Frame 1 (174 bytes on wire, 174 bytes captured) Arrival Time: Dec 14, 2007 12:52:48.359799000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 174 bytes Capture Length: 174 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 160 Identification: 0x006e (110) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb01 [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.155 (165.227.249.155) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 140 Checksum: 0xd61f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5030AE5888B3FA35 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 132 Security Association payload Next payload: Vendor ID (13) Length: 60 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 48 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 40 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 44 Vendor ID: Check Point Check Point Product: VPN-1 Version: NG with Application Intelligence R55 Check Point Vendor ID parameters 0000 00 11 22 33 44 78 00 0c 29 51 89 a7 08 00 45 00 .."3Dx..)Q....E. 0010 00 a0 00 6e 40 00 40 11 fb 01 a5 e3 f9 7a a5 e3 ...n@.@......z.. 0020 f9 9b 01 f4 01 f4 00 8c d6 1f 50 30 ae 58 88 b3 ..........P0.X.. 0030 fa 35 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .5.............. 0040 00 00 00 00 00 84 0d 00 00 3c 00 00 00 01 00 00 .........<...... 0050 00 01 00 00 00 30 01 01 00 01 00 00 00 28 01 01 .....0.......(.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 00 0c 00 04 00 00 ................ 0080 70 80 00 00 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa p....,.......Qo. 0090 ac 0e e3 7d af 28 07 b4 38 1f 00 00 00 01 00 00 ...}.(..8....... 00a0 13 8d 46 92 c4 59 00 00 00 00 18 00 00 00 ..F..Y........ Frame 2 (150 bytes on wire, 150 bytes captured) Arrival Time: Dec 14, 2007 12:52:48.478275000 Time delta from previous packet: 0.118476000 seconds Time since reference or first frame: 0.118476000 seconds Frame Number: 2 Packet Length: 150 bytes Capture Length: 150 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:11:22:33:44:78 (00:11:22:33:44:78), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Source: 00:11:22:33:44:78 (00:11:22:33:44:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.155 (165.227.249.155), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb87 [correct] Good: True Bad : False Source: 165.227.249.155 (165.227.249.155) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 116 Checksum: 0xf89f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5030AE5888B3FA35 Responder cookie: 0xE907AFE42AE206B8 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 108 Security Association payload Next payload: Vendor ID (13) Length: 60 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 48 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 40 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 51 89 a7 00 11 22 33 44 78 08 00 45 00 ..)Q...."3Dx..E. 0010 00 88 00 00 40 00 40 11 fb 87 a5 e3 f9 9b a5 e3 ....@.@......... 0020 f9 7a 01 f4 01 f4 00 74 f8 9f 50 30 ae 58 88 b3 .z.....t..P0.X.. 0030 fa 35 e9 07 af e4 2a e2 06 b8 01 10 02 00 00 00 .5....*......... 0040 00 00 00 00 00 6c 0d 00 00 3c 00 00 00 01 00 00 .....l...<...... 0050 00 01 00 00 00 30 01 01 00 01 00 00 00 28 01 01 .....0.......(.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 00 0c 00 04 00 00 ................ 0080 70 80 00 00 00 14 70 03 cb c1 09 7d be 9c 26 00 p.....p....}..&. 0090 ba 69 83 bc 8b 35 .i...5 Frame 3 (226 bytes on wire, 226 bytes captured) Arrival Time: Dec 14, 2007 12:52:48.478277000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.118478000 seconds Frame Number: 3 Packet Length: 226 bytes Capture Length: 226 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x006f (111) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfacc [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.155 (165.227.249.155) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0xcb3c [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5030AE5888B3FA35 Responder cookie: 0xE907AFE42AE206B8 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 11 22 33 44 78 00 0c 29 51 89 a7 08 00 45 00 .."3Dx..)Q....E. 0010 00 d4 00 6f 40 00 40 11 fa cc a5 e3 f9 7a a5 e3 ...o@.@......z.. 0020 f9 9b 01 f4 01 f4 00 c0 cb 3c 50 30 ae 58 88 b3 ............*. 0070 da e1 c6 4c 8c bc a4 46 cf 29 c8 3c 62 16 0a f4 ...L...F.). 00b0 f4 6b d5 38 62 12 25 4f 1a f7 07 80 51 f2 08 b9 .k.8b.%O....Q... 00c0 83 27 3d a1 0c 2a 0f c4 ec 05 00 00 00 18 4e 03 .'=..*........N. 00d0 7a d6 da 19 0a 20 f7 ac 92 9e 03 68 01 7e 18 68 z.... .....h.~.h 00e0 fd fa .. Frame 4 (242 bytes on wire, 242 bytes captured) Arrival Time: Dec 14, 2007 12:52:48.697678000 Time delta from previous packet: 0.219401000 seconds Time since reference or first frame: 0.337879000 seconds Frame Number: 4 Packet Length: 242 bytes Capture Length: 242 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:11:22:33:44:78 (00:11:22:33:44:78), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Source: 00:11:22:33:44:78 (00:11:22:33:44:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.155 (165.227.249.155), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 228 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb2b [correct] Good: True Bad : False Source: 165.227.249.155 (165.227.249.155) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 208 Checksum: 0xd749 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5030AE5888B3FA35 Responder cookie: 0xE907AFE42AE206B8 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 200 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 20 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 51 89 a7 00 11 22 33 44 78 08 00 45 00 ..)Q...."3Dx..E. 0010 00 e4 00 00 40 00 40 11 fb 2b a5 e3 f9 9b a5 e3 ....@.@..+...... 0020 f9 7a 01 f4 01 f4 00 d0 d7 49 50 30 ae 58 88 b3 .z.......IP0.X.. 0030 fa 35 e9 07 af e4 2a e2 06 b8 04 10 02 00 00 00 .5....*......... 0040 00 00 00 00 00 c8 0a 00 00 84 cc 9d e7 de 84 38 ...............8 0050 50 50 6f f6 29 73 50 a5 15 5c f5 6b dd 62 6b ef PPo.)sP..\.k.bk. 0060 70 71 fe 50 84 94 83 85 ea 2d f9 48 77 81 80 bd pq.P.....-.Hw... 0070 e9 4c f3 69 fa fc d2 8d 96 2f 4c e7 4c 07 a0 fa .L.i...../L.L... 0080 a0 2c 8c cb b2 a8 7b b4 27 44 79 f7 a3 dd 8b 80 .,....{.'Dy..... 0090 92 35 d0 c1 aa 19 89 8b 97 c6 7c 02 9b 72 e4 e7 .5........|..r.. 00a0 e2 3e e5 a0 bf d8 e1 8c 38 d5 be b5 88 17 ee 83 .>......8....... 00b0 a7 b5 bf 34 5e 76 02 6f 2b ba cf 7d 82 a6 22 07 ...4^v.o+..}..". 00c0 cc 87 d2 d3 68 ba a6 f3 4f a8 0d 00 00 14 c7 e0 ....h...O....... 00d0 26 f2 fb 34 82 ce 78 0e c5 cc 33 9a 7f 9c 00 00 &..4..x...3..... 00e0 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 00f0 8b 35 .5 Frame 5 (118 bytes on wire, 118 bytes captured) Arrival Time: Dec 14, 2007 12:52:48.697680000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.337881000 seconds Frame Number: 5 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0070 (112) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb37 [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.155 (165.227.249.155) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x2e7f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5030AE5888B3FA35 Responder cookie: 0xE907AFE42AE206B8 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 11 22 33 44 78 00 0c 29 51 89 a7 08 00 45 00 .."3Dx..)Q....E. 0010 00 68 00 70 40 00 40 11 fb 37 a5 e3 f9 7a a5 e3 .h.p@.@..7...z.. 0020 f9 9b 01 f4 01 f4 00 54 2e 7f 50 30 ae 58 88 b3 .......T..P0.X.. 0030 fa 35 e9 07 af e4 2a e2 06 b8 05 10 02 01 00 00 .5....*......... 0040 00 00 00 00 00 4c 5e 04 b5 98 c2 44 0d f3 b0 09 .....L^....D.... 0050 7d b5 8a a8 85 76 e5 1b d1 f5 c8 e1 88 ac 39 50 }....v........9P 0060 d4 83 d8 54 d2 2f 12 ae 23 5d ef 72 ec 7d fc 5d ...T./..#].r.}.] 0070 8b 09 f1 02 cd 98 ...... Frame 6 (118 bytes on wire, 118 bytes captured) Arrival Time: Dec 14, 2007 12:52:48.921382000 Time delta from previous packet: 0.223702000 seconds Time since reference or first frame: 0.561583000 seconds Frame Number: 6 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:11:22:33:44:78 (00:11:22:33:44:78), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Source: 00:11:22:33:44:78 (00:11:22:33:44:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.155 (165.227.249.155), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfba7 [correct] Good: True Bad : False Source: 165.227.249.155 (165.227.249.155) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x51f7 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5030AE5888B3FA35 Responder cookie: 0xE907AFE42AE206B8 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 51 89 a7 00 11 22 33 44 78 08 00 45 00 ..)Q...."3Dx..E. 0010 00 68 00 00 40 00 40 11 fb a7 a5 e3 f9 9b a5 e3 .h..@.@......... 0020 f9 7a 01 f4 01 f4 00 54 51 f7 50 30 ae 58 88 b3 .z.....TQ.P0.X.. 0030 fa 35 e9 07 af e4 2a e2 06 b8 05 10 02 01 00 00 .5....*......... 0040 00 00 00 00 00 4c db 6d c4 63 28 ff 31 53 40 11 .....L.m.c(.1S@. 0050 ad a8 ce 3a 86 23 54 e9 73 8a b5 c0 c8 17 54 79 ...:.#T.s.....Ty 0060 07 74 e0 8f 8d 4e 49 33 e4 7f 49 1a ff 87 1e 5b .t...NI3..I....[ 0070 c2 69 2d d4 45 f0 .i-.E. Frame 7 (358 bytes on wire, 358 bytes captured) Arrival Time: Dec 14, 2007 12:52:48.929241000 Time delta from previous packet: 0.007859000 seconds Time since reference or first frame: 0.569442000 seconds Frame Number: 7 Packet Length: 358 bytes Capture Length: 358 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 344 Identification: 0x0071 (113) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa46 [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.155 (165.227.249.155) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 324 Checksum: 0x2969 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5030AE5888B3FA35 Responder cookie: 0xE907AFE42AE206B8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xF4CED788 Length: 316 Encrypted payload (288 bytes) 0000 00 11 22 33 44 78 00 0c 29 51 89 a7 08 00 45 00 .."3Dx..)Q....E. 0010 01 58 00 71 40 00 40 11 fa 46 a5 e3 f9 7a a5 e3 .X.q@.@..F...z.. 0020 f9 9b 01 f4 01 f4 01 44 29 69 50 30 ae 58 88 b3 .......D)iP0.X.. 0030 fa 35 e9 07 af e4 2a e2 06 b8 08 10 20 01 f4 ce .5....*..... ... 0040 d7 88 00 00 01 3c 96 c0 d9 4a 72 e3 d1 4a 11 21 .....<...Jr..J.! 0050 c2 51 14 f2 5a e9 d5 cb e1 2c 1d 3e d7 35 61 ba .Q..Z....,.>.5a. 0060 20 41 68 7c ed cb 94 d4 37 4e 77 af a0 f2 18 ad Ah|....7Nw..... 0070 9d 7f 58 73 a8 b7 fc 8b ba 90 8e f7 87 e6 d7 60 ..Xs...........` 0080 e1 50 0e 4e 66 5d 39 9b ee 09 72 67 42 76 fe 3f .P.Nf]9...rgBv.? 0090 fd cb 1c 98 23 61 c3 f1 08 e7 04 86 c5 e2 4c f7 ....#a........L. 00a0 5f 1a cb ee 36 80 df 79 27 e1 58 f6 d5 5b 99 e1 _...6..y'.X..[.. 00b0 c1 e0 fd f2 e3 e0 bf f8 db 7b 00 72 a6 3a 15 0c .........{.r.:.. 00c0 b8 be ea 8d f0 a7 d2 b3 29 9f 78 77 41 63 08 08 ........).xwAc.. 00d0 ae 43 93 b4 c5 46 5a 6f 25 45 72 89 b2 ba 2d 3a .C...FZo%Er...-: 00e0 53 3c bc 96 48 57 21 77 f5 6b a1 28 46 19 8d 26 S<..HW!w.k.(F..& 00f0 3f 86 d5 50 19 01 ed 23 5b 30 a6 16 7c 15 9c ee ?..P...#[0..|... 0100 24 80 68 06 2a e1 10 fe d9 08 a5 4f 45 6f 73 2c $.h.*......OEos, 0110 fa 58 f4 fd 95 b4 f3 56 de 8b 33 ae 56 4f 3f 7b .X.....V..3.VO?{ 0120 2b 42 b0 09 96 c3 44 49 b3 ba 0a f7 88 b2 de e3 +B....DI........ 0130 02 e2 b7 c4 fa 04 d7 1b 2f d5 40 74 3a a8 81 b3 ......../.@t:... 0140 1b a2 47 48 76 57 0c f6 16 ec d2 38 8f 30 bf af ..GHvW.....8.0.. 0150 b4 7e 92 58 57 3d 6f 44 4e d0 89 0e 9c c9 f2 f6 .~.XW=oDN....... 0160 eb 89 ad b8 ee 90 ...... Frame 8 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 12:52:48.950052000 Time delta from previous packet: 0.020811000 seconds Time since reference or first frame: 0.590253000 seconds Frame Number: 8 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:11:22:33:44:78 (00:11:22:33:44:78), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Source: 00:11:22:33:44:78 (00:11:22:33:44:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.155 (165.227.249.155), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb97 [correct] Good: True Bad : False Source: 165.227.249.155 (165.227.249.155) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x905a [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5030AE5888B3FA35 Responder cookie: 0xE907AFE42AE206B8 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB9EC120B Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 51 89 a7 00 11 22 33 44 78 08 00 45 00 ..)Q...."3Dx..E. 0010 00 78 00 00 40 00 40 11 fb 97 a5 e3 f9 9b a5 e3 .x..@.@......... 0020 f9 7a 01 f4 01 f4 00 64 90 5a 50 30 ae 58 88 b3 .z.....d.ZP0.X.. 0030 fa 35 e9 07 af e4 2a e2 06 b8 08 10 05 01 b9 ec .5....*......... 0040 12 0b 00 00 00 5c 05 f8 15 05 cb a5 58 22 75 ac .....\......X"u. 0050 6d 3f 5b 47 f9 32 bc af 15 a1 70 2f f6 d0 4f fa m?[G.2....p/..O. 0060 fb cf bd af 2d dd 56 f7 78 10 fd c6 1a f2 6c da ....-.V.x.....l. 0070 66 92 d1 c1 b7 42 c7 53 2e 31 26 85 5c 49 3b f4 f....B.S.1&.\I;. 0080 b9 78 a0 ad cd 33 .x...3 Frame 9 (342 bytes on wire, 342 bytes captured) Arrival Time: Dec 14, 2007 12:52:49.255745000 Time delta from previous packet: 0.305693000 seconds Time since reference or first frame: 0.895946000 seconds Frame Number: 9 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:11:22:33:44:78 (00:11:22:33:44:78), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Source: 00:11:22:33:44:78 (00:11:22:33:44:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.155 (165.227.249.155), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfac7 [correct] Good: True Bad : False Source: 165.227.249.155 (165.227.249.155) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x8c3e [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5030AE5888B3FA35 Responder cookie: 0xE907AFE42AE206B8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xF4CED788 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 51 89 a7 00 11 22 33 44 78 08 00 45 00 ..)Q...."3Dx..E. 0010 01 48 00 00 40 00 40 11 fa c7 a5 e3 f9 9b a5 e3 .H..@.@......... 0020 f9 7a 01 f4 01 f4 01 34 8c 3e 50 30 ae 58 88 b3 .z.....4.>P0.X.. 0030 fa 35 e9 07 af e4 2a e2 06 b8 08 10 20 01 f4 ce .5....*..... ... 0040 d7 88 00 00 01 2c d0 89 3e 11 f0 3e e3 e2 92 80 .....,..>..>.... 0050 e1 f9 c3 94 5a b8 07 bc 19 e5 e0 7e a2 86 b1 09 ....Z......~.... 0060 05 92 77 59 3c dd bb 86 36 40 7b 5f c8 3a a9 b7 ..wY<...6@{_.:.. 0070 1d f0 fb 49 69 d5 74 1f 68 8a ee 14 e9 f5 05 44 ...Ii.t.h......D 0080 c7 06 16 59 bd 1e 2a 43 6d d6 c6 49 42 e9 36 38 ...Y..*Cm..IB.68 0090 de 4f 5f 20 cc d6 bc 37 54 50 eb 4a 77 14 e5 03 .O_ ...7TP.Jw... 00a0 14 2d 7a 5f 88 96 fa ba bb 99 6a df 96 e0 76 7b .-z_......j...v{ 00b0 76 64 7a 8f f5 9f 18 84 ab 71 58 93 36 02 3b 86 vdz......qX.6.;. 00c0 93 af e5 87 5d 55 9e 3e 90 81 49 7a f2 9b 51 b9 ....]U.>..Iz..Q. 00d0 7a 28 e4 08 54 18 d7 ed 8e 5d 2b 77 e4 5e 60 26 z(..T....]+w.^`& 00e0 e6 e8 25 0b bf 8e 8f 80 97 c1 4f 01 4d ae f3 cd ..%.......O.M... 00f0 37 e7 9a 0c 5c ee d7 11 cf 93 ad a3 33 3b a8 3f 7...\.......3;.? 0100 ad 64 dd 15 67 74 f5 69 45 ec a8 cf ce af 99 e9 .d..gt.iE....... 0110 31 43 a7 d1 f1 64 69 8d 83 8a c5 48 e6 53 52 12 1C...di....H.SR. 0120 36 a7 ef e6 15 32 24 3e 47 f7 1e d1 ce 67 e7 fc 6....2$>G....g.. 0130 a5 ed 00 51 2e 26 73 34 a3 50 f4 32 46 bb 4b 6c ...Q.&s4.P.2F.Kl 0140 a9 eb 47 28 7f cd 08 d1 58 3e 51 86 b5 9e 26 a0 ..G(....X>Q...&. 0150 95 f5 54 6a f3 3a ..Tj.: Frame 10 (102 bytes on wire, 102 bytes captured) Arrival Time: Dec 14, 2007 12:52:49.255747000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.895948000 seconds Frame Number: 10 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0072 (114) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb45 [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.155 (165.227.249.155) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x7691 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5030AE5888B3FA35 Responder cookie: 0xE907AFE42AE206B8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xF4CED788 Length: 60 Encrypted payload (32 bytes) 0000 00 11 22 33 44 78 00 0c 29 51 89 a7 08 00 45 00 .."3Dx..)Q....E. 0010 00 58 00 72 40 00 40 11 fb 45 a5 e3 f9 7a a5 e3 .X.r@.@..E...z.. 0020 f9 9b 01 f4 01 f4 00 44 76 91 50 30 ae 58 88 b3 .......Dv.P0.X.. 0030 fa 35 e9 07 af e4 2a e2 06 b8 08 10 20 01 f4 ce .5....*..... ... 0040 d7 88 00 00 00 3c 0a d6 11 c3 5c ea 3d 4c 35 56 .....<....\.=L5V 0050 e9 04 aa 6c 24 1a b5 07 db 9d 67 b1 0e d5 47 05 ...l$.....g...G. 0060 9b 72 af a2 c8 78 .r...x Frame 11 (102 bytes on wire, 102 bytes captured) Arrival Time: Dec 14, 2007 12:52:49.293848000 Time delta from previous packet: 0.038101000 seconds Time since reference or first frame: 0.934049000 seconds Frame Number: 11 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0073 (115) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb44 [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.155 (165.227.249.155) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x7691 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5030AE5888B3FA35 Responder cookie: 0xE907AFE42AE206B8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xF4CED788 Length: 60 Encrypted payload (32 bytes) 0000 00 11 22 33 44 78 00 0c 29 51 89 a7 08 00 45 00 .."3Dx..)Q....E. 0010 00 58 00 73 40 00 40 11 fb 44 a5 e3 f9 7a a5 e3 .X.s@.@..D...z.. 0020 f9 9b 01 f4 01 f4 00 44 76 91 50 30 ae 58 88 b3 .......Dv.P0.X.. 0030 fa 35 e9 07 af e4 2a e2 06 b8 08 10 20 01 f4 ce .5....*..... ... 0040 d7 88 00 00 00 3c 0a d6 11 c3 5c ea 3d 4c 35 56 .....<....\.=L5V 0050 e9 04 aa 6c 24 1a b5 07 db 9d 67 b1 0e d5 47 05 ...l$.....g...G. 0060 9b 72 af a2 c8 78 .r...x Frame 12 (102 bytes on wire, 102 bytes captured) Arrival Time: Dec 14, 2007 12:52:49.333196000 Time delta from previous packet: 0.039348000 seconds Time since reference or first frame: 0.973397000 seconds Frame Number: 12 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0074 (116) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb43 [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.155 (165.227.249.155) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x7691 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5030AE5888B3FA35 Responder cookie: 0xE907AFE42AE206B8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xF4CED788 Length: 60 Encrypted payload (32 bytes) 0000 00 11 22 33 44 78 00 0c 29 51 89 a7 08 00 45 00 .."3Dx..)Q....E. 0010 00 58 00 74 40 00 40 11 fb 43 a5 e3 f9 7a a5 e3 .X.t@.@..C...z.. 0020 f9 9b 01 f4 01 f4 00 44 76 91 50 30 ae 58 88 b3 .......Dv.P0.X.. 0030 fa 35 e9 07 af e4 2a e2 06 b8 08 10 20 01 f4 ce .5....*..... ... 0040 d7 88 00 00 00 3c 0a d6 11 c3 5c ea 3d 4c 35 56 .....<....\.=L5V 0050 e9 04 aa 6c 24 1a b5 07 db 9d 67 b1 0e d5 47 05 ...l$.....g...G. 0060 9b 72 af a2 c8 78 .r...x Frame 13 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 12:52:49.377532000 Time delta from previous packet: 0.044336000 seconds Time since reference or first frame: 1.017733000 seconds Frame Number: 13 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0019 (25) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c5d [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.155 (165.227.249.155) Encapsulating Security Payload SPI: 0x0662cefe Sequence: 1 Data (92 bytes) 0000 00 11 22 33 44 78 00 0c 29 51 89 a7 08 00 45 00 .."3Dx..)Q....E. 0010 00 78 00 19 00 00 ff 32 7c 5d a5 e3 f9 7a a5 e3 .x.....2|]...z.. 0020 f9 9b 06 62 ce fe 00 00 00 01 ec 1b 07 56 3c fd ...b.........V<. 0030 50 37 4e 6e da b2 e7 c1 6c 8f d5 fc 95 b8 46 27 P7Nn....l.....F' 0040 b7 94 16 7a d9 9c 59 27 1b e5 65 10 cb bf 24 f7 ...z..Y'..e...$. 0050 4b c6 c3 30 da 0f 54 c7 ce 94 d0 fe 44 65 bc 53 K..0..T.....De.S 0060 d6 d8 03 df 30 1b 41 27 f5 d2 19 79 0d 0d 1a 69 ....0.A'...y...i 0070 5a b7 07 88 ef 2b a6 8d ff 73 13 0b 37 54 2c ea Z....+...s..7T,. 0080 26 f2 c0 ce df 81 &..... Frame 14 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 12:52:53.612640000 Time delta from previous packet: 4.235108000 seconds Time since reference or first frame: 5.252841000 seconds Frame Number: 14 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x001a (26) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c5c [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.155 (165.227.249.155) Encapsulating Security Payload SPI: 0x0662cefe Sequence: 2 Data (92 bytes) 0000 00 11 22 33 44 78 00 0c 29 51 89 a7 08 00 45 00 .."3Dx..)Q....E. 0010 00 78 00 1a 00 00 ff 32 7c 5c a5 e3 f9 7a a5 e3 .x.....2|\...z.. 0020 f9 9b 06 62 ce fe 00 00 00 02 3a b3 be 75 05 f0 ...b......:..u.. 0030 91 03 86 a1 94 01 9a 63 7f 6b e9 1c c7 35 30 a0 .......c.k...50. 0040 f4 0b 0a aa 93 6f 94 15 0f f1 e2 72 f1 56 2d 0a .....o.....r.V-. 0050 42 dd 65 d9 e5 d2 a9 d3 b2 0a 8d 8e 86 62 f8 b0 B.e..........b.. 0060 4f d8 7d 9d 15 56 74 c0 f0 4d ae fe 36 2c 86 8a O.}..Vt..M..6,.. 0070 52 af 1d c3 77 dd 24 63 70 17 9d 2c 95 f7 76 1f R...w.$cp..,..v. 0080 f1 50 5e 12 84 3e .P^..> Frame 15 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 12:52:53.615582000 Time delta from previous packet: 0.002942000 seconds Time since reference or first frame: 5.255783000 seconds Frame Number: 15 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:11:22:33:44:78 (00:11:22:33:44:78), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Source: 00:11:22:33:44:78 (00:11:22:33:44:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.155 (165.227.249.155), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x09fe (2558) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3179 [correct] Good: True Bad : False Source: 165.227.249.155 (165.227.249.155) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x269972f2 Sequence: 1 Data (92 bytes) 0000 00 0c 29 51 89 a7 00 11 22 33 44 78 08 00 45 00 ..)Q...."3Dx..E. 0010 00 78 09 fe 00 00 40 32 31 79 a5 e3 f9 9b a5 e3 .x....@21y...... 0020 f9 7a 26 99 72 f2 00 00 00 01 d5 77 e8 d8 ae 1b .z&.r......w.... 0030 65 1d 1b 5d af c5 c9 21 fe 95 78 24 fb 0c d4 8d e..]...!..x$.... 0040 70 28 39 26 4d 3c 42 82 9e c0 62 66 08 7e 3d a2 p(9&M..:. Frame 16 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 12:52:54.635845000 Time delta from previous packet: 1.020263000 seconds Time since reference or first frame: 6.276046000 seconds Frame Number: 16 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x001b (27) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c5b [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.155 (165.227.249.155) Encapsulating Security Payload SPI: 0x0662cefe Sequence: 3 Data (92 bytes) 0000 00 11 22 33 44 78 00 0c 29 51 89 a7 08 00 45 00 .."3Dx..)Q....E. 0010 00 78 00 1b 00 00 ff 32 7c 5b a5 e3 f9 7a a5 e3 .x.....2|[...z.. 0020 f9 9b 06 62 ce fe 00 00 00 03 16 c8 38 21 49 0a ...b........8!I. 0030 4a 39 92 af fb 31 6f 85 6a 91 f1 71 e7 d6 69 33 J9...1o.j..q..i3 0040 48 c7 a2 13 97 01 b8 c5 2c b4 b3 09 96 c0 95 e8 H.......,....... 0050 03 bb dc 1c da cb 1c e9 73 08 c6 b4 f6 9a 6e 8b ........s.....n. 0060 25 bd ee 3f 82 1d 05 f3 82 e3 c5 61 77 74 2c 15 %..?.......awt,. 0070 fa 2f 03 2f 7a dc 0b f8 7f 51 e8 0c 6b 84 70 ab ././z....Q..k.p. 0080 f7 1b fa 3b 6f 2a ...;o* Frame 17 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 12:52:54.637386000 Time delta from previous packet: 0.001541000 seconds Time since reference or first frame: 6.277587000 seconds Frame Number: 17 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:11:22:33:44:78 (00:11:22:33:44:78), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Source: 00:11:22:33:44:78 (00:11:22:33:44:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.155 (165.227.249.155), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x2f43 (12099) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x0c34 [correct] Good: True Bad : False Source: 165.227.249.155 (165.227.249.155) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x269972f2 Sequence: 2 Data (92 bytes) 0000 00 0c 29 51 89 a7 00 11 22 33 44 78 08 00 45 00 ..)Q...."3Dx..E. 0010 00 78 2f 43 00 00 40 32 0c 34 a5 e3 f9 9b a5 e3 .x/C..@2.4...... 0020 f9 7a 26 99 72 f2 00 00 00 02 6e 0b 6c 87 e2 5c .z&.r.....n.l..\ 0030 cc da ea a3 b6 d1 0a 8d c4 f5 6e 18 88 12 71 7f ..........n...q. 0040 b1 4a bb de cf 08 ee 27 38 90 6b d4 c4 00 58 ee .J.....'8.k...X. 0050 a1 55 54 cd dd 53 8d f6 04 90 17 48 86 b1 a5 82 .UT..S.....H.... 0060 03 5c d5 15 01 a0 6c b6 16 a5 68 f5 97 4c 94 3d .\....l...h..L.= 0070 a9 d5 76 b7 3e d2 7e f5 a8 23 c7 d4 1d aa e5 3d ..v.>.~..#.....= 0080 8a 9d 0d 01 7c 1a ....|. Frame 18 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 12:52:55.607788000 Time delta from previous packet: 0.970402000 seconds Time since reference or first frame: 7.247989000 seconds Frame Number: 18 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:11:22:33:44:78 (00:11:22:33:44:78) Destination: 00:11:22:33:44:78 (00:11:22:33:44:78) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.155 (165.227.249.155) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x001c (28) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c5a [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.155 (165.227.249.155) Encapsulating Security Payload SPI: 0x0662cefe Sequence: 4 Data (92 bytes) 0000 00 11 22 33 44 78 00 0c 29 51 89 a7 08 00 45 00 .."3Dx..)Q....E. 0010 00 78 00 1c 00 00 ff 32 7c 5a a5 e3 f9 7a a5 e3 .x.....2|Z...z.. 0020 f9 9b 06 62 ce fe 00 00 00 04 e7 6c 4f 67 aa f7 ...b.......lOg.. 0030 14 5b 5e d2 35 7d 7b fa 97 41 04 e0 15 d2 60 24 .[^.5}{..A....`$ 0040 e9 aa 39 10 00 67 74 d8 0c c2 7f 0e cf 5b ad 8b ..9..gt......[.. 0050 1d 0f 08 57 03 40 9d 7c 6c bd e5 25 e7 19 de fa ...W.@.|l..%.... 0060 c3 d3 58 48 76 87 74 23 10 14 21 72 1c 93 7b de ..XHv.t#..!r..{. 0070 de ac 63 18 b7 43 59 9f f4 54 bf 04 d2 95 07 bb ..c..CY..T...... 0080 c2 cd 4d c4 06 ed ..M... Frame 19 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 14, 2007 12:52:55.609474000 Time delta from previous packet: 0.001686000 seconds Time since reference or first frame: 7.249675000 seconds Frame Number: 19 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:11:22:33:44:78 (00:11:22:33:44:78), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Source: 00:11:22:33:44:78 (00:11:22:33:44:78) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.155 (165.227.249.155), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x044d (1101) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x372a [correct] Good: True Bad : False Source: 165.227.249.155 (165.227.249.155) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x269972f2 Sequence: 3 Data (92 bytes) 0000 00 0c 29 51 89 a7 00 11 22 33 44 78 08 00 45 00 ..)Q...."3Dx..E. 0010 00 78 04 4d 00 00 40 32 37 2a a5 e3 f9 9b a5 e3 .x.M..@27*...... 0020 f9 7a 26 99 72 f2 00 00 00 03 95 c9 bd 5a a6 94 .z&.r........Z.. 0030 b6 05 d8 72 80 8c 3f 91 04 b9 6d 27 24 48 a5 f3 ...r..?...m'$H.. 0040 16 b7 1e d2 85 9f b3 46 3d 2c 28 f2 d0 8b 42 e6 .......F=,(...B. 0050 eb 82 6e 28 14 1a 35 9f 6e 33 59 21 28 48 a0 74 ..n(..5.n3Y!(H.t 0060 22 a1 48 b2 3d 04 59 59 41 72 f2 64 73 f0 a8 a8 ".H.=.YYAr.ds... 0070 f3 41 ff dd 11 72 d0 50 f8 8a 87 45 0b 6b 23 96 .A...r.P...E.k#. 0080 38 69 9c 95 20 73 8i.. s