Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Mar 9, 2006 11:25:04.865926000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Destination: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xba612201 [correct] Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.148 (165.227.249.148) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x00d6 (214) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a47 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.148 (165.227.249.148) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0xecce [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x4D8CDB7CC2887191 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0b 0b 00 00 01 00 0c 29 f4 af 90 08 00 45 00 ........).....E. 0010 00 f8 00 d6 00 00 40 11 3a 47 a5 e3 f9 7c a5 e3 ......@.:G...|.. 0020 f9 94 01 f4 01 f4 00 e4 ec ce 4d 8c db 7c c2 88 ..........M..|.. 0030 71 91 00 00 00 00 00 00 00 00 01 10 02 00 00 00 q............... 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 0d 00 00 14 8f 9c ........p....... 0080 c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b 0d 00 .N.$...GYL(K!;.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 ba 61 22 01 ...R.V.a". Frame 2 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 9, 2006 11:25:04.880574000 Time delta from previous packet: 0.014648000 seconds Time since reference or first frame: 0.014648000 seconds Frame Number: 2 Packet Length: 130 bytes Capture Length: 130 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Type: IP (0x0800) Frame check sequence: 0x707e368c [correct] Internet Protocol, Src: 165.227.249.148 (165.227.249.148), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0002 (2) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7ca2 [correct] Good: True Bad : False Source: 165.227.249.148 (165.227.249.148) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0xaa44 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x4D8CDB7CC2887191 Responder cookie: 0x844D42234CDEAB1A Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 f4 af 90 00 0b 0b 00 00 01 08 00 45 00 ..)...........E. 0010 00 70 00 02 00 00 ff 11 7c a2 a5 e3 f9 94 a5 e3 .p......|....... 0020 f9 7c 01 f4 01 f4 00 5c aa 44 4d 8c db 7c c2 88 .|.....\.DM..|.. 0030 71 91 84 4d 42 23 4c de ab 1a 01 10 02 00 00 00 q..MB#L......... 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 70 7e ............p.p~ 0080 36 8c 6. Frame 3 (226 bytes on wire, 226 bytes captured) Arrival Time: Mar 9, 2006 11:25:04.883961000 Time delta from previous packet: 0.003387000 seconds Time since reference or first frame: 0.018035000 seconds Frame Number: 3 Packet Length: 226 bytes Capture Length: 226 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Destination: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x6766ac88 [correct] Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.148 (165.227.249.148) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x00d7 (215) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a6e [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.148 (165.227.249.148) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x3eb3 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x4D8CDB7CC2887191 Responder cookie: 0x844D42234CDEAB1A Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0b 0b 00 00 01 00 0c 29 f4 af 90 08 00 45 00 ........).....E. 0010 00 d0 00 d7 00 00 40 11 3a 6e a5 e3 f9 7c a5 e3 ......@.:n...|.. 0020 f9 94 01 f4 01 f4 00 bc 3e b3 4d 8c db 7c c2 88 ........>.M..|.. 0030 71 91 84 4d 42 23 4c de ab 1a 04 10 02 00 00 00 q..MB#L......... 0040 00 00 00 00 00 b4 0a 00 00 84 9c ed fb 12 7d cf ..............}. 0050 6c 54 0d 1b 96 f2 5e 39 c2 37 15 69 28 67 4d 96 lT....^9.7.i(gM. 0060 8c 3f f7 97 30 15 9e bb f7 0c c6 64 e4 c4 81 a4 .?..0......d.... 0070 d6 93 c3 0b 10 3f fc 3c 49 b8 a7 20 1d 21 94 d9 .....?...T>...c. 00f0 a3 15 4b e3 13 50 af 6f 39 5a a4 ec 26 d6 bd 51 ..K..P.o9Z..&..Q 0100 6a 54 69 b6 dc 97 a2 27 0c 9e a1 82 11 9a 7e fa jTi....'......~. 0110 77 fd ea 19 12 7b 9c 87 28 f8 d4 ca 64 e0 ad 86 w....{..(...d... 0120 32 45 6e cf ca 36 e5 33 99 bb 96 19 d0 f9 5a 41 2En..6.3......ZA 0130 f6 49 ec 82 94 48 44 04 c9 8c c6 81 db 9c 3e 72 .I...HD.......>r 0140 70 d3 ba 48 7b 8b ef 79 36 e3 d3 be 5b 9e f0 2c p..H{..y6...[.., 0150 ab 0d .. Frame 8 (338 bytes on wire, 338 bytes captured) Arrival Time: Mar 9, 2006 11:25:04.937140000 Time delta from previous packet: 0.023200000 seconds Time since reference or first frame: 0.071214000 seconds Frame Number: 8 Packet Length: 338 bytes Capture Length: 338 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Type: IP (0x0800) Frame check sequence: 0xe37442d8 [correct] Internet Protocol, Src: 165.227.249.148 (165.227.249.148), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0005 (5) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7bcf [correct] Good: True Bad : False Source: 165.227.249.148 (165.227.249.148) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x03d6 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x4D8CDB7CC2887191 Responder cookie: 0x844D42234CDEAB1A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x85632622 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 f4 af 90 00 0b 0b 00 00 01 08 00 45 00 ..)...........E. 0010 01 40 00 05 00 00 ff 11 7b cf a5 e3 f9 94 a5 e3 .@......{....... 0020 f9 7c 01 f4 01 f4 01 2c 03 d6 4d 8c db 7c c2 88 .|.....,..M..|.. 0030 71 91 84 4d 42 23 4c de ab 1a 08 10 20 01 85 63 q..MB#L..... ..c 0040 26 22 00 00 01 24 45 8d 64 23 fc 47 1b 5a af 05 &"...$E.d#.G.Z.. 0050 e5 7b 7a b5 3c e7 c4 e7 9b c0 a5 0b 9a b3 2e 9a .{z.<........... 0060 de d4 6a fd 73 fa 43 5c bd a3 a3 3f 7c 6d 06 d1 ..j.s.C\...?|m.. 0070 b1 4d 4c cc 50 38 64 0c 4d 17 d7 58 9b b9 0d 33 .ML.P8d.M..X...3 0080 5c 8a 36 e4 fb 31 8f 3d 99 0d f0 a0 ab 62 29 7a \.6..1.=.....b)z 0090 05 e2 52 03 de 11 f6 ef cf 2d c3 1a 59 56 f7 ce ..R......-..YV.. 00a0 67 f3 ef 2d b9 78 b7 4e d2 09 46 84 f4 36 ab 05 g..-.x.N..F..6.. 00b0 16 e6 85 c8 a9 28 d0 fe d9 92 b0 16 1b 90 37 01 .....(........7. 00c0 f3 ac 0c b7 b6 77 44 a9 ff 20 b5 41 35 bb ff 19 .....wD.. .A5... 00d0 51 83 2f c7 37 fc af 5e bd 9a be ab 86 05 e2 f9 Q./.7..^........ 00e0 68 79 67 13 7f b7 66 1c 9c 9f a2 02 29 a2 2f 93 hyg...f.....)./. 00f0 b9 d1 da 6f bd 61 00 4d fc 1f 34 65 21 b1 ef d5 ...o.a.M..4e!... 0100 69 7b 34 4b 68 66 a6 8c cd fa 33 a1 bb 15 93 6f i{4Khf....3....o 0110 dd ee 25 98 a7 69 8f a3 0f 68 a7 7a b8 65 f9 92 ..%..i...h.z.e.. 0120 94 27 84 1d 0d db 8e 8f ab 0c 58 f0 e8 c2 9f 67 .'........X....g 0130 41 39 f5 f8 ac c0 fd 1f 7e d4 42 17 a4 3e bc fa A9......~.B..>.. 0140 8f 9a ec 61 fe a7 da b2 09 77 d8 90 56 25 e3 74 ...a.....w..V%.t 0150 42 d8 B. Frame 9 (98 bytes on wire, 98 bytes captured) Arrival Time: Mar 9, 2006 11:25:04.940552000 Time delta from previous packet: 0.003412000 seconds Time since reference or first frame: 0.074626000 seconds Frame Number: 9 Packet Length: 98 bytes Capture Length: 98 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Destination: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xa8c44b3a [correct] Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.148 (165.227.249.148) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x00da (218) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3aeb [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.148 (165.227.249.148) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x651e [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x4D8CDB7CC2887191 Responder cookie: 0x844D42234CDEAB1A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x85632622 Length: 52 Encrypted payload (24 bytes) 0000 00 0b 0b 00 00 01 00 0c 29 f4 af 90 08 00 45 00 ........).....E. 0010 00 50 00 da 00 00 40 11 3a eb a5 e3 f9 7c a5 e3 .P....@.:....|.. 0020 f9 94 01 f4 01 f4 00 3c 65 1e 4d 8c db 7c c2 88 .........(.N..}. Frame 13 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 9, 2006 11:25:05.904267000 Time delta from previous packet: 0.015021000 seconds Time since reference or first frame: 1.038341000 seconds Frame Number: 13 Packet Length: 154 bytes Capture Length: 154 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Type: IP (0x0800) Frame check sequence: 0x54c7558d [correct] Internet Protocol, Src: 165.227.249.148 (165.227.249.148), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0007 (7) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c64 [correct] Good: True Bad : False Source: 165.227.249.148 (165.227.249.148) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xab57ed59 Sequence: 2 Data (108 bytes) 0000 00 0c 29 f4 af 90 00 0b 0b 00 00 01 08 00 45 00 ..)...........E. 0010 00 88 00 07 00 00 ff 32 7c 64 a5 e3 f9 94 a5 e3 .......2|d...... 0020 f9 7c ab 57 ed 59 00 00 00 02 01 02 03 04 05 06 .|.W.Y.......... 0030 07 08 78 5a 1b 4e 43 76 37 9d 89 a7 9e 0d f6 1b ..xZ.NCv7....... 0040 e9 79 52 82 76 ba f6 8d 99 2a 55 17 1b 1b b6 6a .yR.v....*U....j 0050 49 eb b3 62 fc 7c 01 6e 98 66 18 4f 03 43 00 b0 I..b.|.n.f.O.C.. 0060 3e 8e 08 85 04 40 64 2b 0d 3d 19 84 87 52 96 23 >....@d+.=...R.# 0070 28 c3 cf aa 25 ba 21 44 98 d6 3d a7 f8 6f 70 e3 (...%.!D..=..op. 0080 66 bb fc ed 3e 25 19 d7 7f 2e 55 c8 49 c4 92 02 f...>%....U.I... 0090 ac c8 fa f0 bc 8d 54 c7 55 8d ......T.U. Frame 14 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 9, 2006 11:25:06.912548000 Time delta from previous packet: 1.008281000 seconds Time since reference or first frame: 2.046622000 seconds Frame Number: 14 Packet Length: 154 bytes Capture Length: 154 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Destination: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xd2e1f8ec [correct] Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.148 (165.227.249.148) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0010 (16) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b5b [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.148 (165.227.249.148) Encapsulating Security Payload SPI: 0x2d7cff54 Sequence: 4 Data (108 bytes) 0000 00 0b 0b 00 00 01 00 0c 29 f4 af 90 08 00 45 00 ........).....E. 0010 00 88 00 10 00 00 f0 32 8b 5b a5 e3 f9 7c a5 e3 .......2.[...|.. 0020 f9 94 2d 7c ff 54 00 00 00 04 bc 81 31 7e 96 02 ..-|.T......1~.. 0030 d0 2e f5 ae 3f 43 5c 00 59 80 ec 11 65 61 e1 f0 ....?C\.Y...ea.. 0040 42 4d 2a 05 4e 14 c9 2c 61 02 ea e4 47 c1 0d 45 BM*.N..,a...G..E 0050 c2 bc 8b 97 45 b0 e0 2b 13 b6 53 0a 5f 61 06 ab ....E..+..S._a.. 0060 28 b6 f4 40 1f 50 ad 4c f6 f7 a1 62 49 a6 40 56 (..@.P.L...bI.@V 0070 9f 08 3e e1 66 1d 8f ba 6d f9 19 04 23 cf 4e de ..>.f...m...#.N. 0080 71 07 4b ca d6 fd 2e 9e e3 71 04 ee 29 93 9b f8 q.K......q..)... 0090 30 58 d1 b9 19 e2 d2 e1 f8 ec 0X........ Frame 15 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 9, 2006 11:25:06.917526000 Time delta from previous packet: 0.004978000 seconds Time since reference or first frame: 2.051600000 seconds Frame Number: 15 Packet Length: 154 bytes Capture Length: 154 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Type: IP (0x0800) Frame check sequence: 0x53bc27b8 [correct] Internet Protocol, Src: 165.227.249.148 (165.227.249.148), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0008 (8) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c63 [correct] Good: True Bad : False Source: 165.227.249.148 (165.227.249.148) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xab57ed59 Sequence: 3 Data (108 bytes) 0000 00 0c 29 f4 af 90 00 0b 0b 00 00 01 08 00 45 00 ..)...........E. 0010 00 88 00 08 00 00 ff 32 7c 63 a5 e3 f9 94 a5 e3 .......2|c...... 0020 f9 7c ab 57 ed 59 00 00 00 03 01 02 03 04 05 06 .|.W.Y.......... 0030 07 08 4b 3a 69 92 2c cc 6d 16 09 15 fd dd 3a 2e ..K:i.,.m.....:. 0040 25 08 ba 8e 94 05 49 40 33 c2 3d 47 2c c2 9b ec %.....I@3.=G,... 0050 e4 24 90 eb cd cc 73 ee 23 7c 9b 90 20 29 1b 7f .$....s.#|.. ).. 0060 70 5e bd 1d 34 62 bc df a8 0d f2 fb 9e 42 7e 3f p^..4b.......B~? 0070 9f 1d 55 30 30 14 a3 c8 59 58 e7 fb 49 2d d9 dd ..U00...YX..I-.. 0080 bd 89 b8 60 13 1f 35 60 e2 f6 b2 38 1e b9 9e 87 ...`..5`...8.... 0090 93 04 8f 10 e8 25 53 bc 27 b8 .....%S.'. Frame 16 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 9, 2006 11:25:07.885220000 Time delta from previous packet: 0.967694000 seconds Time since reference or first frame: 3.019294000 seconds Frame Number: 16 Packet Length: 154 bytes Capture Length: 154 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Destination: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xc8a871f5 [correct] Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.148 (165.227.249.148) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0011 (17) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b5a [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.148 (165.227.249.148) Encapsulating Security Payload SPI: 0x2d7cff54 Sequence: 5 Data (108 bytes) 0000 00 0b 0b 00 00 01 00 0c 29 f4 af 90 08 00 45 00 ........).....E. 0010 00 88 00 11 00 00 f0 32 8b 5a a5 e3 f9 7c a5 e3 .......2.Z...|.. 0020 f9 94 2d 7c ff 54 00 00 00 05 ec 6f 76 15 4f 4a ..-|.T.....ov.OJ 0030 b5 a0 7a 38 fb a1 98 d5 7b b0 c5 56 a4 f2 48 0d ..z8....{..V..H. 0040 06 2e 0d 7b 9a 60 08 04 91 b9 21 e1 a0 14 74 8d ...{.`....!...t. 0050 4b f0 e3 73 5d 67 96 b7 bc 0c b8 29 a9 37 f6 7f K..s]g.....).7.. 0060 02 72 17 2e 32 10 14 b6 19 df 8b 4f f2 62 9f 3e .r..2......O.b.> 0070 93 b7 1b b0 a6 24 21 2c b1 2f 55 3c 98 dc 5e 38 .....$!,./U<..^8 0080 60 3d f9 5d 75 90 98 ed 8d 0f 85 48 1b 14 af fa `=.]u......H.... 0090 c6 d1 df 30 e8 f9 c8 a8 71 f5 ...0....q. Frame 17 (154 bytes on wire, 154 bytes captured) Arrival Time: Mar 9, 2006 11:25:07.890367000 Time delta from previous packet: 0.005147000 seconds Time since reference or first frame: 3.024441000 seconds Frame Number: 17 Packet Length: 154 bytes Capture Length: 154 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0b:0b:00:00:01 (00:0b:0b:00:00:01) Type: IP (0x0800) Frame check sequence: 0x23f7efb7 [correct] Internet Protocol, Src: 165.227.249.148 (165.227.249.148), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x0009 (9) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c62 [correct] Good: True Bad : False Source: 165.227.249.148 (165.227.249.148) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xab57ed59 Sequence: 4 Data (108 bytes) 0000 00 0c 29 f4 af 90 00 0b 0b 00 00 01 08 00 45 00 ..)...........E. 0010 00 88 00 09 00 00 ff 32 7c 62 a5 e3 f9 94 a5 e3 .......2|b...... 0020 f9 7c ab 57 ed 59 00 00 00 04 01 02 03 04 05 06 .|.W.Y.......... 0030 07 08 31 f1 4a 49 ce d6 b6 29 44 22 c0 04 08 32 ..1.JI...)D"...2 0040 43 38 e8 a1 ca ef be bc 8c d1 80 c4 13 3d ee ec C8...........=.. 0050 cf 4f 9c 1b a7 6d c2 58 47 12 bb 94 66 f3 62 f6 .O...m.XG...f.b. 0060 82 c0 42 12 b0 25 12 8a b3 78 a0 7b 57 fe 3d 3a ..B..%...x.{W.=: 0070 0f a6 b8 fc a7 56 7b 91 7c 4a da 41 0e f9 3d 05 .....V{.|J.A..=. 0080 b5 fe 17 43 e3 ae ff ed 46 5d 2f 14 76 12 b5 94 ...C....F]/.v... 0090 a1 84 4d 4f e7 3d 23 f7 ef b7 ..MO.=#...