Frame 1 (270 bytes on wire, 270 bytes captured) Arrival Time: Mar 22, 2004 14:37:08.204398000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 270 bytes Capture Length: 270 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:80:c8:ca:a8:82 Destination: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xc9a16033 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x0acb (2763) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3060 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.130 (165.227.249.130) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0xeeda (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x185BE00E3368AEAE Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 80 c8 ca a8 82 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 fc 0a cb 00 00 40 11 30 60 a5 e3 f9 7c a5 e3 ......@.0`...|.. 0020 f9 82 01 f4 01 f4 00 e8 ee da 18 5b e0 0e 33 68 ...........[..3h 0030 ae ae 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b .....N.$...GYL(K 0090 21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e !;....'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 c9 a1 60 33 .o,....R.V..`3 Frame 2 (170 bytes on wire, 170 bytes captured) Arrival Time: Mar 22, 2004 14:37:08.206479000 Time delta from previous packet: 0.002081000 seconds Time since reference or first frame: 0.002081000 seconds Frame Number: 2 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:80:c8:ca:a8:82, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Type: IP (0x0800) Frame check sequence: 0xab1586bd (correct) Internet Protocol, Src Addr: 165.227.249.130 (165.227.249.130), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb8e (correct) Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0xdfcb (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x185BE00E3368AEAE Responder cookie: 0x3233636878890000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0xC573B056D7FACA36C2FBA28374127CBF Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0xBAEB239037E17787D730EED9D95D48AA 0000 00 0c 29 e6 ad b9 00 80 c8 ca a8 82 08 00 45 00 ..)...........E. 0010 00 98 00 00 40 00 40 11 fb 8e a5 e3 f9 82 a5 e3 ....@.@......... 0020 f9 7c 01 f4 01 f4 00 84 df cb 18 5b e0 0e 33 68 .|.........[..3h 0030 ae ae 32 33 63 68 78 89 00 00 01 10 02 00 00 00 ..23chx......... 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 c5 73 b0 56 d7 fa ca 36 c2 fb a2 83 74 12 ...s.V...6....t. 0090 7c bf 00 00 00 14 ba eb 23 90 37 e1 77 87 d7 30 |.......#.7.w..0 00a0 ee d9 d9 5d 48 aa ab 15 86 bd ...]H..... Frame 3 (226 bytes on wire, 226 bytes captured) Arrival Time: Mar 22, 2004 14:37:08.213708000 Time delta from previous packet: 0.007229000 seconds Time since reference or first frame: 0.009310000 seconds Frame Number: 3 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:80:c8:ca:a8:82 Destination: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xb4594c73 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0acc (2764) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x308b (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.130 (165.227.249.130) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x0955 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x185BE00E3368AEAE Responder cookie: 0x3233636878890000 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 80 c8 ca a8 82 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 d0 0a cc 00 00 40 11 30 8b a5 e3 f9 7c a5 e3 ......@.0....|.. 0020 f9 82 01 f4 01 f4 00 bc 09 55 18 5b e0 0e 33 68 .........U.[..3h 0030 ae ae 32 33 63 68 78 89 00 00 04 10 02 00 00 00 ..23chx......... 0040 00 00 00 00 00 b4 0a 00 00 84 e9 cf 52 18 60 39 ............R.`9 0050 78 5e 42 10 15 70 07 94 b1 ae 14 c8 cc 60 ec 07 x^B..p.......`.. 0060 e2 24 7c 48 49 6c c4 d8 15 08 07 c9 43 66 f0 9f .$|HIl......Cf.. 0070 3b 8a 4f df 87 90 ae 67 2c 48 42 5f a7 62 0e 72 ;.O....g,HB_.b.r 0080 02 f5 4e 9c 99 c4 b5 92 3a b0 64 66 26 74 60 80 ..N.....:.df&t`. 0090 78 da 87 5d b7 0b 94 54 6f 3a 3d 3f 1f 0c 5f b2 x..]...To:=?.._. 00a0 88 95 bc ef 93 97 47 b9 5e cf 80 59 4d 97 f2 53 ......G.^..YM..S 00b0 2c 97 6f 44 12 4d 00 29 fe 5b 2f 1a 85 71 d2 d6 ,.oD.M.).[/..q.. 00c0 c0 3e ae b7 0d f2 f2 03 97 ce 00 00 00 14 14 c6 .>.............. 00d0 e3 fc eb 5c c0 0f 15 de a1 1d f7 50 17 9f b4 59 ...\.......P...Y 00e0 4c 73 Ls Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Mar 22, 2004 14:37:08.259158000 Time delta from previous packet: 0.045450000 seconds Time since reference or first frame: 0.054760000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:80:c8:ca:a8:82, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Type: IP (0x0800) Frame check sequence: 0xf6dd663c (correct) Internet Protocol, Src Addr: 165.227.249.130 (165.227.249.130), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb56 (correct) Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xd2cf (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x185BE00E3368AEAE Responder cookie: 0x3233636878890000 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 e6 ad b9 00 80 c8 ca a8 82 08 00 45 00 ..)...........E. 0010 00 d0 00 00 40 00 40 11 fb 56 a5 e3 f9 82 a5 e3 ....@.@..V...... 0020 f9 7c 01 f4 01 f4 00 bc d2 cf 18 5b e0 0e 33 68 .|.........[..3h 0030 ae ae 32 33 63 68 78 89 00 00 04 10 02 00 00 00 ..23chx......... 0040 00 00 00 00 00 b4 0a 00 00 84 59 eb ca 6e 2d 3a ..........Y..n-: 0050 2c 50 f9 f0 46 13 f4 8c 25 f5 99 28 81 b0 b7 09 ,P..F...%..(.... 0060 55 01 31 57 8e b1 ac ed 0f 13 7d 2a 9f d6 20 8c U.1W......}*.. . 0070 21 a2 c0 74 3f 41 af b3 a9 18 50 cd 56 55 7e ae !..t?A....P.VU~. 0080 c6 47 00 48 77 19 10 c8 ec 98 bd c2 7f 3a f5 81 .G.Hw........:.. 0090 c4 e0 db f3 64 c1 14 62 bc 9d d6 22 0e ca 7b 17 ....d..b..."..{. 00a0 44 b1 11 6e 82 84 8b a4 19 2a 20 82 e9 d4 e5 26 D..n.....* ....& 00b0 ff 81 6d d4 91 a5 2f bf f5 89 94 5e 72 2f 40 3b ..m.../....^r/@; 00c0 c9 0a 93 60 55 42 2a 21 8b be 00 00 00 14 90 fc ...`UB*!........ 00d0 19 45 04 2a 65 03 e7 de 7a 0a ae fe 8e 13 f6 dd .E.*e...z....... 00e0 66 3c f< Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 22, 2004 14:37:08.268807000 Time delta from previous packet: 0.009649000 seconds Time since reference or first frame: 0.064409000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:80:c8:ca:a8:82 Destination: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x81238a09 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0acd (2765) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x30f2 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.130 (165.227.249.130) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x2788 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x185BE00E3368AEAE Responder cookie: 0x3233636878890000 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 80 c8 ca a8 82 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 68 0a cd 00 00 40 11 30 f2 a5 e3 f9 7c a5 e3 .h....@.0....|.. 0020 f9 82 01 f4 01 f4 00 54 27 88 18 5b e0 0e 33 68 .......T'..[..3h 0030 ae ae 32 33 63 68 78 89 00 00 05 10 02 01 00 00 ..23chx......... 0040 00 00 00 00 00 4c af 30 7b d9 75 58 8d 8d b3 04 .....L.0{.uX.... 0050 fa 1d 2a 7f db 0a b1 b8 08 99 84 99 97 f5 8d 71 ..*............q 0060 f3 19 c4 73 e6 67 97 99 4a 7f e9 e2 dc e3 9c b3 ...s.g..J....... 0070 bf 5d 1e c3 9e 73 81 23 8a 09 .]...s.#.. Frame 6 (122 bytes on wire, 122 bytes captured) Arrival Time: Mar 22, 2004 14:37:08.269263000 Time delta from previous packet: 0.000456000 seconds Time since reference or first frame: 0.064865000 seconds Frame Number: 6 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:80:c8:ca:a8:82, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Type: IP (0x0800) Frame check sequence: 0x44dbe514 (correct) Internet Protocol, Src Addr: 165.227.249.130 (165.227.249.130), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbbe (correct) Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xdd08 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x185BE00E3368AEAE Responder cookie: 0x3233636878890000 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 e6 ad b9 00 80 c8 ca a8 82 08 00 45 00 ..)...........E. 0010 00 68 00 00 40 00 40 11 fb be a5 e3 f9 82 a5 e3 .h..@.@......... 0020 f9 7c 01 f4 01 f4 00 54 dd 08 18 5b e0 0e 33 68 .|.....T...[..3h 0030 ae ae 32 33 63 68 78 89 00 00 05 10 02 01 00 00 ..23chx......... 0040 00 00 00 00 00 4c 1f 25 c5 d1 42 de a8 50 88 14 .....L.%..B..P.. 0050 ef d4 0f 00 a7 0a c6 e7 63 10 89 78 43 39 04 75 ........c..xC9.u 0060 da bb bd f2 50 b0 dc be 9b 99 40 53 2a ef 9d 32 ....P.....@S*..2 0070 cc b1 1d b6 a1 be 44 db e5 14 ......D... Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Mar 22, 2004 14:37:08.279191000 Time delta from previous packet: 0.009928000 seconds Time since reference or first frame: 0.074793000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:80:c8:ca:a8:82 Destination: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x2e7dda12 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0ace (2766) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3011 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.130 (165.227.249.130) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x54b7 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x185BE00E3368AEAE Responder cookie: 0x3233636878890000 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x870C1C4D Length: 300 Encrypted payload (272 bytes) 0000 00 80 c8 ca a8 82 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 01 48 0a ce 00 00 40 11 30 11 a5 e3 f9 7c a5 e3 .H....@.0....|.. 0020 f9 82 01 f4 01 f4 01 34 54 b7 18 5b e0 0e 33 68 .......4T..[..3h 0030 ae ae 32 33 63 68 78 89 00 00 08 10 20 01 87 0c ..23chx..... ... 0040 1c 4d 00 00 01 2c de 76 7d 91 b4 54 6d ca 3f a4 .M...,.v}..Tm.?. 0050 e2 f0 fc bb c3 d2 57 c2 bf dc ea 97 0d 35 a2 8d ......W......5.. 0060 14 78 97 a8 b9 cb c3 7d 3f 29 7a 02 50 6e f1 26 .x.....}?)z.Pn.& 0070 25 bd 5f a7 62 d0 a9 7d 2f 04 65 af 17 e3 6f dd %._.b..}/.e...o. 0080 75 2e 30 11 65 3d 5a 4c f7 60 0d 27 31 15 93 ca u.0.e=ZL.`.'1... 0090 b2 54 e9 46 76 b4 33 f5 73 5e 2f 0c ce 82 13 56 .T.Fv.3.s^/....V 00a0 e4 05 6d 33 59 98 31 be 5c 67 57 93 62 f5 e5 1f ..m3Y.1.\gW.b... 00b0 98 0a 53 14 99 71 7e a5 9e 54 d9 b2 56 99 e1 b4 ..S..q~..T..V... 00c0 41 86 62 7c 9e a2 b9 68 38 51 ce 27 ec 88 7a b0 A.b|...h8Q.'..z. 00d0 44 6f e3 69 03 c4 61 82 84 b4 10 cd ab e6 8b f5 Do.i..a......... 00e0 db 39 2a 01 8a 88 5e 64 d3 a6 0b b4 eb c1 87 0d .9*...^d........ 00f0 23 81 42 c9 f7 d0 b0 17 fe c9 76 11 36 f7 a1 f3 #.B.......v.6... 0100 b3 3e 38 df c9 d2 9c 7f 58 ba d3 d4 74 46 b2 dc .>8.....X...tF.. 0110 68 45 61 69 6e 0a 31 0b 83 a3 76 46 a6 c8 12 1e hEain.1...vF.... 0120 24 25 85 78 79 ec e1 d5 74 3c 3f 5b 84 9d 1f 38 $%.xy...t.4 0140 3a 03 13 ae 79 f4 0a 90 84 ff f9 a1 e1 0b 7a f4 :...y.........z. 0150 0f 8b 53 8c 8b 9c 2e 7d da 12 ..S....}.. Frame 8 (346 bytes on wire, 346 bytes captured) Arrival Time: Mar 22, 2004 14:37:08.302766000 Time delta from previous packet: 0.023575000 seconds Time since reference or first frame: 0.098368000 seconds Frame Number: 8 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:80:c8:ca:a8:82, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Type: IP (0x0800) Frame check sequence: 0x3f87908f (correct) Internet Protocol, Src Addr: 165.227.249.130 (165.227.249.130), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfade (correct) Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x300f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x185BE00E3368AEAE Responder cookie: 0x3233636878890000 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x870C1C4D Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 e6 ad b9 00 80 c8 ca a8 82 08 00 45 00 ..)...........E. 0010 01 48 00 00 40 00 40 11 fa de a5 e3 f9 82 a5 e3 .H..@.@......... 0020 f9 7c 01 f4 01 f4 01 34 30 0f 18 5b e0 0e 33 68 .|.....40..[..3h 0030 ae ae 32 33 63 68 78 89 00 00 08 10 20 01 87 0c ..23chx..... ... 0040 1c 4d 00 00 01 2c 6c b9 54 43 0b 52 34 76 e9 aa .M...,l.TC.R4v.. 0050 23 98 a5 41 8c 31 15 7d 44 ca f5 cd 8c d6 15 1c #..A.1.}D....... 0060 cf 58 43 4c b9 33 ca 1e 8c 98 e4 63 30 b8 fc ff .XCL.3.....c0... 0070 10 f1 b6 77 bd 66 8e d1 08 2d a9 62 f7 f2 ac 79 ...w.f...-.b...y 0080 b0 f2 91 fe fe 79 a4 dc 0a 1f 2b cb 30 87 d8 f2 .....y....+.0... 0090 fe 09 02 04 3a 72 18 ec 52 6c 4f 0c 9c 9b 56 6b ....:r..RlO...Vk 00a0 4c ad 10 b6 96 56 94 79 fc 17 6f 7a 25 fa 01 c5 L....V.y..oz%... 00b0 8c f7 f0 b4 d5 42 38 fc 32 ae a7 8b e6 0d 4f 1a .....B8.2.....O. 00c0 3c fd c3 da dd 78 3e da c0 20 b5 3c ba 54 c5 c0 <....x>.. .<.T.. 00d0 11 a9 1f 4c 6e 9c 47 4c d0 b2 09 bc 13 ca d1 3b ...Ln.GL.......; 00e0 07 ce b2 22 45 b5 ae ec 56 f5 f7 24 59 70 3a f8 ..."E...V..$Yp:. 00f0 f4 de bf 68 41 4c 67 46 49 74 22 c3 aa 6f f4 5b ...hALgFIt"..o.[ 0100 3f 07 ce 30 93 66 aa e0 36 87 64 dc 2b 88 97 f7 ?..0.f..6.d.+... 0110 65 15 0a ee 60 9c 9f 17 95 50 23 4b 93 d2 15 da e...`....P#K.... 0120 51 f2 8e bf 79 96 d5 22 f2 9a ff c5 67 6d 7d 34 Q...y.."....gm}4 0130 a3 ce 1e c0 57 64 99 34 3b d4 1b c2 4a d5 c9 91 ....Wd.4;...J... 0140 2f c1 a2 e9 c7 64 fa a6 24 24 9a 5f bd 39 2f 4d /....d..$$._.9/M 0150 ac ac a9 a7 57 65 3f 87 90 8f ....We?... Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Mar 22, 2004 14:37:08.312043000 Time delta from previous packet: 0.009277000 seconds Time since reference or first frame: 0.107645000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:80:c8:ca:a8:82 Destination: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xdd8d9205 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0acf (2767) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3100 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.130 (165.227.249.130) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xe207 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x185BE00E3368AEAE Responder cookie: 0x3233636878890000 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x870C1C4D Length: 60 Encrypted payload (32 bytes) 0000 00 80 c8 ca a8 82 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 58 0a cf 00 00 40 11 31 00 a5 e3 f9 7c a5 e3 .X....@.1....|.. 0020 f9 82 01 f4 01 f4 00 44 e2 07 18 5b e0 0e 33 68 .......D...[..3h 0030 ae ae 32 33 63 68 78 89 00 00 08 10 20 01 87 0c ..23chx..... ... 0040 1c 4d 00 00 00 3c 52 a1 42 91 18 15 4d e9 15 d1 .M.....<.)&.-.~%...e 0050 78 43 a1 c0 59 47 e1 0b 76 ee 52 76 9e 5f 7b 60 xC..YG..v.Rv._{` 0060 b3 b9 0f d4 e5 26 3d 77 60 1c 0c 03 35 bd ec 2d .....&=w`...5..- 0070 52 c8 46 c2 5d 8f 1f 9f 47 cc 5e 9d ee b6 a4 4d R.F.]...G.^....M 0080 e9 0f 98 ac 44 eb 73 3e ce 7a 00 e0 71 68 73 86 ....D.s>.z..qhs. 0090 74 f1 36 0f 81 24 8f fb 95 5c 58 ec 54 3f b9 9b t.6..$...\X.T?.. 00a0 65 2f da 99 5b 0f be 19 f1 bc e/..[..... Frame 13 (170 bytes on wire, 170 bytes captured) Arrival Time: Mar 22, 2004 14:37:09.223123000 Time delta from previous packet: 0.000492000 seconds Time since reference or first frame: 1.018725000 seconds Frame Number: 13 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:80:c8:ca:a8:82, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Type: IP (0x0800) Frame check sequence: 0x21d51125 (correct) Internet Protocol, Src Addr: 165.227.249.130 (165.227.249.130), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b6c (correct) Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xace6aa08 Sequence: 2 Data (124 bytes) 0000 00 0c 29 e6 ad b9 00 80 c8 ca a8 82 08 00 45 00 ..)...........E. 0010 00 98 00 01 00 00 f0 32 8b 6c a5 e3 f9 82 a5 e3 .......2.l...... 0020 f9 7c ac e6 aa 08 00 00 00 02 9e fa a9 7a 09 8e .|...........z.. 0030 8d 20 d7 ed bb 5b 37 a1 10 63 c8 f9 6c ea aa 7f . ...[7..c..l... 0040 75 9b 0e bf fd 6d cf e4 ab 8e 52 c0 74 3e 82 07 u....m....R.t>.. 0050 e5 d4 4b e2 a9 44 d4 ef 90 d6 26 a9 ec 5f 05 b2 ..K..D....&.._.. 0060 b1 6a 06 48 62 12 a9 56 a4 85 5a 46 31 da f3 ee .j.Hb..V..ZF1... 0070 af e5 ba e6 b2 ac 10 d6 79 8d 73 67 32 51 fe af ........y.sg2Q.. 0080 19 6f 09 6f fd 4b 6e 76 9a 2b 65 f6 82 3e 38 62 .o.o.Knv.+e..>8b 0090 31 34 22 6c c1 99 34 3d 60 3f ae 66 d9 d5 7a d7 14"l..4=`?.f..z. 00a0 4c cd 95 70 76 c8 21 d5 11 25 L..pv.!..% Frame 14 (170 bytes on wire, 170 bytes captured) Arrival Time: Mar 22, 2004 14:37:10.218281000 Time delta from previous packet: 0.995158000 seconds Time since reference or first frame: 2.013883000 seconds Frame Number: 14 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:80:c8:ca:a8:82 Destination: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x86d9b18d (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0027 (39) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b46 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload SPI: 0xe9cdf378 Sequence: 4 Data (124 bytes) 0000 00 80 c8 ca a8 82 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 98 00 27 00 00 f0 32 8b 46 a5 e3 f9 7c a5 e3 ...'...2.F...|.. 0020 f9 82 e9 cd f3 78 00 00 00 04 02 0e 42 c6 c9 e8 .....x......B... 0030 c8 0a 85 da df 21 db 51 af 8d e2 07 b3 f1 a4 5b .....!.Q.......[ 0040 0b c6 0d bb 99 18 4b ba bf d1 3e c1 37 f4 0f 38 ......K...>.7..8 0050 8e 84 57 b1 34 4b 8e 83 ea fb 63 13 e6 70 55 bb ..W.4K....c..pU. 0060 f2 a1 f0 46 66 ca 14 58 29 34 f5 35 80 19 3c f4 ...Ff..X)4.5..<. 0070 e6 ff 99 b9 ca 60 4d 97 9d 40 c7 68 cc 51 73 01 .....`M..@.h.Qs. 0080 f5 69 1a 94 31 4b 2a d6 bd 13 c3 28 e3 52 e6 4b .i..1K*....(.R.K 0090 d9 77 c2 17 d6 de 27 9d 79 bf 1d 13 bf 8f a4 11 .w....'.y....... 00a0 30 83 83 2b b8 80 86 d9 b1 8d 0..+...... Frame 15 (170 bytes on wire, 170 bytes captured) Arrival Time: Mar 22, 2004 14:37:10.218290000 Time delta from previous packet: 0.000009000 seconds Time since reference or first frame: 2.013892000 seconds Frame Number: 15 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:80:c8:ca:a8:82, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Type: IP (0x0800) Frame check sequence: 0x8e667f0d (correct) Internet Protocol, Src Addr: 165.227.249.130 (165.227.249.130), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b6b (correct) Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xace6aa08 Sequence: 3 Data (124 bytes) 0000 00 0c 29 e6 ad b9 00 80 c8 ca a8 82 08 00 45 00 ..)...........E. 0010 00 98 00 02 00 00 f0 32 8b 6b a5 e3 f9 82 a5 e3 .......2.k...... 0020 f9 7c ac e6 aa 08 00 00 00 03 b5 18 c0 65 2a bf .|...........e*. 0030 99 95 01 a6 4d 30 94 95 16 cc a0 e8 d7 f2 1f fa ....M0.......... 0040 d5 45 d6 9b 58 65 95 40 05 03 fd 93 da 26 4b ab .E..Xe.@.....&K. 0050 a8 fe 74 e4 50 d4 72 e3 a6 42 04 ba 9e 1a e1 bb ..t.P.r..B...... 0060 4d a9 c2 7d ad 2f 1d 5d a6 55 82 f3 3e bd 6a 88 M..}./.].U..>.j. 0070 1a 4f b3 fc 85 e8 f7 e8 e6 ee f1 3e 69 cc ad b6 .O.........>i... 0080 3b f9 6d 7f 95 c0 1f d8 40 78 bc 1c 67 eb 27 91 ;.m.....@x..g.'. 0090 f2 d6 b0 9f 48 28 ac 91 ef 27 5d 57 18 87 32 7e ....H(...']W..2~ 00a0 03 56 53 9b b6 b7 8e 66 7f 0d .VS....f.. Frame 16 (170 bytes on wire, 170 bytes captured) Arrival Time: Mar 22, 2004 14:37:11.218784000 Time delta from previous packet: 1.000494000 seconds Time since reference or first frame: 3.014386000 seconds Frame Number: 16 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:80:c8:ca:a8:82 Destination: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x396a7886 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0028 (40) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b45 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload SPI: 0xe9cdf378 Sequence: 5 Data (124 bytes) 0000 00 80 c8 ca a8 82 00 0c 29 e6 ad b9 08 00 45 00 ........).....E. 0010 00 98 00 28 00 00 f0 32 8b 45 a5 e3 f9 7c a5 e3 ...(...2.E...|.. 0020 f9 82 e9 cd f3 78 00 00 00 05 32 ec af 54 1f 5b .....x....2..T.[ 0030 ea c7 65 f5 70 11 b1 ea cd 3e f2 9c db 5b db b6 ..e.p....>...[.. 0040 f5 cf bd 33 a4 3a b2 9c 67 0e cc d0 4f 74 94 9e ...3.:..g...Ot.. 0050 53 65 a2 99 64 79 06 9a 6f 1a ab 4b 79 51 e1 94 Se..dy..o..KyQ.. 0060 85 cd 7c 68 01 0b 94 d4 9b 46 f4 5c 1a 9f 72 48 ..|h.....F.\..rH 0070 73 b6 0f 6f 9c 2d df 18 4c 04 63 b8 19 68 3b 61 s..o.-..L.c..h;a 0080 35 00 90 30 4e a6 b5 b7 08 a0 da c0 02 62 56 e0 5..0N........bV. 0090 3a dc 7e 01 ca aa 95 ca d7 b9 44 a0 15 5e 09 eb :.~.......D..^.. 00a0 63 61 9b 38 e3 63 39 6a 78 86 ca.8.c9jx. Frame 17 (170 bytes on wire, 170 bytes captured) Arrival Time: Mar 22, 2004 14:37:11.219243000 Time delta from previous packet: 0.000459000 seconds Time since reference or first frame: 3.014845000 seconds Frame Number: 17 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:80:c8:ca:a8:82, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:80:c8:ca:a8:82 (00:80:c8:ca:a8:82) Type: IP (0x0800) Frame check sequence: 0xf80c9a64 (correct) Internet Protocol, Src Addr: 165.227.249.130 (165.227.249.130), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0003 (3) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b6a (correct) Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xace6aa08 Sequence: 4 Data (124 bytes) 0000 00 0c 29 e6 ad b9 00 80 c8 ca a8 82 08 00 45 00 ..)...........E. 0010 00 98 00 03 00 00 f0 32 8b 6a a5 e3 f9 82 a5 e3 .......2.j...... 0020 f9 7c ac e6 aa 08 00 00 00 04 34 8b dc 2a 13 09 .|........4..*.. 0030 61 6f 57 4d f9 cc 25 af 2a 3b fd 0c 92 56 02 2b aoWM..%.*;...V.+ 0040 d3 fe d2 dd 26 ee f9 19 6b 04 eb 09 2e dd ac 58 ....&...k......X 0050 72 96 f9 9e 50 f4 bc d2 b1 70 9f 6f 1d 58 20 a7 r...P....p.o.X . 0060 c2 e4 c5 a0 8e 85 af ef 67 cc a2 47 99 56 43 40 ........g..G.VC@ 0070 e9 4f 39 bc 70 69 6d 0c 5c 63 32 b7 11 ac 46 53 .O9.pim.\c2...FS 0080 08 5f a8 78 72 ff da 1d 50 6d 33 9a 5c 34 45 e7 ._.xr...Pm3.\4E. 0090 d7 09 1b a2 66 b1 48 a4 37 ea 8f 24 06 53 8c 41 ....f.H.7..$.S.A 00a0 32 cc 82 69 a1 81 f8 0c 9a 64 2..i.....d