Frame 1 (270 bytes on wire, 270 bytes captured) Arrival Time: Mar 19, 2004 16:11:18.438664000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 270 bytes Capture Length: 270 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0x3b8ba1d9 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x002d (45) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b11 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0xa1ce (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x0A56BEC96B50F32F Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 80 c8 b9 b1 b8 00 0a e6 4b 41 10 08 00 45 00 .........KA...E. 0010 00 fc 00 2d 00 00 40 11 3b 11 a5 e3 f9 7c a5 e3 ...-..@.;....|.. 0020 f9 6f 01 f4 01 f4 00 e8 a1 ce 0a 56 be c9 6b 50 .o.........V..kP 0030 f3 2f 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ./.............. 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b .....N.$...GYL(K 0090 21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e !;....'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 3b 8b a1 d9 .o,....R.V;... Frame 2 (270 bytes on wire, 270 bytes captured) Arrival Time: Mar 19, 2004 16:11:18.440427000 Time delta from previous packet: 0.001763000 seconds Time since reference or first frame: 0.001763000 seconds Frame Number: 2 Packet Length: 270 bytes Capture Length: 270 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Frame check sequence: 0x1771ad34 (correct) Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0xfbba (64442) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3f83 (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x0A56BEC96B50F32F Responder cookie: 0x1BA4491FC0768C0C Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x5DE9BC4C3560AA16CB2DF25E7950F160 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0a e6 4b 41 10 00 80 c8 b9 b1 b8 08 00 45 00 ...KA.........E. 0010 00 fc fb ba 00 00 40 11 3f 83 a5 e3 f9 6f a5 e3 ......@.?....o.. 0020 f9 7c 01 f4 01 f4 00 e8 00 00 0a 56 be c9 6b 50 .|.........V..kP 0030 f3 2f 1b a4 49 1f c0 76 8c 0c 01 10 02 00 00 00 ./..I..v........ 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 5d e9 bc 4c 35 60 aa 16 cb 2d f2 5e 79 50 ..]..L5`...-.^yP 0090 f1 60 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e .`....'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 17 71 ad 34 .o,....R.V.q.4 Frame 3 (274 bytes on wire, 274 bytes captured) Arrival Time: Mar 19, 2004 16:11:18.445890000 Time delta from previous packet: 0.005463000 seconds Time since reference or first frame: 0.007226000 seconds Frame Number: 3 Packet Length: 274 bytes Capture Length: 274 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0xd7a48ef7 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x002e (46) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b0c (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0xd040 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x0A56BEC96B50F32F Responder cookie: 0x1BA4491FC0768C0C Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 80 c8 b9 b1 b8 00 0a e6 4b 41 10 08 00 45 00 .........KA...E. 0010 01 00 00 2e 00 00 40 11 3b 0c a5 e3 f9 7c a5 e3 ......@.;....|.. 0020 f9 6f 01 f4 01 f4 00 ec d0 40 0a 56 be c9 6b 50 .o.......@.V..kP 0030 f3 2f 1b a4 49 1f c0 76 8c 0c 04 10 02 00 00 00 ./..I..v........ 0040 00 00 00 00 00 e4 0a 00 00 84 c0 bf 17 6c 41 35 .............lA5 0050 c1 22 fa 83 24 25 36 04 0c 4f 82 7d b9 d2 b8 27 ."..$%6..O.}...' 0060 f3 e3 a7 20 03 6e 50 de 53 b3 dd 5e 30 e2 be f8 ... .nP.S..^0... 0070 46 13 b0 2a 02 24 f8 5b 42 07 e1 8f 42 4b c9 1a F..*.$.[B...BK.. 0080 a6 40 e7 9e f3 4a 1a 40 eb ee 64 97 d3 de 73 5b .@...J.@..d...s[ 0090 b0 d3 e1 e0 de 03 4b d1 ff 61 12 98 2b 8e 0b 5f ......K..a..+.._ 00a0 72 eb bb f0 2e eb 09 94 61 29 37 6f 51 8e ea d4 r.......a)7oQ... 00b0 9c c1 19 93 e6 29 8f 30 b4 b2 ff 44 ea bc 31 7b .....).0...D..1{ 00c0 c0 09 57 75 a9 23 2e 57 4c bc 82 00 00 14 ad 8b ..Wu.#.WL....... 00d0 cb d7 98 ed f8 b2 13 98 25 c3 67 85 b2 1d 82 00 ........%.g..... 00e0 00 18 08 33 f7 b4 04 60 b6 c9 de 28 cb a1 d3 bb ...3...`...(.... 00f0 ac d8 c0 d5 d9 4c 00 00 00 18 88 89 11 97 54 8c .....L........T. 0100 8c 48 20 6f 56 d2 53 9b ce fc ab e4 51 d2 d7 a4 .H oV.S.....Q... 0110 8e f7 .. Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Mar 19, 2004 16:11:18.501004000 Time delta from previous packet: 0.055114000 seconds Time since reference or first frame: 0.062340000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Frame check sequence: 0x393343c9 (correct) Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0xfdac (64940) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3dbd (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x0A56BEC96B50F32F Responder cookie: 0x1BA4491FC0768C0C Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0a e6 4b 41 10 00 80 c8 b9 b1 b8 08 00 45 00 ...KA.........E. 0010 00 d0 fd ac 00 00 40 11 3d bd a5 e3 f9 6f a5 e3 ......@.=....o.. 0020 f9 7c 01 f4 01 f4 00 bc 00 00 0a 56 be c9 6b 50 .|.........V..kP 0030 f3 2f 1b a4 49 1f c0 76 8c 0c 04 10 02 00 00 00 ./..I..v........ 0040 00 00 00 00 00 b4 0a 00 00 84 17 2d 07 8f 93 2a ...........-...* 0050 f1 93 06 92 e7 31 b3 29 40 c1 fc 7e 61 eb ef 67 .....1.)@..~a..g 0060 23 40 23 ac 5b 67 41 9a 78 bd d2 ad 51 ff cc 81 #@#.[gA.x...Q... 0070 15 fb ee 10 be 9b 6d 6f 8b 00 e2 7a d1 e4 66 f3 ......mo...z..f. 0080 0b 38 a1 a3 39 22 42 c5 ce 9d ab a6 1f 6d 85 70 .8..9"B......m.p 0090 6d 87 05 01 86 9d 76 ec 6b 65 cd c9 71 5d cf ee m.....v.ke..q].. 00a0 38 5d 5e cb 7c f3 18 74 8d 27 92 f1 30 68 86 cc 8]^.|..t.'..0h.. 00b0 65 42 1d f2 98 cc 4f 64 e5 46 a9 22 30 e6 9c af eB....Od.F."0... 00c0 ed a7 29 fe 26 b7 69 4f 8c 14 00 00 00 14 15 79 ..).&.iO.......y 00d0 99 3d 4a dd 43 6a f2 2c 09 94 cb b5 be aa 39 33 .=J.Cj.,......93 00e0 43 c9 C. Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 19, 2004 16:11:18.506501000 Time delta from previous packet: 0.005497000 seconds Time since reference or first frame: 0.067837000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0x9b9f33b3 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x002f (47) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ba3 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x9cf8 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x0A56BEC96B50F32F Responder cookie: 0x1BA4491FC0768C0C Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 80 c8 b9 b1 b8 00 0a e6 4b 41 10 08 00 45 00 .........KA...E. 0010 00 68 00 2f 00 00 40 11 3b a3 a5 e3 f9 7c a5 e3 .h./..@.;....|.. 0020 f9 6f 01 f4 01 f4 00 54 9c f8 0a 56 be c9 6b 50 .o.....T...V..kP 0030 f3 2f 1b a4 49 1f c0 76 8c 0c 05 10 02 01 00 00 ./..I..v........ 0040 00 00 00 00 00 4c ab 0f c3 d7 57 77 b9 38 a6 41 .....L....Ww.8.A 0050 9f e8 f1 a1 ea 18 d0 2c 59 de b0 83 6d 2c 22 c4 .......,Y...m,". 0060 a9 16 24 b8 f8 ce a7 5c 96 df 81 dc 6e 61 11 e0 ..$....\....na.. 0070 71 69 bc 85 fe 8a 9b 9f 33 b3 qi......3. Frame 6 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 19, 2004 16:11:18.507360000 Time delta from previous packet: 0.000859000 seconds Time since reference or first frame: 0.068696000 seconds Frame Number: 6 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Frame check sequence: 0xc455d665 (correct) Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x819f (33183) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xba32 (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x0A56BEC96B50F32F Responder cookie: 0x1BA4491FC0768C0C Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0a e6 4b 41 10 00 80 c8 b9 b1 b8 08 00 45 00 ...KA.........E. 0010 00 68 81 9f 00 00 40 11 ba 32 a5 e3 f9 6f a5 e3 .h....@..2...o.. 0020 f9 7c 01 f4 01 f4 00 54 00 00 0a 56 be c9 6b 50 .|.....T...V..kP 0030 f3 2f 1b a4 49 1f c0 76 8c 0c 05 10 02 01 00 00 ./..I..v........ 0040 00 00 00 00 00 4c 71 42 d0 7f e0 1b 44 74 90 74 .....LqB....Dt.t 0050 d8 ce 69 03 bc a7 0d 67 ab c0 8a 72 f1 b7 f6 3d ..i....g...r...= 0060 3f 8c 2f f7 af 82 c1 3a 1c 07 76 04 ac 4f c3 6a ?./....:..v..O.j 0070 74 57 5d b2 cb 3d c4 55 d6 65 tW]..=.U.e Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Mar 19, 2004 16:11:18.513998000 Time delta from previous packet: 0.006638000 seconds Time since reference or first frame: 0.075334000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0xbea40681 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0030 (48) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ac2 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x3920 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x0A56BEC96B50F32F Responder cookie: 0x1BA4491FC0768C0C Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x7086645C Length: 300 Encrypted payload (272 bytes) 0000 00 80 c8 b9 b1 b8 00 0a e6 4b 41 10 08 00 45 00 .........KA...E. 0010 01 48 00 30 00 00 40 11 3a c2 a5 e3 f9 7c a5 e3 .H.0..@.:....|.. 0020 f9 6f 01 f4 01 f4 01 34 39 20 0a 56 be c9 6b 50 .o.....49 .V..kP 0030 f3 2f 1b a4 49 1f c0 76 8c 0c 08 10 20 01 70 86 ./..I..v.... .p. 0040 64 5c 00 00 01 2c d9 a6 34 92 27 15 5f 2b 1a ab d\...,..4.'._+.. 0050 40 38 80 99 45 d2 fc 97 b0 de 95 f8 49 24 31 2b @8..E.......I$1+ 0060 06 cf 1f 4f f3 47 d9 0b e6 f8 d1 54 e8 78 20 2a ...O.G.....T.x * 0070 39 23 27 3d 17 9a 95 52 93 a6 e9 1c 55 00 d3 67 9#'=...R....U..g 0080 96 e3 ca d6 e7 99 c2 61 38 37 41 95 96 a4 52 f8 .......a87A...R. 0090 33 92 d4 23 27 c4 5a 1e 5d 19 3b a4 a2 a5 b7 92 3..#'.Z.].;..... 00a0 ba 01 49 75 3c e8 2a e8 3e e6 26 c2 be 6e 0a 2d ..Iu<.*.>.&..n.- 00b0 4b 6a 75 1d 40 4c 7d dd 9d b0 76 97 d5 68 aa 14 Kju.@L}...v..h.. 00c0 25 f5 bb 79 21 b0 1d e2 c2 8a 20 15 0b 25 fb a3 %..y!..... ..%.. 00d0 39 09 cd 51 2b 1b 39 63 8d 50 69 80 86 02 8c 56 9..Q+.9c.Pi....V 00e0 b3 f5 f3 c2 2b b1 d0 72 b8 80 a0 af 66 09 24 22 ....+..r....f.$" 00f0 d9 cd 32 67 19 04 82 2d 0d 4d 30 bc d2 b3 9d 31 ..2g...-.M0....1 0100 b2 57 13 c4 b3 c9 b4 57 7b 33 81 ee 61 f1 f4 30 .W.....W{3..a..0 0110 5c a5 e3 4e f9 ed 96 27 e6 09 6c d3 5b 46 94 f0 \..N...'..l.[F.. 0120 41 06 7e f5 e3 a5 2d 80 af 23 00 d0 9e 32 b7 ef A.~...-..#...2.. 0130 3d 42 76 e2 34 94 3e f1 97 ea 72 fa 72 6f 67 9b =Bv.4.>...r.rog. 0140 20 a9 c8 b3 ef 1d 3e d7 67 ce 69 1e 27 f7 2d f7 .....>.g.i.'.-. 0150 71 6f 2b 9f 8b 07 be a4 06 81 qo+....... Frame 8 (346 bytes on wire, 346 bytes captured) Arrival Time: Mar 19, 2004 16:11:18.541429000 Time delta from previous packet: 0.027431000 seconds Time since reference or first frame: 0.102765000 seconds Frame Number: 8 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Frame check sequence: 0x468c2bb6 (correct) Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0xeae8 (60136) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x5009 (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x0A56BEC96B50F32F Responder cookie: 0x1BA4491FC0768C0C Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x7086645C Length: 300 Encrypted payload (272 bytes) 0000 00 0a e6 4b 41 10 00 80 c8 b9 b1 b8 08 00 45 00 ...KA.........E. 0010 01 48 ea e8 00 00 40 11 50 09 a5 e3 f9 6f a5 e3 .H....@.P....o.. 0020 f9 7c 01 f4 01 f4 01 34 00 00 0a 56 be c9 6b 50 .|.....4...V..kP 0030 f3 2f 1b a4 49 1f c0 76 8c 0c 08 10 20 01 70 86 ./..I..v.... .p. 0040 64 5c 00 00 01 2c 55 40 12 3c 25 92 76 b3 1d 84 d\...,U@.<%.v... 0050 37 b0 97 cf 45 ea 83 6d 7e 06 5a fe b8 91 78 57 7...E..m~.Z...xW 0060 90 06 c0 c9 e4 f7 b0 08 0f 38 2c 8d 85 1c d5 41 .........8,....A 0070 f8 31 23 ea 89 89 26 4f e0 93 e3 2b 54 b5 8b 1d .1#...&O...+T... 0080 17 14 be 6f 5a c7 9f 5a ac f6 32 d4 94 8f d3 8c ...oZ..Z..2..... 0090 99 1b b5 fa 95 c4 a4 7a 82 72 0f 94 05 6c 62 91 .......z.r...lb. 00a0 4d 49 23 57 d3 e1 4c 6a 50 b3 43 5c 10 68 cf 7e MI#W..LjP.C\.h.~ 00b0 de 95 f2 84 8a 65 2e 43 47 8f 53 0a 3a 09 f8 cf .....e.CG.S.:... 00c0 6a 80 e7 bf d0 5a bd 9f 7f 31 70 80 fe 53 a5 bf j....Z...1p..S.. 00d0 9a c9 85 77 55 19 4c c2 4f d8 18 e2 09 0e 67 40 ...wU.L.O.....g@ 00e0 34 68 e6 00 44 9a 90 3e f1 e4 e0 68 0c 66 9c 9e 4h..D..>...h.f.. 00f0 e6 23 2b 84 69 7d 40 a1 22 0e bb 41 d8 e5 66 80 .#+.i}@."..A..f. 0100 7f f4 a3 17 9e c0 b9 b3 17 95 69 6a 56 37 73 3c ..........ijV7s< 0110 f6 91 f4 be e1 e0 18 7d 0e 5e 79 0b d1 4a eb 68 .......}.^y..J.h 0120 46 95 cb 7a f7 f7 f0 52 92 f8 d9 77 b3 7a c4 b4 F..z...R...w.z.. 0130 c1 27 21 eb f8 43 fe 77 a0 78 85 ec 59 5e 34 ac .'!..C.w.x..Y^4. 0140 c8 fc a0 87 71 c2 0d 89 07 1f 20 70 40 94 83 e7 ....q..... p@... 0150 48 16 42 20 c8 f0 46 8c 2b b6 H.B ..F.+. Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Mar 19, 2004 16:11:18.547730000 Time delta from previous packet: 0.006301000 seconds Time since reference or first frame: 0.109066000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0x0108ec95 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0031 (49) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bb1 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.111 (165.227.249.111) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x048d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x0A56BEC96B50F32F Responder cookie: 0x1BA4491FC0768C0C Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x7086645C Length: 60 Encrypted payload (32 bytes) 0000 00 80 c8 b9 b1 b8 00 0a e6 4b 41 10 08 00 45 00 .........KA...E. 0010 00 58 00 31 00 00 40 11 3b b1 a5 e3 f9 7c a5 e3 .X.1..@.;....|.. 0020 f9 6f 01 f4 01 f4 00 44 04 8d 0a 56 be c9 6b 50 .o.....D...V..kP 0030 f3 2f 1b a4 49 1f c0 76 8c 0c 08 10 20 01 70 86 ./..I..v.... .p. 0040 64 5c 00 00 00 3c 73 57 46 92 c2 84 bc 7c 1f 03 d\...&> Frame 13 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 19, 2004 16:11:19.406823000 Time delta from previous packet: 0.000578000 seconds Time since reference or first frame: 0.968159000 seconds Frame Number: 13 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Frame check sequence: 0x7cafc5fa (correct) Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b9f (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xc1c611bf Sequence: 2 Data (92 bytes) 0000 00 0a e6 4b 41 10 00 80 c8 b9 b1 b8 08 00 45 00 ...KA.........E. 0010 00 78 00 01 00 00 f0 32 8b 9f a5 e3 f9 6f a5 e3 .x.....2.....o.. 0020 f9 7c c1 c6 11 bf 00 00 00 02 d1 4c ce 4d 84 57 .|.........L.M.W 0030 79 00 4c e3 17 55 bd 9a cd ef f0 5b ea fa 83 a3 y.L..U.....[.... 0040 c5 3c 9f 62 b4 4c 68 9f c9 2c f6 e4 fa a8 fe eb .<.b.Lh..,...... 0050 c6 ca 00 13 6b 3c 16 23 56 a7 fc c8 2b 87 cf c1 ....k<.#V...+... 0060 c0 d0 3a 7e 53 64 d5 1d dd 7c b9 32 e1 cd 48 cf ..:~Sd...|.2..H. 0070 cd cd e1 73 e0 a7 7c f2 ee 1b b1 e9 8c 23 4e 53 ...s..|......#NS 0080 67 1f c9 57 46 00 7c af c5 fa g..WF.|... Frame 14 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 19, 2004 16:11:20.406321000 Time delta from previous packet: 0.999498000 seconds Time since reference or first frame: 1.967657000 seconds Frame Number: 14 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0xfdcba19c (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0011 (17) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b8f (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.111 (165.227.249.111) Encapsulating Security Payload SPI: 0xe22d7908 Sequence: 4 Data (92 bytes) 0000 00 80 c8 b9 b1 b8 00 0a e6 4b 41 10 08 00 45 00 .........KA...E. 0010 00 78 00 11 00 00 f0 32 8b 8f a5 e3 f9 7c a5 e3 .x.....2.....|.. 0020 f9 6f e2 2d 79 08 00 00 00 04 ec 7d 66 b4 20 7e .o.-y......}f. ~ 0030 68 d2 b3 8e b6 d5 c2 64 a6 94 9f c0 23 18 ae 3c h......d....#..< 0040 c9 79 90 4d 8c 04 78 f5 cf 66 0e b1 e7 73 59 63 .y.M..x..f...sYc 0050 3d d4 a6 fe 77 93 09 cd 55 bd b3 05 fd 2c f1 de =...w...U....,.. 0060 ef ab ad 02 08 3d 28 08 3b 24 2d ae 3c 98 b1 b3 .....=(.;$-.<... 0070 f6 80 84 c2 cf 53 b6 e2 6a 91 ce c6 3e ec 73 4a .....S..j...>.sJ 0080 c0 59 45 11 88 28 fd cb a1 9c .YE..(.... Frame 15 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 19, 2004 16:11:20.406905000 Time delta from previous packet: 0.000584000 seconds Time since reference or first frame: 1.968241000 seconds Frame Number: 15 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Frame check sequence: 0xbf355c56 (correct) Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b9e (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xc1c611bf Sequence: 3 Data (92 bytes) 0000 00 0a e6 4b 41 10 00 80 c8 b9 b1 b8 08 00 45 00 ...KA.........E. 0010 00 78 00 02 00 00 f0 32 8b 9e a5 e3 f9 6f a5 e3 .x.....2.....o.. 0020 f9 7c c1 c6 11 bf 00 00 00 03 9a 54 a9 2d bb 72 .|.........T.-.r 0030 6f 77 6a bc 20 13 79 e6 aa 63 07 55 7b 71 0d 9e owj. .y..c.U{q.. 0040 3d d3 1a 02 44 39 91 0e ff da 71 3a 70 cb 32 30 =...D9....q:p.20 0050 ee f0 b5 34 aa 01 2a e2 74 b1 55 4b 73 48 ef 35 ...4..*.t.UKsH.5 0060 fb f1 ac 68 44 5a 70 2d a5 4a a8 e1 70 96 05 09 ...hDZp-.J..p... 0070 77 28 77 a0 60 54 c5 15 b2 1b 45 bd b9 ae 94 1c w(w.`T....E..... 0080 c2 42 4c da cd c2 bf 35 5c 56 .BL....5\V Frame 16 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 19, 2004 16:11:21.406333000 Time delta from previous packet: 0.999428000 seconds Time since reference or first frame: 2.967669000 seconds Frame Number: 16 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:80:c8:b9:b1:b8 Destination: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0xf0ebe22e (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.111 (165.227.249.111) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0012 (18) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b8e (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.111 (165.227.249.111) Encapsulating Security Payload SPI: 0xe22d7908 Sequence: 5 Data (92 bytes) 0000 00 80 c8 b9 b1 b8 00 0a e6 4b 41 10 08 00 45 00 .........KA...E. 0010 00 78 00 12 00 00 f0 32 8b 8e a5 e3 f9 7c a5 e3 .x.....2.....|.. 0020 f9 6f e2 2d 79 08 00 00 00 05 61 ea c7 5a 94 e6 .o.-y.....a..Z.. 0030 db dc d5 7e 47 0e 3c 86 37 f9 f0 bd a7 0a 90 ba ...~G.<.7....... 0040 25 77 6e 84 e0 05 9e 5a e3 dd e9 75 d3 05 03 73 %wn....Z...u...s 0050 3c d8 dc 2d ce cf f4 5a 43 ef 16 2a 87 29 ac 3c <..-...ZC..*.).< 0060 8b 15 cb 71 5e a7 89 d4 8f 89 64 52 3e fe 47 0d ...q^.....dR>.G. 0070 58 71 64 50 0f 79 a5 94 db aa 6f 8a ff ea 9a d3 XqdP.y....o..... 0080 f6 62 7d f0 31 73 f0 eb e2 2e .b}.1s.... Frame 17 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 19, 2004 16:11:21.406883000 Time delta from previous packet: 0.000550000 seconds Time since reference or first frame: 2.968219000 seconds Frame Number: 17 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:80:c8:b9:b1:b8, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:80:c8:b9:b1:b8 (00:80:c8:b9:b1:b8) Type: IP (0x0800) Frame check sequence: 0x5a0bf57a (correct) Internet Protocol, Src Addr: 165.227.249.111 (165.227.249.111), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0003 (3) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b9d (correct) Source: 165.227.249.111 (165.227.249.111) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xc1c611bf Sequence: 4 Data (92 bytes) 0000 00 0a e6 4b 41 10 00 80 c8 b9 b1 b8 08 00 45 00 ...KA.........E. 0010 00 78 00 03 00 00 f0 32 8b 9d a5 e3 f9 6f a5 e3 .x.....2.....o.. 0020 f9 7c c1 c6 11 bf 00 00 00 04 4c c5 46 ec 41 7a .|........L.F.Az 0030 38 42 2c 08 a0 91 54 3b 85 70 55 92 e8 e6 4e 0a 8B,...T;.pU...N. 0040 99 c7 99 72 6a 9c 69 40 62 07 dd 58 40 4b 49 7c ...rj.i@b..X@KI| 0050 50 35 fc 80 cd a9 3a 3a 61 70 8e 6e fb e2 0d 1c P5....::ap.n.... 0060 ed 27 fb 94 2a d4 c3 01 e7 b0 55 4f 12 cd ef ca .'..*.....UO.... 0070 8d c5 0e 39 b8 04 09 93 2c 35 f6 bb 69 80 3b 9a ...9....,5..i.;. 0080 97 1d 7d 4d 52 8c 5a 0b f5 7a ..}MR.Z..z