Frame 1 (262 bytes on wire, 262 bytes captured) Arrival Time: Sep 20, 2007 15:01:39.847693000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 262 bytes Capture Length: 262 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Destination: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0132 (306) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x39fc [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.131 (165.227.249.131) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x3bce [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBA12326658C5C8F6 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 1b 2f 37 c7 b9 00 0c 29 f4 af 90 08 00 45 00 ../7....).....E. 0010 00 f8 01 32 00 00 40 11 39 fc a5 e3 f9 7c a5 e3 ...2..@.9....|.. 0020 f9 83 01 f4 01 f4 00 e4 3b ce ba 12 32 66 58 c5 ........;...2fX. 0030 c8 f6 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 ...R.V Frame 2 (142 bytes on wire, 142 bytes captured) Arrival Time: Sep 20, 2007 15:01:40.127784000 Time delta from previous packet: 0.280091000 seconds Time since reference or first frame: 0.280091000 seconds Frame Number: 2 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfba5 [correct] Good: True Bad : False Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0xd0df [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBA12326658C5C8F6 Responder cookie: 0x5593FDAB1C558FE0 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 0c 29 f4 af 90 00 1b 2f 37 c7 b9 08 00 45 00 ..)...../7....E. 0010 00 80 00 00 40 00 40 11 fb a5 a5 e3 f9 83 a5 e3 ....@.@......... 0020 f9 7c 01 f4 01 f4 00 6c d0 df ba 12 32 66 58 c5 .|.....l....2fX. 0030 c8 f6 55 93 fd ab 1c 55 8f e0 01 10 02 00 00 00 ..U....U........ 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 00 00 00 14 af ca ........p....... 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Sep 20, 2007 15:01:40.127786000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.280093000 seconds Frame Number: 3 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Destination: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0133 (307) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a23 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.131 (165.227.249.131) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x8d32 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBA12326658C5C8F6 Responder cookie: 0x5593FDAB1C558FE0 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 1b 2f 37 c7 b9 00 0c 29 f4 af 90 08 00 45 00 ../7....).....E. 0010 00 d0 01 33 00 00 40 11 3a 23 a5 e3 f9 7c a5 e3 ...3..@.:#...|.. 0020 f9 83 01 f4 01 f4 00 bc 8d 32 ba 12 32 66 58 c5 .........2..2fX. 0030 c8 f6 55 93 fd ab 1c 55 8f e0 04 10 02 00 00 00 ..U....U........ 0040 00 00 00 00 00 b4 0a 00 00 84 1e 16 51 dc ad 5e ............Q..^ 0050 8e 05 e7 5b db e9 68 24 93 91 f4 f9 9e 81 c0 c5 ...[..h$........ 0060 44 1e 83 e2 36 6f 3f f2 06 10 8f 6c 5c 78 f7 0c D...6o?....l\x.. 0070 9d 47 11 6c e7 17 e0 9d 8d c6 74 93 c3 06 4e 87 .G.l......t...N. 0080 1a e2 87 54 4d da 11 07 77 bd 4a 40 98 fd e4 c2 ...TM...w.J@.... 0090 41 2f b3 d5 23 9e 38 6e 8f e1 f4 d3 98 5b c9 c7 A/..#.8n.....[.. 00a0 94 72 33 ec a9 b9 90 31 51 43 4b 6a 38 f1 96 f8 .r3....1QCKj8... 00b0 af 9e 38 a4 4a 3d b1 17 55 43 e2 ea f2 fc e1 1b ..8.J=..UC...... 00c0 42 5f c4 7f 42 4c 19 61 9a 68 00 00 00 14 0e 36 B_..BL.a.h.....6 00d0 5b ed fd d3 b3 34 88 15 49 d2 9f 50 3e 6a [....4..I..P>j Frame 4 (222 bytes on wire, 222 bytes captured) Arrival Time: Sep 20, 2007 15:01:40.395490000 Time delta from previous packet: 0.267704000 seconds Time since reference or first frame: 0.547797000 seconds Frame Number: 4 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb55 [correct] Good: True Bad : False Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x7064 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBA12326658C5C8F6 Responder cookie: 0x5593FDAB1C558FE0 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 f4 af 90 00 1b 2f 37 c7 b9 08 00 45 00 ..)...../7....E. 0010 00 d0 00 00 40 00 40 11 fb 55 a5 e3 f9 83 a5 e3 ....@.@..U...... 0020 f9 7c 01 f4 01 f4 00 bc 70 64 ba 12 32 66 58 c5 .|......pd..2fX. 0030 c8 f6 55 93 fd ab 1c 55 8f e0 04 10 02 00 00 00 ..U....U........ 0040 00 00 00 00 00 b4 0a 00 00 84 7e a2 cd 46 63 12 ..........~..Fc. 0050 7c 2e 40 c8 54 5e c5 96 ed ff f7 10 5d 6c 3c ac |.@.T^......]l<. 0060 83 96 32 fb 30 ee ca 04 a2 fd 48 18 d0 d3 c2 46 ..2.0.....H....F 0070 6d 60 b8 18 f5 6c 1f e3 be 83 64 43 1a bd 39 f4 m`...l....dC..9. 0080 ef 2e 92 71 6f 2b 98 85 c8 10 a6 85 cc f8 41 5e ...qo+........A^ 0090 86 4e c2 87 9a 36 88 4a f1 51 14 cf 00 6c fe f8 .N...6.J.Q...l.. 00a0 02 e0 0e 62 ee 97 9e a0 f5 fa 9e 1d b0 ae 6b 7a ...b..........kz 00b0 17 5b ff d7 f6 23 f4 47 50 89 b9 a4 02 fe 2b e4 .[...#.GP.....+. 00c0 8a 01 9c ae cd 2a 07 d6 e5 49 00 00 00 14 ec a6 .....*...I...... 00d0 04 6a 18 e3 02 36 ba 89 66 d9 75 08 c1 3b .j...6..f.u..; Frame 5 (118 bytes on wire, 118 bytes captured) Arrival Time: Sep 20, 2007 15:01:40.395492000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.547799000 seconds Frame Number: 5 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Destination: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0134 (308) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a8a [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.131 (165.227.249.131) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xdf0a [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBA12326658C5C8F6 Responder cookie: 0x5593FDAB1C558FE0 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 1b 2f 37 c7 b9 00 0c 29 f4 af 90 08 00 45 00 ../7....).....E. 0010 00 68 01 34 00 00 40 11 3a 8a a5 e3 f9 7c a5 e3 .h.4..@.:....|.. 0020 f9 83 01 f4 01 f4 00 54 df 0a ba 12 32 66 58 c5 .......T....2fX. 0030 c8 f6 55 93 fd ab 1c 55 8f e0 05 10 02 01 00 00 ..U....U........ 0040 00 00 00 00 00 4c fd ab 04 3d bf 76 90 72 c1 2f .....L...=.v.r./ 0050 e9 e6 1a 10 ef d8 fa 65 09 9b d0 03 dd 76 9e 0e .......e.....v.. 0060 89 fc 66 b0 c8 39 ba 99 66 31 62 32 1d e9 f1 48 ..f..9..f1b2...H 0070 f0 c9 f3 73 42 d4 ...sB. Frame 6 (110 bytes on wire, 110 bytes captured) Arrival Time: Sep 20, 2007 15:01:40.510077000 Time delta from previous packet: 0.114585000 seconds Time since reference or first frame: 0.662384000 seconds Frame Number: 6 Packet Length: 110 bytes Capture Length: 110 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc5 [correct] Good: True Bad : False Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xa90a [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBA12326658C5C8F6 Responder cookie: 0x5593FDAB1C558FE0 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 f4 af 90 00 1b 2f 37 c7 b9 08 00 45 00 ..)...../7....E. 0010 00 60 00 00 40 00 40 11 fb c5 a5 e3 f9 83 a5 e3 .`..@.@......... 0020 f9 7c 01 f4 01 f4 00 4c a9 0a ba 12 32 66 58 c5 .|.....L....2fX. 0030 c8 f6 55 93 fd ab 1c 55 8f e0 05 10 02 01 00 00 ..U....U........ 0040 00 00 00 00 00 44 9d 44 a7 3d 51 26 57 0b e6 56 .....D.D.=Q&W..V 0050 72 40 37 9c ce 44 a4 30 bf d4 ed 2b 2f ff c1 9b r@7..D.0...+/... 0060 34 8a 1b c4 20 f4 69 df 4c bd 18 12 30 b3 4... .i.L...0. Frame 7 (334 bytes on wire, 334 bytes captured) Arrival Time: Sep 20, 2007 15:01:40.512588000 Time delta from previous packet: 0.002511000 seconds Time since reference or first frame: 0.664895000 seconds Frame Number: 7 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Destination: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0135 (309) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x39b1 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.131 (165.227.249.131) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xdc6a [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBA12326658C5C8F6 Responder cookie: 0x5593FDAB1C558FE0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xEC0981D6 Length: 292 Encrypted payload (264 bytes) 0000 00 1b 2f 37 c7 b9 00 0c 29 f4 af 90 08 00 45 00 ../7....).....E. 0010 01 40 01 35 00 00 40 11 39 b1 a5 e3 f9 7c a5 e3 .@.5..@.9....|.. 0020 f9 83 01 f4 01 f4 01 2c dc 6a ba 12 32 66 58 c5 .......,.j..2fX. 0030 c8 f6 55 93 fd ab 1c 55 8f e0 08 10 20 01 ec 09 ..U....U.... ... 0040 81 d6 00 00 01 24 66 84 ee 0b cc bf 7c 31 87 b9 .....$f.....|1.. 0050 c1 71 1d d9 c8 bd ce 35 32 5a 81 a4 80 48 ac 38 .q.....52Z...H.8 0060 13 9a eb 58 b3 90 e6 84 2b 2b c4 c9 3f a3 61 4e ...X....++..?.aN 0070 bc aa c5 b5 ed 9c 49 78 62 70 37 e8 90 1c b3 89 ......Ixbp7..... 0080 1e 2f 36 0d bc 6c b3 0a 7c 57 46 c3 ab ab fa 64 ./6..l..|WF....d 0090 f8 26 57 22 d2 39 b2 56 a6 b2 22 82 34 bd 43 5c .&W".9.V..".4.C\ 00a0 12 20 03 70 54 14 92 9e e1 98 df 13 ea 84 d5 80 . .pT........... 00b0 cf ab 11 6c 33 59 db fe c2 e7 f1 66 10 73 bb a6 ...l3Y.....f.s.. 00c0 1b d4 cf f7 6c 31 d4 e0 2c ad bf f0 1d 6e 97 75 ....l1..,....n.u 00d0 a8 12 30 18 52 4b f3 b9 1e bb c0 d7 0b b0 e7 5c ..0.RK.........\ 00e0 6e 7b 01 28 c8 70 fc e0 23 27 5d 04 8f 4e 9b 23 n{.(.p..#']..N.# 00f0 02 fa 0f cd 4b 1c 2a ba 64 52 46 d2 26 8e b3 69 ....K.*.dRF.&..i 0100 46 b4 88 77 13 a4 b5 10 75 25 8c cb 88 23 bd 25 F..w....u%...#.% 0110 e0 2d 11 aa 2b 64 60 76 e4 34 eb 4d 14 9f ca 5e .-..+d`v.4.M...^ 0120 77 3b e5 a0 6c e5 63 3c 5b ac 14 c6 e4 01 78 10 w;..l.c<[.....x. 0130 42 86 b6 89 a6 b0 40 b9 b8 93 df 6a 5b d5 46 58 B.....@....j[.FX 0140 a8 bc af 5f 36 0a 19 4f 36 8e 48 2c da 65 ..._6..O6.H,.e Frame 8 (334 bytes on wire, 334 bytes captured) Arrival Time: Sep 20, 2007 15:01:40.872270000 Time delta from previous packet: 0.359682000 seconds Time since reference or first frame: 1.024577000 seconds Frame Number: 8 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfae5 [correct] Good: True Bad : False Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xef55 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBA12326658C5C8F6 Responder cookie: 0x5593FDAB1C558FE0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xEC0981D6 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 f4 af 90 00 1b 2f 37 c7 b9 08 00 45 00 ..)...../7....E. 0010 01 40 00 00 40 00 40 11 fa e5 a5 e3 f9 83 a5 e3 .@..@.@......... 0020 f9 7c 01 f4 01 f4 01 2c ef 55 ba 12 32 66 58 c5 .|.....,.U..2fX. 0030 c8 f6 55 93 fd ab 1c 55 8f e0 08 10 20 01 ec 09 ..U....U.... ... 0040 81 d6 00 00 01 24 bb 28 2a 1e 20 0d a9 35 f7 45 .....$.(*. ..5.E 0050 2a 64 c5 b4 b1 5e b1 f1 d3 a7 65 31 45 56 8a a1 *d...^....e1EV.. 0060 73 c7 b6 d5 cf 7e a3 7e 22 e2 e7 54 13 79 18 6d s....~.~"..T.y.m 0070 95 16 e3 89 41 99 39 f8 ba f2 a3 fd 40 60 a4 15 ....A.9.....@`.. 0080 06 cd 22 12 24 20 12 a8 7d 8d c0 23 39 e8 ed 50 ..".$ ..}..#9..P 0090 4d 86 ac e0 22 a6 62 2c 7a 01 fa ab 39 a6 f8 e7 M...".b,z...9... 00a0 1a 4d 97 39 53 3e 81 5d ce e3 b2 02 2a 1a 6b eb .M.9S>.]....*.k. 00b0 77 2b f3 e4 f2 95 a3 57 51 6e 14 af c3 2a a3 ea w+.....WQn...*.. 00c0 b4 f9 0d 71 6c b0 c9 66 66 7e f2 82 2a 1b 42 c9 ...ql..ff~..*.B. 00d0 30 05 67 19 ab 9e cd 39 34 25 73 5b 75 ca 0f c1 0.g....94%s[u... 00e0 47 a5 c9 14 9a 01 f9 01 85 85 7d 79 5a db 4f c4 G.........}yZ.O. 00f0 85 56 77 8b 7f 90 92 05 c9 fd c4 9c 64 d9 b2 4b .Vw.........d..K 0100 94 46 be 14 40 ae 3d 25 2d be e8 50 ce c2 09 98 .F..@.=%-..P.... 0110 bf e6 2c 61 82 d8 32 90 e6 51 3e 81 e3 70 b2 2c ..,a..2..Q>..p., 0120 ad 2e b9 bf 38 26 c0 07 6f 54 a0 10 ed 75 d8 33 ....8&..oT...u.3 0130 46 ca 9d b5 01 22 7f 37 4a 65 3b 1f 3d 8d 25 ab F....".7Je;.=.%. 0140 1b 71 03 a9 65 58 ca ce fb df a2 66 38 2e .q..eX.....f8. Frame 9 (94 bytes on wire, 94 bytes captured) Arrival Time: Sep 20, 2007 15:01:40.877617000 Time delta from previous packet: 0.005347000 seconds Time since reference or first frame: 1.029924000 seconds Frame Number: 9 Packet Length: 94 bytes Capture Length: 94 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Destination: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0136 (310) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3aa0 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.131 (165.227.249.131) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x3af3 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBA12326658C5C8F6 Responder cookie: 0x5593FDAB1C558FE0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xEC0981D6 Length: 52 Encrypted payload (24 bytes) 0000 00 1b 2f 37 c7 b9 00 0c 29 f4 af 90 08 00 45 00 ../7....).....E. 0010 00 50 01 36 00 00 40 11 3a a0 a5 e3 f9 7c a5 e3 .P.6..@.:....|.. 0020 f9 83 01 f4 01 f4 00 3c 3a f3 ba 12 32 66 58 c5 .......<:...2fX. 0030 c8 f6 55 93 fd ab 1c 55 8f e0 08 10 20 01 ec 09 ..U....U.... ... 0040 81 d6 00 00 00 34 d6 75 15 17 e0 43 fb 76 31 9c .....4.u...C.v1. 0050 99 d5 46 61 e9 c4 b6 31 f0 16 86 c0 ee 1a ..Fa...1...... Frame 10 (126 bytes on wire, 126 bytes captured) Arrival Time: Sep 20, 2007 15:01:41.153390000 Time delta from previous packet: 0.275773000 seconds Time since reference or first frame: 1.305697000 seconds Frame Number: 10 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Destination: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0043 (67) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b51 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.131 (165.227.249.131) Encapsulating Security Payload SPI: 0xfb4900a6 Sequence: 2 Data (84 bytes) 0000 00 1b 2f 37 c7 b9 00 0c 29 f4 af 90 08 00 45 00 ../7....).....E. 0010 00 70 00 43 00 00 f0 32 8b 51 a5 e3 f9 7c a5 e3 .p.C...2.Q...|.. 0020 f9 83 fb 49 00 a6 00 00 00 02 e2 a5 6c 10 86 24 ...I........l..$ 0030 19 1b 66 53 1e ab 75 32 45 7a 65 7f 93 22 64 ad ..fS..u2Eze.."d. 0040 a2 c3 e9 35 d1 27 cb 90 dc e4 6d 96 19 ce d2 ec ...5.'....m..... 0050 09 d3 ca 9c 91 83 c2 b3 1f e4 0b b8 a2 0c f4 85 ................ 0060 e7 2f 1c cb 05 69 3b e2 7a cf 06 7d 80 f9 41 8d ./...i;.z..}..A. 0070 dd eb 50 cc 1a 4c ae c6 6b ab 62 1d 33 99 ..P..L..k.b.3. Frame 11 (126 bytes on wire, 126 bytes captured) Arrival Time: Sep 20, 2007 15:01:41.274632000 Time delta from previous packet: 0.121242000 seconds Time since reference or first frame: 1.426939000 seconds Frame Number: 11 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x8160 (33120) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xba34 [correct] Good: True Bad : False Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x8e1e10b0 Sequence: 1 Data (84 bytes) 0000 00 0c 29 f4 af 90 00 1b 2f 37 c7 b9 08 00 45 00 ..)...../7....E. 0010 00 70 81 60 00 00 40 32 ba 34 a5 e3 f9 83 a5 e3 .p.`..@2.4...... 0020 f9 7c 8e 1e 10 b0 00 00 00 01 9f d7 b3 aa 2a 68 .|............*h 0030 f8 85 89 70 f6 1c 1c 75 d7 53 e3 87 07 52 3f ed ...p...u.S...R?. 0040 90 54 03 7a 6d b0 e3 44 f8 f1 86 e8 e3 ce 50 f9 .T.zm..D......P. 0050 b7 dd 53 bc 8f 5d 23 e6 bd 4e fb d8 8d 5d 80 9a ..S..]#..N...].. 0060 2e 1b 4b 64 cc 25 ca 1a 2e 72 1b d6 1e 5b 03 91 ..Kd.%...r...[.. 0070 59 a4 e1 0c 86 33 50 9f 50 b9 c5 24 4c 21 Y....3P.P..$L! Frame 12 (126 bytes on wire, 126 bytes captured) Arrival Time: Sep 20, 2007 15:01:41.282293000 Time delta from previous packet: 0.007661000 seconds Time since reference or first frame: 1.434600000 seconds Frame Number: 12 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Destination: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0044 (68) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b50 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.131 (165.227.249.131) Encapsulating Security Payload SPI: 0xfb4900a6 Sequence: 3 Data (84 bytes) 0000 00 1b 2f 37 c7 b9 00 0c 29 f4 af 90 08 00 45 00 ../7....).....E. 0010 00 70 00 44 00 00 f0 32 8b 50 a5 e3 f9 7c a5 e3 .p.D...2.P...|.. 0020 f9 83 fb 49 00 a6 00 00 00 03 0c 5f 06 22 b2 8e ...I......._.".. 0030 d3 b6 6c 0d 12 9a f6 ef a0 25 4f 67 ae 97 20 ba ..l......%Og.. . 0040 b4 58 39 5b 11 1b 62 a6 5e d5 6c 09 d8 96 01 9c .X9[..b.^.l..... 0050 3b eb b6 2d 92 f0 41 d7 71 45 02 10 d0 42 0d ca ;..-..A.qE...B.. 0060 9c f9 eb 78 c9 f5 a9 ed 18 dd d3 98 8b fa 10 56 ...x...........V 0070 71 f7 cf 93 f2 f9 e7 b9 fb 9d 8a 5d d5 1a q..........].. Frame 13 (126 bytes on wire, 126 bytes captured) Arrival Time: Sep 20, 2007 15:01:41.402708000 Time delta from previous packet: 0.120415000 seconds Time since reference or first frame: 1.555015000 seconds Frame Number: 13 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x8161 (33121) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xba33 [correct] Good: True Bad : False Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x8e1e10b0 Sequence: 2 Data (84 bytes) 0000 00 0c 29 f4 af 90 00 1b 2f 37 c7 b9 08 00 45 00 ..)...../7....E. 0010 00 70 81 61 00 00 40 32 ba 33 a5 e3 f9 83 a5 e3 .p.a..@2.3...... 0020 f9 7c 8e 1e 10 b0 00 00 00 02 1b d6 1e 5b 03 91 .|...........[.. 0030 59 a4 b3 b9 c5 d5 43 e3 f5 46 41 75 37 52 55 7d Y.....C..FAu7RU} 0040 a7 e6 74 2f c8 13 06 66 fd e1 f3 78 6d 18 cf c0 ..t/...f...xm... 0050 20 1f 5e 98 a8 b9 90 de 71 73 26 6a 49 48 c9 18 .^.....qs&jIH.. 0060 9f 71 4e 91 94 c9 c4 29 a4 b7 18 47 f2 d3 8d 16 .qN....)...G.... 0070 71 ce 67 3b b2 19 ef e4 c3 6e f8 4f fe b9 q.g;.....n.O.. Frame 14 (126 bytes on wire, 126 bytes captured) Arrival Time: Sep 20, 2007 15:01:42.301503000 Time delta from previous packet: 0.898795000 seconds Time since reference or first frame: 2.453810000 seconds Frame Number: 14 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Destination: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0045 (69) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b4f [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.131 (165.227.249.131) Encapsulating Security Payload SPI: 0xfb4900a6 Sequence: 4 Data (84 bytes) 0000 00 1b 2f 37 c7 b9 00 0c 29 f4 af 90 08 00 45 00 ../7....).....E. 0010 00 70 00 45 00 00 f0 32 8b 4f a5 e3 f9 7c a5 e3 .p.E...2.O...|.. 0020 f9 83 fb 49 00 a6 00 00 00 04 45 1a 04 a5 19 ea ...I......E..... 0030 ea ba 92 e3 9b b5 a2 2f 41 ce 20 71 eb 2f fd 15 ......./A. q./.. 0040 c0 6c 18 6a 99 73 1d be 4c 77 09 41 2e 87 cb 5d .l.j.s..Lw.A...] 0050 0f 8d 9e 6a 95 72 51 64 ea 49 d5 28 ff e8 d3 ed ...j.rQd.I.(.... 0060 12 4e f5 1f ea 3f 47 72 36 6a 1f d6 d0 2b 99 44 .N...?Gr6j...+.D 0070 42 16 05 1e f3 fe 36 8b 79 e5 6e a1 7c a7 B.....6.y.n.|. Frame 15 (126 bytes on wire, 126 bytes captured) Arrival Time: Sep 20, 2007 15:01:42.424565000 Time delta from previous packet: 0.123062000 seconds Time since reference or first frame: 2.576872000 seconds Frame Number: 15 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x8162 (33122) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xba32 [correct] Good: True Bad : False Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x8e1e10b0 Sequence: 3 Data (84 bytes) 0000 00 0c 29 f4 af 90 00 1b 2f 37 c7 b9 08 00 45 00 ..)...../7....E. 0010 00 70 81 62 00 00 40 32 ba 32 a5 e3 f9 83 a5 e3 .p.b..@2.2...... 0020 f9 7c 8e 1e 10 b0 00 00 00 03 18 47 f2 d3 8d 16 .|.........G.... 0030 71 ce 24 c9 b0 31 da 85 32 05 8f 0f 36 bc 9a 41 q.$..1..2...6..A 0040 c6 93 9f b0 5f 52 2c df 60 7f 85 ec cb c1 83 07 ...._R,.`....... 0050 9f 7c ca 99 31 e1 dd 5f 2d bb f2 2c f0 80 c5 91 .|..1.._-..,.... 0060 60 ef d8 6a 83 f7 c4 96 c5 c2 05 68 72 a5 02 2c `..j.......hr.., 0070 f1 5d 8d bc e7 20 08 3d 67 e5 48 31 e5 16 .]... .=g.H1.. Frame 16 (126 bytes on wire, 126 bytes captured) Arrival Time: Sep 20, 2007 15:01:43.297548000 Time delta from previous packet: 0.872983000 seconds Time since reference or first frame: 3.449855000 seconds Frame Number: 16 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Destination: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0046 (70) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b4e [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.131 (165.227.249.131) Encapsulating Security Payload SPI: 0xfb4900a6 Sequence: 5 Data (84 bytes) 0000 00 1b 2f 37 c7 b9 00 0c 29 f4 af 90 08 00 45 00 ../7....).....E. 0010 00 70 00 46 00 00 f0 32 8b 4e a5 e3 f9 7c a5 e3 .p.F...2.N...|.. 0020 f9 83 fb 49 00 a6 00 00 00 05 24 92 fc b2 e7 16 ...I......$..... 0030 db 59 75 b0 08 e6 47 e4 71 d2 66 22 20 f0 cf 05 .Yu...G.q.f" ... 0040 2c d2 4f b6 fc e6 76 65 9d bf 22 d7 8e 1e 0e 3f ,.O...ve.."....? 0050 08 ab 5e 40 22 22 be 9b b6 f5 04 75 7a fb 64 ad ..^@"".....uz.d. 0060 a5 a5 b1 f4 ff c7 d1 f2 e2 ca a7 ce 5d 2c 3e 20 ............],> 0070 9e e1 5f 81 65 bb 68 3f b3 e9 f9 50 d4 5e .._.e.h?...P.^ Frame 17 (126 bytes on wire, 126 bytes captured) Arrival Time: Sep 20, 2007 15:01:43.414829000 Time delta from previous packet: 0.117281000 seconds Time since reference or first frame: 3.567136000 seconds Frame Number: 17 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:1b:2f:37:c7:b9 (00:1b:2f:37:c7:b9) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x8163 (33123) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xba31 [correct] Good: True Bad : False Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x8e1e10b0 Sequence: 4 Data (84 bytes) 0000 00 0c 29 f4 af 90 00 1b 2f 37 c7 b9 08 00 45 00 ..)...../7....E. 0010 00 70 81 63 00 00 40 32 ba 31 a5 e3 f9 83 a5 e3 .p.c..@2.1...... 0020 f9 7c 8e 1e 10 b0 00 00 00 04 05 68 72 a5 02 2c .|.........hr.., 0030 f1 5d 51 68 80 4d f3 4a ee e4 8f 27 d4 79 3f 90 .]Qh.M.J...'.y?. 0040 b6 72 0a df 78 a0 00 fb ad 3f bd 07 b6 af 1f 2e .r..x....?...... 0050 90 3f fb fe b2 39 04 38 2e 81 21 ef 6a ff 66 9e .?...9.8..!.j.f. 0060 5a 08 bc 3c 3b 7f c3 e8 93 91 d0 6f 98 c0 2b e0 Z..<;......o..+. 0070 69 0e a2 09 20 0e 80 c2 53 75 e8 6f b8 04 i... ...Su.o..