Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Sep 5, 2005 11:27:39.208779000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xb55cf895 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x001e (30) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b27 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0xba2f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB96927F8C344EB43 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 13 46 3d 7d 5e 00 0c 29 f4 af 90 08 00 45 00 ..F=}^..).....E. 0010 00 f8 00 1e 00 00 40 11 3b 27 a5 e3 f9 7c a5 e3 ......@.;'...|.. 0020 f9 6c 01 f4 01 f4 00 e4 ba 2f b9 69 27 f8 c3 44 .l......./.i'..D 0030 eb 43 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .C.............. 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 b5 5c f8 95 ...R.V.\.. Frame 2 (266 bytes on wire, 266 bytes captured) Arrival Time: Sep 5, 2005 11:27:39.217560000 Time delta from previous packet: 0.008781000 seconds Time since reference or first frame: 0.008781000 seconds Frame Number: 2 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0x736526a4 (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0a50 (2640) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x71f4 (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x3b2e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB96927F8C344EB43 Responder cookie: 0x1B060E66EDB188B6 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 29 f4 af 90 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 00 f8 0a 50 00 00 ff 11 71 f4 a5 e3 f9 6c a5 e3 ...P....q....l.. 0020 f9 7c 01 f4 01 f4 00 e4 3b 2e b9 69 27 f8 c3 44 .|......;..i'..D 0030 eb 43 1b 06 0e 66 ed b1 88 b6 01 10 02 00 00 00 .C...f.......... 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 af ca ........p....... 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 0d 00 ..h...k...wW.... 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 73 65 26 a4 ...R.Vse&. Frame 3 (274 bytes on wire, 274 bytes captured) Arrival Time: Sep 5, 2005 11:27:39.228932000 Time delta from previous packet: 0.011372000 seconds Time since reference or first frame: 0.020153000 seconds Frame Number: 3 Packet Length: 274 bytes Capture Length: 274 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x74538474 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x001f (31) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b1e (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x9b7c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB96927F8C344EB43 Responder cookie: 0x1B060E66EDB188B6 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 13 46 3d 7d 5e 00 0c 29 f4 af 90 08 00 45 00 ..F=}^..).....E. 0010 01 00 00 1f 00 00 40 11 3b 1e a5 e3 f9 7c a5 e3 ......@.;....|.. 0020 f9 6c 01 f4 01 f4 00 ec 9b 7c b9 69 27 f8 c3 44 .l.......|.i'..D 0030 eb 43 1b 06 0e 66 ed b1 88 b6 04 10 02 00 00 00 .C...f.......... 0040 00 00 00 00 00 e4 0a 00 00 84 fc 82 90 5d 95 09 .............].. 0050 c0 c9 b6 48 91 c3 3e ec 3e 36 74 dd d0 65 a1 d4 ...H..>.>6t..e.. 0060 28 66 70 e5 19 8d 97 70 c5 79 0e 0b a7 af 9b 4d (fp....p.y.....M 0070 30 18 3a a4 4a 08 f8 98 75 3f 34 cb a9 ec f9 00 0.:.J...u?4..... 0080 81 da 07 ff 56 2c 9e ec cf ca 27 e2 30 ce aa 33 ....V,....'.0..3 0090 9c 47 b2 e6 97 2c 36 37 d5 a5 6e ea 73 9c 03 cc .G...,67..n.s... 00a0 89 00 fc 56 3a e2 bf f7 fb 71 e8 75 6a 1a 17 f6 ...V:....q.uj... 00b0 52 ec 2b 61 45 10 fc c1 74 e0 2a 70 2e fd 88 95 R.+aE...t.*p.... 00c0 32 cf f0 0d 1e 8c 7d 3c 68 3e 82 00 00 14 fc a3 2.....}...... 00d0 c5 e8 14 a6 07 3a 31 41 32 f7 aa 38 4e b1 82 00 .....:1A2..8N... 00e0 00 18 75 cd 0c e6 f2 60 21 46 32 f6 b2 9f 79 09 ..u....`!F2...y. 00f0 54 5d 55 b0 19 ec 00 00 00 18 85 10 d5 71 aa fa T]U..........q.. 0100 44 a3 3b 57 ea 74 7b c3 70 af 5c 11 f5 37 74 53 D.;W.t{.p.\..7tS 0110 84 74 .t Frame 4 (370 bytes on wire, 370 bytes captured) Arrival Time: Sep 5, 2005 11:27:39.557657000 Time delta from previous packet: 0.328725000 seconds Time since reference or first frame: 0.348878000 seconds Frame Number: 4 Packet Length: 370 bytes Capture Length: 370 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0x53d5451f (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 352 Identification: 0x0a0d (2573) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x71cf (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 332 Checksum: 0x9189 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB96927F8C344EB43 Responder cookie: 0x1B060E66EDB188B6 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 324 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0c 29 f4 af 90 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 01 60 0a 0d 00 00 ff 11 71 cf a5 e3 f9 6c a5 e3 .`......q....l.. 0020 f9 7c 01 f4 01 f4 01 4c 91 89 b9 69 27 f8 c3 44 .|.....L...i'..D 0030 eb 43 1b 06 0e 66 ed b1 88 b6 04 10 02 00 00 00 .C...f.......... 0040 00 00 00 00 01 44 0a 00 00 84 ac ad e9 93 b6 6d .....D.........m 0050 54 d6 00 bd c8 8d ee 76 d5 6f a9 1f b5 b8 7e 47 T......v.o....~G 0060 1d a8 a9 50 e5 32 d8 a4 5d ca eb d0 55 c8 cc 40 ...P.2..]...U..@ 0070 31 dc ee dd 48 6f da 2d 08 f4 42 9e 90 69 ee fd 1...Ho.-..B..i.. 0080 05 47 71 01 f8 0f af af 98 f9 f9 37 b4 23 8a 53 .Gq........7.#.S 0090 89 56 ea c6 46 2a ba 46 3b 1a 52 04 00 8a 8c 7c .V..F*.F;.R....| 00a0 e1 ea e9 e0 a2 65 47 57 95 ba 06 2e 3f 5f 30 b4 .....eGW....?_0. 00b0 ff dc a0 a3 59 89 ac ef 8c 65 51 3f 70 67 0f 3b ....Y....eQ?pg.; 00c0 8e e5 6a 23 2d c2 24 a5 00 c0 82 00 00 14 cf 2d ..j#-.$........- 00d0 d5 ba b0 ff 94 9c 62 33 c1 f4 1b 71 5a d9 82 00 ......b3...qZ... 00e0 00 18 85 10 d5 71 aa fa 44 a3 3b 57 ea 74 7b c3 .....q..D.;W.t{. 00f0 70 af 5c 11 f5 37 82 00 00 18 13 40 d4 e1 0d 7f p.\..7.....@.... 0100 ac 9c 0e 1e b5 4d 94 d4 be 5c ed 8a a0 78 82 00 .....M...\...x.. 0110 00 18 75 cd 0c e6 f2 60 21 46 32 f6 b2 9f 79 09 ..u....`!F2...y. 0120 54 5d 55 b0 19 ec 82 00 00 18 51 67 f7 e8 b5 5f T]U.......Qg..._ 0130 62 28 d1 f7 84 cc 22 10 fe 10 f5 99 77 47 82 00 b(....".....wG.. 0140 00 18 09 79 6f f0 7a 02 39 35 73 19 a4 00 09 32 ...yo.z.95s....2 0150 b1 68 e6 cd fb 2e 00 00 00 18 b9 99 d8 b4 db a8 .h.............. 0160 2a 25 e0 4d 99 63 43 5b 23 f3 84 71 ec 0b 53 d5 *%.M.cC[#..q..S. 0170 45 1f E. Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Sep 5, 2005 11:27:39.564917000 Time delta from previous packet: 0.007260000 seconds Time since reference or first frame: 0.356138000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x84cfa93e (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0020 (32) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bb5 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xe565 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB96927F8C344EB43 Responder cookie: 0x1B060E66EDB188B6 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 13 46 3d 7d 5e 00 0c 29 f4 af 90 08 00 45 00 ..F=}^..).....E. 0010 00 68 00 20 00 00 40 11 3b b5 a5 e3 f9 7c a5 e3 .h. ..@.;....|.. 0020 f9 6c 01 f4 01 f4 00 54 e5 65 b9 69 27 f8 c3 44 .l.....T.e.i'..D 0030 eb 43 1b 06 0e 66 ed b1 88 b6 05 10 02 01 00 00 .C...f.......... 0040 00 00 00 00 00 4c fb d0 37 12 27 cb f6 5f 93 44 .....L..7.'.._.D 0050 f1 af 0a f3 d6 d0 9e e0 5b 95 77 92 24 90 07 cf ........[.w.$... 0060 33 ac ca 39 b1 cc ad 69 e3 c4 51 c2 59 11 a5 b9 3..9...i..Q.Y... 0070 e7 a9 10 4b c0 99 84 cf a9 3e ...K.....> Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 5, 2005 11:27:39.572496000 Time delta from previous packet: 0.007579000 seconds Time since reference or first frame: 0.363717000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0x8bfe61ca (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0894 (2196) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7448 (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xe4e8 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB96927F8C344EB43 Responder cookie: 0x1B060E66EDB188B6 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 f4 af 90 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 00 60 08 94 00 00 ff 11 74 48 a5 e3 f9 6c a5 e3 .`......tH...l.. 0020 f9 7c 01 f4 01 f4 00 4c e4 e8 b9 69 27 f8 c3 44 .|.....L...i'..D 0030 eb 43 1b 06 0e 66 ed b1 88 b6 05 10 02 01 00 00 .C...f.......... 0040 00 00 00 00 00 44 11 cd b7 7a e8 14 3f 3f 6e fc .....D...z..??n. 0050 50 15 f4 d7 12 2c 61 36 eb fb 71 b5 ba 34 d9 40 P....,a6..q..4.@ 0060 13 dd 3d f3 d5 5e 5e f2 72 e2 44 c2 59 eb 8b fe ..=..^^.r.D.Y... 0070 61 ca a. Frame 7 (338 bytes on wire, 338 bytes captured) Arrival Time: Sep 5, 2005 11:27:39.582621000 Time delta from previous packet: 0.010125000 seconds Time since reference or first frame: 0.373842000 seconds Frame Number: 7 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x91c2b26c (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0021 (33) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3adc (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x914b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB96927F8C344EB43 Responder cookie: 0x1B060E66EDB188B6 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xD8C35E2D Length: 292 Encrypted payload (264 bytes) 0000 00 13 46 3d 7d 5e 00 0c 29 f4 af 90 08 00 45 00 ..F=}^..).....E. 0010 01 40 00 21 00 00 40 11 3a dc a5 e3 f9 7c a5 e3 .@.!..@.:....|.. 0020 f9 6c 01 f4 01 f4 01 2c 91 4b b9 69 27 f8 c3 44 .l.....,.K.i'..D 0030 eb 43 1b 06 0e 66 ed b1 88 b6 08 10 20 01 d8 c3 .C...f...... ... 0040 5e 2d 00 00 01 24 2f 2a be 99 ed 3b ca 1e ff 30 ^-...$/*...;...0 0050 ff 19 d2 ef 2f 5f 83 87 24 00 47 4c 95 d4 65 31 ..../_..$.GL..e1 0060 43 fe 6c 72 a1 6e 61 f7 aa a5 84 99 5f 1f 63 c7 C.lr.na....._.c. 0070 fa 6b 08 e7 af 1a d5 d1 e5 76 a2 36 c6 fd 1a 59 .k.......v.6...Y 0080 a3 9b bd 15 24 55 1b cb fa b0 6c 51 93 82 12 14 ....$U....lQ.... 0090 f6 76 60 11 39 1b 23 f7 1f 09 8a f4 ed b9 89 de .v`.9.#......... 00a0 33 69 9d 72 59 29 ed 39 27 a5 fd 88 ed 12 5d f6 3i.rY).9'.....]. 00b0 e5 96 bf 7f de a9 95 7b da d8 8d b7 05 4b 6c 3e .......{.....Kl> 00c0 ae 69 c9 2d 23 8b 7d 78 aa fc 51 8a 65 c6 e4 04 .i.-#.}x..Q.e... 00d0 50 63 fe 1b 3e fd 26 96 6f 7b 23 85 f6 9a 73 9b Pc..>.&.o{#...s. 00e0 c7 95 98 a8 f0 51 1a 8a 47 55 f8 0f 56 5e d0 85 .....Q..GU..V^.. 00f0 fa 1f 28 4d eb 5f a5 c4 e2 03 4d 53 cf 0a 2a e5 ..(M._....MS..*. 0100 97 26 cf f0 68 80 7a 1c c1 c2 4b bc 4a ea bc 38 .&..h.z...K.J..8 0110 8b d4 b5 e8 c3 e4 31 d8 b2 d0 66 d7 7c cb f3 ac ......1...f.|... 0120 8a 9b 7e a1 3a 80 42 75 a8 5c 4d a7 d8 df 81 c6 ..~.:.Bu.\M..... 0130 d7 a1 5a 3a a0 08 14 31 c5 d4 b8 bc 45 de 54 fc ..Z:...1....E.T. 0140 75 f2 8b c5 ba 25 20 90 91 e2 22 8b 2f f2 91 c2 u....% ..."./... 0150 b2 6c .l Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: Sep 5, 2005 11:27:39.751342000 Time delta from previous packet: 0.168721000 seconds Time since reference or first frame: 0.542563000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0xe3af398f (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0a70 (2672) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x718c (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xe22c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB96927F8C344EB43 Responder cookie: 0x1B060E66EDB188B6 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xD8C35E2D Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 f4 af 90 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 01 40 0a 70 00 00 ff 11 71 8c a5 e3 f9 6c a5 e3 .@.p....q....l.. 0020 f9 7c 01 f4 01 f4 01 2c e2 2c b9 69 27 f8 c3 44 .|.....,.,.i'..D 0030 eb 43 1b 06 0e 66 ed b1 88 b6 08 10 20 01 d8 c3 .C...f...... ... 0040 5e 2d 00 00 01 24 5f 23 1a 52 10 26 6b e8 ba 7a ^-...$_#.R.&k..z 0050 29 ff 52 07 32 04 b2 98 d1 2b e0 59 77 11 52 60 ).R.2....+.Yw.R` 0060 3c d4 b6 d5 91 5e cd 17 39 72 35 e6 80 d9 44 30 <....^..9r5...D0 0070 0c 70 4d 4b 4d 4c 48 d9 b0 02 0c e6 63 49 f9 52 .pMKMLH.....cI.R 0080 aa c8 c8 1c 10 0b a1 06 2e 7a 71 04 e5 f8 ef b8 .........zq..... 0090 d3 d3 1e 25 c7 cf 9a a4 1c 3d b2 9b e9 75 e0 a3 ...%.....=...u.. 00a0 a7 05 b2 07 32 f0 bd dd 7b c0 42 d6 a9 04 a9 29 ....2...{.B....) 00b0 d2 ae aa f2 64 7d ce 09 b2 53 08 ab 22 14 4e d2 ....d}...S..".N. 00c0 ab d1 cf 00 9d b0 df cb a4 75 76 0f 17 99 58 cf .........uv...X. 00d0 41 44 20 94 65 ca 0c a0 85 51 7b 8e 63 1c c9 69 AD .e....Q{.c..i 00e0 2c 7b 48 94 63 ba 78 92 f1 d5 3c 30 3d a4 4c 6a ,{H.c.x...<0=.Lj 00f0 ec 46 f0 10 62 e1 83 d5 d5 52 d9 a8 d1 0a fc 33 .F..b....R.....3 0100 df 9c 36 b9 e9 45 76 d5 65 df c4 3f ed 03 f1 97 ..6..Ev.e..?.... 0110 db b4 3f ff e9 17 d1 f6 db 88 a3 7b 31 8d 2f d1 ..?........{1./. 0120 8a b1 e7 56 94 14 74 89 b2 dd 9c 2f 0f 62 cb bc ...V..t..../.b.. 0130 d1 7e e0 78 e3 26 dd 07 77 94 97 5d 0d fd 48 bc .~.x.&..w..]..H. 0140 f3 40 1f 38 fc a9 3d a2 a2 23 ed 02 13 b1 e3 af .@.8..=..#...... 0150 39 8f 9. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Sep 5, 2005 11:27:39.760195000 Time delta from previous packet: 0.008853000 seconds Time since reference or first frame: 0.551416000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x495fdf03 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0022 (34) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bcb (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x0424 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xB96927F8C344EB43 Responder cookie: 0x1B060E66EDB188B6 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xD8C35E2D Length: 52 Encrypted payload (24 bytes) 0000 00 13 46 3d 7d 5e 00 0c 29 f4 af 90 08 00 45 00 ..F=}^..).....E. 0010 00 50 00 22 00 00 40 11 3b cb a5 e3 f9 7c a5 e3 .P."..@.;....|.. 0020 f9 6c 01 f4 01 f4 00 3c 04 24 b9 69 27 f8 c3 44 .l.....<.$.i'..D 0030 eb 43 1b 06 0e 66 ed b1 88 b6 08 10 20 01 d8 c3 .C...f...... ... 0040 5e 2d 00 00 00 34 62 36 f0 f7 87 54 2b 53 ba 24 ^-...4b6...T+S.$ 0050 2d 35 5f e5 e6 c4 a6 e7 ad 22 1c 87 85 58 49 5f -5_......"...XI_ 0060 df 03 .. Frame 10 (154 bytes on wire, 154 bytes captured) Arrival Time: Sep 5, 2005 11:27:40.046010000 Time delta from previous packet: 0.285815000 seconds Time since reference or first frame: 0.837231000 seconds Frame Number: 10 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x8a88285e (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x000e (14) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b85 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.108 (165.227.249.108) Encapsulating Security Payload SPI: 0x612d5e76 Sequence: 2 Data (108 bytes) 0000 00 13 46 3d 7d 5e 00 0c 29 f4 af 90 08 00 45 00 ..F=}^..).....E. 0010 00 88 00 0e 00 00 f0 32 8b 85 a5 e3 f9 7c a5 e3 .......2.....|.. 0020 f9 6c 61 2d 5e 76 00 00 00 02 dd 3f a0 12 91 41 .la-^v.....?...A 0030 f0 72 cd 26 5e d2 8a df 80 c2 a1 3a 5a ce 42 10 .r.&^......:Z.B. 0040 a1 c6 d3 ed 71 bf 14 f7 6e e4 04 ff 55 9f 7f 64 ....q...n...U..d 0050 74 5c a2 ed 95 17 26 81 e0 53 3c 4f 70 1e e2 5c t\....&..S 0030 bf ce 7f 32 13 1f f8 f2 c2 6d 99 c4 0b c7 ac d1 ...2.....m...... 0040 c7 b3 7c 4e 90 4d 37 ae 98 37 c7 9c b9 d1 c8 39 ..|N.M7..7.....9 0050 dc cd c8 7f b2 33 6d ac d5 07 38 0e 59 dd 92 e0 .....3m...8.Y... 0060 25 ae d3 a0 a3 6c 42 a7 73 2b 1f 76 e7 99 e4 b1 %....lB.s+.v.... 0070 b9 36 21 03 a3 c8 89 bb 6b cb 18 50 44 d8 94 1f .6!.....k..PD... 0080 f3 dc 0c 7f bf a0 85 91 68 dc c1 9e e3 1c 65 a2 ........h.....e. 0090 ca e7 fc 26 e2 db 40 69 1e ce ...&..@i.. Frame 12 (154 bytes on wire, 154 bytes captured) Arrival Time: Sep 5, 2005 11:27:40.856874000 Time delta from previous packet: 0.804571000 seconds Time since reference or first frame: 1.648095000 seconds Frame Number: 12 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xe921cf0e (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0010 (16) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b83 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.108 (165.227.249.108) Encapsulating Security Payload SPI: 0x612d5e76 Sequence: 4 Data (108 bytes) 0000 00 13 46 3d 7d 5e 00 0c 29 f4 af 90 08 00 45 00 ..F=}^..).....E. 0010 00 88 00 10 00 00 f0 32 8b 83 a5 e3 f9 7c a5 e3 .......2.....|.. 0020 f9 6c 61 2d 5e 76 00 00 00 04 b9 5a b1 a8 8b 7b .la-^v.....Z...{ 0030 2f 25 c6 07 88 00 cb 57 de 7a 34 f2 b9 26 a5 21 /%.....W.z4..&.! 0040 10 b7 e3 05 c8 9b 19 24 dc de f5 7c b6 b0 99 11 .......$...|.... 0050 52 08 38 d6 53 34 13 33 bd 4a 60 a1 f9 31 bb ca R.8.S4.3.J`..1.. 0060 4a 8b 26 9b 71 6b d7 5c be bb 2c f6 70 df b7 26 J.&.qk.\..,.p..& 0070 f8 6b 1f 76 fa 61 a6 4b d3 14 08 2b 0e 0e 92 40 .k.v.a.K...+...@ 0080 9a 92 6d 7a 2c 1c 51 42 11 4b b5 f4 11 2f 23 c7 ..mz,.QB.K.../#. 0090 e7 62 33 f0 08 66 e9 21 cf 0e .b3..f.!.. Frame 13 (154 bytes on wire, 154 bytes captured) Arrival Time: Sep 5, 2005 11:27:40.858513000 Time delta from previous packet: 0.001639000 seconds Time since reference or first frame: 1.649734000 seconds Frame Number: 13 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0x073f8393 (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x08fa (2298) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8299 (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x667a67ad Sequence: 1 Data (108 bytes) 0000 00 0c 29 f4 af 90 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 00 88 08 fa 00 00 f0 32 82 99 a5 e3 f9 6c a5 e3 .......2.....l.. 0020 f9 7c 66 7a 67 ad 00 00 00 01 a5 e3 f9 6c a5 e3 .|fzg........l.. 0030 f9 7c f8 d1 0b 6e 88 66 81 72 f9 c0 be 13 61 a6 .|...n.f.r....a. 0040 65 68 86 19 d4 52 f1 e9 51 4e f5 13 28 0d 99 30 eh...R..QN..(..0 0050 e5 4e fa cb 56 17 6a 61 b3 93 d6 e4 32 0e e0 e4 .N..V.ja....2... 0060 e9 e2 c4 cc 6e fe de d1 95 6b 64 78 86 a2 62 e0 ....n....kdx..b. 0070 3e 5d 66 2b 86 d3 b0 f0 8f 0c 74 a9 1f c7 49 7f >]f+......t...I. 0080 e6 7a d5 e2 2a 9f 99 ae b6 7d 01 a3 6c 1e 74 69 .z..*....}..l.ti 0090 90 19 66 4c 98 0d 07 3f 83 93 ..fL...?.. Frame 14 (154 bytes on wire, 154 bytes captured) Arrival Time: Sep 5, 2005 11:27:41.681195000 Time delta from previous packet: 0.822682000 seconds Time since reference or first frame: 2.472416000 seconds Frame Number: 14 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xc4fe28f4 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0011 (17) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b82 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.108 (165.227.249.108) Encapsulating Security Payload SPI: 0x612d5e76 Sequence: 5 Data (108 bytes) 0000 00 13 46 3d 7d 5e 00 0c 29 f4 af 90 08 00 45 00 ..F=}^..).....E. 0010 00 88 00 11 00 00 f0 32 8b 82 a5 e3 f9 7c a5 e3 .......2.....|.. 0020 f9 6c 61 2d 5e 76 00 00 00 05 52 29 e2 1b e9 4a .la-^v....R)...J 0030 f3 d8 6a 24 81 00 f3 f1 dd ad ef 22 ab f6 aa 75 ..j$......."...u 0040 c9 85 ed 33 86 e1 d3 5b e7 51 a4 49 70 9f 9f 1a ...3...[.Q.Ip... 0050 29 ad ac 29 55 37 b0 5c 3f fb 5f c8 e3 59 c4 aa )..)U7.\?._..Y.. 0060 5a b1 e1 c7 30 18 37 8b 18 97 44 2e 93 65 e9 cb Z...0.7...D..e.. 0070 cb 33 2e 63 d0 3c 73 f0 53 e8 33 7f 3b 49 7d 67 .3.c.