Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Jul 15, 2004 13:25:41.377841000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:07:e9:0f:d4:32 Destination: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x2de1f4e0 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x002f (47) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b03 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.127 (165.227.249.127) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0xd0d3 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x55040C936925AE76 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 07 e9 0f d4 32 00 0c 29 e6 ad b9 08 00 45 00 .....2..).....E. 0010 00 f8 00 2f 00 00 40 11 3b 03 a5 e3 f9 7c a5 e3 .../..@.;....|.. 0020 f9 7f 01 f4 01 f4 00 e4 d0 d3 55 04 0c 93 69 25 ..........U...i% 0030 ae 76 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .v.............. 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 2d e1 f4 e0 ...R.V-... Frame 2 (158 bytes on wire, 158 bytes captured) Arrival Time: Jul 15, 2004 13:25:41.669706000 Time delta from previous packet: 0.291865000 seconds Time since reference or first frame: 0.291865000 seconds Frame Number: 2 Packet Length: 158 bytes Capture Length: 158 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0x7ca90802 (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 140 Identification: 0x0029 (41) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b75 (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 120 Checksum: 0x9053 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x55040C936925AE76 Responder cookie: 0xA797F470554BC559 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 112 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x402F7B247B5A5066C1FB9F53F480C9F5 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 0c 29 e6 ad b9 00 07 e9 0f d4 32 08 00 45 00 ..)........2..E. 0010 00 8c 00 29 00 00 40 11 3b 75 a5 e3 f9 7f a5 e3 ...)..@.;u...... 0020 f9 7c 01 f4 01 f4 00 78 90 53 55 04 0c 93 69 25 .|.....x.SU...i% 0030 ae 76 a7 97 f4 70 55 4b c5 59 01 10 02 00 00 00 .v...pUK.Y...... 0040 00 00 00 00 00 70 0d 00 00 34 00 00 00 01 00 00 .....p...4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 40 2f ........p.....@/ 0080 7b 24 7b 5a 50 66 c1 fb 9f 53 f4 80 c9 f5 00 00 {${ZPf...S...... 0090 00 0c 09 00 26 89 df d6 b7 12 7c a9 08 02 ....&.....|... Frame 3 (226 bytes on wire, 226 bytes captured) Arrival Time: Jul 15, 2004 13:25:41.679812000 Time delta from previous packet: 0.010106000 seconds Time since reference or first frame: 0.301971000 seconds Frame Number: 3 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:07:e9:0f:d4:32 Destination: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x465bf16e (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0030 (48) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b2a (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.127 (165.227.249.127) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x03a9 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x55040C936925AE76 Responder cookie: 0xA797F470554BC559 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 07 e9 0f d4 32 00 0c 29 e6 ad b9 08 00 45 00 .....2..).....E. 0010 00 d0 00 30 00 00 40 11 3b 2a a5 e3 f9 7c a5 e3 ...0..@.;*...|.. 0020 f9 7f 01 f4 01 f4 00 bc 03 a9 55 04 0c 93 69 25 ..........U...i% 0030 ae 76 a7 97 f4 70 55 4b c5 59 04 10 02 00 00 00 .v...pUK.Y...... 0040 00 00 00 00 00 b4 0a 00 00 84 3e 57 9a 7f 3e 58 ..........>W..>X 0050 21 af 4e 80 10 39 9e 21 07 92 4b 76 00 94 ed 42 !.N..9.!..Kv...B 0060 96 65 38 75 99 ae c2 b4 70 38 5f ff 52 cc 1e 23 .e8u....p8_.R..# 0070 f9 b0 f9 7a d1 26 33 29 66 c0 95 8b 31 8b 68 17 ...z.&3)f...1.h. 0080 02 e5 bd 2a 78 9f 42 d2 ad cb f8 60 43 c2 15 fe ...*x.B....`C... 0090 a5 35 f5 05 5b 7e 70 06 00 a1 af 88 04 0c 37 82 .5..[~p.......7. 00a0 60 1d 4f c4 0e fc 62 b8 a8 69 cc 19 86 f2 f3 2b `.O...b..i.....+ 00b0 5a 44 8d 05 67 17 4e 98 ac c4 1a aa 52 1b 7d 48 ZD..g.N.....R.}H 00c0 6b 2d 06 84 16 3c 4f 68 c7 55 00 00 00 14 b8 da k-....N..... 0090 af 58 93 06 00 c0 86 6b 88 8e 8c 80 a2 14 c3 b1 .X.....k........ 00a0 48 cc f1 02 24 73 6f 69 be 68 58 47 29 c9 f0 3a H...$soi.hXG)..: 00b0 7f df 28 ae af 5d 65 c3 ab 75 d1 1d 32 92 80 10 ..(..]e..u..2... 00c0 9b 41 ae a6 78 e8 f0 07 5a 93 1f 54 0e d2 29 47 .A..x...Z..T..)G 00d0 12 0f 3e 5b a3 49 2f c1 81 9f 99 81 42 0c 74 aa ..>[.I/.....B.t. 00e0 28 b5 f9 0c dd 82 2f e4 c8 d6 68 6c 76 aa 12 c5 (...../...hlv... 00f0 61 ca 23 41 21 00 b3 cc a0 bf de 65 f5 32 58 fb a.#A!......e.2X. 0100 76 bf df 9f ba 27 b3 20 78 50 40 90 5e 7f 14 c4 v....'. xP@.^... 0110 90 c9 43 e5 e8 8d 94 ea 9c b8 03 9d 96 a2 86 3d ..C............= 0120 b6 7c 84 91 52 01 ed 6c 41 f7 3a 4e d4 49 cf bc .|..R..lA.:N.I.. 0130 fa 6e 6f 29 f1 ac 4d c9 5a d5 00 3e 3a 4b 08 48 .no)..M.Z..>:K.H 0140 0b b6 20 f2 e1 5a 6b 99 fd 6b 5c f1 bf 7a 78 95 .. ..Zk..k\..zx. 0150 da e5 .. Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: Jul 15, 2004 13:25:41.798333000 Time delta from previous packet: 0.017046000 seconds Time since reference or first frame: 0.420492000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0xf7995ba0 (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x002c (44) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3abe (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x11cd (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x55040C936925AE76 Responder cookie: 0xA797F470554BC559 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5A1AEEC3 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 e6 ad b9 00 07 e9 0f d4 32 08 00 45 00 ..)........2..E. 0010 01 40 00 2c 00 00 40 11 3a be a5 e3 f9 7f a5 e3 .@.,..@.:....... 0020 f9 7c 01 f4 01 f4 01 2c 11 cd 55 04 0c 93 69 25 .|.....,..U...i% 0030 ae 76 a7 97 f4 70 55 4b c5 59 08 10 20 01 5a 1a .v...pUK.Y.. .Z. 0040 ee c3 00 00 01 24 67 be 02 05 62 76 5e da 60 b6 .....$g...bv^.`. 0050 d6 ad a2 69 21 e8 e9 a6 49 5f ca 74 2c bb 4e 4c ...i!...I_.t,.NL 0060 0c 25 06 b4 51 fe a3 bd 7d 73 02 9f 6f b3 1a b4 .%..Q...}s..o... 0070 c6 67 8c ea 48 c6 b5 54 c8 28 96 ee 3d a6 3c bf .g..H..T.(..=.<. 0080 e5 90 f3 68 4f 7e 5b 55 69 d5 c7 17 79 be 74 42 ...hO~[Ui...y.tB 0090 48 8e 2c b2 51 4b 14 df d6 2d 91 7b 3d bf 5a ac H.,.QK...-.{=.Z. 00a0 0d a9 29 84 51 be 0a d9 31 d2 c6 12 69 0a cf fe ..).Q...1...i... 00b0 7d 74 ac a0 78 80 dc 70 df ca b9 b5 0d ba d9 64 }t..x..p.......d 00c0 f3 6f 2d 60 39 26 98 19 d0 8b ab b4 ca 88 54 18 .o-`9&........T. 00d0 70 19 a7 2a 39 84 fc 30 e7 50 41 94 9e 87 51 0e p..*9..0.PA...Q. 00e0 62 a1 54 60 29 9c 13 56 60 3c 51 aa 2f 01 22 95 b.T`)..V`.......;.`.U 0060 fc 18 61 19 ee 89 7c 56 0c ff 2b ca b1 12 4e 35 ..a...|V..+...N5 0070 af 64 05 96 e9 e9 7e eb b0 55 bc 24 8e 3f 2a 73 .d....~..U.$.?*s 0080 5c 59 4b 2a e3 25 bf ce cc 80 64 60 c1 56 35 78 \YK*.%....d`.V5x 0090 08 50 2c 14 c8 31 da c2 86 a3 .P,..1.... Frame 12 (154 bytes on wire, 154 bytes captured) Arrival Time: Jul 15, 2004 13:25:43.391214000 Time delta from previous packet: 1.030610000 seconds Time since reference or first frame: 2.013373000 seconds Frame Number: 12 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:07:e9:0f:d4:32 Destination: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xf695b560 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0009 (9) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b77 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.127 (165.227.249.127) Encapsulating Security Payload SPI: 0x00001d50 Sequence: 4 Data (108 bytes) 0000 00 07 e9 0f d4 32 00 0c 29 e6 ad b9 08 00 45 00 .....2..).....E. 0010 00 88 00 09 00 00 f0 32 8b 77 a5 e3 f9 7c a5 e3 .......2.w...|.. 0020 f9 7f 00 00 1d 50 00 00 00 04 49 90 df 8d 99 6e .....P....I....n 0030 e5 25 35 ae 59 fa 64 04 48 6b 51 99 da 30 94 2d .%5.Y.d.HkQ..0.- 0040 35 a5 e2 9b e9 80 4e 6e 54 04 18 45 10 e9 98 73 5.....NnT..E...s 0050 a2 86 6c a0 0c 20 25 91 e3 51 2a db 8c d3 0e af ..l.. %..Q*..... 0060 fc 89 49 7a f1 71 c0 65 64 05 44 21 a6 3e ff a7 ..Iz.q.ed.D!.>.. 0070 7f 99 2f 71 5e e2 64 a5 3c b8 e9 d6 9f 0a ce c5 ../q^.d.<....... 0080 c7 2f be 19 9b e9 ce 1d aa 02 3d 9b 35 15 a4 ad ./........=.5... 0090 52 84 b0 2b d3 c5 f6 95 b5 60 R..+.....` Frame 13 (154 bytes on wire, 154 bytes captured) Arrival Time: Jul 15, 2004 13:25:43.823770000 Time delta from previous packet: 0.432556000 seconds Time since reference or first frame: 2.445929000 seconds Frame Number: 13 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0x5c88f079 (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x002d (45) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3b54 (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x8157cbc1 Sequence: 2 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 07 e9 0f d4 32 08 00 45 00 ..)........2..E. 0010 00 88 00 2d 00 00 40 32 3b 54 a5 e3 f9 7f a5 e3 ...-..@2;T...... 0020 f9 7c 81 57 cb c1 00 00 00 02 9d a7 12 16 18 fe .|.W............ 0030 ab 1c db 42 9f d8 35 b2 d3 c2 34 29 52 d8 9f d0 ...B..5...4)R... 0040 8c 00 27 f5 61 b6 e1 91 61 94 7b f7 01 88 91 35 ..'.a...a.{....5 0050 d4 40 14 00 7e f2 7a 01 09 30 01 fc 7a b3 62 ba .@..~.z..0..z.b. 0060 ff 63 da 6d 3e 65 8a 5d 87 9e 5d 28 06 e8 cd 21 .c.m>e.]..](...! 0070 b5 70 40 69 10 71 18 9f 5c 62 64 ea 57 29 c6 db .p@i.q..\bd.W).. 0080 df 7d 9b 4e 66 9e 40 47 ca 67 e3 1a d9 ff 70 f3 .}.Nf.@G.g....p. 0090 47 9f ed 46 31 a5 5c 88 f0 79 G..F1.\..y Frame 14 (154 bytes on wire, 154 bytes captured) Arrival Time: Jul 15, 2004 13:25:44.414720000 Time delta from previous packet: 0.590950000 seconds Time since reference or first frame: 3.036879000 seconds Frame Number: 14 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:07:e9:0f:d4:32 Destination: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x5f668529 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.127 (165.227.249.127) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x000a (10) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b76 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.127 (165.227.249.127) Encapsulating Security Payload SPI: 0x00001d50 Sequence: 5 Data (108 bytes) 0000 00 07 e9 0f d4 32 00 0c 29 e6 ad b9 08 00 45 00 .....2..).....E. 0010 00 88 00 0a 00 00 f0 32 8b 76 a5 e3 f9 7c a5 e3 .......2.v...|.. 0020 f9 7f 00 00 1d 50 00 00 00 05 c6 27 6e 91 47 48 .....P.....'n.GH 0030 23 0b f3 63 92 01 eb 92 41 c0 fe a1 7b 2d 98 7d #..c....A...{-.} 0040 3b 4d 0b 85 c6 af f2 cc a6 cf 6c 0c 62 16 41 38 ;M........l.b.A8 0050 b3 b7 65 3d 88 46 8e ae ca 01 95 0c 24 49 dc ae ..e=.F......$I.. 0060 36 4b be 95 d5 7d c8 3e 4f 74 30 d4 bf a9 fb 1b 6K...}.>Ot0..... 0070 da e5 0d cb dc 3c 8d 15 8e fc 9a 9f 4e 63 df 2a .....<......Nc.* 0080 2a ef cf 49 52 8f a4 b4 57 29 52 fe 37 c8 d7 36 *..IR...W)R.7..6 0090 f9 f2 86 0a e8 fe 5f 66 85 29 ......_f.) Frame 15 (154 bytes on wire, 154 bytes captured) Arrival Time: Jul 15, 2004 13:25:44.415602000 Time delta from previous packet: 0.000882000 seconds Time since reference or first frame: 3.037761000 seconds Frame Number: 15 Packet Length: 154 bytes Capture Length: 154 bytes Ethernet II, Src: 00:07:e9:0f:d4:32, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:07:e9:0f:d4:32 (00:07:e9:0f:d4:32) Type: IP (0x0800) Frame check sequence: 0xa2f594cf (correct) Internet Protocol, Src Addr: 165.227.249.127 (165.227.249.127), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x002e (46) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: ESP (0x32) Header checksum: 0x3c53 (correct) Source: 165.227.249.127 (165.227.249.127) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x8157cbc1 Sequence: 3 Data (108 bytes) 0000 00 0c 29 e6 ad b9 00 07 e9 0f d4 32 08 00 45 00 ..)........2..E. 0010 00 88 00 2e 00 00 3f 32 3c 53 a5 e3 f9 7f a5 e3 ......?2