Frame 1 (270 bytes on wire, 270 bytes captured) Arrival Time: Mar 19, 2004 16:21:36.498068000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 270 bytes Capture Length: 270 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:10:db:16:db:f6 Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0x1d08aa13 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.117 (165.227.249.117) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x0064 (100) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ad4 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.117 (165.227.249.117) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0xdcfa (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA4989E258D811C2E Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 10 db 16 db f6 00 0a e6 4b 41 10 08 00 45 00 .........KA...E. 0010 00 fc 00 64 00 00 40 11 3a d4 a5 e3 f9 7c a5 e3 ...d..@.:....|.. 0020 f9 75 01 f4 01 f4 00 e8 dc fa a4 98 9e 25 8d 81 .u...........%.. 0030 1c 2e 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b .....N.$...GYL(K 0090 21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e !;....'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 1d 08 aa 13 .o,....R.V.... Frame 2 (186 bytes on wire, 186 bytes captured) Arrival Time: Mar 19, 2004 16:21:36.599843000 Time delta from previous packet: 0.101775000 seconds Time since reference or first frame: 0.101775000 seconds Frame Number: 2 Packet Length: 186 bytes Capture Length: 186 bytes Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Type: IP (0x0800) Frame check sequence: 0x9bde6984 (correct) Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 168 Identification: 0x04d3 (1235) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x36b9 (correct) Source: 165.227.249.117 (165.227.249.117) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 148 Checksum: 0x9a71 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA4989E258D811C2E Responder cookie: 0x82A7219DFC01146C Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 140 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Key-Length (14): Key-Length (128) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 32 Vendor ID: unknown vendor ID: 0x47D2B126BFCD83489760E2CF8C5D4D5A... Vendor ID payload Next payload: NONE (0) Length: 24 Vendor ID: unknown vendor ID: 0x4865617274426561745F4E6F74696679... 0000 00 0a e6 4b 41 10 00 10 db 16 db f6 08 00 45 00 ...KA.........E. 0010 00 a8 04 d3 00 00 40 11 36 b9 a5 e3 f9 75 a5 e3 ......@.6....u.. 0020 f9 7c 01 f4 01 f4 00 94 9a 71 a4 98 9e 25 8d 81 .|.......q...%.. 0030 1c 2e 82 a7 21 9d fc 01 14 6c 01 10 02 00 00 00 ....!....l...... 0040 00 00 00 00 00 8c 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0e 00 80 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 20 47 d2 b1 26 bf cd 83 48 97 60 e2 cf 8c 5d . G..&...H.`...] 0090 4d 5a 03 49 7c 15 00 00 00 03 00 00 05 00 00 00 MZ.I|........... 00a0 00 18 48 65 61 72 74 42 65 61 74 5f 4e 6f 74 69 ..HeartBeat_Noti 00b0 66 79 38 6b 01 00 9b de 69 84 fy8k....i. Frame 3 (226 bytes on wire, 226 bytes captured) Arrival Time: Mar 19, 2004 16:21:36.605056000 Time delta from previous packet: 0.005213000 seconds Time since reference or first frame: 0.106988000 seconds Frame Number: 3 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:10:db:16:db:f6 Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0x3051af64 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.117 (165.227.249.117) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0065 (101) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3aff (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.117 (165.227.249.117) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xfbb3 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA4989E258D811C2E Responder cookie: 0x82A7219DFC01146C Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 10 db 16 db f6 00 0a e6 4b 41 10 08 00 45 00 .........KA...E. 0010 00 d0 00 65 00 00 40 11 3a ff a5 e3 f9 7c a5 e3 ...e..@.:....|.. 0020 f9 75 01 f4 01 f4 00 bc fb b3 a4 98 9e 25 8d 81 .u...........%.. 0030 1c 2e 82 a7 21 9d fc 01 14 6c 04 10 02 00 00 00 ....!....l...... 0040 00 00 00 00 00 b4 0a 00 00 84 04 c5 ad b4 fb d9 ................ 0050 38 a9 c0 a3 18 8e e8 49 84 f5 55 08 ab 29 c8 eb 8......I..U..).. 0060 e7 96 f2 57 3a a9 54 0c 05 9a c7 97 36 77 76 56 ...W:.T.....6wvV 0070 17 cf 6c 14 80 4b 6a c2 69 ca 51 af a7 72 84 55 ..l..Kj.i.Q..r.U 0080 f2 14 6e 33 56 91 15 22 95 57 19 73 6a 37 1e cc ..n3V..".W.sj7.. 0090 40 bd c0 9b d3 c6 a3 78 1b 11 23 05 ce 33 e8 10 @......x..#..3.. 00a0 de 5b f9 ed db 4a e7 fb 10 d3 83 bf 0c 4b 5b a2 .[...J.......K[. 00b0 b0 e9 8d de 6c 56 1e ec 94 6d 8c 7d b7 6a cc ce ....lV...m.}.j.. 00c0 b1 53 64 f9 d2 8c f4 01 a1 64 00 00 00 14 7c 44 .Sd......d....|D 00d0 a3 09 26 cf 3c 5b 75 d6 5c 15 d7 c9 bb d4 30 51 ..&.<[u.\.....0Q 00e0 af 64 .d Frame 4 (230 bytes on wire, 230 bytes captured) Arrival Time: Mar 19, 2004 16:21:36.614133000 Time delta from previous packet: 0.009077000 seconds Time since reference or first frame: 0.116065000 seconds Frame Number: 4 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Type: IP (0x0800) Frame check sequence: 0x620b7f02 (correct) Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x04d4 (1236) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x368c (correct) Source: 165.227.249.117 (165.227.249.117) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x5bf3 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA4989E258D811C2E Responder cookie: 0x82A7219DFC01146C Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 0a e6 4b 41 10 00 10 db 16 db f6 08 00 45 00 ...KA.........E. 0010 00 d4 04 d4 00 00 40 11 36 8c a5 e3 f9 75 a5 e3 ......@.6....u.. 0020 f9 7c 01 f4 01 f4 00 c0 5b f3 a4 98 9e 25 8d 81 .|......[....%.. 0030 1c 2e 82 a7 21 9d fc 01 14 6c 04 10 02 00 00 00 ....!....l...... 0040 00 00 00 00 00 b8 0a 00 00 84 b9 8e 54 90 46 08 ............T.F. 0050 e5 30 a3 54 2f 01 c3 2b 38 f6 df e3 dc 40 77 c6 .0.T/..+8....@w. 0060 85 91 5c 68 05 fd 97 d7 55 50 3a 15 a7 ce 60 ba ..\h....UP:...`. 0070 97 67 d0 33 a8 c1 31 01 f3 a2 9d 5d 32 2b cf 7e .g.3..1....]2+.~ 0080 88 b9 27 d5 59 f9 f2 8a 08 83 27 26 f3 48 f4 80 ..'.Y.....'&.H.. 0090 5c 5a 80 f4 88 36 e6 a0 71 a6 18 69 e6 e7 aa a4 \Z...6..q..i.... 00a0 77 37 15 99 af 54 16 a3 8b 6b 9a 7e 77 57 78 e8 w7...T...k.~wWx. 00b0 fc 34 d1 5a 8e f5 3f 00 1d 16 58 94 a0 25 3f 15 .4.Z..?...X..%?. 00c0 12 6a 52 7f 7e 65 57 35 1e 8e 00 00 00 18 47 f6 .jR.~eW5......G. 00d0 f9 f2 4e 86 f1 86 1f 5e 73 46 00 31 aa 7d c9 a6 ..N....^sF.1.}.. 00e0 ce 2a 62 0b 7f 02 .*b... Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 19, 2004 16:21:36.619613000 Time delta from previous packet: 0.005480000 seconds Time since reference or first frame: 0.121545000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:10:db:16:db:f6 Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0xa055f489 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.117 (165.227.249.117) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0066 (102) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b66 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.117 (165.227.249.117) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x26c2 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA4989E258D811C2E Responder cookie: 0x82A7219DFC01146C Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 10 db 16 db f6 00 0a e6 4b 41 10 08 00 45 00 .........KA...E. 0010 00 68 00 66 00 00 40 11 3b 66 a5 e3 f9 7c a5 e3 .h.f..@.;f...|.. 0020 f9 75 01 f4 01 f4 00 54 26 c2 a4 98 9e 25 8d 81 .u.....T&....%.. 0030 1c 2e 82 a7 21 9d fc 01 14 6c 05 10 02 01 00 00 ....!....l...... 0040 00 00 00 00 00 4c 17 1e 86 cc d3 e3 5b 09 05 15 .....L......[... 0050 a9 e7 74 ca 3c ad d2 04 ba 05 30 94 29 c9 67 43 ..t.<.....0.).gC 0060 b4 63 63 3a ef 4e 49 ca e0 10 45 57 71 7b 3e 17 .cc:.NI...EWq{>. 0070 67 4f 95 c7 4f a4 a0 55 f4 89 gO..O..U.. Frame 6 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 19, 2004 16:21:36.621779000 Time delta from previous packet: 0.002166000 seconds Time since reference or first frame: 0.123711000 seconds Frame Number: 6 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Type: IP (0x0800) Frame check sequence: 0x8348d502 (correct) Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x04d5 (1237) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x36f7 (correct) Source: 165.227.249.117 (165.227.249.117) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xaab4 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA4989E258D811C2E Responder cookie: 0x82A7219DFC01146C Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0a e6 4b 41 10 00 10 db 16 db f6 08 00 45 00 ...KA.........E. 0010 00 68 04 d5 00 00 40 11 36 f7 a5 e3 f9 75 a5 e3 .h....@.6....u.. 0020 f9 7c 01 f4 01 f4 00 54 aa b4 a4 98 9e 25 8d 81 .|.....T.....%.. 0030 1c 2e 82 a7 21 9d fc 01 14 6c 05 10 02 01 00 00 ....!....l...... 0040 00 00 00 00 00 4c 70 d2 07 8f 4a b8 94 27 21 13 .....Lp...J..'!. 0050 0e 32 29 66 87 07 bf cb 9a fb 54 28 c3 62 6f 0d .2)f......T(.bo. 0060 bd d2 67 3c 1a 00 fe 27 03 2e 30 87 80 60 48 d6 ..g<...'..0..`H. 0070 b0 ff 5c 3d 09 be 83 48 d5 02 ..\=...H.. Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Mar 19, 2004 16:21:36.628372000 Time delta from previous packet: 0.006593000 seconds Time since reference or first frame: 0.130304000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:10:db:16:db:f6 Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0x5890aa1e (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.117 (165.227.249.117) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0067 (103) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a85 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.117 (165.227.249.117) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x3bd0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA4989E258D811C2E Responder cookie: 0x82A7219DFC01146C Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB108E455 Length: 300 Encrypted payload (272 bytes) 0000 00 10 db 16 db f6 00 0a e6 4b 41 10 08 00 45 00 .........KA...E. 0010 01 48 00 67 00 00 40 11 3a 85 a5 e3 f9 7c a5 e3 .H.g..@.:....|.. 0020 f9 75 01 f4 01 f4 01 34 3b d0 a4 98 9e 25 8d 81 .u.....4;....%.. 0030 1c 2e 82 a7 21 9d fc 01 14 6c 08 10 20 01 b1 08 ....!....l.. ... 0040 e4 55 00 00 01 2c aa a1 e4 b5 e5 70 7f d2 af 26 .U...,.....p...& 0050 2c cc de d4 89 69 d7 c9 ab 1d 9f 61 f5 8b f5 ef ,....i.....a.... 0060 04 d9 ce 89 20 bd e1 b3 2f 2d 45 44 c7 b6 b5 c6 .... .../-ED.... 0070 ea be 5e 5b d9 f6 de e7 dd 17 a6 f4 b2 ce ac fe ..^[............ 0080 57 c4 ea 4b e0 ba 7a ac 95 53 b4 00 62 62 e4 47 W..K..z..S..bb.G 0090 e1 9a d9 e2 ba c3 62 f8 12 93 46 eb ac d2 5e 2e ......b...F...^. 00a0 36 2b e0 0f be 8a 9d 66 c0 62 2a 65 5f 2f a8 32 6+.....f.b*e_/.2 00b0 d2 16 28 b2 8f 77 19 5f 59 2c 05 9d 8d 65 29 8d ..(..w._Y,...e). 00c0 03 4b f8 e1 fe 61 71 8a 65 51 c8 4a c2 3e 37 64 .K...aq.eQ.J.>7d 00d0 21 88 a3 aa 3a 25 72 84 6b 28 88 2b cc da 07 bf !...:%r.k(.+.... 00e0 2b 98 45 8f 3c aa 56 b0 f5 8a db 14 1f ff bc 1d +.E.<.V......... 00f0 84 68 6a 83 43 3f 79 ee 55 6c 52 d4 84 8d 51 50 .hj.C?y.UlR...QP 0100 f2 f9 08 74 81 f9 52 e5 5d 73 ad 80 7b a2 da 4c ...t..R.]s..{..L 0110 c8 44 a0 0a 19 c4 26 a1 4a 6b e2 48 e0 de bc 6d .D....&.Jk.H...m 0120 0a 90 8c 9a 34 fe 09 4e 83 d7 88 2e 06 65 fe 3d ....4..N.....e.= 0130 fa a8 5f c4 52 5b 40 82 d6 eb 55 1a 4e 12 42 07 .._.R[@...U.N.B. 0140 76 55 7e eb 96 9a 42 d0 57 1e 39 9d 5e ba e6 2a vU~...B.W.9.^..* 0150 40 df 6e 73 72 a6 58 90 aa 1e @.nsr.X... Frame 8 (362 bytes on wire, 362 bytes captured) Arrival Time: Mar 19, 2004 16:21:36.638785000 Time delta from previous packet: 0.010413000 seconds Time since reference or first frame: 0.140717000 seconds Frame Number: 8 Packet Length: 362 bytes Capture Length: 362 bytes Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Type: IP (0x0800) Frame check sequence: 0x3a4be0d3 (correct) Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 344 Identification: 0x04d6 (1238) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3606 (correct) Source: 165.227.249.117 (165.227.249.117) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 324 Checksum: 0x6e00 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA4989E258D811C2E Responder cookie: 0x82A7219DFC01146C Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB108E455 Length: 316 Encrypted payload (288 bytes) 0000 00 0a e6 4b 41 10 00 10 db 16 db f6 08 00 45 00 ...KA.........E. 0010 01 58 04 d6 00 00 40 11 36 06 a5 e3 f9 75 a5 e3 .X....@.6....u.. 0020 f9 7c 01 f4 01 f4 01 44 6e 00 a4 98 9e 25 8d 81 .|.....Dn....%.. 0030 1c 2e 82 a7 21 9d fc 01 14 6c 08 10 20 01 b1 08 ....!....l.. ... 0040 e4 55 00 00 01 3c ac 39 2e 10 cb 8a 51 f9 b0 2a .U...<.9....Q..* 0050 52 ea 61 6b 5c 53 2a 9e 5a 91 41 ef d3 03 c2 9c R.ak\S*.Z.A..... 0060 a4 6c ae c0 b0 b6 80 dc af ad e2 0e ba ba 83 fa .l.............. 0070 22 2c 0d 22 b2 ea e1 6b 25 6e 9f 0f dd fa 2b a8 ",."...k%n....+. 0080 dc eb 11 3c 4c b1 2d c6 3e 3a d2 fd 2e 2b 3e bd ...:...+>. 0090 fe 46 5d 40 c3 52 90 a6 17 be b9 6b f6 38 db 9c .F]@.R.....k.8.. 00a0 a9 dc e7 c7 48 ac 86 bb 2e c0 3c 2c 4d 26 35 56 ....H.....<,M&5V 00b0 0b 7c 6a 0a 47 16 96 bc 68 ce 01 f7 cb 9f 51 58 .|j.G...h.....QX 00c0 8f f5 88 16 ab 24 cd e7 37 3c e6 7a d6 60 86 95 .....$..7<.z.`.. 00d0 58 21 7d 83 a0 0f 4a ec 79 09 e4 97 b1 04 30 62 X!}...J.y.....0b 00e0 e3 5b 4c e8 b4 80 25 4b 21 2e f9 e9 e1 70 c9 ea .[L...%K!....p.. 00f0 15 09 8d 3d c4 f2 5f 86 12 06 7b 56 03 ad 4d 5c ...=.._...{V..M\ 0100 53 82 7f e9 63 88 25 27 9f f4 a0 ba b7 a2 ee fe S...c.%'........ 0110 25 a8 90 7b 8f bc c3 85 34 ee d0 8b b5 79 90 fa %..{....4....y.. 0120 f2 57 92 cf bf db dd ac 24 f0 1e 23 05 98 54 0c .W......$..#..T. 0130 34 52 e2 0e ce b9 9f 42 69 64 f4 13 dc f2 f0 8b 4R.....Bid...... 0140 bd 8f eb 90 5d 02 3c d0 93 0b 87 36 51 77 74 55 ....].<....6QwtU 0150 23 e2 42 c5 7d e3 f3 e8 92 be 96 f1 03 cf c5 16 #.B.}........... 0160 1a e9 5a 22 a2 25 3a 4b e0 d3 ..Z".%:K.. Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Mar 19, 2004 16:21:36.645005000 Time delta from previous packet: 0.006220000 seconds Time since reference or first frame: 0.146937000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:10:db:16:db:f6 Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0xd91b680c (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.117 (165.227.249.117) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0068 (104) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b74 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.117 (165.227.249.117) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xdbed (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xA4989E258D811C2E Responder cookie: 0x82A7219DFC01146C Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB108E455 Length: 60 Encrypted payload (32 bytes) 0000 00 10 db 16 db f6 00 0a e6 4b 41 10 08 00 45 00 .........KA...E. 0010 00 58 00 68 00 00 40 11 3b 74 a5 e3 f9 7c a5 e3 .X.h..@.;t...|.. 0020 f9 75 01 f4 01 f4 00 44 db ed a4 98 9e 25 8d 81 .u.....D.....%.. 0030 1c 2e 82 a7 21 9d fc 01 14 6c 08 10 20 01 b1 08 ....!....l.. ... 0040 e4 55 00 00 00 3c 43 ae c6 c1 69 11 38 4b ff de .U............5+ 0030 30 5b de 84 f3 f5 4b 7c d3 cc 61 bf dc 03 df 05 0[....K|..a..... 0040 e1 85 64 f2 4d 6e dc 76 f5 22 87 7a 84 07 95 14 ..d.Mn.v.".z.... 0050 93 ec 26 f8 53 cd e4 a9 e1 8d 17 1c 7f a9 52 c1 ..&.S.........R. 0060 fd dc a3 07 06 bd ac 3f 3e bd c7 96 f8 a6 5a 2a .......?>.....Z* 0070 50 01 47 71 e7 7d 4d f9 d4 25 8f 5b 2a 1a e3 34 P.Gq.}M..%.[*..4 0080 56 a7 0c 60 1b cb 1d 8c 2e f6 V..`...... Frame 11 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 19, 2004 16:21:36.999246000 Time delta from previous packet: 0.097250000 seconds Time since reference or first frame: 0.501178000 seconds Frame Number: 11 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Type: IP (0x0800) Frame check sequence: 0x352a88f1 (correct) Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x04d8 (1240) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x36c3 (correct) Source: 165.227.249.117 (165.227.249.117) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x3c75b309 Sequence: 1 Data (92 bytes) 0000 00 0a e6 4b 41 10 00 10 db 16 db f6 08 00 45 00 ...KA.........E. 0010 00 78 04 d8 00 00 40 32 36 c3 a5 e3 f9 75 a5 e3 .x....@26....u.. 0020 f9 7c 3c 75 b3 09 00 00 00 01 a3 0e c9 3b 9e 9e .|.m. 0070 f5 00 c2 92 1f 2b 12 48 22 f7 .....+.H". Frame 13 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 19, 2004 16:21:37.491378000 Time delta from previous packet: 0.388610000 seconds Time since reference or first frame: 0.993310000 seconds Frame Number: 13 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:10:db:16:db:f6 Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0x8c8c8837 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.117 (165.227.249.117) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0024 (36) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b76 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.117 (165.227.249.117) Encapsulating Security Payload SPI: 0x6cf73ea1 Sequence: 3 Data (92 bytes) 0000 00 10 db 16 db f6 00 0a e6 4b 41 10 08 00 45 00 .........KA...E. 0010 00 78 00 24 00 00 f0 32 8b 76 a5 e3 f9 7c a5 e3 .x.$...2.v...|.. 0020 f9 75 6c f7 3e a1 00 00 00 03 59 e2 4f 3b 13 68 .ul.>.....Y.O;.h 0030 62 f0 72 38 2a c1 17 d3 fa 0f dd 5e 60 b6 88 29 b.r8*......^`..) 0040 77 a9 25 7c 70 2b 53 e2 b1 73 0d 91 62 73 ab ce w.%|p+S..s..bs.. 0050 38 dc 47 e6 d8 54 40 8e b9 3d 39 71 b4 ad 1f eb 8.G..T@..=9q.... 0060 7b 79 d8 3a d9 cb a8 92 9d 57 16 10 6c 9f 45 87 {y.:.....W..l.E. 0070 54 4b 86 7f 1d 9a 0b 13 23 ec 41 a8 77 23 ca 09 TK......#.A.w#.. 0080 bf 74 d9 6a 27 a9 8c 8c 88 37 .t.j'....7 Frame 14 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 19, 2004 16:21:37.491932000 Time delta from previous packet: 0.000554000 seconds Time since reference or first frame: 0.993864000 seconds Frame Number: 14 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Type: IP (0x0800) Frame check sequence: 0xabe78c75 (correct) Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x04db (1243) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x36c0 (correct) Source: 165.227.249.117 (165.227.249.117) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x3c75b309 Sequence: 3 Data (92 bytes) 0000 00 0a e6 4b 41 10 00 10 db 16 db f6 08 00 45 00 ...KA.........E. 0010 00 78 04 db 00 00 40 32 36 c0 a5 e3 f9 75 a5 e3 .x....@26....u.. 0020 f9 7c 3c 75 b3 09 00 00 00 03 43 6e 3f 8a 5d cc .|FiIX....... 0060 82 e6 f5 b0 b3 b9 f1 ae dc e3 df 85 31 42 74 9a ............1Bt. 0070 aa 2a f8 00 d2 5c e9 db a0 56 05 a7 0a c4 64 e0 .*...\...V....d. 0080 cd 6b c9 25 71 b5 ab e7 8c 75 .k.%q....u Frame 15 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 19, 2004 16:21:38.491556000 Time delta from previous packet: 0.999624000 seconds Time since reference or first frame: 1.993488000 seconds Frame Number: 15 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0a:e6:4b:41:10, Dst: 00:10:db:16:db:f6 Destination: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Source: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Type: IP (0x0800) Frame check sequence: 0x8dead308 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.117 (165.227.249.117) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0025 (37) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b75 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.117 (165.227.249.117) Encapsulating Security Payload SPI: 0x6cf73ea1 Sequence: 4 Data (92 bytes) 0000 00 10 db 16 db f6 00 0a e6 4b 41 10 08 00 45 00 .........KA...E. 0010 00 78 00 25 00 00 f0 32 8b 75 a5 e3 f9 7c a5 e3 .x.%...2.u...|.. 0020 f9 75 6c f7 3e a1 00 00 00 04 0c f3 f7 86 ca d8 .ul.>........... 0030 6e f6 9e 8d 74 bc c3 bb d9 86 5a d5 01 00 18 08 n...t.....Z..... 0040 1b 29 8e 94 d2 0e 31 ab cf df 6b d5 00 fe b4 ab .)....1...k..... 0050 c0 3e 3f 84 bf be 70 d1 e6 d1 76 92 89 b7 c3 e2 .>?...p...v..... 0060 3d eb 45 ee ee 3d c1 9f 23 1f a6 cb bd 92 d5 a8 =.E..=..#....... 0070 99 13 79 58 7d 7f 65 81 24 3f 9f 84 43 6b 8e 36 ..yX}.e.$?..Ck.6 0080 34 07 c5 a4 f1 4d 8d ea d3 08 4....M.... Frame 16 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 19, 2004 16:21:38.492113000 Time delta from previous packet: 0.000557000 seconds Time since reference or first frame: 1.994045000 seconds Frame Number: 16 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Type: IP (0x0800) Frame check sequence: 0xc2544ff2 (correct) Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x04dc (1244) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x36bf (correct) Source: 165.227.249.117 (165.227.249.117) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x3c75b309 Sequence: 4 Data (92 bytes) 0000 00 0a e6 4b 41 10 00 10 db 16 db f6 08 00 45 00 ...KA.........E. 0010 00 78 04 dc 00 00 40 32 36 bf a5 e3 f9 75 a5 e3 .x....@26....u.. 0020 f9 7c 3c 75 b3 09 00 00 00 04 df 85 31 42 74 9a .|.........w- 0030 ed ec 8b 19 f2 13 63 fe 26 f0 f3 32 52 6c 61 1b ......c.&..2Rla. 0040 12 ed d6 26 84 c9 a3 ae f0 23 68 fd 67 98 0f f4 ...&.....#h.g... 0050 5e c1 7d 19 73 ec c6 2c 87 11 8a 63 99 48 cb d6 ^.}.s..,...c.H.. 0060 ed 3a 5c 97 d5 f0 e5 0e 2f dd 52 6d d2 b2 96 c2 .:\...../.Rm.... 0070 9b 02 d8 2b 5d e8 86 28 47 8e df d3 98 48 9d 87 ...+]..(G....H.. 0080 2a ef a4 07 d4 5c 1a b9 43 be *....\..C. Frame 18 (138 bytes on wire, 138 bytes captured) Arrival Time: Mar 19, 2004 16:21:39.492016000 Time delta from previous packet: 0.000576000 seconds Time since reference or first frame: 2.993948000 seconds Frame Number: 18 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:10:db:16:db:f6, Dst: 00:0a:e6:4b:41:10 Destination: 00:0a:e6:4b:41:10 (00:0a:e6:4b:41:10) Source: 00:10:db:16:db:f6 (00:10:db:16:db:f6) Type: IP (0x0800) Frame check sequence: 0x59c15c79 (correct) Internet Protocol, Src Addr: 165.227.249.117 (165.227.249.117), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x04dd (1245) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x36be (correct) Source: 165.227.249.117 (165.227.249.117) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x3c75b309 Sequence: 5 Data (92 bytes) 0000 00 0a e6 4b 41 10 00 10 db 16 db f6 08 00 45 00 ...KA.........E. 0010 00 78 04 dd 00 00 40 32 36 be a5 e3 f9 75 a5 e3 .x....@26....u.. 0020 f9 7c 3c 75 b3 09 00 00 00 05 9d ce ac 6d 16 65 .|