Frame 1 (170 bytes on wire, 170 bytes captured) Arrival Time: Mar 6, 2007 15:47:02.358640000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 170 bytes Capture Length: 170 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 156 Identification: 0x0081 (129) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfafb [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.146 (165.227.249.146) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 136 Checksum: 0x22a0 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xC7B95607C03F43BF Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 128 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 44 Vendor ID: Check Point Check Point Product: VPN-1 Version: NG with Application Intelligence R55 Check Point Vendor ID parameters 0000 00 0c 29 af 74 f5 00 0c 29 89 f2 82 08 00 45 00 ..).t...).....E. 0010 00 9c 00 81 40 00 40 11 fa fb a5 e3 f9 7a a5 e3 ....@.@......z.. 0020 f9 92 01 f4 01 f4 00 88 22 a0 c7 b9 56 07 c0 3f ........"...V..? 0030 43 bf 00 00 00 00 00 00 00 00 01 10 02 00 00 00 C............... 0040 00 00 00 00 00 80 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 00 00 ............p... 0080 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa ac 0e e3 7d .,.......Qo....} 0090 af 28 07 b4 38 1f 00 00 00 01 00 00 13 8d 42 c2 .(..8.........B. 00a0 5c 0d 00 00 00 00 18 00 00 00 \......... Frame 2 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 6, 2007 15:47:02.358642000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.000002000 seconds Frame Number: 2 Packet Length: 122 bytes Capture Length: 122 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5), Dst: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.146 (165.227.249.146), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x0845 (2117) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf367 [correct] Good: True Bad : False Source: 165.227.249.146 (165.227.249.146) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x5c69 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xC7B95607C03F43BF Responder cookie: 0x5F8D57574EF5C1ED Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 89 f2 82 00 0c 29 af 74 f5 08 00 45 00 ..).....).t...E. 0010 00 6c 08 45 00 00 80 11 f3 67 a5 e3 f9 92 a5 e3 .l.E.....g...... 0020 f9 7a 01 f4 01 f4 00 58 5c 69 c7 b9 56 07 c0 3f .z.....X\i..V..? 0030 43 bf 5f 8d 57 57 4e f5 c1 ed 01 10 02 00 00 00 C._.WWN......... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 ........p. Frame 3 (226 bytes on wire, 226 bytes captured) Arrival Time: Mar 6, 2007 15:47:02.358644000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.000004000 seconds Frame Number: 3 Packet Length: 226 bytes Capture Length: 226 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0082 (130) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfac2 [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.146 (165.227.249.146) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x3621 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xC7B95607C03F43BF Responder cookie: 0x5F8D57574EF5C1ED Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 0c 29 af 74 f5 00 0c 29 89 f2 82 08 00 45 00 ..).t...).....E. 0010 00 d4 00 82 40 00 40 11 fa c2 a5 e3 f9 7a a5 e3 ....@.@......z.. 0020 f9 92 01 f4 01 f4 00 c0 36 21 c7 b9 56 07 c0 3f ........6!..V..? 0030 43 bf 5f 8d 57 57 4e f5 c1 ed 04 10 02 00 00 00 C._.WWN......... 0040 00 00 00 00 00 b8 0a 00 00 84 9b 0b 11 b2 82 82 ................ 0050 fc aa 5a e2 ed c4 a2 fe ee 92 8c b9 e5 a6 4a ec ..Z...........J. 0060 c6 6d 12 a8 c2 5f 5a 0f 9f 46 b2 e3 f9 af 6f f4 .m..._Z..F....o. 0070 07 ab cb e4 25 68 cd c9 8d 8f c6 b6 d5 76 0d b4 ....%h.......v.. 0080 97 21 35 32 f6 26 37 ff 4e 76 46 07 52 2c bc 0e .!52.&7.NvF.R,.. 0090 96 98 34 37 22 c4 44 67 18 75 82 9a 5e 95 64 7a ..47".Dg.u..^.dz 00a0 54 67 56 be 5d 23 71 a5 fc 21 0b 07 7f e6 74 60 TgV.]#q..!....t` 00b0 1b 74 42 5f 3c 0d 32 17 ac e4 a5 3a 73 3f d4 f4 .tB_<.2....:s?.. 00c0 d3 fa 64 97 bc 0f 2e fd e9 7f 00 00 00 18 88 b1 ..d............. 00d0 9c 3d b5 81 cd 8d ac c5 49 ae 49 a4 1d b9 cb 9b .=......I.I..... 00e0 30 2b 0+ Frame 4 (222 bytes on wire, 222 bytes captured) Arrival Time: Mar 6, 2007 15:47:02.372198000 Time delta from previous packet: 0.013554000 seconds Time since reference or first frame: 0.013558000 seconds Frame Number: 4 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5), Dst: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.146 (165.227.249.146), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0846 (2118) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf302 [correct] Good: True Bad : False Source: 165.227.249.146 (165.227.249.146) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xb731 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xC7B95607C03F43BF Responder cookie: 0x5F8D57574EF5C1ED Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 89 f2 82 00 0c 29 af 74 f5 08 00 45 00 ..).....).t...E. 0010 00 d0 08 46 00 00 80 11 f3 02 a5 e3 f9 92 a5 e3 ...F............ 0020 f9 7a 01 f4 01 f4 00 bc b7 31 c7 b9 56 07 c0 3f .z.......1..V..? 0030 43 bf 5f 8d 57 57 4e f5 c1 ed 04 10 02 00 00 00 C._.WWN......... 0040 00 00 00 00 00 b4 0a 00 00 84 97 27 da 8a 19 fd ...........'.... 0050 2c 5a 01 26 84 9f 19 b7 b4 1a e4 b7 cb b5 6e 94 ,Z.&..........n. 0060 4a 2f be 22 93 3c 56 76 55 fc 8c b1 42 83 5e d4 J/."......)... 00b0 c5 1c ef b2 f1 03 46 a8 98 aa c3 8a d9 10 4b ff ......F.......K. 00c0 49 b1 9c 50 b9 83 05 24 0f 05 94 9a 09 2c 84 d1 I..P...$.....,.. 00d0 1a dc a2 1b 9e 6a e2 f4 c9 c9 af 62 09 b3 eb b3 .....j.....b.... 00e0 f8 5f 32 91 83 70 ae 62 3d 67 39 a7 28 5b cd e4 ._2..p.b=g9.([.. 00f0 c9 f1 3f e5 1d 97 79 0b 59 1b a3 08 57 19 94 d1 ..?...y.Y...W... 0100 93 13 1d 72 f8 af 22 91 90 a6 1a 5a 72 8f 4a cf ...r.."....Zr.J. 0110 2c 87 c1 99 20 ca 7f a6 df f5 f5 8d cf a2 04 4b ,... ..........K 0120 4d 11 32 19 d3 4b aa 5a fe a3 ed 55 a9 46 b4 79 M.2..K.Z...U.F.y 0130 77 06 37 35 ba 85 0f a3 04 fc 2e be 55 22 a0 ac w.75........U".. 0140 01 ea 08 84 fb 3a 51 3f cf 65 96 39 78 53 32 de .....:Q?.e.9xS2. 0150 b0 61 55 b1 7e e1 .aU.~. Frame 8 (334 bytes on wire, 334 bytes captured) Arrival Time: Mar 6, 2007 15:47:02.393981000 Time delta from previous packet: 0.017927000 seconds Time since reference or first frame: 0.035341000 seconds Frame Number: 8 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5), Dst: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.146 (165.227.249.146), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0848 (2120) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf290 [correct] Good: True Bad : False Source: 165.227.249.146 (165.227.249.146) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xb573 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xC7B95607C03F43BF Responder cookie: 0x5F8D57574EF5C1ED Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x9F804C98 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 89 f2 82 00 0c 29 af 74 f5 08 00 45 00 ..).....).t...E. 0010 01 40 08 48 00 00 80 11 f2 90 a5 e3 f9 92 a5 e3 .@.H............ 0020 f9 7a 01 f4 01 f4 01 2c b5 73 c7 b9 56 07 c0 3f .z.....,.s..V..? 0030 43 bf 5f 8d 57 57 4e f5 c1 ed 08 10 20 01 9f 80 C._.WWN..... ... 0040 4c 98 00 00 01 24 14 e4 6c 04 fa 98 ed 73 24 d7 L....$..l....s$. 0050 36 26 fc 36 37 32 23 c1 74 09 91 64 39 da 52 d4 6&.672#.t..d9.R. 0060 d6 3b ef 4c f8 77 1f 76 b6 de 2d 33 d3 5e 4a d1 .;.L.w.v..-3.^J. 0070 e1 6a 48 bc ab e4 70 4b b4 b4 f8 09 0a 07 57 00 .jH...pK......W. 0080 00 28 9d cc 1e 0c 1e c2 41 99 c6 28 73 64 0e 3b .(......A..(sd.; 0090 7d 4a 47 a4 66 ea 10 b4 5b 17 a3 64 20 0a ef 09 }JG.f...[..d ... 00a0 2b 28 df ad f0 2b a5 41 e5 80 81 57 1c 94 61 c1 +(...+.A...W..a. 00b0 4d 24 3d 06 55 44 86 93 d4 d4 ec 27 fb 6f 4a 78 M$=.UD.....'.oJx 00c0 29 99 ef 95 d6 79 11 78 dc 90 1e 65 32 22 f6 42 )....y.x...e2".B 00d0 c2 7f 77 d4 cc 1c e5 47 b7 4e c5 7d a2 73 5c 8e ..w....G.N.}.s\. 00e0 9c 5f 98 bc 07 c9 7e 6c 5a de 9f de be 27 71 27 ._....~lZ....'q' 00f0 f2 05 09 1a 4a d0 3d 7e 1d 35 d9 0e 72 e7 fa be ....J.=~.5..r... 0100 d8 69 15 6b ba c1 4d f3 4b ba 4a 02 31 19 c8 8a .i.k..M.K.J.1... 0110 f7 22 e6 5e 15 33 0d 57 b0 30 dc 1c 39 bc a0 d0 .".^.3.W.0..9... 0120 57 16 69 b4 d3 fb c6 f6 05 6b ef fd 0d 29 c1 6a W.i......k...).j 0130 a4 95 d3 af 96 a4 0f 06 bc 6f e0 9c 89 06 ff a5 .........o...... 0140 c0 37 1a 1e 7c 9e 90 24 6c 44 d0 9a b7 fe .7..|..$lD.... Frame 9 (102 bytes on wire, 102 bytes captured) Arrival Time: Mar 6, 2007 15:47:02.393983000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.035343000 seconds Frame Number: 9 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0085 (133) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb3b [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.146 (165.227.249.146) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xbcea [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xC7B95607C03F43BF Responder cookie: 0x5F8D57574EF5C1ED Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x9F804C98 Length: 60 Encrypted payload (32 bytes) 0000 00 0c 29 af 74 f5 00 0c 29 89 f2 82 08 00 45 00 ..).t...).....E. 0010 00 58 00 85 40 00 40 11 fb 3b a5 e3 f9 7a a5 e3 .X..@.@..;...z.. 0020 f9 92 01 f4 01 f4 00 44 bc ea c7 b9 56 07 c0 3f .......D....V..? 0030 43 bf 5f 8d 57 57 4e f5 c1 ed 08 10 20 01 9f 80 C._.WWN..... ... 0040 4c 98 00 00 00 3c 0f fc f0 2f 38 d7 00 7e 58 b8 L....<.../8..~X. 0050 bf ae 63 f0 10 80 27 5a bf 2d 15 62 1b a5 33 91 ..c...'Z.-.b..3. 0060 3c a7 81 c6 31 ea <...1. Frame 10 (102 bytes on wire, 102 bytes captured) Arrival Time: Mar 6, 2007 15:47:02.415606000 Time delta from previous packet: 0.021623000 seconds Time since reference or first frame: 0.056966000 seconds Frame Number: 10 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0086 (134) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb3a [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.146 (165.227.249.146) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xbcea [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xC7B95607C03F43BF Responder cookie: 0x5F8D57574EF5C1ED Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x9F804C98 Length: 60 Encrypted payload (32 bytes) 0000 00 0c 29 af 74 f5 00 0c 29 89 f2 82 08 00 45 00 ..).t...).....E. 0010 00 58 00 86 40 00 40 11 fb 3a a5 e3 f9 7a a5 e3 .X..@.@..:...z.. 0020 f9 92 01 f4 01 f4 00 44 bc ea c7 b9 56 07 c0 3f .......D....V..? 0030 43 bf 5f 8d 57 57 4e f5 c1 ed 08 10 20 01 9f 80 C._.WWN..... ... 0040 4c 98 00 00 00 3c 0f fc f0 2f 38 d7 00 7e 58 b8 L....<.../8..~X. 0050 bf ae 63 f0 10 80 27 5a bf 2d 15 62 1b a5 33 91 ..c...'Z.-.b..3. 0060 3c a7 81 c6 31 ea <...1. Frame 11 (102 bytes on wire, 102 bytes captured) Arrival Time: Mar 6, 2007 15:47:02.485763000 Time delta from previous packet: 0.070157000 seconds Time since reference or first frame: 0.127123000 seconds Frame Number: 11 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0087 (135) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb39 [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.146 (165.227.249.146) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xbcea [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xC7B95607C03F43BF Responder cookie: 0x5F8D57574EF5C1ED Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x9F804C98 Length: 60 Encrypted payload (32 bytes) 0000 00 0c 29 af 74 f5 00 0c 29 89 f2 82 08 00 45 00 ..).t...).....E. 0010 00 58 00 87 40 00 40 11 fb 39 a5 e3 f9 7a a5 e3 .X..@.@..9...z.. 0020 f9 92 01 f4 01 f4 00 44 bc ea c7 b9 56 07 c0 3f .......D....V..? 0030 43 bf 5f 8d 57 57 4e f5 c1 ed 08 10 20 01 9f 80 C._.WWN..... ... 0040 4c 98 00 00 00 3c 0f fc f0 2f 38 d7 00 7e 58 b8 L....<.../8..~X. 0050 bf ae 63 f0 10 80 27 5a bf 2d 15 62 1b a5 33 91 ..c...'Z.-.b..3. 0060 3c a7 81 c6 31 ea <...1. Frame 12 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 6, 2007 15:47:02.564848000 Time delta from previous packet: 0.079085000 seconds Time since reference or first frame: 0.206208000 seconds Frame Number: 12 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0042 (66) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c45 [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.146 (165.227.249.146) Encapsulating Security Payload SPI: 0x265f1531 Sequence: 1 Data (84 bytes) 0000 00 0c 29 af 74 f5 00 0c 29 89 f2 82 08 00 45 00 ..).t...).....E. 0010 00 70 00 42 00 00 ff 32 7c 45 a5 e3 f9 7a a5 e3 .p.B...2|E...z.. 0020 f9 92 26 5f 15 31 00 00 00 01 b0 0d 9d 90 7d 68 ..&_.1........}h 0030 db 43 f4 00 b6 f1 d7 0f 1b ce 6d df ef f4 04 13 .C........m..... 0040 e9 e0 e0 51 b1 c6 4f 2f 1e 72 48 06 4c 20 56 0e ...Q..O/.rH.L V. 0050 1d a5 94 9d ff 08 34 e7 a7 29 d6 a5 e4 dc 61 c3 ......4..)....a. 0060 7a f3 94 92 02 a8 a8 34 24 32 be f5 1c db 17 d0 z......4$2...... 0070 67 59 5b 75 00 7c d9 1d 76 7e 8d b0 93 a1 gY[u.|..v~.... Frame 13 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 6, 2007 15:47:02.572811000 Time delta from previous packet: 0.007963000 seconds Time since reference or first frame: 0.214171000 seconds Frame Number: 13 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5), Dst: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.146 (165.227.249.146), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x397c (14716) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 126 Protocol: ESP (0x32) Header checksum: 0xc40b [correct] Good: True Bad : False Source: 165.227.249.146 (165.227.249.146) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x1dd7cea5 Sequence: 1 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 0c 29 af 74 f5 08 00 45 00 ..).....).t...E. 0010 00 70 39 7c 00 00 7e 32 c4 0b a5 e3 f9 92 a5 e3 .p9|..~2........ 0020 f9 7a 1d d7 ce a5 00 00 00 01 e0 5d e6 44 39 c8 .z.........].D9. 0030 78 a5 75 42 28 20 75 32 b0 80 37 6c 9b f2 c8 1a x.uB( u2..7l.... 0040 62 78 4c 26 3d 50 66 67 86 97 b9 ca 7c a0 eb 77 bxL&=Pfg....|..w 0050 ec 9e 88 20 e0 ee 01 d5 78 a1 5a 7f e4 cd 8c 74 ... ....x.Z....t 0060 bc e1 11 00 fb e2 c5 44 e8 c3 49 4e 28 38 eb 07 .......D..IN(8.. 0070 67 35 b0 4a 6d c0 e6 e8 42 30 b1 9a 0f e7 g5.Jm...B0.... Frame 14 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 6, 2007 15:47:02.994936000 Time delta from previous packet: 0.422125000 seconds Time since reference or first frame: 0.636296000 seconds Frame Number: 14 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0043 (67) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c44 [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.146 (165.227.249.146) Encapsulating Security Payload SPI: 0x265f1531 Sequence: 2 Data (84 bytes) 0000 00 0c 29 af 74 f5 00 0c 29 89 f2 82 08 00 45 00 ..).t...).....E. 0010 00 70 00 43 00 00 ff 32 7c 44 a5 e3 f9 7a a5 e3 .p.C...2|D...z.. 0020 f9 92 26 5f 15 31 00 00 00 02 62 48 e1 f4 92 5b ..&_.1....bH...[ 0030 f3 32 75 a6 f3 7d 58 a9 d6 e3 7d d9 05 9c 10 5a .2u..}X...}....Z 0040 cd 7a 0f 45 42 10 e9 f4 bc b6 d5 dd a8 54 9c 7d .z.EB........T.} 0050 af 2e 79 b2 94 c3 55 b1 6a cc 50 a5 34 24 0a 03 ..y...U.j.P.4$.. 0060 aa a8 96 af bc 95 8b 1c b6 28 65 0f 52 87 bd 4c .........(e.R..L 0070 7f 08 ab 30 40 f1 d6 3b ab fb df 7e 39 f0 ...0@..;...~9. Frame 15 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 6, 2007 15:47:02.995702000 Time delta from previous packet: 0.000766000 seconds Time since reference or first frame: 0.637062000 seconds Frame Number: 15 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5), Dst: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.146 (165.227.249.146), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x397d (14717) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 126 Protocol: ESP (0x32) Header checksum: 0xc40a [correct] Good: True Bad : False Source: 165.227.249.146 (165.227.249.146) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x1dd7cea5 Sequence: 2 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 0c 29 af 74 f5 08 00 45 00 ..).....).t...E. 0010 00 70 39 7d 00 00 7e 32 c4 0a a5 e3 f9 92 a5 e3 .p9}..~2........ 0020 f9 7a 1d d7 ce a5 00 00 00 02 ac ea 55 37 84 05 .z..........U7.. 0030 5d 36 0d 2c c8 8c 14 fa fb cc 19 5f 41 b8 7a e0 ]6.,......._A.z. 0040 e5 0a 3d bc e8 7c a8 f4 5c 34 81 73 5c ad 74 86 ..=..|..\4.s\.t. 0050 79 71 21 3f 29 c5 1c 1b 2a 9e f1 db e3 ea 16 49 yq!?)...*......I 0060 16 ff 7e b5 7f 3d f7 e1 9b 9d d0 2e a3 5f ab 06 ..~..=......._.. 0070 f6 11 b3 e6 7e 44 5a 89 f5 9c 5b 6a 81 31 ....~DZ...[j.1 Frame 16 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 6, 2007 15:47:04.393894000 Time delta from previous packet: 1.398192000 seconds Time since reference or first frame: 2.035254000 seconds Frame Number: 16 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0044 (68) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c43 [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.146 (165.227.249.146) Encapsulating Security Payload SPI: 0x265f1531 Sequence: 3 Data (84 bytes) 0000 00 0c 29 af 74 f5 00 0c 29 89 f2 82 08 00 45 00 ..).t...).....E. 0010 00 70 00 44 00 00 ff 32 7c 43 a5 e3 f9 7a a5 e3 .p.D...2|C...z.. 0020 f9 92 26 5f 15 31 00 00 00 03 45 93 ce d9 94 f7 ..&_.1....E..... 0030 0d 26 a0 94 fd 48 32 82 97 ef e3 ff 67 9b 1c 71 .&...H2.....g..q 0040 8a 3f a3 54 3e 7c bd 22 d5 2f 80 37 74 d7 29 81 .?.T>|."./.7t.). 0050 c4 61 af db dd 18 78 b1 d3 e2 8e 0d ee a7 08 f1 .a....x......... 0060 7d fa ae b7 e1 75 6c 45 69 cf dd 68 47 d9 a2 22 }....ulEi..hG.." 0070 6d 85 76 92 cc ad 0e dd 7e 58 ed 21 e1 82 m.v.....~X.!.. Frame 17 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 6, 2007 15:47:04.395000000 Time delta from previous packet: 0.001106000 seconds Time since reference or first frame: 2.036360000 seconds Frame Number: 17 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5), Dst: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.146 (165.227.249.146), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x397e (14718) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 126 Protocol: ESP (0x32) Header checksum: 0xc409 [correct] Good: True Bad : False Source: 165.227.249.146 (165.227.249.146) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x1dd7cea5 Sequence: 3 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 0c 29 af 74 f5 08 00 45 00 ..).....).t...E. 0010 00 70 39 7e 00 00 7e 32 c4 09 a5 e3 f9 92 a5 e3 .p9~..~2........ 0020 f9 7a 1d d7 ce a5 00 00 00 03 dd 35 8e dd 80 13 .z.........5.... 0030 ea 5e 8a ba bc 1e 6f 37 7d a2 0c b0 d5 ec 00 35 .^....o7}......5 0040 51 d7 2f 0a fe a1 ca 7f 33 ac 04 51 b4 72 10 c1 Q./.....3..Q.r.. 0050 c3 1a 98 87 7c 09 aa ac d1 83 7e c3 cd 3b ea 6b ....|.....~..;.k 0060 18 3d 79 10 1d 50 2f b0 1d 33 de 4e 2c 73 69 af .=y..P/..3.N,si. 0070 60 dd ac cd cf 02 c9 1b 45 5b b0 1b 01 ad `.......E[.... Frame 18 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 6, 2007 15:47:05.393902000 Time delta from previous packet: 0.998902000 seconds Time since reference or first frame: 3.035262000 seconds Frame Number: 18 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82), Dst: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Destination: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.146 (165.227.249.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0045 (69) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c42 [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.146 (165.227.249.146) Encapsulating Security Payload SPI: 0x265f1531 Sequence: 4 Data (84 bytes) 0000 00 0c 29 af 74 f5 00 0c 29 89 f2 82 08 00 45 00 ..).t...).....E. 0010 00 70 00 45 00 00 ff 32 7c 42 a5 e3 f9 7a a5 e3 .p.E...2|B...z.. 0020 f9 92 26 5f 15 31 00 00 00 04 fd 4f 2f c9 a5 df ..&_.1.....O/... 0030 c0 60 28 72 d1 46 b8 59 9c d2 f8 3c 8c 91 d1 84 .`(r.F.Y...<.... 0040 ee 21 a5 91 fc d7 7e 00 e3 0d ff 98 23 7c 0e b5 .!....~.....#|.. 0050 81 1d 25 f1 a3 e9 b2 57 f4 a3 4b 5d 00 5b 63 a8 ..%....W..K].[c. 0060 f1 f1 33 39 3d 6b 96 d0 2c 94 c6 6c e0 7a ea 9a ..39=k..,..l.z.. 0070 ef 77 34 dd 41 cb 9a c2 86 66 4f 09 f2 66 .w4.A....fO..f Frame 19 (126 bytes on wire, 126 bytes captured) Arrival Time: Mar 6, 2007 15:47:05.394963000 Time delta from previous packet: 0.001061000 seconds Time since reference or first frame: 3.036323000 seconds Frame Number: 19 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5), Dst: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:0c:29:af:74:f5 (00:0c:29:af:74:f5) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.146 (165.227.249.146), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x397f (14719) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 126 Protocol: ESP (0x32) Header checksum: 0xc408 [correct] Good: True Bad : False Source: 165.227.249.146 (165.227.249.146) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x1dd7cea5 Sequence: 4 Data (84 bytes) 0000 00 0c 29 89 f2 82 00 0c 29 af 74 f5 08 00 45 00 ..).....).t...E. 0010 00 70 39 7f 00 00 7e 32 c4 08 a5 e3 f9 92 a5 e3 .p9...~2........ 0020 f9 7a 1d d7 ce a5 00 00 00 04 60 a7 bb e1 b1 00 .z........`..... 0030 ce b3 3e 02 ce 95 21 7d e4 82 2a 91 b9 c9 44 5e ..>...!}..*...D^ 0040 89 47 47 f6 38 e8 92 62 27 9c c8 1d 38 d3 c8 f8 .GG.8..b'...8... 0050 59 f6 30 f4 16 2f 79 5a d0 5e ef d8 29 08 09 84 Y.0../yZ.^..)... 0060 e2 87 3a 1d fb 61 c0 27 36 9a 3c 0c b2 b9 39 93 ..:..a.'6.<...9. 0070 a6 28 ac 51 f2 a7 98 35 99 32 55 00 f6 6f .(.Q...5.2U..o