Frame 1 (262 bytes on wire, 262 bytes captured) Arrival Time: Nov 2, 2006 15:20:26.799892000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 262 bytes Capture Length: 262 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Destination: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.123 (165.227.249.123) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x00f4 (244) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a42 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.123 (165.227.249.123) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x5122 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE98056ED39087F72 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 14 6c 8c 6d 16 00 0c 29 f4 af 90 08 00 45 00 ..l.m...).....E. 0010 00 f8 00 f4 00 00 40 11 3a 42 a5 e3 f9 7c a5 e3 ......@.:B...|.. 0020 f9 7b 01 f4 01 f4 00 e4 51 22 e9 80 56 ed 39 08 .{......Q"..V.9. 0030 7f 72 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .r.............. 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 ...R.V Frame 2 (142 bytes on wire, 142 bytes captured) Arrival Time: Nov 2, 2006 15:20:26.946560000 Time delta from previous packet: 0.146668000 seconds Time since reference or first frame: 0.146668000 seconds Frame Number: 2 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.123 (165.227.249.123), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x0012 (18) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb9b [correct] Good: True Bad : False Source: 165.227.249.123 (165.227.249.123) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0xae51 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE98056ED39087F72 Responder cookie: 0xBBD312F63A0C976A Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 f4 af 90 00 14 6c 8c 6d 16 08 00 45 00 ..).....l.m...E. 0010 00 80 00 12 40 00 40 11 fb 9b a5 e3 f9 7b a5 e3 ....@.@......{.. 0020 f9 7c 01 f4 01 f4 00 6c ae 51 e9 80 56 ed 39 08 .|.....l.Q..V.9. 0030 7f 72 bb d3 12 f6 3a 0c 97 6a 01 10 02 00 00 00 .r....:..j...... 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 00 00 00 14 70 03 ........p.....p. 0080 cb c1 09 7d be 9c 26 00 ba 69 83 bc 8b 35 ...}..&..i...5 Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Nov 2, 2006 15:20:26.946562000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.146670000 seconds Frame Number: 3 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Destination: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.123 (165.227.249.123) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x00f5 (245) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a69 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.123 (165.227.249.123) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x3659 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE98056ED39087F72 Responder cookie: 0xBBD312F63A0C976A Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 14 6c 8c 6d 16 00 0c 29 f4 af 90 08 00 45 00 ..l.m...).....E. 0010 00 d0 00 f5 00 00 40 11 3a 69 a5 e3 f9 7c a5 e3 ......@.:i...|.. 0020 f9 7b 01 f4 01 f4 00 bc 36 59 e9 80 56 ed 39 08 .{......6Y..V.9. 0030 7f 72 bb d3 12 f6 3a 0c 97 6a 04 10 02 00 00 00 .r....:..j...... 0040 00 00 00 00 00 b4 0a 00 00 84 c1 41 5e 7f 93 f7 ...........A^... 0050 07 d8 4f 61 b8 6c 56 3d c6 6e ba e6 e3 b6 05 d6 ..Oa.lV=.n...... 0060 af 9c df da c3 5b 2f 9b 4c e1 97 b9 4c 09 57 5a .....[/.L...L.WZ 0070 48 67 c7 31 bd de 46 9d a6 af 9d 9f 89 ef e4 2a Hg.1..F........* 0080 25 a8 59 6f a6 5a 8e 17 1a 96 f7 9f 7f b9 ee b6 %.Yo.Z.......... 0090 45 70 eb 24 cd 24 61 cf f7 4a 34 40 55 cc 96 ff Ep.$.$a..J4@U... 00a0 80 ea 31 ad c8 12 f4 62 e8 18 1d 84 26 5e 5e 2c ..1....b....&^^, 00b0 cd 89 61 a2 c1 7f 56 e3 49 aa 03 ed a6 e1 2d f0 ..a...V.I.....-. 00c0 49 49 a7 d9 4e 13 15 cd 52 8f 00 00 00 14 53 68 II..N...R.....Sh 00d0 36 57 f7 ef 11 af 3c d2 71 52 24 76 68 bb 6W....<.qR$vh. Frame 4 (242 bytes on wire, 242 bytes captured) Arrival Time: Nov 2, 2006 15:20:27.173814000 Time delta from previous packet: 0.227252000 seconds Time since reference or first frame: 0.373922000 seconds Frame Number: 4 Packet Length: 242 bytes Capture Length: 242 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.123 (165.227.249.123), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 228 Identification: 0x0013 (19) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb36 [correct] Good: True Bad : False Source: 165.227.249.123 (165.227.249.123) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 208 Checksum: 0xc30f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE98056ED39087F72 Responder cookie: 0xBBD312F63A0C976A Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 200 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 20 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 f4 af 90 00 14 6c 8c 6d 16 08 00 45 00 ..).....l.m...E. 0010 00 e4 00 13 40 00 40 11 fb 36 a5 e3 f9 7b a5 e3 ....@.@..6...{.. 0020 f9 7c 01 f4 01 f4 00 d0 c3 0f e9 80 56 ed 39 08 .|..........V.9. 0030 7f 72 bb d3 12 f6 3a 0c 97 6a 04 10 02 00 00 00 .r....:..j...... 0040 00 00 00 00 00 c8 0a 00 00 84 fa 55 20 8a dd c1 ...........U ... 0050 b8 f5 07 fb 5d f0 03 e3 92 75 90 d4 75 5c 7b 1e ....]....u..u\{. 0060 f4 45 5e 7d 71 b0 36 48 c6 aa ba 20 71 92 e9 e3 .E^}q.6H... q... 0070 df 04 ab cf d0 30 a0 ca 1d e7 cb 23 b9 7c c2 29 .....0.....#.|.) 0080 ce 49 f5 57 ca 9a 06 ea c3 ef e5 fe 22 0a 83 17 .I.W........"... 0090 c4 fa 70 31 b0 ef 1e ac ec 1c 34 aa be d1 8d 60 ..p1......4....` 00a0 b0 1a 65 27 e6 48 5e 82 93 51 c5 4e 05 0c ac 9e ..e'.H^..Q.N.... 00b0 12 d8 55 32 2d b2 f9 ed fd 79 d8 2f 3b 17 ff 03 ..U2-....y./;... 00c0 ed de 3b 31 3d 74 a1 88 d7 15 0d 00 00 14 c0 8d ..;1=t.......... 00d0 67 f7 83 98 c6 21 8a f7 99 84 bd 6f 59 f5 00 00 g....!.....oY... 00e0 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 00f0 8b 35 .5 Frame 5 (118 bytes on wire, 118 bytes captured) Arrival Time: Nov 2, 2006 15:20:27.173816000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.373924000 seconds Frame Number: 5 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Destination: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.123 (165.227.249.123) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x00f6 (246) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ad0 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.123 (165.227.249.123) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x5d4a [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE98056ED39087F72 Responder cookie: 0xBBD312F63A0C976A Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 14 6c 8c 6d 16 00 0c 29 f4 af 90 08 00 45 00 ..l.m...).....E. 0010 00 68 00 f6 00 00 40 11 3a d0 a5 e3 f9 7c a5 e3 .h....@.:....|.. 0020 f9 7b 01 f4 01 f4 00 54 5d 4a e9 80 56 ed 39 08 .{.....T]J..V.9. 0030 7f 72 bb d3 12 f6 3a 0c 97 6a 05 10 02 01 00 00 .r....:..j...... 0040 00 00 00 00 00 4c a3 4e 51 91 c9 53 90 0c 26 72 .....L.NQ..S..&r 0050 1c f7 3a 10 ec c5 d3 fe 05 db 84 ab 10 3e c1 5d ..:..........>.] 0060 91 0d d4 d9 a8 3e ee 65 96 7d d2 cf 20 9a 55 15 .....>.e.}.. .U. 0070 34 c8 9f 31 26 aa 4..1&. Frame 6 (110 bytes on wire, 110 bytes captured) Arrival Time: Nov 2, 2006 15:20:27.584326000 Time delta from previous packet: 0.410510000 seconds Time since reference or first frame: 0.784434000 seconds Frame Number: 6 Packet Length: 110 bytes Capture Length: 110 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.123 (165.227.249.123), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0014 (20) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbb9 [correct] Good: True Bad : False Source: 165.227.249.123 (165.227.249.123) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x890e [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xE98056ED39087F72 Responder cookie: 0xBBD312F63A0C976A Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 f4 af 90 00 14 6c 8c 6d 16 08 00 45 00 ..).....l.m...E. 0010 00 60 00 14 40 00 40 11 fb b9 a5 e3 f9 7b a5 e3 .`..@.@......{.. 0020 f9 7c 01 f4 01 f4 00 4c 89 0e e9 80 56 ed 39 08 .|.....L....V.9. 0030 7f 72 bb d3 12 f6 3a 0c 97 6a 05 10 02 01 00 00 .r....:..j...... 0040 00 00 00 00 00 44 e5 aa 25 0e f0 eb 6c 22 40 61 .....D..%...l"@a 0050 ac 15 a2 61 d0 4d ba ed a1 02 8c 43 f2 64 0b 67 ...a.M.....C.d.g 0060 8f 97 b6 8f 3c 4d 5b 61 44 f8 4c b6 76 af .... 0080 58 c5 df 27 88 df 1b 29 6b ad b5 85 f6 af e9 f2 X..'...)k....... 0090 54 56 0c 7b f5 08 TV.{.. Frame 14 (150 bytes on wire, 150 bytes captured) Arrival Time: Nov 2, 2006 15:20:28.768314000 Time delta from previous packet: 0.367705000 seconds Time since reference or first frame: 1.968422000 seconds Frame Number: 14 Packet Length: 150 bytes Capture Length: 150 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Destination: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.123 (165.227.249.123) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0020 (32) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b64 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.123 (165.227.249.123) Encapsulating Security Payload SPI: 0x0b9f2b85 Sequence: 3 Data (108 bytes) 0000 00 14 6c 8c 6d 16 00 0c 29 f4 af 90 08 00 45 00 ..l.m...).....E. 0010 00 88 00 20 00 00 f0 32 8b 64 a5 e3 f9 7c a5 e3 ... ...2.d...|.. 0020 f9 7b 0b 9f 2b 85 00 00 00 03 28 e9 34 74 af 65 .{..+.....(.4t.e 0030 fb c5 c4 7e 4c e7 9b 83 2e 86 05 f7 54 31 ac df ...~L.......T1.. 0040 d4 14 98 3c 77 5a e8 d8 de a6 f2 ba 72 b8 55 c8 ... 0040 49 f0 55 a3 24 f5 e8 b9 c4 1b c9 d3 8a 5c fa 40 I.U.$........\.@ 0050 51 0c c4 f5 e7 85 9b 52 95 ba 21 d3 1a c7 c5 b6 Q......R..!..... 0060 bd fe a3 0d 00 27 a3 99 bd bc a0 77 cc e6 65 7c .....'.....w..e| 0070 4a ef ce 68 1e 0d b9 fd 2e c5 8d e6 51 44 c5 c6 J..h........QD.. 0080 98 c5 63 33 ba 17 fa 1e 19 25 fe d7 24 94 99 48 ..c3.....%..$..H 0090 1c c6 62 ef fc 44 ..b..D Frame 16 (150 bytes on wire, 150 bytes captured) Arrival Time: Nov 2, 2006 15:20:29.806021000 Time delta from previous packet: 1.033828000 seconds Time since reference or first frame: 3.006129000 seconds Frame Number: 16 Packet Length: 150 bytes Capture Length: 150 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Destination: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.123 (165.227.249.123) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0021 (33) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b63 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.123 (165.227.249.123) Encapsulating Security Payload SPI: 0x0b9f2b85 Sequence: 4 Data (108 bytes) 0000 00 14 6c 8c 6d 16 00 0c 29 f4 af 90 08 00 45 00 ..l.m...).....E. 0010 00 88 00 21 00 00 f0 32 8b 63 a5 e3 f9 7c a5 e3 ...!...2.c...|.. 0020 f9 7b 0b 9f 2b 85 00 00 00 04 cd 6e 59 b9 26 11 .{..+......nY.&. 0030 cd bb 34 63 98 8a 86 29 61 3f 8b d7 47 cd 2c bb ..4c...)a?..G.,. 0040 93 40 5f fd 85 43 ee 10 95 81 6a a0 36 a7 6e 7e .@_..C....j.6.n~ 0050 71 22 cb d9 1c 94 c9 76 5d 12 5f 7e e7 13 39 9c q".....v]._~..9. 0060 81 c1 76 a0 20 85 4b 42 86 ce b0 e0 ec 7f f2 7d ..v. .KB.......} 0070 2e 3c 37 f9 ce ba 66 7f 63 9b 5a 00 ea 24 7b 71 .<7...f.c.Z..${q 0080 5e 2c 83 f1 9e 2e ed d0 cf c5 af ac f6 4f ba cd ^,...........O.. 0090 42 e1 6e da 35 b4 B.n.5. Frame 17 (150 bytes on wire, 150 bytes captured) Arrival Time: Nov 2, 2006 15:20:29.807738000 Time delta from previous packet: 0.001717000 seconds Time since reference or first frame: 3.007846000 seconds Frame Number: 17 Packet Length: 150 bytes Capture Length: 150 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.123 (165.227.249.123), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x09fe (2558) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3187 [correct] Good: True Bad : False Source: 165.227.249.123 (165.227.249.123) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xe68b477e Sequence: 2 Data (108 bytes) 0000 00 0c 29 f4 af 90 00 14 6c 8c 6d 16 08 00 45 00 ..).....l.m...E. 0010 00 88 09 fe 00 00 40 32 31 87 a5 e3 f9 7b a5 e3 ......@21....{.. 0020 f9 7c e6 8b 47 7e 00 00 00 02 2b 0b 74 0f cc 6b .|..G~....+.t..k 0030 53 98 05 f5 df 64 79 41 5c cf 51 c9 c9 23 da c3 S....dyA\.Q..#.. 0040 07 42 7e 0c 25 2a 3f d8 c9 c6 f1 70 17 a6 e8 c3 .B~.%*?....p.... 0050 85 c4 1d e0 b7 3a a3 dd 1c 22 eb b3 7f 94 42 67 .....:..."....Bg 0060 46 90 a7 00 ce 1c d3 1d 7b f6 f0 9c e8 34 de ae F.......{....4.. 0070 08 a4 90 7a 38 1b 32 4c d6 ce af c7 33 c4 96 3b ...z8.2L....3..; 0080 be b6 f4 76 01 8a 22 72 54 c1 c8 39 f8 30 99 3a ...v.."rT..9.0.: 0090 1a 4c 22 17 ba e9 .L"...