Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Dec 14, 2007 12:46:20.050213000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 166 bytes Capture Length: 166 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x04a7 (1191) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf6d7 [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.155 (165.227.249.155) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0x968b [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xA9067B301A49375E Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 0000 00 11 22 33 44 78 00 0c 29 ab 06 ab 08 00 45 00 .."3Dx..).....E. 0010 00 98 04 a7 00 00 80 11 f6 d7 a5 e3 f9 73 a5 e3 .............s.. 0020 f9 9b 01 f4 01 f4 00 84 96 8b a9 06 7b 30 1a 49 ............{0.I 0030 37 5e 00 00 00 00 00 00 00 00 01 10 02 00 00 00 7^.............. 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 ..D..-.......F.y 0090 dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 ..........>.in.c 00a0 81 b5 ec 42 7b 1f ...B{. Frame 2 (146 bytes on wire, 146 bytes captured) Arrival Time: Dec 14, 2007 12:46:20.172605000 Time delta from previous packet: 0.122392000 seconds Time since reference or first frame: 0.122392000 seconds Frame Number: 2 Packet Length: 146 bytes Capture Length: 146 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:11:22:33:44:78 (00:11:22:33:44:78), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Source: 00:11:22:33:44:78 (00:11:22:33:44:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.155 (165.227.249.155), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 132 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb92 [correct] Good: True Bad : False Source: 165.227.249.155 (165.227.249.155) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 112 Checksum: 0x884c [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xA9067B301A49375E Responder cookie: 0x15F14B88B0CF16B8 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 104 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 ab 06 ab 00 11 22 33 44 78 08 00 45 00 ..)....."3Dx..E. 0010 00 84 00 00 40 00 40 11 fb 92 a5 e3 f9 9b a5 e3 ....@.@......... 0020 f9 73 01 f4 01 f4 00 70 88 4c a9 06 7b 30 1a 49 .s.....p.L..{0.I 0030 37 5e 15 f1 4b 88 b0 cf 16 b8 01 10 02 00 00 00 7^..K........... 0040 00 00 00 00 00 68 0d 00 00 38 00 00 00 01 00 00 .....h...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 00 00 ................ 0080 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 0090 8b 35 .5 Frame 3 (298 bytes on wire, 298 bytes captured) Arrival Time: Dec 14, 2007 12:46:21.069689000 Time delta from previous packet: 0.897084000 seconds Time since reference or first frame: 1.019476000 seconds Frame Number: 3 Packet Length: 298 bytes Capture Length: 298 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x04a8 (1192) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf652 [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.155 (165.227.249.155) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0x2bd2 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xA9067B301A49375E Responder cookie: 0x15F14B88B0CF16B8 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 11 22 33 44 78 00 0c 29 ab 06 ab 08 00 45 00 .."3Dx..).....E. 0010 01 1c 04 a8 00 00 80 11 f6 52 a5 e3 f9 73 a5 e3 .........R...s.. 0020 f9 9b 01 f4 01 f4 01 08 2b d2 a9 06 7b 30 1a 49 ........+...{0.I 0030 37 5e 15 f1 4b 88 b0 cf 16 b8 04 10 02 00 00 00 7^..K........... 0040 00 00 00 00 01 00 0a 00 00 84 52 f3 90 df 33 d4 ..........R...3. 0050 07 74 0e f3 24 8b 1f 7c 91 24 23 eb 5f 9b 42 98 .t..$..|.$#._.B. 0060 89 87 78 82 4c ab 57 6f ba 14 62 8c 24 e4 5d 4a ..x.L.Wo..b.$.]J 0070 28 6f fe 3c eb 72 25 87 38 05 dd 51 cc 57 af 86 (o.<.r%.8..Q.W.. 0080 23 b4 2f d3 e8 57 77 2c 02 ad 07 65 f1 56 5d f8 #./..Ww,...e.V]. 0090 9f ab e8 17 2c bb de b1 5d 77 3d dd cd ec 74 a8 ....,...]w=...t. 00a0 2b 0f ac d5 05 35 2d 80 67 fb a6 0a 40 92 61 61 +....5-.g...@.aa 00b0 a0 4f 4a 66 9b f4 c4 de 8a 98 4b a4 e9 60 35 ef .OJf......K..`5. 00c0 18 fd 6b be 00 8a 01 9d 49 de 0d 00 00 18 af 67 ..k.....I......g 00d0 0b 9e 10 1e 94 d6 1e 5d d3 62 42 9b 70 d0 2b 9c .......].bB.p.+. 00e0 a9 72 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .r...0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 ....&..... Frame 4 (242 bytes on wire, 242 bytes captured) Arrival Time: Dec 14, 2007 12:46:21.241355000 Time delta from previous packet: 0.171666000 seconds Time since reference or first frame: 1.191142000 seconds Frame Number: 4 Packet Length: 242 bytes Capture Length: 242 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:11:22:33:44:78 (00:11:22:33:44:78), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Source: 00:11:22:33:44:78 (00:11:22:33:44:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.155 (165.227.249.155), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 228 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb32 [correct] Good: True Bad : False Source: 165.227.249.155 (165.227.249.155) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 208 Checksum: 0xedec [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xA9067B301A49375E Responder cookie: 0x15F14B88B0CF16B8 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 200 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 20 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 ab 06 ab 00 11 22 33 44 78 08 00 45 00 ..)....."3Dx..E. 0010 00 e4 00 00 40 00 40 11 fb 32 a5 e3 f9 9b a5 e3 ....@.@..2...... 0020 f9 73 01 f4 01 f4 00 d0 ed ec a9 06 7b 30 1a 49 .s..........{0.I 0030 37 5e 15 f1 4b 88 b0 cf 16 b8 04 10 02 00 00 00 7^..K........... 0040 00 00 00 00 00 c8 0a 00 00 84 5e 06 84 94 e4 0f ..........^..... 0050 f8 25 94 36 81 bf 97 ae 00 5a f6 cd d4 19 20 2c .%.6.....Z.... , 0060 29 57 73 ff 82 2d 14 aa 55 80 03 78 10 1f 01 82 )Ws..-..U..x.... 0070 f8 66 dc 99 01 b8 8e 83 b3 48 d7 15 3e c1 29 71 .f.......H..>.)q 0080 36 b6 d3 43 5a 45 0e 86 0d b6 69 de 3a a4 12 6b 6..CZE....i.:..k 0090 f4 3e 7f 11 57 cc e6 14 99 22 b3 3a b8 15 36 24 .>..W....".:..6$ 00a0 62 76 c6 84 1a 37 4c 45 b0 d9 3a 19 32 c2 de c7 bv...7LE..:.2... 00b0 9e 56 b3 9f b9 8f 98 63 d1 47 f3 cf b3 03 01 90 .V.....c.G...... 00c0 5e 2d c6 cb 40 4a 74 e5 f2 a6 0d 00 00 14 f2 56 ^-..@Jt........V 00d0 aa 28 cd 8f d0 d8 3d 50 bd ce 0a 0c f4 ec 00 00 .(....=P........ 00e0 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 00f0 8b 35 .5 Frame 5 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 12:46:21.633513000 Time delta from previous packet: 0.392158000 seconds Time since reference or first frame: 1.583300000 seconds Frame Number: 5 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x04a9 (1193) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf6f5 [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.155 (165.227.249.155) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x88c0 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xA9067B301A49375E Responder cookie: 0x15F14B88B0CF16B8 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 11 22 33 44 78 00 0c 29 ab 06 ab 08 00 45 00 .."3Dx..).....E. 0010 00 78 04 a9 00 00 80 11 f6 f5 a5 e3 f9 73 a5 e3 .x...........s.. 0020 f9 9b 01 f4 01 f4 00 64 88 c0 a9 06 7b 30 1a 49 .......d....{0.I 0030 37 5e 15 f1 4b 88 b0 cf 16 b8 05 10 02 01 00 00 7^..K........... 0040 00 00 00 00 00 5c 50 7f b4 c9 9c 79 db 35 04 4e .....\P....y.5.N 0050 3b 5e e2 1d 5c 64 90 c2 07 f6 1c 7b 0b 24 9b bd ;^..\d.....{.$.. 0060 44 3b 7c 6c dd c4 8a 87 b0 7e 93 5f c8 28 8d 3c D;|l.....~._.(.< 0070 a1 04 06 24 06 8a 27 26 5b 44 f9 84 85 34 41 4f ...$..'&[D...4AO 0080 f3 a1 08 d6 87 48 .....H Frame 6 (118 bytes on wire, 118 bytes captured) Arrival Time: Dec 14, 2007 12:46:21.673048000 Time delta from previous packet: 0.039535000 seconds Time since reference or first frame: 1.622835000 seconds Frame Number: 6 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:11:22:33:44:78 (00:11:22:33:44:78), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Source: 00:11:22:33:44:78 (00:11:22:33:44:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.155 (165.227.249.155), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbae [correct] Good: True Bad : False Source: 165.227.249.155 (165.227.249.155) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xd0e1 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xA9067B301A49375E Responder cookie: 0x15F14B88B0CF16B8 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 ab 06 ab 00 11 22 33 44 78 08 00 45 00 ..)....."3Dx..E. 0010 00 68 00 00 40 00 40 11 fb ae a5 e3 f9 9b a5 e3 .h..@.@......... 0020 f9 73 01 f4 01 f4 00 54 d0 e1 a9 06 7b 30 1a 49 .s.....T....{0.I 0030 37 5e 15 f1 4b 88 b0 cf 16 b8 05 10 02 01 00 00 7^..K........... 0040 00 00 00 00 00 4c 77 d2 6b 7b 92 f8 9b 15 9f 29 .....Lw.k{.....) 0050 a2 2d c5 e1 eb a8 32 f3 33 41 8f ea a9 bf 62 94 .-....2.3A....b. 0060 f1 40 22 2c 4f a6 68 ad 7d 87 84 e2 f2 0b d6 37 .@",O.h.}......7 0070 e3 5a cc 84 f8 69 .Z...i Frame 7 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 12:46:21.697434000 Time delta from previous packet: 0.024386000 seconds Time since reference or first frame: 1.647221000 seconds Frame Number: 7 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:11:22:33:44:78 (00:11:22:33:44:78), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Source: 00:11:22:33:44:78 (00:11:22:33:44:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.155 (165.227.249.155), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb9e [correct] Good: True Bad : False Source: 165.227.249.155 (165.227.249.155) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x0f6f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xA9067B301A49375E Responder cookie: 0x15F14B88B0CF16B8 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x9546FBD1 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 ab 06 ab 00 11 22 33 44 78 08 00 45 00 ..)....."3Dx..E. 0010 00 78 00 00 40 00 40 11 fb 9e a5 e3 f9 9b a5 e3 .x..@.@......... 0020 f9 73 01 f4 01 f4 00 64 0f 6f a9 06 7b 30 1a 49 .s.....d.o..{0.I 0030 37 5e 15 f1 4b 88 b0 cf 16 b8 08 10 05 01 95 46 7^..K..........F 0040 fb d1 00 00 00 5c 8f 32 32 b5 ba fe 85 27 b0 9c .....\.22....'.. 0050 ac ef 98 aa fa cc ee d0 4b c1 f4 4a c2 2a 82 9e ........K..J.*.. 0060 75 76 cd 3d 64 e4 8a 62 c3 85 12 ff 91 f4 7f 2b uv.=d..b.......+ 0070 f7 a5 f8 f2 51 28 3a 57 79 65 18 39 e1 ba 6e f1 ....Q(:Wye.9..n. 0080 1b 3f ac 3e c9 59 .?.>.Y Frame 8 (342 bytes on wire, 342 bytes captured) Arrival Time: Dec 14, 2007 12:46:22.633647000 Time delta from previous packet: 0.936213000 seconds Time since reference or first frame: 2.583434000 seconds Frame Number: 8 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x04ac (1196) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf622 [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.155 (165.227.249.155) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xe8ff [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xA9067B301A49375E Responder cookie: 0x15F14B88B0CF16B8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDF346211 Length: 300 Encrypted payload (272 bytes) 0000 00 11 22 33 44 78 00 0c 29 ab 06 ab 08 00 45 00 .."3Dx..).....E. 0010 01 48 04 ac 00 00 80 11 f6 22 a5 e3 f9 73 a5 e3 .H......."...s.. 0020 f9 9b 01 f4 01 f4 01 34 e8 ff a9 06 7b 30 1a 49 .......4....{0.I 0030 37 5e 15 f1 4b 88 b0 cf 16 b8 08 10 20 01 df 34 7^..K....... ..4 0040 62 11 00 00 01 2c 12 57 03 8c 8e 82 41 fa 78 1a b....,.W....A.x. 0050 17 1c 6b 42 ac 1e e1 38 8b 45 19 f4 7a 6b dc 46 ..kB...8.E..zk.F 0060 19 c3 1e 31 5c af 5e 60 5f 01 9a 92 26 18 44 b3 ...1\.^`_...&.D. 0070 76 30 7d 38 e6 c6 28 74 a1 50 6a d1 a0 fe 94 d5 v0}8..(t.Pj..... 0080 01 29 cc d2 ca d1 ff bc 47 0b 3f b3 51 c8 20 21 .)......G.?.Q. ! 0090 d0 5e 8f 57 79 b8 19 59 ee a5 70 cc eb c3 42 61 .^.Wy..Y..p...Ba 00a0 ba c6 37 a8 0c 29 cd 41 8e db 0d 71 11 ef a5 fd ..7..).A...q.... 00b0 38 b4 92 5d 78 fe 77 aa 4a e0 12 eb f2 4a 62 c5 8..]x.w.J....Jb. 00c0 65 ac c1 23 6f 2e 4d 82 22 cb 8b da d8 4f 45 74 e..#o.M."....OEt 00d0 78 21 59 64 20 28 3b f9 d9 a5 13 68 d5 c8 5f 59 x!Yd (;....h.._Y 00e0 fb ec a1 3b a5 b0 51 ec a3 03 de 24 bc 08 ac f2 ...;..Q....$.... 00f0 af 63 13 d6 a4 32 33 d4 32 c7 fb 62 aa d8 d8 c7 .c...23.2..b.... 0100 8a dc 69 18 f9 1f 0a 3a e9 56 87 a8 2f 90 02 0d ..i....:.V../... 0110 36 c2 27 13 cc b9 97 ee 68 a4 e0 3b 6e fb 83 be 6.'.....h..;n... 0120 1c 0d 8e a7 36 09 ce 49 b3 62 16 c3 85 0a 0e 58 ....6..I.b.....X 0130 42 e4 00 69 ea c0 a5 c1 06 41 cf 0b 4d cb 2b 69 B..i.....A..M.+i 0140 c1 47 c5 c5 19 37 00 25 58 a1 2e 0c 37 f1 99 cb .G...7.%X...7... 0150 86 80 12 94 fd 8a ...... Frame 9 (342 bytes on wire, 342 bytes captured) Arrival Time: Dec 14, 2007 12:46:22.924963000 Time delta from previous packet: 0.291316000 seconds Time since reference or first frame: 2.874750000 seconds Frame Number: 9 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:11:22:33:44:78 (00:11:22:33:44:78), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Source: 00:11:22:33:44:78 (00:11:22:33:44:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.155 (165.227.249.155), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xface [correct] Good: True Bad : False Source: 165.227.249.155 (165.227.249.155) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xef95 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xA9067B301A49375E Responder cookie: 0x15F14B88B0CF16B8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDF346211 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 ab 06 ab 00 11 22 33 44 78 08 00 45 00 ..)....."3Dx..E. 0010 01 48 00 00 40 00 40 11 fa ce a5 e3 f9 9b a5 e3 .H..@.@......... 0020 f9 73 01 f4 01 f4 01 34 ef 95 a9 06 7b 30 1a 49 .s.....4....{0.I 0030 37 5e 15 f1 4b 88 b0 cf 16 b8 08 10 20 01 df 34 7^..K....... ..4 0040 62 11 00 00 01 2c 26 07 56 05 7a 55 b8 ae 89 1e b....,&.V.zU.... 0050 54 3e 1f 33 7e 91 89 90 a0 5d a3 a1 7f 36 76 05 T>.3~....]...6v. 0060 eb 8f aa d4 eb 52 2f ba 08 ed 83 37 76 40 39 c9 .....R/....7v@9. 0070 bc da ae ce 78 48 32 70 a0 ab 85 d4 d6 89 58 5f ....xH2p......X_ 0080 1d 7f 4b 1d 96 3d c6 ac d8 4d 8b ca 09 e2 70 27 ..K..=...M....p' 0090 46 8f 4b 63 61 25 77 0d 6c 01 9f b0 4d 61 c2 ef F.Kca%w.l...Ma.. 00a0 6a 9e 06 7f 1c 65 07 2e 07 6b b8 1d 3f f7 77 f2 j....e...k..?.w. 00b0 19 3c 15 a0 d3 88 aa b8 cf 1c 2b 28 2b 86 6c 41 .<........+(+.lA 00c0 5e e4 5b 24 f2 7d f2 58 29 44 20 46 eb df 43 c7 ^.[$.}.X)D F..C. 00d0 7d 39 8b 11 9d cc f3 05 fa 93 78 9a 5c 55 69 8d }9........x.\Ui. 00e0 7d 79 46 fa b3 4c e0 79 04 ff 92 d8 30 7e 08 1f }yF..L.y....0~.. 00f0 c2 da c1 4c 25 33 77 21 c5 5a 61 dd c8 c2 b0 c2 ...L%3w!.Za..... 0100 34 44 d1 ba c4 db 28 6f 96 05 a5 e6 05 7c 8d d5 4D....(o.....|.. 0110 f0 8f 69 6c f5 d7 3e 2e 9f bf 74 ac 1f a9 4f 88 ..il..>...t...O. 0120 ec 6a 4a 13 22 fc 94 6d a1 a5 be 40 19 0d 7e 52 .jJ."..m...@..~R 0130 0f ae 32 e4 bd f1 9a 2e 8e dc d2 02 6c c3 32 b3 ..2.........l.2. 0140 1a af 0b 51 57 a4 f5 99 1f e1 0d 14 4e d7 b0 88 ...QW.......N... 0150 80 4e 14 67 a9 76 .N.g.v Frame 10 (102 bytes on wire, 102 bytes captured) Arrival Time: Dec 14, 2007 12:46:22.927095000 Time delta from previous packet: 0.002132000 seconds Time since reference or first frame: 2.876882000 seconds Frame Number: 10 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x04ad (1197) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf711 [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.155 (165.227.249.155) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x08fe [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xA9067B301A49375E Responder cookie: 0x15F14B88B0CF16B8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDF346211 Length: 60 Encrypted payload (32 bytes) 0000 00 11 22 33 44 78 00 0c 29 ab 06 ab 08 00 45 00 .."3Dx..).....E. 0010 00 58 04 ad 00 00 80 11 f7 11 a5 e3 f9 73 a5 e3 .X...........s.. 0020 f9 9b 01 f4 01 f4 00 44 08 fe a9 06 7b 30 1a 49 .......D....{0.I 0030 37 5e 15 f1 4b 88 b0 cf 16 b8 08 10 20 01 df 34 7^..K....... ..4 0040 62 11 00 00 00 3c e6 0b 83 94 1f c3 f7 2a 0e 61 b....<.......*.a 0050 0b 7a 30 5c 18 e9 7f 6f 3f 02 df 32 7d e5 7b 1d .z0\...o?..2}.{. 0060 d3 69 37 f3 25 83 .i7.%. Frame 11 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 12:46:24.470432000 Time delta from previous packet: 1.543337000 seconds Time since reference or first frame: 4.420219000 seconds Frame Number: 11 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb7c [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.155 (165.227.249.155) Encapsulating Security Payload SPI: 0x0b100cd1 Sequence: 1 Data (92 bytes) 0000 00 11 22 33 44 78 00 0c 29 ab 06 ab 08 00 45 00 .."3Dx..).....E. 0010 00 78 00 01 00 00 80 32 fb 7c a5 e3 f9 73 a5 e3 .x.....2.|...s.. 0020 f9 9b 0b 10 0c d1 00 00 00 01 0e 3c a7 0f dc ab ...........<.... 0030 d2 c1 26 c8 a1 61 b5 82 f6 7a 70 3e 5b b0 99 99 ..&..a...zp>[... 0040 bf 28 cb 5b 50 15 6f 71 29 20 39 68 02 d2 18 b9 .(.[P.oq) 9h.... 0050 e8 eb 3c 3b a9 c5 61 07 8d dd fd cc bc 02 41 a3 ..<;..a.......A. 0060 47 82 66 81 b4 65 c0 7e 48 06 dd e7 33 da f9 54 G.f..e.~H...3..T 0070 48 94 20 e1 86 5e 14 fc e3 b1 71 ef 7f 18 11 de H. ..^....q..... 0080 a6 ba 6f b8 ff fd ..o... Frame 12 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 12:46:24.476472000 Time delta from previous packet: 0.006040000 seconds Time since reference or first frame: 4.426259000 seconds Frame Number: 12 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:11:22:33:44:78 (00:11:22:33:44:78), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Source: 00:11:22:33:44:78 (00:11:22:33:44:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.155 (165.227.249.155), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x41a7 (16807) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xf9d6 [correct] Good: True Bad : False Source: 165.227.249.155 (165.227.249.155) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0x0b5858a5 Sequence: 1 Data (92 bytes) 0000 00 0c 29 ab 06 ab 00 11 22 33 44 78 08 00 45 00 ..)....."3Dx..E. 0010 00 78 41 a7 00 00 40 32 f9 d6 a5 e3 f9 9b a5 e3 .xA...@2........ 0020 f9 73 0b 58 58 a5 00 00 00 01 df 3b ce 27 a3 76 .s.XX......;.'.v 0030 40 55 72 6a b7 48 8d 51 09 3d 07 9a a1 b9 af c0 @Urj.H.Q.=...... 0040 1b 83 86 bf 0c 1d e3 ef ea 79 33 4a c0 c4 fa 61 .........y3J...a 0050 0f ca 66 42 09 b4 fc 6d 54 22 e1 b9 29 03 43 53 ..fB...mT"..).CS 0060 12 d0 a9 0c 2b a8 f8 94 c0 34 7c 0f 7d d9 e7 3b ....+....4|.}..; 0070 82 3f 70 38 e3 be 75 a6 b3 5a f2 67 e4 e9 1c 79 .?p8..u..Z.g...y 0080 96 6e 55 a2 f2 ff .nU... Frame 13 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 12:46:25.436142000 Time delta from previous packet: 0.959670000 seconds Time since reference or first frame: 5.385929000 seconds Frame Number: 13 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0002 (2) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb7b [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.155 (165.227.249.155) Encapsulating Security Payload SPI: 0x0b100cd1 Sequence: 2 Data (92 bytes) 0000 00 11 22 33 44 78 00 0c 29 ab 06 ab 08 00 45 00 .."3Dx..).....E. 0010 00 78 00 02 00 00 80 32 fb 7b a5 e3 f9 73 a5 e3 .x.....2.{...s.. 0020 f9 9b 0b 10 0c d1 00 00 00 02 dd e7 33 da f9 54 ............3..T 0030 48 94 20 e1 86 5e 14 fc e3 b1 a6 0e c1 48 3d 91 H. ..^.......H=. 0040 20 74 b6 aa 6b 71 5b ce a2 99 cf c2 80 15 72 ec t..kq[.......r. 0050 58 f0 c4 42 48 30 1d 9d 3b a4 52 e3 37 59 93 85 X..BH0..;.R.7Y.. 0060 77 33 d2 8e 72 68 8a 60 dd df 13 f4 cd ef ef 27 w3..rh.`.......' 0070 07 3d 25 dc ae ea e4 ec 6f 87 5d f4 37 d3 76 fd .=%.....o.].7.v. 0080 ab 32 39 70 d5 9e .29p.. Frame 14 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 12:46:25.437234000 Time delta from previous packet: 0.001092000 seconds Time since reference or first frame: 5.387021000 seconds Frame Number: 14 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:11:22:33:44:78 (00:11:22:33:44:78), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab) Source: 00:11:22:33:44:78 (00:11:22:33:44:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.155 (165.227.249.155), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x3af1 (15089) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x008d [correct] Good: True Bad : False Source: 165.227.249.155 (165.227.249.155) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0x0b5858a5 Sequence: 2 Data (92 bytes) 0000 00 0c 29 ab 06 ab 00 11 22 33 44 78 08 00 45 00 ..)....."3Dx..E. 0010 00 78 3a f1 00 00 40 32 00 8d a5 e3 f9 9b a5 e3 .x:...@2........ 0020 f9 73 0b 58 58 a5 00 00 00 02 4c 48 cb 90 d9 9c .s.XX.....LH.... 0030 6a fc 1e 37 03 cb 89 1a de 49 52 e3 46 e7 88 dc j..7.....IR.F... 0040 8a e8 c8 76 c2 34 70 4e 51 b5 8b 66 e5 53 74 f6 ...v.4pNQ..f.St. 0050 37 53 8d 3b e5 62 19 b0 61 b4 f7 7e d5 b0 b8 9d 7S.;.b..a..~.... 0060 3d 4e b3 33 9b 98 82 4c 5f 5d 73 28 3d 27 ab 82 =N.3...L_]s(='.. 0070 13 e4 1d 9e c4 30 10 3c 07 a2 c9 68 9d f9 26 cd .....0.<...h..&. 0080 38 ce 23 47 e5 be 8.#G..