, 2006 10:46:01.172896000 Time delta from previous packet: 1.408651000 seconds Time since reference or first frame: 1.425294000 seconds Frame Number: 3 Packet Length: 302 bytes Capture Length: 302 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc), Dst: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Destination: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x0aed8396 [correct] Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.148 (165.227.249.148) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x09b1 (2481) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf150 [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.148 (165.227.249.148) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0x1e15 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE0A8E2B01B7115DB Responder cookie: 0x7426103AA26F1211 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 0b 0b 00 00 01 00 0c 29 1d cf fc 08 00 45 00 ........).....E. 0010 01 1c 09 b1 00 00 80 11 f1 50 a5 e3 f9 73 a5 e3 .........P...s.. 0020 f9 94 01 f4 01 f4 01 08 1e 15 e0 a8 e2 b0 1b 71 ...............q 0030 15 db 74 26 10 3a a2 6f 12 11 04 10 02 00 00 00 ..t&.:.o........ 0040 00 00 00 00 01 00 0a 00 00 84 48 8e 57 81 05 03 ..........H.W... 0050 d3 d7 fd b6 67 5a dd 34 b2 d2 8e 0f b0 43 ee d3 ....gZ.4.....C.. 0060 42 1b 11 e6 9b fa da 1f ac 91 39 46 c7 5a 8c d6 B.........9F.Z.. 0070 5a b6 5a dc a2 b5 00 35 c6 e6 83 a4 04 cd 70 2d Z.Z....5......p- 0080 df b0 42 71 81 fa 9d 61 68 bc bd f0 ee eb f1 ee ..Bq...ah....... 0090 16 0b e7 17 0d 45 42 d4 a3 62 c4 1a 98 f6 c4 9a .....EB..b...... 00a0 5c 14 70 86 37 27 36 35 cd 40 97 ef ea 1a ec 9d \.p.7'65.@...... 00b0 2d 21 61 6a 58 39 3f 96 4f 41 21 e4 45 b2 15 e0 -!ajX9?.OA!.E... 00c0 31 d5 dc 29 e4 08 b6 51 bc 47 0d 00 00 18 87 a6 1..)...Q.G...... 00d0 d3 80 d0 b6 21 24 3e 41 4a 05 2f b2 f4 a3 f1 55 ....!$>AJ./....U 00e0 af 3e 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .>...0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 0a ed 83 96 ....&......... Frame 4 (230 bytes on wire, 230 bytes captured) Arrival Time: Mar 14, 2006 10:46:01.186692000 Time delta from previous packet: 0.013796000 seconds Time since reference or first frame: 1.439090000 seconds Frame Number: 4 Packet Length: 230 bytes Capture Length: 230 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01), Dst: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Type: IP (0x0800) Frame check sequence: 0xe55aa2f0 [correct] Internet Protocol, Src: 165.227.249.148 (165.227.249.148), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0003 (3) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7c46 [correct] Good: True Bad : False Source: 165.227.249.148 (165.227.249.148) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x6075 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE0A8E2B01B7115DB Responder cookie: 0x7426103AA26F1211 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 0c 29 1d cf fc 00 0b 0b 00 00 01 08 00 45 00 ..)...........E. 0010 00 d4 00 03 00 00 ff 11 7c 46 a5 e3 f9 94 a5 e3 ........|F...... 0020 f9 73 01 f4 01 f4 00 c0 60 75 e0 a8 e2 b0 1b 71 .s......`u.....q 0030 15 db 74 26 10 3a a2 6f 12 11 04 10 02 00 00 00 ..t&.:.o........ 0040 00 00 00 00 00 b8 0a 00 00 84 41 5b c9 98 cb 0f ..........A[.... 0050 87 72 81 40 89 8b 37 9a 90 e7 2c 74 8b b0 b3 65 .r.@..7...,t...e 0060 6a bb a2 ff bd 5c 21 7b 99 2a 59 a6 08 fa 71 4a j....\!{.*Y...qJ 0070 79 ae ae ff 98 ac 7d e1 c4 97 93 53 87 0c ce ea y.....}....S.... 0080 4b 63 d8 bf 2f 11 c1 67 77 32 b6 d1 36 ca a5 0b Kc../..gw2..6... 0090 bf 75 10 20 bb e0 c8 ed 3b 7e d4 23 0b f9 87 a5 .u. ....;~.#.... 00a0 a9 1b 05 7b bc c4 4a 27 d7 7d 4c 9b 6d cb 16 e5 ...{..J'.}L.m... 00b0 23 29 c0 f5 f2 62 d0 80 c3 b7 f8 67 9b a8 0c a6 #)...b.....g.... 00c0 5f 79 49 af eb 4e 3a 87 69 27 00 00 00 18 fb ca _yI..N:.i'...... 00d0 50 2c d3 b9 4d da 42 b8 f3 f0 b1 81 33 c3 97 50 P,..M.B.....3..P 00e0 60 77 e5 5a a2 f0 `w.Z.. Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 14, 2006 10:46:02.992367000 Time delta from previous packet: 1.805675000 seconds Time since reference or first frame: 3.244765000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc), Dst: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Destination: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0xab586beb [correct] Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.148 (165.227.249.148) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x09b2 (2482) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf1f3 [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.148 (165.227.249.148) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x7e34 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE0A8E2B01B7115DB Responder cookie: 0x7426103AA26F1211 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0b 0b 00 00 01 00 0c 29 1d cf fc 08 00 45 00 ........).....E. 0010 00 78 09 b2 00 00 80 11 f1 f3 a5 e3 f9 73 a5 e3 .x...........s.. 0020 f9 94 01 f4 01 f4 00 64 7e 34 e0 a8 e2 b0 1b 71 .......d~4.....q 0030 15 db 74 26 10 3a a2 6f 12 11 05 10 02 01 00 00 ..t&.:.o........ 0040 00 00 00 00 00 5c 55 f9 09 30 5c 6d 2b 90 9e 57 .....\U..0\m+..W 0050 71 19 11 b9 53 22 9a 63 ca 8f 74 d9 1a fa c8 a3 q...S".c..t..... 0060 0a 10 13 8e 91 c4 18 55 c0 1f 32 5d 0f 67 3f eb .......U..2].g?. 0070 67 4b 71 30 5a d1 9a 76 d2 cd e8 fc d3 23 6b f6 gKq0Z..v.....#k. 0080 a6 61 a2 03 d5 d2 ab 58 6b eb .a.....Xk. Frame 6 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 14, 2006 10:46:03.003491000 Time delta from previous packet: 0.011124000 seconds Time since reference or first frame: 3.255889000 seconds Frame Number: 6 Packet Length: 138 bytes Capture Length: 138 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01), Dst: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Type: IP (0x0800) Frame check sequence: 0x86bc05db [correct] Internet Protocol, Src: 165.227.249.148 (165.227.249.148), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0004 (4) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7ca1 [correct] Good: True Bad : False Source: 165.227.249.148 (165.227.249.148) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xb33a [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE0A8E2B01B7115DB Responder cookie: 0x7426103AA26F1211 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 1d cf fc 00 0b 0b 00 00 01 08 00 45 00 ..)...........E. 0010 00 78 00 04 00 00 ff 11 7c a1 a5 e3 f9 94 a5 e3 .x......|....... 0020 f9 73 01 f4 01 f4 00 64 b3 3a e0 a8 e2 b0 1b 71 .s.....d.:.....q 0030 15 db 74 26 10 3a a2 6f 12 11 05 10 02 01 00 00 ..t&.:.o........ 0040 00 00 00 00 00 5c 3e 60 f7 b6 0e 05 d3 d1 09 56 .....\>`.......V 0050 b5 8d 59 cf b3 a4 8c c0 f6 a5 c4 fe cf 91 48 50 ..Y...........HP 0060 53 24 9f 1d 7e 85 6b 7f 08 a6 90 c6 73 8f 73 6e S$..~.k.....s.sn 0070 a2 a5 4e e1 b8 9f 55 15 0e df 61 63 c5 b2 8c 23 ..N...U...ac...# 0080 c8 1d c6 69 e3 24 86 bc 05 db ...i.$.... Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Mar 14, 2006 10:46:05.233657000 Time delta from previous packet: 2.230166000 seconds Time since reference or first frame: 5.486055000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc), Dst: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Destination: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x0824fe9c [correct] Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.148 (165.227.249.148) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x09b4 (2484) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf129 [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.148 (165.227.249.148) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x2bbd [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE0A8E2B01B7115DB Responder cookie: 0x7426103AA26F1211 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x7941EF28 Length: 292 Encrypted payload (264 bytes) 0000 00 0b 0b 00 00 01 00 0c 29 1d cf fc 08 00 45 00 ........).....E. 0010 01 40 09 b4 00 00 80 11 f1 29 a5 e3 f9 73 a5 e3 .@.......)...s.. 0020 f9 94 01 f4 01 f4 01 2c 2b bd e0 a8 e2 b0 1b 71 .......,+......q 0030 15 db 74 26 10 3a a2 6f 12 11 08 10 20 01 79 41 ..t&.:.o.... .yA 0040 ef 28 00 00 01 24 cb 7e bf 1b 8c b7 53 4b 47 1c .(...$.~....SKG. 0050 e0 a8 34 08 0e c3 5b 91 3b 3e f5 55 9d 71 63 0e ..4...[.;>.U.qc. 0060 b3 98 88 b6 be e5 ab b9 a1 d3 f8 be 88 d7 98 a2 ................ 0070 c4 5b 8f 36 d0 a1 b2 86 d4 6f 20 dc b8 3d f3 82 .[.6.....o ..=.. 0080 7c 0c bf d6 e8 62 a6 e2 cf 58 bd f2 3e 53 aa 2f |....b...X..>S./ 0090 b5 42 5e 1b 6b e2 01 62 40 e6 af cc 85 77 ef 7b .B^.k..b@....w.{ 00a0 23 ab 61 7f 96 1e 12 ef 5d 68 d7 ed 1d 78 5c 43 #.a.....]h...x\C 00b0 b9 c4 d9 a2 a6 eb f7 2b 6e 48 9a 3c ac de 1a c4 .......+nH.<.... 00c0 56 e4 c4 d4 93 95 32 f0 03 ea 03 34 bd c5 6e ee V.....2....4..n. 00d0 e2 c6 6c d1 f5 7c 72 f5 c8 4e 82 7f 39 36 48 19 ..l..|r..N..96H. 00e0 2f 88 59 e8 72 2e 66 64 c7 2a 46 72 47 22 eb aa /.Y.r.fd.*FrG".. 00f0 fa 1f 20 a1 b8 f7 53 58 c0 d9 cc 7b c8 ac f1 89 .. ...SX...{.... 0100 3e 4c 86 e2 79 e6 68 8d 68 07 4b fe c3 81 e9 6a >L..y.h.h.K....j 0110 b1 b5 dc bf 06 c2 33 44 ba 69 cd 4f 2a 58 e2 ae ......3D.i.O*X.. 0120 43 74 82 dd c9 09 05 c9 f2 a8 7d 96 74 a7 3d 21 Ct........}.t.=! 0130 bf 23 f1 51 91 43 1e e6 cf d1 2d bd 13 80 03 eb .#.Q.C....-..... 0140 19 22 3a 41 70 89 0d 78 64 3d d7 ca 41 ea 08 24 .":Ap..xd=..A..$ 0150 fe 9c .. Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: Mar 14, 2006 10:46:05.256844000 Time delta from previous packet: 0.023187000 seconds Time since reference or first frame: 5.509242000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01), Dst: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Type: IP (0x0800) Frame check sequence: 0xdf9ceaf9 [correct] Internet Protocol, Src: 165.227.249.148 (165.227.249.148), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0005 (5) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7bd8 [correct] Good: True Bad : False Source: 165.227.249.148 (165.227.249.148) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xb441 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE0A8E2B01B7115DB Responder cookie: 0x7426103AA26F1211 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x7941EF28 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 1d cf fc 00 0b 0b 00 00 01 08 00 45 00 ..)...........E. 0010 01 40 00 05 00 00 ff 11 7b d8 a5 e3 f9 94 a5 e3 .@......{....... 0020 f9 73 01 f4 01 f4 01 2c b4 41 e0 a8 e2 b0 1b 71 .s.....,.A.....q 0030 15 db 74 26 10 3a a2 6f 12 11 08 10 20 01 79 41 ..t&.:.o.... .yA 0040 ef 28 00 00 01 24 e1 40 d9 8a f2 23 11 e0 f2 a6 .(...$.@...#.... 0050 38 80 e7 86 e6 73 fe cc 0d 65 ea cd ac 4b 02 5c 8....s...e...K.\ 0060 4f f6 94 f6 bb f9 26 11 74 3c 92 1c d4 74 44 04 O.....&.t<...tD. 0070 0f 9d c7 cf da e1 15 3d f6 9d a4 56 bf b0 ce 21 .......=...V...! 0080 ce c9 25 6f 7e 71 a2 ca ed 56 3c de e4 18 87 72 ..%o~q...V<....r 0090 4d d0 b9 e5 4e cb 97 5b 56 4d c2 70 09 e1 49 2d M...N..[VM.p..I- 00a0 cd d8 62 23 00 13 08 3e 47 ea ef 44 38 df ae 53 ..b#...>G..D8..S 00b0 97 a9 34 fb 1a 86 c8 61 37 67 e7 0d d5 73 f1 49 ..4....a7g...s.I 00c0 68 7d be e0 8f 4e d4 02 ac 9e 72 07 2e b7 57 79 h}...N....r...Wy 00d0 5f 29 52 83 47 62 e7 ed 8f 1b c1 04 f5 a5 50 ab _)R.Gb........P. 00e0 bd 34 b8 a3 9d e2 2b 93 bb a1 8f d9 a0 f3 ae 5c .4....+........\ 00f0 ef 2e 6e ef a1 4e 04 62 4e 18 25 af 40 8b 5b e9 ..n..N.bN.%.@.[. 0100 13 91 c2 00 ac dc 8f ea bf 95 9b 75 2e db 7a d6 ...........u..z. 0110 c4 bb 46 c5 69 68 1e 52 11 80 36 d1 0b cb ff 8a ..F.ih.R..6..... 0120 5a c8 7a e9 4d 03 b1 2d 60 52 60 50 25 15 cd 2d Z.z.M..-`R`P%..- 0130 89 ab bc ca b6 6e 56 e1 bd 3d 34 d0 1c de 15 57 .....nV..=4....W 0140 9f 9e 13 43 5a 39 af 3e 8c 49 b9 cb 8f 1e df 9c ...CZ9.>.I...... 0150 ea f9 .. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Mar 14, 2006 10:46:05.264191000 Time delta from previous packet: 0.007347000 seconds Time since reference or first frame: 5.516589000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc), Dst: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Destination: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0xef1440d4 [correct] Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.148 (165.227.249.148) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x09b5 (2485) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf218 [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.148 (165.227.249.148) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x81c0 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE0A8E2B01B7115DB Responder cookie: 0x7426103AA26F1211 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x7941EF28 Length: 52 Encrypted payload (24 bytes) 0000 00 0b 0b 00 00 01 00 0c 29 1d cf fc 08 00 45 00 ........).....E. 0010 00 50 09 b5 00 00 80 11 f2 18 a5 e3 f9 73 a5 e3 .P...........s.. 0020 f9 94 01 f4 01 f4 00 3c 81 c0 e0 a8 e2 b0 1b 71 .......<.......q 0030 15 db 74 26 10 3a a2 6f 12 11 08 10 20 01 79 41 ..t&.:.o.... .yA 0040 ef 28 00 00 00 34 49 e9 e9 ee c8 7f b5 3d 78 64 .(...4I......=xd 0050 34 cc 7b 1f 28 b9 06 1d 67 0d 88 20 84 dd ef 14 4.{.(...g.. .... 0060 40 d4 @. Frame 10 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 14, 2006 10:46:15.897169000 Time delta from previous packet: 10.632978000 seconds Time since reference or first frame: 16.149567000 seconds Frame Number: 10 Packet Length: 130 bytes Capture Length: 130 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc), Dst: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Destination: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x01438b51 [correct] Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.148 (165.227.249.148) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0001 (1) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb8b [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.148 (165.227.249.148) Encapsulating Security Payload SPI: 0x8c285729 Sequence: 1 Data (84 bytes) 0000 00 0b 0b 00 00 01 00 0c 29 1d cf fc 08 00 45 00 ........).....E. 0010 00 70 00 01 00 00 80 32 fb 8b a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 94 8c 28 57 29 00 00 00 01 ff 1d 85 da c6 f8 ...(W).......... 0030 2a bc 08 30 c1 2b f3 70 1a ab ac 3f 5a df f7 d8 *..0.+.p...?Z... 0040 00 a8 0c 18 f3 52 1b 66 d6 db 7c 15 ae 14 6a c3 .....R.f..|...j. 0050 5c 56 e1 db cb e8 c9 fb 52 97 db 80 92 9b 9b f7 \V......R....... 0060 17 ad 86 f7 5b 8d 7f 93 97 98 2c c3 bd 40 b9 af ....[.....,..@.. 0070 67 bf fc c9 96 1f d4 fe f5 ef 05 04 b9 d0 01 43 g..............C 0080 8b 51 .Q Frame 11 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 14, 2006 10:46:15.903443000 Time delta from previous packet: 0.006274000 seconds Time since reference or first frame: 16.155841000 seconds Frame Number: 11 Packet Length: 130 bytes Capture Length: 130 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01), Dst: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Type: IP (0x0800) Frame check sequence: 0xd3b51d06 [correct] Internet Protocol, Src: 165.227.249.148 (165.227.249.148), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0006 (6) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c86 [correct] Good: True Bad : False Source: 165.227.249.148 (165.227.249.148) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0x5b6985b0 Sequence: 1 Data (84 bytes) 0000 00 0c 29 1d cf fc 00 0b 0b 00 00 01 08 00 45 00 ..)...........E. 0010 00 70 00 06 00 00 ff 32 7c 86 a5 e3 f9 94 a5 e3 .p.....2|....... 0020 f9 73 5b 69 85 b0 00 00 00 01 01 02 03 04 05 06 .s[i............ 0030 07 08 0c eb aa e0 2b 60 95 8e e1 4d c1 ca 37 32 ......+`...M..72 0040 7e 02 d0 e2 24 86 6f 5e a1 7e d0 c2 f6 f4 54 37 ~...$.o^.~....T7 0050 45 2d b5 55 45 34 42 ef 53 1f 3b 8f 1b 06 57 12 E-.UE4B.S.;...W. 0060 bc dd 0f d8 b8 a8 d9 2d b1 d4 5a f0 c3 b0 b7 ca .......-..Z..... 0070 0a 3e ea 55 1f 55 04 08 46 d8 85 66 09 ee d3 b5 .>.U.U..F..f.... 0080 1d 06 .. Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 14, 2006 10:46:16.930985000 Time delta from previous packet: 1.027542000 seconds Time since reference or first frame: 17.183383000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc), Dst: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Destination: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x298b9784 [correct] Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.148 (165.227.249.148) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0002 (2) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb8a [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.148 (165.227.249.148) Encapsulating Security Payload SPI: 0x8c285729 Sequence: 2 Data (84 bytes) 0000 00 0b 0b 00 00 01 00 0c 29 1d cf fc 08 00 45 00 ........).....E. 0010 00 70 00 02 00 00 80 32 fb 8a a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 94 8c 28 57 29 00 00 00 02 2c c3 bd 40 b9 af ...(W)....,..@.. 0030 67 bf 2a 17 e7 4a f5 88 a1 16 fa 2c 6b cd 5e 52 g.*..J.....,k.^R 0040 82 76 d0 82 4c cd fd cf e8 6f b4 f6 4c 98 e0 aa .v..L....o..L... 0050 17 11 89 87 b9 2c 14 f6 1f ed e1 ba 81 52 35 92 .....,.......R5. 0060 93 2f 59 f5 97 79 92 84 ae c0 38 4f b7 cd 34 7e ./Y..y....8O..4~ 0070 d3 bc fe 85 ff 74 8c 17 b1 cb 06 01 50 34 29 8b .....t......P4). 0080 97 84 .. Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 14, 2006 10:46:16.936036000 Time delta from previous packet: 0.005051000 seconds Time since reference or first frame: 17.188434000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01), Dst: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Type: IP (0x0800) Frame check sequence: 0x2f0a6099 [correct] Internet Protocol, Src: 165.227.249.148 (165.227.249.148), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0007 (7) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c85 [correct] Good: True Bad : False Source: 165.227.249.148 (165.227.249.148) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0x5b6985b0 Sequence: 2 Data (84 bytes) 0000 00 0c 29 1d cf fc 00 0b 0b 00 00 01 08 00 45 00 ..)...........E. 0010 00 70 00 07 00 00 ff 32 7c 85 a5 e3 f9 94 a5 e3 .p.....2|....... 0020 f9 73 5b 69 85 b0 00 00 00 02 01 02 03 04 05 06 .s[i............ 0030 07 08 cd 52 95 39 b4 f2 d5 44 c0 a5 d4 da 95 b9 ...R.9...D...... 0040 9b 9c 36 7a 5b cd ff d6 99 06 1f 0e 15 2c db 78 ..6z[........,.x 0050 c8 6c ea 62 ce 1d c7 65 16 cd ff 52 bc 62 e7 f3 .l.b...e...R.b.. 0060 5c 85 3e 8c 41 e1 f8 36 da 8a 5e eb 63 82 65 1a \.>.A..6..^.c.e. 0070 97 0a ca f6 67 1b d7 9c 13 0f a8 97 38 00 2f 0a ....g.......8./. 0080 60 99 `. Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 14, 2006 10:46:17.932568000 Time delta from previous packet: 0.996532000 seconds Time since reference or first frame: 18.184966000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc), Dst: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Destination: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x6a54f785 [correct] Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.148 (165.227.249.148) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0003 (3) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb89 [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.148 (165.227.249.148) Encapsulating Security Payload SPI: 0x8c285729 Sequence: 3 Data (84 bytes) 0000 00 0b 0b 00 00 01 00 0c 29 1d cf fc 08 00 45 00 ........).....E. 0010 00 70 00 03 00 00 80 32 fb 89 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 94 8c 28 57 29 00 00 00 03 38 4f b7 cd 34 7e ...(W)....8O..4~ 0030 d3 bc 88 2c c1 f3 38 93 2e b4 08 11 3d 2d 82 c2 ...,..8.....=-.. 0040 7c 75 db d5 68 c3 8d 1d 44 db 76 a3 ee 0d 22 1a |u..h...D.v...". 0050 f4 4a 3b a3 37 0a 66 94 ac 3e c4 12 d2 f9 51 f7 .J;.7.f..>....Q. 0060 b3 ec a2 28 ab d9 eb 49 ca cd 2b 76 71 ac 9b ee ...(...I..+vq... 0070 dd d4 02 17 7f 22 b5 58 ac e6 1a 0c 7a bb 6a 54 .....".X....z.jT 0080 f7 85 .. Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 14, 2006 10:46:17.937445000 Time delta from previous packet: 0.004877000 seconds Time since reference or first frame: 18.189843000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01), Dst: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Type: IP (0x0800) Frame check sequence: 0xc42402c2 [correct] Internet Protocol, Src: 165.227.249.148 (165.227.249.148), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0008 (8) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c84 [correct] Good: True Bad : False Source: 165.227.249.148 (165.227.249.148) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0x5b6985b0 Sequence: 3 Data (84 bytes) 0000 00 0c 29 1d cf fc 00 0b 0b 00 00 01 08 00 45 00 ..)...........E. 0010 00 70 00 08 00 00 ff 32 7c 84 a5 e3 f9 94 a5 e3 .p.....2|....... 0020 f9 73 5b 69 85 b0 00 00 00 03 01 02 03 04 05 06 .s[i............ 0030 07 08 c5 8f 85 2d 54 07 32 71 9c 23 1e e2 eb d5 .....-T.2q.#.... 0040 fe 22 92 8d 3e d6 1f 38 a6 00 4d 8a 36 13 c0 d1 ."..>..8..M.6... 0050 2f 12 bc 0a 48 37 89 06 d9 d3 fe 3e e8 5d 43 a4 /...H7.....>.]C. 0060 47 bf c4 38 83 d0 74 6c 9d a9 de 33 f7 4c fc 12 G..8..tl...3.L.. 0070 77 85 70 c1 ce 25 07 e6 f7 f8 0b dc 54 af c4 24 w.p..%......T..$ 0080 02 c2 .. Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 14, 2006 10:46:18.953888000 Time delta from previous packet: 1.016443000 seconds Time since reference or first frame: 19.206286000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc), Dst: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Destination: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0xcc437b0a [correct] Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.148 (165.227.249.148) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0004 (4) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb88 [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.148 (165.227.249.148) Encapsulating Security Payload SPI: 0x8c285729 Sequence: 4 Data (84 bytes) 0000 00 0b 0b 00 00 01 00 0c 29 1d cf fc 08 00 45 00 ........).....E. 0010 00 70 00 04 00 00 80 32 fb 88 a5 e3 f9 73 a5 e3 .p.....2.....s.. 0020 f9 94 8c 28 57 29 00 00 00 04 2b 76 71 ac 9b ee ...(W)....+vq... 0030 dd d4 2e f9 8c 3d 96 1d 75 7f 8d 54 54 0d 41 85 .....=..u..TT.A. 0040 d3 fc 81 3e 07 c9 be f1 6d dc ce 68 99 39 8d 76 ...>....m..h.9.v 0050 a4 32 af c3 e2 eb 03 e7 88 ce 3c 6b ef 5b aa 20 .2........