Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Jun 16, 2005 14:39:25.607607000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:4b:45:e0 Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x75eb4208 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0013 (19) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b39 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.101 (165.227.249.101) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x9a1d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA987C839AEF88F49 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0f b5 4b 45 e0 00 0c 29 f4 af 90 08 00 45 00 ...KE...).....E. 0010 00 f8 00 13 00 00 40 11 3b 39 a5 e3 f9 7c a5 e3 ......@.;9...|.. 0020 f9 65 01 f4 01 f4 00 e4 9a 1d a9 87 c8 39 ae f8 .e...........9.. 0030 8f 49 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .I.............. 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 75 eb 42 08 ...R.Vu.B. Frame 2 (186 bytes on wire, 186 bytes captured) Arrival Time: Jun 16, 2005 14:39:25.614820000 Time delta from previous packet: 0.007213000 seconds Time since reference or first frame: 0.007213000 seconds Frame Number: 2 Packet Length: 186 bytes Capture Length: 186 bytes Ethernet II, Src: 00:0f:b5:4b:45:e0, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Type: IP (0x0800) Frame check sequence: 0x041c9c95 (correct) Internet Protocol, Src Addr: 165.227.249.101 (165.227.249.101), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 168 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb9b (correct) Source: 165.227.249.101 (165.227.249.101) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 148 Checksum: 0x2c62 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA987C839AEF88F49 Responder cookie: 0xDAD95321115C6CDF Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 140 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x648982785BEDBDD66A6DD356F0E160FD 0000 00 0c 29 f4 af 90 00 0f b5 4b 45 e0 08 00 45 00 ..)......KE...E. 0010 00 a8 00 00 40 00 40 11 fb 9b a5 e3 f9 65 a5 e3 ....@.@......e.. 0020 f9 7c 01 f4 01 f4 00 94 2c 62 a9 87 c8 39 ae f8 .|......,b...9.. 0030 8f 49 da d9 53 21 11 5c 6c df 01 10 02 00 00 00 .I..S!.\l....... 0040 00 00 00 00 00 8c 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 90 cb ........p....... 0080 80 91 3e bb 69 6e 08 63 81 b5 ec 42 7b 1f 0d 00 ..>.in.c...B{... 0090 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 00a0 01 00 00 00 00 14 64 89 82 78 5b ed bd d6 6a 6d ......d..x[...jm 00b0 d3 56 f0 e1 60 fd 04 1c 9c 95 .V..`..... Frame 3 (274 bytes on wire, 274 bytes captured) Arrival Time: Jun 16, 2005 14:39:25.625435000 Time delta from previous packet: 0.010615000 seconds Time since reference or first frame: 0.017828000 seconds Frame Number: 3 Packet Length: 274 bytes Capture Length: 274 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:4b:45:e0 Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xc6ef3208 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x0014 (20) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b30 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.101 (165.227.249.101) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0xb55c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA987C839AEF88F49 Responder cookie: 0xDAD95321115C6CDF Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0f b5 4b 45 e0 00 0c 29 f4 af 90 08 00 45 00 ...KE...).....E. 0010 01 00 00 14 00 00 40 11 3b 30 a5 e3 f9 7c a5 e3 ......@.;0...|.. 0020 f9 65 01 f4 01 f4 00 ec b5 5c a9 87 c8 39 ae f8 .e.......\...9.. 0030 8f 49 da d9 53 21 11 5c 6c df 04 10 02 00 00 00 .I..S!.\l....... 0040 00 00 00 00 00 e4 0a 00 00 84 93 c2 81 b7 ed 2e ................ 0050 9a 83 ca 34 33 fa 5c 8e b6 16 c1 4d 98 c8 fd bc ...43.\....M.... 0060 f7 1c 20 b6 c6 ff e0 53 76 dc eb 6d ba 27 82 24 .. ....Sv..m.'.$ 0070 8b 1e d1 50 fa 80 10 a3 c3 c1 44 d6 16 45 5d 28 ...P......D..E]( 0080 4f 80 b4 d8 01 58 4f 78 ff 2a a2 d3 eb 41 e6 2c O....XOx.*...A., 0090 ea 64 04 d7 b3 b1 07 92 60 34 67 0b 89 e2 61 ef .d......`4g...a. 00a0 6b e8 48 7d e3 ce 6b e5 6d c5 f2 01 c7 58 d1 cf k.H}..k.m....X.. 00b0 09 ab 46 58 8b eb 5f 04 3e bb 58 25 93 6c b1 3d ..FX.._.>.X%.l.= 00c0 54 f8 1a dd 03 1e 2b 25 d1 88 82 00 00 14 fc f7 T.....+%........ 00d0 42 72 98 0e fc 68 50 1d fc d9 19 51 1a 49 82 00 Br...hP....Q.I.. 00e0 00 18 30 38 55 87 82 a7 54 82 fb 29 17 b8 3e 47 ..08U...T..)..>G 00f0 d2 da 08 a5 9a c1 00 00 00 18 36 76 6f 76 4d ba ..........6vovM. 0100 95 cf 0b d4 ad 09 d5 13 94 a2 3f 3e 3f a4 c6 ef ..........?>?... 0110 32 08 2. Frame 4 (266 bytes on wire, 266 bytes captured) Arrival Time: Jun 16, 2005 14:39:25.823112000 Time delta from previous packet: 0.197677000 seconds Time since reference or first frame: 0.215505000 seconds Frame Number: 4 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0f:b5:4b:45:e0, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Type: IP (0x0800) Frame check sequence: 0xf9c743b3 (correct) Internet Protocol, Src Addr: 165.227.249.101 (165.227.249.101), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb4b (correct) Source: 165.227.249.101 (165.227.249.101) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x298f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA987C839AEF88F49 Responder cookie: 0xDAD95321115C6CDF Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 12 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0c 29 f4 af 90 00 0f b5 4b 45 e0 08 00 45 00 ..)......KE...E. 0010 00 f8 00 00 40 00 40 11 fb 4b a5 e3 f9 65 a5 e3 ....@.@..K...e.. 0020 f9 7c 01 f4 01 f4 00 e4 29 8f a9 87 c8 39 ae f8 .|......)....9.. 0030 8f 49 da d9 53 21 11 5c 6c df 04 10 02 00 00 00 .I..S!.\l....... 0040 00 00 00 00 00 dc 0a 00 00 84 67 88 cd 0e 00 23 ..........g....# 0050 fc 3a cf 21 3b 38 95 ab 69 25 91 3a 11 6f 5b 26 .:.!;8..i%.:.o[& 0060 99 72 a4 7c 4b 9c 6d 7d 13 1b b0 3e 17 1a 6a 36 .r.|K.m}...>..j6 0070 00 dc 3a 0f 48 c7 80 f1 d8 6e 15 1d 5e 54 09 7c ..:.H....n..^T.| 0080 5e 57 0a 27 86 da a1 17 89 b6 45 a3 f0 77 e2 0c ^W.'......E..w.. 0090 f8 8a eb c3 ef 41 53 91 d5 bb 15 6d 88 b9 6d bb .....AS....m..m. 00a0 14 de 31 cf e5 86 51 2a 38 62 8d f7 85 4b ce e9 ..1...Q*8b...K.. 00b0 d7 ec 19 9d ce 4d c8 f9 b7 7b 81 c1 50 05 dd 0b .....M...{..P... 00c0 f2 cb 2d 63 61 fc 77 a5 d3 96 82 00 00 0c c1 c7 ..-ca.w......... 00d0 a4 b9 f5 22 18 10 82 00 00 18 36 76 6f 76 4d ba ..."......6vovM. 00e0 95 cf 0b d4 ad 09 d5 13 94 a2 3f 3e 3f a4 00 00 ..........?>?... 00f0 00 18 30 38 55 87 82 a7 54 82 fb 29 17 b8 3e 47 ..08U...T..)..>G 0100 d2 da 08 a5 9a c1 f9 c7 43 b3 ........C. Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Jun 16, 2005 14:39:25.830635000 Time delta from previous packet: 0.007523000 seconds Time since reference or first frame: 0.223028000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:4b:45:e0 Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x29210334 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0015 (21) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bc7 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.101 (165.227.249.101) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xb73e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA987C839AEF88F49 Responder cookie: 0xDAD95321115C6CDF Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0f b5 4b 45 e0 00 0c 29 f4 af 90 08 00 45 00 ...KE...).....E. 0010 00 68 00 15 00 00 40 11 3b c7 a5 e3 f9 7c a5 e3 .h....@.;....|.. 0020 f9 65 01 f4 01 f4 00 54 b7 3e a9 87 c8 39 ae f8 .e.....T.>...9.. 0030 8f 49 da d9 53 21 11 5c 6c df 05 10 02 01 00 00 .I..S!.\l....... 0040 00 00 00 00 00 4c d3 e2 67 fc 26 eb e4 79 c2 49 .....L..g.&..y.I 0050 a1 c3 34 47 65 a0 6c 56 70 f9 e2 49 ad 90 da 67 ..4Ge.lVp..I...g 0060 65 46 96 20 05 88 da 1d 90 ef f5 32 bb 5c 92 c3 eF. .......2.\.. 0070 f8 de e0 df 8c 04 29 21 03 34 ......)!.4 Frame 6 (138 bytes on wire, 138 bytes captured) Arrival Time: Jun 16, 2005 14:39:26.069191000 Time delta from previous packet: 0.238556000 seconds Time since reference or first frame: 0.461584000 seconds Frame Number: 6 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0f:b5:4b:45:e0, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Type: IP (0x0800) Frame check sequence: 0x9a7c11ef (correct) Internet Protocol, Src Addr: 165.227.249.101 (165.227.249.101), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbcb (correct) Source: 165.227.249.101 (165.227.249.101) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x2a6d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA987C839AEF88F49 Responder cookie: 0xDAD95321115C6CDF Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 f4 af 90 00 0f b5 4b 45 e0 08 00 45 00 ..)......KE...E. 0010 00 78 00 00 40 00 40 11 fb cb a5 e3 f9 65 a5 e3 .x..@.@......e.. 0020 f9 7c 01 f4 01 f4 00 64 2a 6d a9 87 c8 39 ae f8 .|.....d*m...9.. 0030 8f 49 da d9 53 21 11 5c 6c df 05 10 02 01 00 00 .I..S!.\l....... 0040 00 00 00 00 00 5c a8 ac fa 91 cf f3 e0 95 2e 74 .....\.........t 0050 80 ab e1 a5 3f 82 ea 34 6d 43 02 ed 07 d8 bb 2f ....?..4mC...../ 0060 e5 26 59 03 f9 13 26 92 a8 e6 0c 03 1d fb 94 19 .&Y...&......... 0070 c3 33 29 67 b6 5d 91 19 b3 d2 49 8f 30 30 8b 9c .3)g.]....I.00.. 0080 59 f7 50 9d 90 5e 9a 7c 11 ef Y.P..^.|.. Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Jun 16, 2005 14:39:26.079206000 Time delta from previous packet: 0.010015000 seconds Time since reference or first frame: 0.471599000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:4b:45:e0 Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x9af05e6d (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0016 (22) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3aee (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.101 (165.227.249.101) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xb006 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA987C839AEF88F49 Responder cookie: 0xDAD95321115C6CDF Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB503A1DC Length: 292 Encrypted payload (264 bytes) 0000 00 0f b5 4b 45 e0 00 0c 29 f4 af 90 08 00 45 00 ...KE...).....E. 0010 01 40 00 16 00 00 40 11 3a ee a5 e3 f9 7c a5 e3 .@....@.:....|.. 0020 f9 65 01 f4 01 f4 01 2c b0 06 a9 87 c8 39 ae f8 .e.....,.....9.. 0030 8f 49 da d9 53 21 11 5c 6c df 08 10 20 01 b5 03 .I..S!.\l... ... 0040 a1 dc 00 00 01 24 ee 54 56 a2 58 e1 bf aa 0c 5a .....$.TV.X....Z 0050 0f fb 97 81 8c 2a 45 3d 18 36 d6 d0 c0 2b 53 e4 .....*E=.6...+S. 0060 71 8e b4 3f be 8e 5e dc 30 2f a9 78 f6 0b 3b a3 q..?..^.0/.x..;. 0070 8d 0d 87 aa 56 fe c9 cc ee b6 fe 75 69 18 e4 8c ....V......ui... 0080 a6 59 60 28 7d 4b 2b 2c 64 54 7a 20 a3 ca e1 a6 .Y`(}K+,dTz .... 0090 83 7e 10 c9 0e 84 b1 71 c1 51 a5 73 57 dc 84 9a .~.....q.Q.sW... 00a0 e4 dc 71 81 b5 a1 0b 22 08 cc 65 50 00 be a8 c9 ..q...."..eP.... 00b0 cc 57 ee b0 dd 4d 9a a9 00 4f 05 56 f7 b2 3a 23 .W...M...O.V..:# 00c0 4c 28 86 25 04 97 7e e6 69 0e c2 27 3f 16 c3 2c L(.%..~.i..'?.., 00d0 19 fc 61 2b 5b 91 c5 08 2c 23 93 db 22 24 e2 5b ..a+[...,#.."$.[ 00e0 c4 90 24 de cf 5d 41 28 eb 16 3e c8 3b b9 6b cb ..$..]A(..>.;.k. 00f0 7b e7 e0 a0 98 ed 6e 66 22 4c 74 b0 a9 11 1b 77 {.....nf"Lt....w 0100 04 8b da af f7 65 a2 91 ba be 4d ff ff 15 f3 52 .....e....M....R 0110 b5 5f 0d 53 cc 38 3c 93 a0 21 6f 67 95 82 50 94 ._.S.8<..!og..P. 0120 7c bc 58 98 08 37 79 23 71 31 6d e6 1b 58 ba 29 |.X..7y#q1m..X.) 0130 6a b8 c9 17 95 35 ab fc f1 5a de 6d 4a ac ac 4e j....5...Z.mJ..N 0140 d6 de c2 e4 aa d7 02 7b 74 50 ba fc e5 29 9a f0 .......{tP...).. 0150 5e 6d ^m Frame 8 (330 bytes on wire, 330 bytes captured) Arrival Time: Jun 16, 2005 14:39:26.441733000 Time delta from previous packet: 0.362527000 seconds Time since reference or first frame: 0.834126000 seconds Frame Number: 8 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:0f:b5:4b:45:e0, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Type: IP (0x0800) Frame check sequence: 0x024e965e (correct) Internet Protocol, Src Addr: 165.227.249.101 (165.227.249.101), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb0b (correct) Source: 165.227.249.101 (165.227.249.101) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x10ec (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA987C839AEF88F49 Responder cookie: 0xDAD95321115C6CDF Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB503A1DC Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 f4 af 90 00 0f b5 4b 45 e0 08 00 45 00 ..)......KE...E. 0010 01 38 00 00 40 00 40 11 fb 0b a5 e3 f9 65 a5 e3 .8..@.@......e.. 0020 f9 7c 01 f4 01 f4 01 24 10 ec a9 87 c8 39 ae f8 .|.....$.....9.. 0030 8f 49 da d9 53 21 11 5c 6c df 08 10 20 01 b5 03 .I..S!.\l... ... 0040 a1 dc 00 00 01 1c 79 a3 86 d0 d5 45 d9 34 45 0d ......y....E.4E. 0050 97 8a 4b 82 45 be f0 5d e0 69 1f 35 da 71 4c 9c ..K.E..].i.5.qL. 0060 ea e5 9d 05 d7 8f ab ac 24 e4 e8 76 94 d7 97 da ........$..v.... 0070 85 3d a7 95 49 fa 77 e4 45 6e 9d 13 62 51 d2 4a .=..I.w.En..bQ.J 0080 0b f7 44 ef 8b cb 6a 6a cf 9f 52 d7 11 74 50 be ..D...jj..R..tP. 0090 ae 92 4e 26 91 42 34 b8 31 bf dc 69 72 4e 2c 11 ..N&.B4.1..irN,. 00a0 7e 9c 3d 47 03 dd bf ad a1 6c 30 6a ec 59 7a 8e ~.=G.....l0j.Yz. 00b0 ed f2 80 53 d2 65 1c 4b 9f a2 8c 6e c1 48 4e 37 ...S.e.K...n.HN7 00c0 d6 fe 5f 95 5f d5 f5 89 57 6c f4 f4 2a 82 b3 32 .._._...Wl..*..2 00d0 22 45 81 48 51 90 f5 de e1 8f fd 4a 7c 84 d0 81 "E.HQ......J|... 00e0 52 f2 64 fe a8 35 44 3a 25 c9 17 49 4e 00 20 88 R.d..5D:%..IN. . 00f0 36 1c fa 42 dd 13 62 a2 2a e8 1a e0 73 fe bf a1 6..B..b.*...s... 0100 d9 68 1d cc 6e 9a 14 21 fd ab 33 4d bd 7d 29 37 .h..n..!..3M.})7 0110 69 e9 a0 20 12 41 5a 97 74 78 1d 27 67 df 84 d6 i.. .AZ.tx.'g... 0120 ee b3 3f 44 6b 85 d3 e3 f8 44 72 a2 b7 be ff 88 ..?Dk....Dr..... 0130 6b 1d 0c 83 29 0f 03 f0 1b 24 18 f5 ca 0c cd 17 k...)....$...... 0140 da b2 d1 b7 8a 40 02 4e 96 5e .....@.N.^ Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Jun 16, 2005 14:39:26.450789000 Time delta from previous packet: 0.009056000 seconds Time since reference or first frame: 0.843182000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:4b:45:e0 Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x99fd8404 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0017 (23) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bdd (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.101 (165.227.249.101) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x5f51 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA987C839AEF88F49 Responder cookie: 0xDAD95321115C6CDF Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB503A1DC Length: 52 Encrypted payload (24 bytes) 0000 00 0f b5 4b 45 e0 00 0c 29 f4 af 90 08 00 45 00 ...KE...).....E. 0010 00 50 00 17 00 00 40 11 3b dd a5 e3 f9 7c a5 e3 .P....@.;....|.. 0020 f9 65 01 f4 01 f4 00 3c 5f 51 a9 87 c8 39 ae f8 .e.....<_Q...9.. 0030 8f 49 da d9 53 21 11 5c 6c df 08 10 20 01 b5 03 .I..S!.\l... ... 0040 a1 dc 00 00 00 34 98 78 0d e8 e2 37 b4 6a 94 26 .....4.x...7.j.& 0050 ed 0c 54 29 70 82 61 05 1b f5 00 3f 82 17 99 fd ..T)p.a....?.... 0060 84 04 .. Frame 10 (154 bytes on wire, 154 bytes captured) Arrival Time: Jun 16, 2005 14:39:26.573583000 Time delta from previous packet: 0.122794000 seconds Time since reference or first frame: 0.965976000 seconds Frame Number: 10 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:4b:45:e0 Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x85162492 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0007 (7) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b93 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.101 (165.227.249.101) Encapsulating Security Payload SPI: 0x929c6e68 Sequence: 2 Data (108 bytes) 0000 00 0f b5 4b 45 e0 00 0c 29 f4 af 90 08 00 45 00 ...KE...).....E. 0010 00 88 00 07 00 00 f0 32 8b 93 a5 e3 f9 7c a5 e3 .......2.....|.. 0020 f9 65 92 9c 6e 68 00 00 00 02 f8 0a e1 ad 45 73 .e..nh........Es 0030 a7 f2 97 a6 bb bb b4 1e dd 79 05 e2 75 64 ec 4b .........y..ud.K 0040 11 84 58 3f 91 ae 66 31 05 6c da d5 72 5c 82 12 ..X?..f1.l..r\.. 0050 fd 9b 9d 3e 86 e1 fc db 64 fc 91 06 3e 2a 8a ba ...>....d...>*.. 0060 1c d4 a7 40 c4 03 0d 29 1f d1 f2 ba e1 e2 9f 88 ...@...)........ 0070 0d 9e b6 a0 84 79 61 e1 e5 d0 51 54 68 41 21 5d .....ya...QThA!] 0080 87 5a 83 e4 1e 14 f7 8d 20 9c 73 48 df 74 87 e4 .Z...... .sH.t.. 0090 c9 9e dc a7 01 b3 85 16 24 92 ........$. Frame 11 (154 bytes on wire, 154 bytes captured) Arrival Time: Jun 16, 2005 14:39:26.720949000 Time delta from previous packet: 0.147366000 seconds Time since reference or first frame: 1.113342000 seconds Frame Number: 11 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:4b:45:e0 Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xe6926f61 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0008 (8) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b92 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.101 (165.227.249.101) Encapsulating Security Payload SPI: 0x929c6e68 Sequence: 3 Data (108 bytes) 0000 00 0f b5 4b 45 e0 00 0c 29 f4 af 90 08 00 45 00 ...KE...).....E. 0010 00 88 00 08 00 00 f0 32 8b 92 a5 e3 f9 7c a5 e3 .......2.....|.. 0020 f9 65 92 9c 6e 68 00 00 00 03 69 c9 e6 22 21 0b .e..nh....i.."!. 0030 8c e2 d5 95 98 14 ee 71 bd 8d cb 93 67 fb 00 33 .......q....g..3 0040 01 d7 7d 92 9a 1c 7f ba d4 88 cb 62 33 67 df 90 ..}........b3g.. 0050 42 1b c6 99 fe 1c cd 80 3b 70 3d c1 4a fc df 1b B.......;p=.J... 0060 3c 93 dd 97 e0 33 61 3a 02 42 4f 75 1c 0b 38 6f <....3a:.BOu..8o 0070 84 df b1 8d af 3c a5 34 71 cd 65 b5 9e e0 f0 55 .....<.4q.e....U 0080 f2 73 7c 13 0c ee b7 d5 74 67 b2 d7 bf 34 38 98 .s|.....tg...48. 0090 25 12 cd 84 3a 93 e6 92 6f 61 %...:...oa Frame 12 (154 bytes on wire, 154 bytes captured) Arrival Time: Jun 16, 2005 14:39:27.536540000 Time delta from previous packet: 0.815591000 seconds Time since reference or first frame: 1.928933000 seconds Frame Number: 12 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:4b:45:e0 Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xe1d79a29 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0009 (9) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b91 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.101 (165.227.249.101) Encapsulating Security Payload SPI: 0x929c6e68 Sequence: 4 Data (108 bytes) 0000 00 0f b5 4b 45 e0 00 0c 29 f4 af 90 08 00 45 00 ...KE...).....E. 0010 00 88 00 09 00 00 f0 32 8b 91 a5 e3 f9 7c a5 e3 .......2.....|.. 0020 f9 65 92 9c 6e 68 00 00 00 04 49 19 d9 fb 29 4f .e..nh....I...)O 0030 26 0a 2c 7a 1a 0c 9d d5 1e b9 ee 1f 40 80 a1 15 &.,z........@... 0040 82 f0 87 55 c5 8c 42 61 06 92 08 67 e9 80 bc f9 ...U..Ba...g.... 0050 56 70 f1 98 63 56 74 df 4b 5a af 31 07 7b 3d 0a Vp..cVt.KZ.1.{=. 0060 2f 05 c4 d5 2c 83 e7 b8 8b e8 5f 1f b0 24 27 a8 /...,....._..$'. 0070 b2 24 3f e0 b9 ee 0d a7 d4 28 1b a9 65 54 5a 20 .$?......(..eTZ 0080 f8 f4 31 c2 1b 47 42 61 4c 99 5b 2b 6a 38 e7 a4 ..1..GBaL.[+j8.. 0090 64 35 2b ae f8 83 e1 d7 9a 29 d5+......) Frame 13 (154 bytes on wire, 154 bytes captured) Arrival Time: Jun 16, 2005 14:39:27.722529000 Time delta from previous packet: 0.185989000 seconds Time since reference or first frame: 2.114922000 seconds Frame Number: 13 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0f:b5:4b:45:e0, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Type: IP (0x0800) Frame check sequence: 0x6b336443 (correct) Internet Protocol, Src Addr: 165.227.249.101 (165.227.249.101), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0007 (7) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5d94 (correct) Source: 165.227.249.101 (165.227.249.101) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x4928e098 Sequence: 1 Data (108 bytes) 0000 00 0c 29 f4 af 90 00 0f b5 4b 45 e0 08 00 45 00 ..)......KE...E. 0010 00 88 00 07 00 00 1e 32 5d 94 a5 e3 f9 65 a5 e3 .......2]....e.. 0020 f9 7c 49 28 e0 98 00 00 00 01 ca 76 d5 59 25 49 .|I(.......v.Y%I 0030 10 8b 95 19 72 e4 f1 a1 3f 42 e4 e2 05 52 72 20 ....r...?B...Rr 0040 9a be 89 50 e0 dd 1d fd e3 3d 04 9d b6 78 b0 e8 ...P.....=...x.. 0050 05 63 02 6e c1 72 e6 3e c9 6f 7d 85 c1 5e f7 f2 .c.n.r.>.o}..^.. 0060 c4 6f 03 06 2e b6 69 c9 4e 55 1e e5 f0 ad e1 17 .o....i.NU...... 0070 a9 98 15 6d f2 7d 91 30 ca c2 2b f7 ed 9f 9e 17 ...m.}.0..+..... 0080 3e ab 62 63 ac 74 b2 2c 49 f2 15 2e 9f f0 3f 85 >.bc.t.,I.....?. 0090 47 76 d5 93 36 df 6b 33 64 43 Gv..6.k3dC Frame 14 (154 bytes on wire, 154 bytes captured) Arrival Time: Jun 16, 2005 14:39:27.723675000 Time delta from previous packet: 0.001146000 seconds Time since reference or first frame: 2.116068000 seconds Frame Number: 14 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0f:b5:4b:45:e0, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Type: IP (0x0800) Frame check sequence: 0x0fbd44f5 (correct) Internet Protocol, Src Addr: 165.227.249.101 (165.227.249.101), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0008 (8) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5d93 (correct) Source: 165.227.249.101 (165.227.249.101) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x4928e098 Sequence: 2 Data (108 bytes) 0000 00 0c 29 f4 af 90 00 0f b5 4b 45 e0 08 00 45 00 ..)......KE...E. 0010 00 88 00 08 00 00 1e 32 5d 93 a5 e3 f9 65 a5 e3 .......2]....e.. 0020 f9 7c 49 28 e0 98 00 00 00 02 f2 ae f5 72 7b 92 .|I(.........r{. 0030 1c 51 8f 3b 6b d8 e7 41 26 65 f5 18 7f f8 6a 7a .Q.;k..A&e....jz 0040 1a 62 02 31 83 f9 48 84 85 93 0a c1 07 8d 9f 6b .b.1..H........k 0050 62 25 98 f4 fe b1 99 b7 5a 08 b8 97 0b 0f 4d 1d b%......Z.....M. 0060 b2 e9 3f 2b 93 7d d7 18 16 06 f6 8c 6c 05 6e 15 ..?+.}......l.n. 0070 40 4d 7d dc ff 34 31 9c aa af 99 85 ca c9 29 e1 @M}..41.......). 0080 f3 59 50 d6 01 e0 8b 8f 85 c4 06 c6 66 1e 39 a4 .YP.........f.9. 0090 25 9f 96 fe 19 1b 0f bd 44 f5 %.......D. Frame 15 (154 bytes on wire, 154 bytes captured) Arrival Time: Jun 16, 2005 14:39:28.548009000 Time delta from previous packet: 0.824334000 seconds Time since reference or first frame: 2.940402000 seconds Frame Number: 15 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:4b:45:e0 Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x270cc5e3 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x000a (10) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b90 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.101 (165.227.249.101) Encapsulating Security Payload SPI: 0x929c6e68 Sequence: 5 Data (108 bytes) 0000 00 0f b5 4b 45 e0 00 0c 29 f4 af 90 08 00 45 00 ...KE...).....E. 0010 00 88 00 0a 00 00 f0 32 8b 90 a5 e3 f9 7c a5 e3 .......2.....|.. 0020 f9 65 92 9c 6e 68 00 00 00 05 1e e8 72 20 a1 24 .e..nh......r .$ 0030 55 01 a6 ad 7a 71 ea 84 d8 18 45 30 40 58 66 27 U...zq....E0@Xf' 0040 ad 8a 23 b8 af d7 59 99 9b ae bd 91 62 d4 f8 c9 ..#...Y.....b... 0050 00 63 0e 32 24 bf 13 40 df b5 65 c1 19 32 bd 92 .c.2$..@..e..2.. 0060 44 9f 61 2d c7 9a 1b 6f 11 ee da 2c 01 7a 9a d9 D.a-...o...,.z.. 0070 f0 5b 13 5c c7 5a bc c7 46 cf 18 98 ad d3 67 02 .[.\.Z..F.....g. 0080 58 d8 79 0e df 78 91 90 85 78 4b 6c be d9 05 67 X.y..x...xKl...g 0090 81 e8 d2 53 46 3c 27 0c c5 e3 ...SF<'... Frame 16 (154 bytes on wire, 154 bytes captured) Arrival Time: Jun 16, 2005 14:39:28.549020000 Time delta from previous packet: 0.001011000 seconds Time since reference or first frame: 2.941413000 seconds Frame Number: 16 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0f:b5:4b:45:e0, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Type: IP (0x0800) Frame check sequence: 0xa9c31ac7 (correct) Internet Protocol, Src Addr: 165.227.249.101 (165.227.249.101), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0009 (9) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5d92 (correct) Source: 165.227.249.101 (165.227.249.101) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x4928e098 Sequence: 3 Data (108 bytes) 0000 00 0c 29 f4 af 90 00 0f b5 4b 45 e0 08 00 45 00 ..)......KE...E. 0010 00 88 00 09 00 00 1e 32 5d 92 a5 e3 f9 65 a5 e3 .......2]....e.. 0020 f9 7c 49 28 e0 98 00 00 00 03 cd 36 13 92 9a 26 .|I(.......6...& 0030 67 90 07 49 36 88 4f a4 3b 3d a4 b2 74 40 26 41 g..I6.O.;=..t@&A 0040 12 30 0b dc f5 85 06 f4 b8 0c 42 62 bc 0e 22 64 .0........Bb.."d 0050 55 1e b5 12 15 43 22 8d 02 74 90 6f 46 ae 00 6f U....C"..t.oF..o 0060 13 2b 5b d9 44 c2 43 56 9d cb 47 16 3d 32 07 48 .+[.D.CV..G.=2.H 0070 a2 03 f2 d1 05 21 f9 53 ba 23 52 48 1a 3c 19 bf .....!.S.#RH.<.. 0080 ce 2b b5 2e a6 4f 13 24 85 66 1c 21 60 3b c2 87 .+...O.$.f.!`;.. 0090 32 c6 3b e2 b5 ea a9 c3 1a c7 2.;.......