Frame 1 (118 bytes on wire, 118 bytes captured) Arrival Time: Feb 25, 2010 15:05:09.537068000 [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0xc60c (50700) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x9790 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 125 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 68 c6 0c 00 00 1e 32 97 90 a5 e3 f9 7d a5 e3 .h.....2.....}.. 0020 f9 82 73 31 d1 30 00 00 00 7d 3a 8b f5 4b 63 0c ..s1.0...}:..Kc. 0030 79 7b d8 00 3b b7 1b 1c 6c 55 fd 47 e6 4a 74 28 y{..;...lU.G.Jt( 0040 9e 85 48 44 19 1d 68 f3 e0 1c 95 bc 51 f5 99 61 ..HD..h.....Q..a 0050 13 53 d0 a3 3e af 86 00 bf 96 9d 4a 61 82 6e 3a .S..>......Ja.n: 0060 eb f9 d0 03 e0 30 c4 09 e4 64 eb 3e d5 ed 4b 9a .....0...d.>..K. 0070 a0 9e af 42 c2 4a ...B.J Frame 2 (118 bytes on wire, 118 bytes captured) Arrival Time: Feb 25, 2010 15:05:13.412072000 [Time delta from previous captured frame: 3.875004000 seconds] [Time delta from previous displayed frame: 3.875004000 seconds] [Time since reference or first frame: 3.875004000 seconds] Frame Number: 2 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x74af (29871) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xe8ed [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 126 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 68 74 af 00 00 1e 32 e8 ed a5 e3 f9 7d a5 e3 .ht....2.....}.. 0020 f9 82 73 31 d1 30 00 00 00 7e d0 03 e0 30 c4 09 ..s1.0...~...0.. 0030 e4 64 ca 0a 20 79 40 50 af 70 c1 df 5d 84 72 d8 .d.. y@P.p..].r. 0040 39 63 44 df 82 2d fe 32 cf 62 fe 79 17 fa fa 64 9cD..-.2.b.y...d 0050 56 7b a3 63 11 ce 21 c1 8e a9 cc a5 c6 ce e4 06 V{.c..!......... 0060 5f c4 58 ee c4 ac ae 1a 1e cf 8c de 7e 89 45 cd _.X.........~.E. 0070 ea 21 52 ed 66 ce .!R.f. Frame 3 (126 bytes on wire, 126 bytes captured) Arrival Time: Feb 25, 2010 15:05:13.634477000 [Time delta from previous captured frame: 0.222405000 seconds] [Time delta from previous displayed frame: 0.222405000 seconds] [Time since reference or first frame: 4.097409000 seconds] Frame Number: 3 Frame Length: 126 bytes Capture Length: 126 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x22bc (8892) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x3ad9 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 127 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 70 22 bc 00 00 1e 32 3a d9 a5 e3 f9 7d a5 e3 .p"....2:....}.. 0020 f9 82 73 31 d1 30 00 00 00 7f 58 ee c4 ac ae 1a ..s1.0....X..... 0030 1e cf df a7 62 e4 0c 4d 43 15 ab c4 4b 55 2b 91 ....b..MC...KU+. 0040 a1 ec 8a b0 96 76 cc c0 1f e7 d0 a0 b4 fa 26 5a .....v........&Z 0050 f7 e4 8a 11 24 18 38 c0 92 b8 15 df 3a 53 5d e8 ....$.8.....:S]. 0060 20 c3 c9 53 d0 2e 4b a6 fa cd 00 5b c3 22 cf 69 ..S..K....[.".i 0070 71 ed bc 5a 48 34 a5 6f 13 6e 87 71 f4 ef q..ZH4.o.n.q.. Frame 4 (118 bytes on wire, 118 bytes captured) Arrival Time: Feb 25, 2010 15:05:15.559590000 [Time delta from previous captured frame: 1.925113000 seconds] [Time delta from previous displayed frame: 1.925113000 seconds] [Time since reference or first frame: 6.022522000 seconds] Frame Number: 4 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x00a6 (166) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5cf7 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 128 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 68 00 a6 00 00 1e 32 5c f7 a5 e3 f9 7d a5 e3 .h.....2\....}.. 0020 f9 82 73 31 d1 30 00 00 00 80 00 5b c3 22 cf 69 ..s1.0.....[.".i 0030 71 ed d4 cf c7 5e c2 f2 64 5f 43 97 03 21 d9 24 q....^..d_C..!.$ 0040 d3 5b 81 ce 51 03 64 87 fb 76 c0 f8 6a 9e 05 a5 .[..Q.d..v..j... 0050 36 f2 6e b6 0b 65 e3 e1 b9 72 a5 63 e1 33 d5 6c 6.n..e...r.c.3.l 0060 22 fc ec cb ea 42 01 77 21 8f 48 fe 59 d7 5e 5d "....B.w!.H.Y.^] 0070 c0 46 da 4c 28 eb .F.L(. Frame 5 (118 bytes on wire, 118 bytes captured) Arrival Time: Feb 25, 2010 15:05:16.178006000 [Time delta from previous captured frame: 0.618416000 seconds] [Time delta from previous displayed frame: 0.618416000 seconds] [Time since reference or first frame: 6.640938000 seconds] Frame Number: 5 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x24af (9391) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x38ee [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 129 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 68 24 af 00 00 1e 32 38 ee a5 e3 f9 7d a5 e3 .h$....28....}.. 0020 f9 82 73 31 d1 30 00 00 00 81 ec cb ea 42 01 77 ..s1.0.......B.w 0030 21 8f 2f 3f 99 39 cb cf 8f 10 c1 16 71 09 f7 00 !./?.9......q... 0040 57 4f 93 6e eb b2 da a6 a0 0e bd 10 b8 65 6c f1 WO.n.........el. 0050 39 cc 72 53 ef c3 e9 5f a7 49 83 b9 0e 82 d6 89 9.rS..._.I...... 0060 d2 30 5f 59 24 93 52 35 e3 28 9d 01 c0 f6 0d fb .0_Y$.R5.(...... 0070 51 94 bb ca 55 b6 Q...U. Frame 6 (118 bytes on wire, 118 bytes captured) Arrival Time: Feb 25, 2010 15:05:16.317248000 [Time delta from previous captured frame: 0.139242000 seconds] [Time delta from previous displayed frame: 0.139242000 seconds] [Time since reference or first frame: 6.780180000 seconds] Frame Number: 6 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x527d (21117) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x0b20 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 130 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 68 52 7d 00 00 1e 32 0b 20 a5 e3 f9 7d a5 e3 .hR}...2. ...}.. 0020 f9 82 73 31 d1 30 00 00 00 82 5f 59 24 93 52 35 ..s1.0...._Y$.R5 0030 e3 28 5e 65 ac 35 4b 78 2a 73 40 2b 74 dd 4d 6c .(^e.5Kx*s@+t.Ml 0040 0f 4f 1d 6d fe 26 d0 29 a0 28 25 8b 9c 1f a6 6d .O.m.&.).(%....m 0050 17 26 4a 46 cc 4b b4 e0 a6 ac 91 4b 9b 40 dd 29 .&JF.K.....K.@.) 0060 b2 d8 79 25 7c 17 c0 bf ce 30 c1 4c cc 9c 0b f8 ..y%|....0.L.... 0070 6d 67 82 be 15 e2 mg.... Frame 7 (126 bytes on wire, 126 bytes captured) Arrival Time: Feb 25, 2010 15:05:18.895880000 [Time delta from previous captured frame: 2.578632000 seconds] [Time delta from previous displayed frame: 2.578632000 seconds] [Time since reference or first frame: 9.358812000 seconds] Frame Number: 7 Frame Length: 126 bytes Capture Length: 126 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0f80 (3968) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x4e15 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 131 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 70 0f 80 00 00 1e 32 4e 15 a5 e3 f9 7d a5 e3 .p.....2N....}.. 0020 f9 82 73 31 d1 30 00 00 00 83 79 25 7c 17 c0 bf ..s1.0....y%|... 0030 ce 30 71 de 08 7a 30 b3 54 09 45 e3 ef cf 71 c4 .0q..z0.T.E...q. 0040 ed a9 27 87 66 e6 70 7c c5 8f 1b 09 9e 6c 00 5b ..'.f.p|.....l.[ 0050 25 bc 04 2a ce 54 2c 16 7e 25 d4 d2 d5 e8 1c 74 %..*.T,.~%.....t 0060 eb 8b ae f4 83 60 45 4c 9f af 7f d4 7a 4c cf e9 .....`EL....zL.. 0070 c8 87 bf b9 c9 c5 5d b5 91 29 3e 37 12 c2 ......]..)>7.. Frame 8 (118 bytes on wire, 118 bytes captured) Arrival Time: Feb 25, 2010 15:05:19.161004000 [Time delta from previous captured frame: 0.265124000 seconds] [Time delta from previous displayed frame: 0.265124000 seconds] [Time since reference or first frame: 9.623936000 seconds] Frame Number: 8 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x82cd (33485) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xdacf [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 132 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 68 82 cd 00 00 1e 32 da cf a5 e3 f9 7d a5 e3 .h.....2.....}.. 0020 f9 82 73 31 d1 30 00 00 00 84 7f d4 7a 4c cf e9 ..s1.0......zL.. 0030 c8 87 53 f8 ad 49 90 14 19 f5 89 9c 9e ef 3b 19 ..S..I........;. 0040 fe 1f 3c f8 12 7b a3 16 61 a8 f7 d4 3f 3c fc 4b ..<..{..a...?<.K 0050 e7 75 e7 16 31 4a 45 24 46 08 7b 6d 51 95 44 29 .u..1JE$F.{mQ.D) 0060 1f 4c 47 77 59 14 4f 07 3a a9 c2 ef a6 14 63 30 .LGwY.O.:.....c0 0070 84 fb 71 43 19 ed ..qC.. Frame 9 (118 bytes on wire, 118 bytes captured) Arrival Time: Feb 25, 2010 15:05:22.332634000 [Time delta from previous captured frame: 3.171630000 seconds] [Time delta from previous displayed frame: 3.171630000 seconds] [Time since reference or first frame: 12.795566000 seconds] Frame Number: 9 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0acf (2767) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x52ce [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 133 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 68 0a cf 00 00 1e 32 52 ce a5 e3 f9 7d a5 e3 .h.....2R....}.. 0020 f9 82 73 31 d1 30 00 00 00 85 47 77 59 14 4f 07 ..s1.0....GwY.O. 0030 3a a9 7f 81 0d 29 a3 15 6e b4 5e e3 a8 e7 67 1d :....)..n.^...g. 0040 a4 db 23 9a ec 10 a3 2f d6 8f b7 bd 60 d5 4a a0 ..#..../....`.J. 0050 83 a8 e2 48 64 2e b7 1f 6f ce 63 41 85 93 fe 51 ...Hd...o.cA...Q 0060 14 df e2 bd 33 5a 21 41 ae 02 ea c6 52 4b d3 27 ....3Z!A....RK.' 0070 25 32 65 f4 b8 a6 %2e... Frame 10 (118 bytes on wire, 118 bytes captured) Arrival Time: Feb 25, 2010 15:05:22.600026000 [Time delta from previous captured frame: 0.267392000 seconds] [Time delta from previous displayed frame: 0.267392000 seconds] [Time since reference or first frame: 13.062958000 seconds] Frame Number: 10 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0xc5bb (50619) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x97e1 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 134 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 68 c5 bb 00 00 1e 32 97 e1 a5 e3 f9 7d a5 e3 .h.....2.....}.. 0020 f9 82 73 31 d1 30 00 00 00 86 e2 bd 33 5a 21 41 ..s1.0......3Z!A 0030 ae 02 4c 37 2a d7 e6 ef 87 56 87 ac 63 3f c4 6b ..L7*....V..c?.k 0040 48 69 a3 7e bc c1 45 09 4d 74 c2 f4 82 1a fd 91 Hi.~..E.Mt...... 0050 25 dd 2e 67 05 1e b2 12 98 04 a5 cf eb d1 c6 c0 %..g............ 0060 7b 81 44 16 d3 04 55 e9 53 bc 5d d4 16 48 99 cd {.D...U.S.]..H.. 0070 30 73 ed 33 c8 77 0s.3.w Frame 11 (126 bytes on wire, 126 bytes captured) Arrival Time: Feb 25, 2010 15:05:24.395989000 [Time delta from previous captured frame: 1.795963000 seconds] [Time delta from previous displayed frame: 1.795963000 seconds] [Time since reference or first frame: 14.858921000 seconds] Frame Number: 11 Frame Length: 126 bytes Capture Length: 126 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xe019 (57369) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x7d7b [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 135 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 70 e0 19 00 00 1e 32 7d 7b a5 e3 f9 7d a5 e3 .p.....2}{...}.. 0020 f9 82 73 31 d1 30 00 00 00 87 44 16 d3 04 55 e9 ..s1.0....D...U. 0030 53 bc 2b 94 ea 6a 23 6f 24 b3 6f b8 b7 99 bb f7 S.+..j#o$.o..... 0040 c1 d1 c3 4c 3e 23 e1 92 ba c0 20 79 3c db 70 65 ...L>#.... y<.pe 0050 ff f1 53 21 76 e2 10 55 22 b7 8a 8d 2f cd a5 20 ..S!v..U".../.. 0060 02 ca 62 1f f7 18 83 ec dc 8c 25 2e 26 33 7d df ..b.......%.&3}. 0070 c8 8c 1c 36 df 31 19 06 f7 4f b8 3a 44 32 ...6.1...O.:D2 Frame 12 (118 bytes on wire, 118 bytes captured) Arrival Time: Feb 25, 2010 15:05:25.177314000 [Time delta from previous captured frame: 0.781325000 seconds] [Time delta from previous displayed frame: 0.781325000 seconds] [Time since reference or first frame: 15.640246000 seconds] Frame Number: 12 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0xb128 (45352) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xac74 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 136 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 68 b1 28 00 00 1e 32 ac 74 a5 e3 f9 7d a5 e3 .h.(...2.t...}.. 0020 f9 82 73 31 d1 30 00 00 00 88 25 2e 26 33 7d df ..s1.0....%.&3}. 0030 c8 8c 6e 1c ac f8 de f4 b3 6b d7 6c bf 09 c1 3f ..n......k.l...? 0040 38 a4 f6 05 30 d8 12 a1 3b e4 86 e4 e1 32 c5 1a 8...0...;....2.. 0050 9a b1 f2 ee 7a d6 7c d0 78 e1 79 b2 fd 48 2a 32 ....z.|.x.y..H*2 0060 49 22 e0 8d db 8c 9a f3 54 3e 77 c3 f7 99 35 47 I"......T>w...5G 0070 e9 ea c5 a2 3f 33 ....?3 Frame 13 (118 bytes on wire, 118 bytes captured) Arrival Time: Feb 25, 2010 15:05:25.505182000 [Time delta from previous captured frame: 0.327868000 seconds] [Time delta from previous displayed frame: 0.327868000 seconds] [Time since reference or first frame: 15.968114000 seconds] Frame Number: 13 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x7633 (30259) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xe769 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 137 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 68 76 33 00 00 1e 32 e7 69 a5 e3 f9 7d a5 e3 .hv3...2.i...}.. 0020 f9 82 73 31 d1 30 00 00 00 89 e0 8d db 8c 9a f3 ..s1.0.......... 0030 54 3e 07 80 aa 0e e9 9d 95 da a6 d0 e7 d2 49 83 T>............I. 0040 4c 93 81 eb ba 4a 88 5c 73 01 3e 8d dd b9 a4 fd L....J.\s.>..... 0050 16 f5 56 e5 48 e3 f2 2b 7c e4 90 41 9c e8 45 a6 ..V.H..+|..A..E. 0060 9e bb ad aa fc a6 f7 33 3d 16 1b 63 2f 0c 71 c8 .......3=..c/.q. 0070 62 26 dd f9 24 39 b&..$9 Frame 14 (126 bytes on wire, 126 bytes captured) Arrival Time: Feb 25, 2010 15:05:29.895886000 [Time delta from previous captured frame: 4.390704000 seconds] [Time delta from previous displayed frame: 4.390704000 seconds] [Time since reference or first frame: 20.358818000 seconds] Frame Number: 14 Frame Length: 126 bytes Capture Length: 126 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x01a8 (424) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5bed [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 138 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 70 01 a8 00 00 1e 32 5b ed a5 e3 f9 7d a5 e3 .p.....2[....}.. 0020 f9 82 73 31 d1 30 00 00 00 8a ad aa fc a6 f7 33 ..s1.0.........3 0030 3d 16 e7 3d fc b7 5f 8f 7c 88 b1 4d 01 5e c2 99 =..=.._.|..M.^.. 0040 88 87 5e 08 88 a7 94 ee 9d 1d 8f dd 0f 66 71 01 ..^..........fq. 0050 07 7c 32 c6 74 3b 17 79 ea 7d 6f c1 7c 59 6b 2d .|2.t;.y.}o.|Yk- 0060 f9 77 43 af ac 60 cb ce 9a ff 9c 92 86 c8 e0 7f .wC..`.......... 0070 ca 53 84 68 4a d8 69 20 15 8d b4 01 7c df .S.hJ.i ....|. Frame 15 (118 bytes on wire, 118 bytes captured) Arrival Time: Feb 25, 2010 15:05:31.520984000 [Time delta from previous captured frame: 1.625098000 seconds] [Time delta from previous displayed frame: 1.625098000 seconds] [Time since reference or first frame: 21.983916000 seconds] Frame Number: 15 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x5173 (20851) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x0c2a [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 139 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 68 51 73 00 00 1e 32 0c 2a a5 e3 f9 7d a5 e3 .hQs...2.*...}.. 0020 f9 82 73 31 d1 30 00 00 00 8b 9c 92 86 c8 e0 7f ..s1.0.......... 0030 ca 53 1f 11 be 7a 0f 5a 08 86 d2 be 26 a4 7e 5e .S...z.Z....&.~^ 0040 89 51 88 cf 64 df cc d3 fd 16 e8 fa a7 2a 06 56 .Q..d........*.V 0050 7f 88 c0 39 a0 c5 20 e8 d2 e9 36 f7 44 3e 7e e3 ...9.. ...6.D>~. 0060 02 b4 21 50 2a 42 2e 1a 24 63 99 f9 19 fd ad 78 ..!P*B..$c.....x 0070 f0 aa ee 1c c9 0b ...... Frame 16 (126 bytes on wire, 126 bytes captured) Arrival Time: Feb 25, 2010 15:05:37.711175000 [Time delta from previous captured frame: 6.190191000 seconds] [Time delta from previous displayed frame: 6.190191000 seconds] [Time since reference or first frame: 28.174107000 seconds] Frame Number: 16 Frame Length: 126 bytes Capture Length: 126 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xbc66 (48230) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xa12e [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 140 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 70 bc 66 00 00 1e 32 a1 2e a5 e3 f9 7d a5 e3 .p.f...2.....}.. 0020 f9 82 73 31 d1 30 00 00 00 8c 21 50 2a 42 2e 1a ..s1.0....!P*B.. 0030 24 63 69 3e b9 34 20 7c a7 14 19 2d 74 0a d7 50 $ci>.4 |...-t..P 0040 cb 4c cc ec 92 c1 1f fc 87 1f cb 7d 67 c9 02 6f .L.........}g..o 0050 d6 8e 41 95 3c ec 37 03 f2 bf d8 84 20 a6 cc d4 ..A.<.7..... ... 0060 05 c5 e6 0e 5c 41 18 21 af 58 11 19 e9 94 fd 41 ....\A.!.X.....A 0070 f1 1d 44 59 9b 3d d0 32 6b b3 29 7f 8a 12 ..DY.=.2k.)... Frame 17 (118 bytes on wire, 118 bytes captured) Arrival Time: Feb 25, 2010 15:05:38.412161000 [Time delta from previous captured frame: 0.700986000 seconds] [Time delta from previous displayed frame: 0.700986000 seconds] [Time since reference or first frame: 28.875093000 seconds] Frame Number: 17 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x4e5e (20062) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x0f3f [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 141 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 68 4e 5e 00 00 1e 32 0f 3f a5 e3 f9 7d a5 e3 .hN^...2.?...}.. 0020 f9 82 73 31 d1 30 00 00 00 8d 11 19 e9 94 fd 41 ..s1.0.........A 0030 f1 1d ad 8f db 52 3c 88 55 3f 52 24 da 30 11 2a .....R<.U?R$.0.* 0040 65 94 53 e3 86 ed e6 8c cc 03 21 f9 e9 a7 79 48 e.S.......!...yH 0050 09 2c 73 98 98 47 d6 42 9e bb 1d 3a e1 f7 ac 18 .,s..G.B...:.... 0060 a6 30 7d 5f 43 8b 4f 4e ea b5 6f b3 ae aa 21 7d .0}_C.ON..o...!} 0070 39 40 3c 2d 89 76 9@<-.v Frame 18 (118 bytes on wire, 118 bytes captured) Arrival Time: Feb 25, 2010 15:05:41.177884000 [Time delta from previous captured frame: 2.765723000 seconds] [Time delta from previous displayed frame: 2.765723000 seconds] [Time since reference or first frame: 31.640816000 seconds] Frame Number: 18 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x2c0c (11276) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x3191 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 142 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 68 2c 0c 00 00 1e 32 31 91 a5 e3 f9 7d a5 e3 .h,....21....}.. 0020 f9 82 73 31 d1 30 00 00 00 8e 7d 5f 43 8b 4f 4e ..s1.0....}_C.ON 0030 ea b5 25 7e 35 01 fd 06 c0 0c 93 4e 7c c7 b3 cf ..%~5......N|... 0040 8b 07 27 8a c2 7c 1b b6 3d 17 c6 5c 12 4f 81 9f ..'..|..=..\.O.. 0050 a8 44 74 40 e9 0e dc 02 5d 65 e3 5f 2d a5 6c 6e .Dt@....]e._-.ln 0060 da b6 90 a0 de 07 68 8f 1b b4 a6 fc 15 b4 03 20 ......h........ 0070 de 78 8c c7 16 d1 .x.... Frame 19 (118 bytes on wire, 118 bytes captured) Arrival Time: Feb 25, 2010 15:05:41.473995000 [Time delta from previous captured frame: 0.296111000 seconds] [Time delta from previous displayed frame: 0.296111000 seconds] [Time since reference or first frame: 31.936927000 seconds] Frame Number: 19 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0xdf3f (57151) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x7e5d [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 143 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 68 df 3f 00 00 1e 32 7e 5d a5 e3 f9 7d a5 e3 .h.?...2~]...}.. 0020 f9 82 73 31 d1 30 00 00 00 8f 90 a0 de 07 68 8f ..s1.0........h. 0030 1b b4 7c 48 b7 bb 12 bc f9 9e cd 2f b1 e5 8f 5a ..|H......./...Z 0040 31 34 49 71 2b fc 7f 14 13 63 61 65 55 9e 0b 91 14Iq+....caeU... 0050 80 0b d0 66 a6 be af ec a5 ee 42 e6 68 69 11 98 ...f......B.hi.. 0060 9b 0b b0 37 02 f2 f0 d0 84 ae 3f 25 a9 dd ab 8f ...7......?%.... 0070 59 f3 2d c8 b5 42 Y.-..B Frame 20 (126 bytes on wire, 126 bytes captured) Arrival Time: Feb 25, 2010 15:05:42.895392000 [Time delta from previous captured frame: 1.421397000 seconds] [Time delta from previous displayed frame: 1.421397000 seconds] [Time since reference or first frame: 33.358324000 seconds] Frame Number: 20 Frame Length: 126 bytes Capture Length: 126 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x395d (14685) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x2438 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 144 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 70 39 5d 00 00 1e 32 24 38 a5 e3 f9 7d a5 e3 .p9]...2$8...}.. 0020 f9 82 73 31 d1 30 00 00 00 90 b0 37 02 f2 f0 d0 ..s1.0.....7.... 0030 84 ae d2 12 ca ae c1 be f8 28 30 41 3a 4c 1d d7 .........(0A:L.. 0040 0f 8e 67 2f 39 75 69 1f d8 ce 03 7f 2e 8a 26 8b ..g/9ui.......&. 0050 c2 5a 8a e2 44 37 b4 d7 34 a7 1e 58 56 d8 fc 13 .Z..D7..4..XV... 0060 4b 8f c2 16 0e 5a 46 8b a8 75 4e 1d ae fb ae 15 K....ZF..uN..... 0070 f3 ce ad 87 ab ed 6e 5f af 63 92 23 9d a7 ......n_.c.#.. Frame 21 (118 bytes on wire, 118 bytes captured) Arrival Time: Feb 25, 2010 15:05:44.208215000 [Time delta from previous captured frame: 1.312823000 seconds] [Time delta from previous displayed frame: 1.312823000 seconds] [Time since reference or first frame: 34.671147000 seconds] Frame Number: 21 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x040f (1039) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x598e [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 145 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 68 04 0f 00 00 1e 32 59 8e a5 e3 f9 7d a5 e3 .h.....2Y....}.. 0020 f9 82 73 31 d1 30 00 00 00 91 4e 1d ae fb ae 15 ..s1.0....N..... 0030 f3 ce 8c ab 65 5f 52 bc a6 5f 95 aa 8f c0 6e d1 ....e_R.._....n. 0040 ea e8 aa 32 6d f8 9a c5 79 82 f4 b1 5e 40 4e 26 ...2m...y...^@N& 0050 e0 42 e8 5f 25 bb 85 08 3b 19 95 e5 3d 31 ba db .B._%...;...=1.. 0060 2f 7a 4f ef ff e1 d6 a1 d9 f9 f8 4a bb 84 4c e5 /zO........J..L. 0070 92 89 d5 93 a4 cb ...... Frame 22 (118 bytes on wire, 118 bytes captured) Arrival Time: Feb 25, 2010 15:05:47.489733000 [Time delta from previous captured frame: 3.281518000 seconds] [Time delta from previous displayed frame: 3.281518000 seconds] [Time since reference or first frame: 37.952665000 seconds] Frame Number: 22 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x6473 (25715) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xf929 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 146 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 68 64 73 00 00 1e 32 f9 29 a5 e3 f9 7d a5 e3 .hds...2.)...}.. 0020 f9 82 73 31 d1 30 00 00 00 92 4f ef ff e1 d6 a1 ..s1.0....O..... 0030 d9 f9 b3 5f 5d 76 24 8f e1 bf 1b e9 b6 c9 a7 ee ..._]v$......... 0040 dc 04 89 c4 67 90 d6 85 fc 5a 6d cd 08 82 87 8e ....g....Zm..... 0050 00 b0 c0 04 be 30 45 51 9d 0e 69 32 95 ac 1b fb .....0EQ..i2.... 0060 f6 ad 15 c3 f8 19 28 b5 c0 eb e6 ce 08 77 e6 c7 ......(......w.. 0070 d6 19 ca 57 9f 06 ...W.. Frame 23 (118 bytes on wire, 118 bytes captured) Arrival Time: Feb 25, 2010 15:05:47.600090000 [Time delta from previous captured frame: 0.110357000 seconds] [Time delta from previous displayed frame: 0.110357000 seconds] [Time since reference or first frame: 38.063022000 seconds] Frame Number: 23 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0xc925 (51493) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x9477 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 147 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 68 c9 25 00 00 1e 32 94 77 a5 e3 f9 7d a5 e3 .h.%...2.w...}.. 0020 f9 82 73 31 d1 30 00 00 00 93 15 c3 f8 19 28 b5 ..s1.0........(. 0030 c0 eb 9d 34 16 02 90 c1 69 d5 d2 7c ff 8f c9 49 ...4....i..|...I 0040 c2 55 72 b1 0d c7 7c e9 11 d1 5e b6 95 bd 0d 3f .Ur...|...^....? 0050 65 f4 39 95 87 bc fe 41 6c 7f 5b cb e6 9a de 07 e.9....Al.[..... 0060 50 c6 b3 60 2c 92 d5 6a 99 da 02 d0 36 01 17 c9 P..`,..j....6... 0070 31 e5 e2 fd c7 c8 1..... Frame 24 (126 bytes on wire, 126 bytes captured) Arrival Time: Feb 25, 2010 15:05:48.395224000 [Time delta from previous captured frame: 0.795134000 seconds] [Time delta from previous displayed frame: 0.795134000 seconds] [Time since reference or first frame: 38.858156000 seconds] Frame Number: 24 Frame Length: 126 bytes Capture Length: 126 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x3031 (12337) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x2d64 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 148 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 70 30 31 00 00 1e 32 2d 64 a5 e3 f9 7d a5 e3 .p01...2-d...}.. 0020 f9 82 73 31 d1 30 00 00 00 94 b3 60 2c 92 d5 6a ..s1.0.....`,..j 0030 99 da 90 ff 85 e2 b6 5e fa fe c4 0b 3e 86 44 db .......^....>.D. 0040 4f 5c ee ba 56 19 04 09 d1 24 45 c8 de 35 29 f5 O\..V....$E..5). 0050 02 05 69 5f 90 0f 4e 2d a2 25 72 fa 2a 43 6c fc ..i_..N-.%r.*Cl. 0060 fe c9 bd ab 99 41 c3 4f 2a 2a 7c 2c ce b6 fe 83 .....A.O**|,.... 0070 1d 43 30 c2 a5 a8 5d dd 02 c7 ab cb 95 d5 .C0...]....... Frame 25 (118 bytes on wire, 118 bytes captured) Arrival Time: Feb 25, 2010 15:05:50.223595000 [Time delta from previous captured frame: 1.828371000 seconds] [Time delta from previous displayed frame: 1.828371000 seconds] [Time since reference or first frame: 40.686527000 seconds] Frame Number: 25 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x6f97 (28567) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xee05 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 149 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 68 6f 97 00 00 1e 32 ee 05 a5 e3 f9 7d a5 e3 .ho....2.....}.. 0020 f9 82 73 31 d1 30 00 00 00 95 7c 2c ce b6 fe 83 ..s1.0....|,.... 0030 1d 43 e7 18 b8 23 d3 14 93 5d 62 1a 0b f5 d0 9a .C...#...]b..... 0040 45 48 3a 1b 6a d3 13 d5 4d 81 b8 fe 19 ed b3 60 EH:.j...M......` 0050 ef 0b b0 17 7a c5 5b 55 7e 7a a3 a9 3d 51 2d 4d ....z.[U~z..=Q-M 0060 72 33 53 3d 7b 13 c0 69 7b 8b e9 a4 c8 19 23 96 r3S={..i{.....#. 0070 59 d8 3b ec 48 5d Y.;.H] Frame 26 (118 bytes on wire, 118 bytes captured) Arrival Time: Feb 25, 2010 15:05:50.661789000 [Time delta from previous captured frame: 0.438194000 seconds] [Time delta from previous displayed frame: 0.438194000 seconds] [Time since reference or first frame: 41.124721000 seconds] Frame Number: 26 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x1235 (4661) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x4b68 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 150 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 68 12 35 00 00 1e 32 4b 68 a5 e3 f9 7d a5 e3 .h.5...2Kh...}.. 0020 f9 82 73 31 d1 30 00 00 00 96 53 3d 7b 13 c0 69 ..s1.0....S={..i 0030 7b 8b f6 43 b9 05 0a ee 8e 54 59 52 37 f5 f6 3a {..C.....TYR7..: 0040 39 5a 4a aa ad 7f 8b af a7 36 3a cd a7 6b 86 fe 9ZJ......6:..k.. 0050 42 3d 4c f3 32 2b 2b 96 f7 1f dc 60 1c 0e eb 87 B=L.2++....`.... 0060 85 7d 00 99 a1 b5 10 4d 3e 2d 9e b2 b4 91 d3 b1 .}.....M>-...... 0070 cf 98 31 97 c9 18 ..1... Frame 27 (126 bytes on wire, 126 bytes captured) Arrival Time: Feb 25, 2010 15:05:53.895174000 [Time delta from previous captured frame: 3.233385000 seconds] [Time delta from previous displayed frame: 3.233385000 seconds] [Time since reference or first frame: 44.358106000 seconds] Frame Number: 27 Frame Length: 126 bytes Capture Length: 126 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xd2d9 (53977) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x8abb [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0x7331d130 ESP Sequence: 151 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 70 d2 d9 00 00 1e 32 8a bb a5 e3 f9 7d a5 e3 .p.....2.....}.. 0020 f9 82 73 31 d1 30 00 00 00 97 00 99 a1 b5 10 4d ..s1.0.........M 0030 3e 2d c4 5b 4f 6d 95 be fe 79 e1 b6 91 b1 29 8f >-.[Om...y....). 0040 dd 3e bd 65 f7 3d b6 de a3 c1 c6 8d 94 ff 52 ec .>.e.=........R. 0050 e3 77 6b 6e 82 0c e0 a7 8e 84 65 88 8a 5b 4c 91 .wkn......e..[L. 0060 b9 47 b2 50 28 5b 3d 95 08 2e 22 76 5b 1a 72 41 .G.P([=..."v[.rA 0070 3c 97 d3 d0 95 c0 43 0c 51 54 e4 a0 55 7c <.....C.QT..U| Frame 28 (270 bytes on wire, 270 bytes captured) Arrival Time: Feb 25, 2010 15:05:54.278110000 [Time delta from previous captured frame: 0.382936000 seconds] [Time delta from previous displayed frame: 0.382936000 seconds] [Time since reference or first frame: 44.741042000 seconds] Frame Number: 28 Frame Length: 270 bytes Capture Length: 270 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.130 (165.227.249.130), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb25 [correct] [Good: True] [Bad : False] Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x1a42 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 102E095949085170 Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Security Association payload Next payload: Vendor ID (13) Payload length: 60 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Payload length: 48 Proposal number: 0 Protocol ID: ISAKMP (1) SPI Size: 8 Proposal transforms: 1 SPI: 0x102E095949085170 Transform payload # 0 Next payload: NONE (0) Payload length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID: 2376801BEBEC247E330ADFF247AF1C4D Next payload: Vendor ID (13) Payload length: 20 Vendor ID: 2376801BEBEC247E330ADFF247AF1C4D Vendor ID: 4042AC0201642AA275939AF757365C68 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: 4042AC0201642AA275939AF757365C68 Vendor ID: 645AF885467F08A68619C60E77BDB605 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: 645AF885467F08A68619C60E77BDB605 Vendor ID: BAEB239037E17787D730EED9D95D48AA Next payload: Vendor ID (13) Payload length: 20 Vendor ID: BAEB239037E17787D730EED9D95D48AA Vendor ID: C573B056D7FACA36C2FBA28374127CBF Next payload: Vendor ID (13) Payload length: 20 Vendor ID: C573B056D7FACA36C2FBA28374127CBF Vendor ID: 431CFC9292A0595D7592FEBEA586AD19 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: 431CFC9292A0595D7592FEBEA586AD19 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Next payload: NONE (0) Payload length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 09 5b 2b a8 d7 00 0c 29 64 f8 4a 08 00 45 00 ..[+....)d.J..E. 0010 01 00 00 00 40 00 40 11 fb 25 a5 e3 f9 82 a5 e3 ....@.@..%...... 0020 f9 7d 01 f4 01 f4 00 ec 1a 42 10 2e 09 59 49 08 .}.......B...YI. 0030 51 70 00 00 00 00 00 00 00 00 01 10 02 00 00 00 Qp.............. 0040 00 00 00 00 00 e4 0d 00 00 3c 00 00 00 01 00 00 .........<...... 0050 00 01 00 00 00 30 00 01 08 01 10 2e 09 59 49 08 .....0.......YI. 0060 51 70 00 00 00 20 00 01 00 00 80 01 00 05 80 02 Qp... .......... 0070 00 02 80 03 00 01 80 04 00 02 80 0b 00 01 80 0c ................ 0080 70 80 0d 00 00 14 23 76 80 1b eb ec 24 7e 33 0a p.....#v....$~3. 0090 df f2 47 af 1c 4d 0d 00 00 14 40 42 ac 02 01 64 ..G..M....@B...d 00a0 2a a2 75 93 9a f7 57 36 5c 68 0d 00 00 14 64 5a *.u...W6\h....dZ 00b0 f8 85 46 7f 08 a6 86 19 c6 0e 77 bd b6 05 0d 00 ..F.......w..... 00c0 00 14 ba eb 23 90 37 e1 77 87 d7 30 ee d9 d9 5d ....#.7.w..0...] 00d0 48 aa 0d 00 00 14 c5 73 b0 56 d7 fa ca 36 c2 fb H......s.V...6.. 00e0 a2 83 74 12 7c bf 0d 00 00 14 43 1c fc 92 92 a0 ..t.|.....C..... 00f0 59 5d 75 92 fe be a5 86 ad 19 00 00 00 14 af ca Y]u............. 0100 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 29 (270 bytes on wire, 270 bytes captured) Arrival Time: Feb 25, 2010 15:05:54.278123000 [Time delta from previous captured frame: 0.000013000 seconds] [Time delta from previous displayed frame: 0.000013000 seconds] [Time since reference or first frame: 44.741055000 seconds] Frame Number: 29 Frame Length: 270 bytes Capture Length: 270 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.130 (165.227.249.130), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb25 [correct] [Good: True] [Bad : False] Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x1a42 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 102E095949085170 Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Security Association payload Next payload: Vendor ID (13) Payload length: 60 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Payload length: 48 Proposal number: 0 Protocol ID: ISAKMP (1) SPI Size: 8 Proposal transforms: 1 SPI: 0x102E095949085170 Transform payload # 0 Next payload: NONE (0) Payload length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID: 2376801BEBEC247E330ADFF247AF1C4D Next payload: Vendor ID (13) Payload length: 20 Vendor ID: 2376801BEBEC247E330ADFF247AF1C4D Vendor ID: 4042AC0201642AA275939AF757365C68 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: 4042AC0201642AA275939AF757365C68 Vendor ID: 645AF885467F08A68619C60E77BDB605 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: 645AF885467F08A68619C60E77BDB605 Vendor ID: BAEB239037E17787D730EED9D95D48AA Next payload: Vendor ID (13) Payload length: 20 Vendor ID: BAEB239037E17787D730EED9D95D48AA Vendor ID: C573B056D7FACA36C2FBA28374127CBF Next payload: Vendor ID (13) Payload length: 20 Vendor ID: C573B056D7FACA36C2FBA28374127CBF Vendor ID: 431CFC9292A0595D7592FEBEA586AD19 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: 431CFC9292A0595D7592FEBEA586AD19 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Next payload: NONE (0) Payload length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 09 5b 2b a8 d7 00 0c 29 64 f8 4a 08 00 45 00 ..[+....)d.J..E. 0010 01 00 00 00 40 00 40 11 fb 25 a5 e3 f9 82 a5 e3 ....@.@..%...... 0020 f9 7d 01 f4 01 f4 00 ec 1a 42 10 2e 09 59 49 08 .}.......B...YI. 0030 51 70 00 00 00 00 00 00 00 00 01 10 02 00 00 00 Qp.............. 0040 00 00 00 00 00 e4 0d 00 00 3c 00 00 00 01 00 00 .........<...... 0050 00 01 00 00 00 30 00 01 08 01 10 2e 09 59 49 08 .....0.......YI. 0060 51 70 00 00 00 20 00 01 00 00 80 01 00 05 80 02 Qp... .......... 0070 00 02 80 03 00 01 80 04 00 02 80 0b 00 01 80 0c ................ 0080 70 80 0d 00 00 14 23 76 80 1b eb ec 24 7e 33 0a p.....#v....$~3. 0090 df f2 47 af 1c 4d 0d 00 00 14 40 42 ac 02 01 64 ..G..M....@B...d 00a0 2a a2 75 93 9a f7 57 36 5c 68 0d 00 00 14 64 5a *.u...W6\h....dZ 00b0 f8 85 46 7f 08 a6 86 19 c6 0e 77 bd b6 05 0d 00 ..F.......w..... 00c0 00 14 ba eb 23 90 37 e1 77 87 d7 30 ee d9 d9 5d ....#.7.w..0...] 00d0 48 aa 0d 00 00 14 c5 73 b0 56 d7 fa ca 36 c2 fb H......s.V...6.. 00e0 a2 83 74 12 7c bf 0d 00 00 14 43 1c fc 92 92 a0 ..t.|.....C..... 00f0 59 5d 75 92 fe be a5 86 ad 19 00 00 00 14 af ca Y]u............. 0100 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 30 (130 bytes on wire, 130 bytes captured) Arrival Time: Feb 25, 2010 15:05:54.283227000 [Time delta from previous captured frame: 0.005104000 seconds] [Time delta from previous displayed frame: 0.005104000 seconds] [Time since reference or first frame: 44.746159000 seconds] Frame Number: 30 Frame Length: 130 bytes Capture Length: 130 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 116 Identification: 0x0290 (656) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3922 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 96 Checksum: 0x6558 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 102E095949085170 Responder cookie: B134A567E87E3363 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 88 Security Association payload Next payload: NONE (0) Payload length: 60 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Payload length: 48 Proposal number: 0 Protocol ID: ISAKMP (1) SPI Size: 8 Proposal transforms: 1 SPI: 0x102E095949085170 Transform payload # 0 Next payload: NONE (0) Payload length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 74 02 90 00 00 40 11 39 22 a5 e3 f9 7d a5 e3 .t....@.9"...}.. 0020 f9 82 01 f4 01 f4 00 60 65 58 10 2e 09 59 49 08 .......`eX...YI. 0030 51 70 b1 34 a5 67 e8 7e 33 63 01 10 02 00 00 00 Qp.4.g.~3c...... 0040 00 00 00 00 00 58 00 00 00 3c 00 00 00 01 00 00 .....X...<...... 0050 00 01 00 00 00 30 00 01 08 01 10 2e 09 59 49 08 .....0.......YI. 0060 51 70 00 00 00 20 00 01 00 00 80 01 00 05 80 02 Qp... .......... 0070 00 02 80 03 00 01 80 04 00 02 80 0b 00 01 80 0c ................ 0080 70 80 p. Frame 31 (222 bytes on wire, 222 bytes captured) Arrival Time: Feb 25, 2010 15:05:54.287230000 [Time delta from previous captured frame: 0.004003000 seconds] [Time delta from previous displayed frame: 0.004003000 seconds] [Time since reference or first frame: 44.750162000 seconds] Frame Number: 31 Frame Length: 222 bytes Capture Length: 222 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.130 (165.227.249.130), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb55 [correct] [Good: True] [Bad : False] Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xe524 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 102E095949085170 Responder cookie: B134A567E87E3363 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: NONE (0) Payload length: 20 Nonce Data 0000 00 09 5b 2b a8 d7 00 0c 29 64 f8 4a 08 00 45 00 ..[+....)d.J..E. 0010 00 d0 00 00 40 00 40 11 fb 55 a5 e3 f9 82 a5 e3 ....@.@..U...... 0020 f9 7d 01 f4 01 f4 00 bc e5 24 10 2e 09 59 49 08 .}.......$...YI. 0030 51 70 b1 34 a5 67 e8 7e 33 63 04 10 02 00 00 00 Qp.4.g.~3c...... 0040 00 00 00 00 00 b4 0a 00 00 84 c4 ec 71 ca f0 4d ............q..M 0050 33 ad ea 02 ec b4 d6 3c f0 70 a2 fa 4e ff 27 b6 3......<.p..N.'. 0060 ba 1f 60 20 5d 5e 74 07 12 6a 81 3d dd 74 e5 ae ..` ]^t..j.=.t.. 0070 92 84 97 ba 9e 58 9d 27 6b 34 d8 c2 1e c1 50 16 .....X.'k4....P. 0080 96 76 73 6c 5c ab 99 56 0d 94 28 67 7d c2 2f 63 .vsl\..V..(g}./c 0090 93 be f5 89 31 0f a1 92 8a 1b 99 52 5b 2d bf 4c ....1......R[-.L 00a0 15 b8 ba 05 0f 08 8d f4 df e7 1e 45 19 67 36 5d ...........E.g6] 00b0 9c b9 74 1e c1 a0 28 0a 2b 0c e8 98 7c 32 9d 81 ..t...(.+...|2.. 00c0 ca f0 be d2 c4 29 83 da 1a 53 00 00 00 14 92 cf .....)...S...... 00d0 52 20 15 2d 84 38 bb d5 1b bd 0a cb 85 d1 R .-.8........ Frame 32 (222 bytes on wire, 222 bytes captured) Arrival Time: Feb 25, 2010 15:05:54.287242000 [Time delta from previous captured frame: 0.000012000 seconds] [Time delta from previous displayed frame: 0.000012000 seconds] [Time since reference or first frame: 44.750174000 seconds] Frame Number: 32 Frame Length: 222 bytes Capture Length: 222 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.130 (165.227.249.130), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb55 [correct] [Good: True] [Bad : False] Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xe524 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 102E095949085170 Responder cookie: B134A567E87E3363 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: NONE (0) Payload length: 20 Nonce Data 0000 00 09 5b 2b a8 d7 00 0c 29 64 f8 4a 08 00 45 00 ..[+....)d.J..E. 0010 00 d0 00 00 40 00 40 11 fb 55 a5 e3 f9 82 a5 e3 ....@.@..U...... 0020 f9 7d 01 f4 01 f4 00 bc e5 24 10 2e 09 59 49 08 .}.......$...YI. 0030 51 70 b1 34 a5 67 e8 7e 33 63 04 10 02 00 00 00 Qp.4.g.~3c...... 0040 00 00 00 00 00 b4 0a 00 00 84 c4 ec 71 ca f0 4d ............q..M 0050 33 ad ea 02 ec b4 d6 3c f0 70 a2 fa 4e ff 27 b6 3......<.p..N.'. 0060 ba 1f 60 20 5d 5e 74 07 12 6a 81 3d dd 74 e5 ae ..` ]^t..j.=.t.. 0070 92 84 97 ba 9e 58 9d 27 6b 34 d8 c2 1e c1 50 16 .....X.'k4....P. 0080 96 76 73 6c 5c ab 99 56 0d 94 28 67 7d c2 2f 63 .vsl\..V..(g}./c 0090 93 be f5 89 31 0f a1 92 8a 1b 99 52 5b 2d bf 4c ....1......R[-.L 00a0 15 b8 ba 05 0f 08 8d f4 df e7 1e 45 19 67 36 5d ...........E.g6] 00b0 9c b9 74 1e c1 a0 28 0a 2b 0c e8 98 7c 32 9d 81 ..t...(.+...|2.. 00c0 ca f0 be d2 c4 29 83 da 1a 53 00 00 00 14 92 cf .....)...S...... 00d0 52 20 15 2d 84 38 bb d5 1b bd 0a cb 85 d1 R .-.8........ Frame 33 (214 bytes on wire, 214 bytes captured) Arrival Time: Feb 25, 2010 15:05:54.691419000 [Time delta from previous captured frame: 0.404177000 seconds] [Time delta from previous displayed frame: 0.404177000 seconds] [Time since reference or first frame: 45.154351000 seconds] Frame Number: 33 Frame Length: 214 bytes Capture Length: 214 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 200 Identification: 0x0291 (657) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x38cd [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 180 Checksum: 0xf537 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 102E095949085170 Responder cookie: B134A567E87E3363 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 172 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: NONE (0) Payload length: 12 Nonce Data 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 c8 02 91 00 00 40 11 38 cd a5 e3 f9 7d a5 e3 ......@.8....}.. 0020 f9 82 01 f4 01 f4 00 b4 f5 37 10 2e 09 59 49 08 .........7...YI. 0030 51 70 b1 34 a5 67 e8 7e 33 63 04 10 02 00 00 00 Qp.4.g.~3c...... 0040 00 00 00 00 00 ac 0a 00 00 84 a8 59 a9 d9 0d 0b ...........Y.... 0050 3b 0f dc fa 71 42 4f 9d 45 a0 42 33 a6 1b 71 00 ;...qBO.E.B3..q. 0060 de 0e 75 ce 61 92 a2 c1 99 a3 cb de 35 e5 cd a5 ..u.a.......5... 0070 df ad da 6f 71 c1 69 26 d4 17 99 d7 ae 55 48 16 ...oq.i&.....UH. 0080 6a 08 7d 78 4e 70 3b 29 e1 3f b9 2a 82 2d 13 fe j.}xNp;).?.*.-.. 0090 61 d7 d7 15 45 a7 0d 66 3a 72 4a d9 91 50 e0 aa a...E..f:rJ..P.. 00a0 bf 23 af e6 f6 f1 dc d0 8b f8 4f 13 be 81 e4 ab .#........O..... 00b0 32 65 0b 15 3f 5a 2e ed b4 dc 0f 29 df be 82 0e 2e..?Z.....).... 00c0 c7 f3 7a 62 79 0e 20 b6 df d9 00 00 00 0c b6 b7 ..zby. ......... 00d0 58 08 8e 9a ec 3f X....? Frame 34 (134 bytes on wire, 134 bytes captured) Arrival Time: Feb 25, 2010 15:05:54.695273000 [Time delta from previous captured frame: 0.003854000 seconds] [Time delta from previous displayed frame: 0.003854000 seconds] [Time since reference or first frame: 45.158205000 seconds] Frame Number: 34 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.130 (165.227.249.130), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbad [correct] [Good: True] [Bad : False] Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x82b2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 102E095949085170 Responder cookie: B134A567E87E3363 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 09 5b 2b a8 d7 00 0c 29 64 f8 4a 08 00 45 00 ..[+....)d.J..E. 0010 00 78 00 00 40 00 40 11 fb ad a5 e3 f9 82 a5 e3 .x..@.@......... 0020 f9 7d 01 f4 01 f4 00 64 82 b2 10 2e 09 59 49 08 .}.....d.....YI. 0030 51 70 b1 34 a5 67 e8 7e 33 63 05 10 02 01 00 00 Qp.4.g.~3c...... 0040 00 00 00 00 00 5c 32 0c 3e 24 0e 99 40 55 09 6f .....\2.>$..@U.o 0050 30 2a a2 4b 81 33 09 e3 59 a4 9d eb 46 f7 b1 92 0*.K.3..Y...F... 0060 56 5e 67 39 76 b9 cb 27 ec b6 fb 74 15 d0 1b cc V^g9v..'...t.... 0070 6d be 5a 78 86 d2 7d ba ed 09 05 57 45 e1 ac 4b m.Zx..}....WE..K 0080 b9 83 57 26 1a 68 ..W&.h Frame 35 (134 bytes on wire, 134 bytes captured) Arrival Time: Feb 25, 2010 15:05:54.695287000 [Time delta from previous captured frame: 0.000014000 seconds] [Time delta from previous displayed frame: 0.000014000 seconds] [Time since reference or first frame: 45.158219000 seconds] Frame Number: 35 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.130 (165.227.249.130), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbad [correct] [Good: True] [Bad : False] Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x82b2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 102E095949085170 Responder cookie: B134A567E87E3363 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 09 5b 2b a8 d7 00 0c 29 64 f8 4a 08 00 45 00 ..[+....)d.J..E. 0010 00 78 00 00 40 00 40 11 fb ad a5 e3 f9 82 a5 e3 .x..@.@......... 0020 f9 7d 01 f4 01 f4 00 64 82 b2 10 2e 09 59 49 08 .}.....d.....YI. 0030 51 70 b1 34 a5 67 e8 7e 33 63 05 10 02 01 00 00 Qp.4.g.~3c...... 0040 00 00 00 00 00 5c 32 0c 3e 24 0e 99 40 55 09 6f .....\2.>$..@U.o 0050 30 2a a2 4b 81 33 09 e3 59 a4 9d eb 46 f7 b1 92 0*.K.3..Y...F... 0060 56 5e 67 39 76 b9 cb 27 ec b6 fb 74 15 d0 1b cc V^g9v..'...t.... 0070 6d be 5a 78 86 d2 7d ba ed 09 05 57 45 e1 ac 4b m.Zx..}....WE..K 0080 b9 83 57 26 1a 68 ..W&.h Frame 36 (110 bytes on wire, 110 bytes captured) Arrival Time: Feb 25, 2010 15:05:55.191972000 [Time delta from previous captured frame: 0.496685000 seconds] [Time delta from previous displayed frame: 0.496685000 seconds] [Time since reference or first frame: 45.654904000 seconds] Frame Number: 36 Frame Length: 110 bytes Capture Length: 110 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0292 (658) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3934 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x71db [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 102E095949085170 Responder cookie: B134A567E87E3363 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 60 02 92 00 00 40 11 39 34 a5 e3 f9 7d a5 e3 .`....@.94...}.. 0020 f9 82 01 f4 01 f4 00 4c 71 db 10 2e 09 59 49 08 .......Lq....YI. 0030 51 70 b1 34 a5 67 e8 7e 33 63 05 10 02 01 00 00 Qp.4.g.~3c...... 0040 00 00 00 00 00 44 ce 09 06 cd 97 91 04 0c 28 90 .....D........(. 0050 c4 27 81 d9 25 77 a5 34 30 5c 5b 83 ee df b2 fd .'..%w.40\[..... 0060 e8 e5 07 2b 30 ce 9f 30 20 db 1e 73 46 2b ...+0..0 ..sF+ Frame 37 (110 bytes on wire, 110 bytes captured) Arrival Time: Feb 25, 2010 15:05:55.195177000 [Time delta from previous captured frame: 0.003205000 seconds] [Time delta from previous displayed frame: 0.003205000 seconds] [Time since reference or first frame: 45.658109000 seconds] Frame Number: 37 Frame Length: 110 bytes Capture Length: 110 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0293 (659) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3933 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x37fb [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 102E095949085170 Responder cookie: B134A567E87E3363 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xc99d70ab Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 60 02 93 00 00 40 11 39 33 a5 e3 f9 7d a5 e3 .`....@.93...}.. 0020 f9 82 01 f4 01 f4 00 4c 37 fb 10 2e 09 59 49 08 .......L7....YI. 0030 51 70 b1 34 a5 67 e8 7e 33 63 08 10 05 01 c9 9d Qp.4.g.~3c...... 0040 70 ab 00 00 00 44 75 e4 89 b1 87 99 0a 36 27 c3 p....Du......6'. 0050 53 f8 58 05 79 32 1f 6b f9 d1 62 73 7b 38 b8 47 S.X.y2.k..bs{8.G 0060 5b 73 6a 12 ce d3 f8 72 25 6b 27 e9 ae e4 [sj....r%k'... Frame 38 (334 bytes on wire, 334 bytes captured) Arrival Time: Feb 25, 2010 15:05:55.200127000 [Time delta from previous captured frame: 0.004950000 seconds] [Time delta from previous displayed frame: 0.004950000 seconds] [Time since reference or first frame: 45.663059000 seconds] Frame Number: 38 Frame Length: 334 bytes Capture Length: 334 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.130 (165.227.249.130), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfae5 [correct] [Good: True] [Bad : False] Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xd4e4 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 102E095949085170 Responder cookie: B134A567E87E3363 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xff5c5f40 Length: 292 Encrypted payload (264 bytes) 0000 00 09 5b 2b a8 d7 00 0c 29 64 f8 4a 08 00 45 00 ..[+....)d.J..E. 0010 01 40 00 00 40 00 40 11 fa e5 a5 e3 f9 82 a5 e3 .@..@.@......... 0020 f9 7d 01 f4 01 f4 01 2c d4 e4 10 2e 09 59 49 08 .}.....,.....YI. 0030 51 70 b1 34 a5 67 e8 7e 33 63 08 10 20 01 ff 5c Qp.4.g.~3c.. ..\ 0040 5f 40 00 00 01 24 8e 40 be 0a 85 1b 83 95 c1 9f _@...$.@........ 0050 f7 70 d6 ae 33 36 c2 bb 17 05 c6 74 ef 74 d3 c4 .p..36.....t.t.. 0060 34 e0 78 cb 99 30 c4 95 79 07 86 16 71 a2 21 12 4.x..0..y...q.!. 0070 c3 c5 f6 d2 d9 ac d1 2e e7 cf c8 18 c0 8e 1d 24 ...............$ 0080 25 6d 0c 14 58 5a be 05 94 bd 68 70 45 ad bf 8f %m..XZ....hpE... 0090 a7 9a 39 41 f9 8b d1 de 72 b2 6b 88 01 14 d7 b3 ..9A....r.k..... 00a0 94 72 c2 7b e3 e3 da 33 23 72 be 15 f1 13 6c 1c .r.{...3#r....l. 00b0 f0 a2 c8 65 72 be 7c 4f 6b 21 54 c8 77 26 9a 3c ...er.|Ok!T.w&.< 00c0 43 1b 8a 96 3c ff 8d 67 a1 b1 f0 57 43 ef 8d 15 C...<..g...WC... 00d0 f6 a0 ce d5 1e 91 60 ce e5 85 b2 cd 2b 9e 3f 12 ......`.....+.?. 00e0 fe 9a 3f 55 f8 c3 f4 5d 4f 16 04 41 f5 23 19 75 ..?U...]O..A.#.u 00f0 b6 6f 65 38 2d d4 ea af 3c 21 b8 41 62 e3 fe ea .oe8-... 0090 a5 02 cf 5f 49 1c ca 2b 3f e5 0d b7 86 21 ca 08 ..._I..+?....!.. 00a0 35 4c 06 60 aa 1c 8b cf ed 93 63 61 2d a9 b5 1b 5L.`......ca-... 00b0 2d 4b aa 59 05 9f aa fe 91 fe 87 d9 72 18 7a 65 -K.Y........r.ze 00c0 a8 21 60 fe a4 cd af a0 b7 2c 9e 3d dc 8d c7 37 .!`......,.=...7 00d0 d1 71 0f 11 ef 08 72 44 81 84 f0 b0 9b 1e 23 07 .q....rD......#. 00e0 68 d9 e9 26 8b 4a 84 9b f3 04 45 45 7f 12 a7 99 h..&.J....EE.... 00f0 6a e9 25 3e 39 50 c2 d6 41 be e1 8a eb cf d7 5f j.%>9P..A......_ 0100 0c da 66 d6 e6 51 52 50 73 34 9f 3b b9 fe 54 3e ..f..QRPs4.;..T> 0110 09 69 29 e8 56 56 4d cd 87 e8 10 12 cd 34 a7 17 .i).VVM......4.. 0120 32 63 c8 d4 bf d9 79 87 2c 24 e5 c9 3d 3b 35 67 2c....y.,$..=;5g 0130 0d 62 bf f6 fc ea cc f5 bd b9 72 2a f3 dc 29 73 .b........r*..)s 0140 20 8a 88 c4 d2 c8 ..... Frame 41 (94 bytes on wire, 94 bytes captured) Arrival Time: Feb 25, 2010 15:05:55.611828000 [Time delta from previous captured frame: 0.003872000 seconds] [Time delta from previous displayed frame: 0.003872000 seconds] [Time since reference or first frame: 46.074760000 seconds] Frame Number: 41 Frame Length: 94 bytes Capture Length: 94 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.130 (165.227.249.130), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbd5 [correct] [Good: True] [Bad : False] Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x78ef [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 102E095949085170 Responder cookie: B134A567E87E3363 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xff5c5f40 Length: 52 Encrypted payload (24 bytes) 0000 00 09 5b 2b a8 d7 00 0c 29 64 f8 4a 08 00 45 00 ..[+....)d.J..E. 0010 00 50 00 00 40 00 40 11 fb d5 a5 e3 f9 82 a5 e3 .P..@.@......... 0020 f9 7d 01 f4 01 f4 00 3c 78 ef 10 2e 09 59 49 08 .}.....1..?g\.. 0200 06 41 ce db cd 59 ab 66 bf f4 0f 62 79 d4 6a 84 .A...Y.f...by.j. 0210 b3 6a ef b2 da f6 47 02 09 71 1c 24 f2 f2 46 0e .j....G..q.$..F. 0220 d9 39 d6 53 81 1c ac 57 7b 74 c8 6d 87 07 20 30 .9.S...W{t.m.. 0 0230 ce 31 f9 e8 9f 6d 52 d5 b5 9e a4 1d db 65 ea 69 .1...mR......e.i 0240 0d ab d5 e1 6f f8 85 cb 73 b1 4c 4b 5f ae 39 1c ....o...s.LK_.9. 0250 82 ad 99 1f a2 6d e7 75 2d 9e 2d 00 3d 18 aa 61 .....m.u-.-.=..a 0260 02 98 07 f0 02 cb 76 e9 15 01 df 9f 93 e9 b2 ae ......v......... 0270 fb 23 5a 68 62 44 5a 47 34 8d 82 f1 33 87 43 5f .#ZhbDZG4...3.C_ 0280 70 53 0c 7f 47 81 a0 a3 83 1d 52 77 23 70 d2 79 pS..G.....Rw#p.y 0290 dd ce cb c2 2d 13 20 2b 33 be 48 59 a5 b8 c8 d0 ....-. +3.HY.... 02a0 b5 9a 92 ec c1 ad 67 74 8d 76 44 c4 18 06 6f 89 ......gt.vD...o. 02b0 97 f4 12 65 28 1a 41 57 b5 42 fa 3e 40 18 d5 57 ...e(.AW.B.>@..W 02c0 14 df 2c d3 03 d3 16 e0 d6 27 61 58 2f ec e5 f8 ..,......'aX/... 02d0 51 b9 21 3e fb 3f 63 63 a6 fc 01 a5 e0 62 eb 41 Q.!>.?cc.....b.A 02e0 3e 18 fb 3d 37 ff 94 e2 1f b3 5f ee cf 11 be c2 >..=7....._..... 02f0 33 dc 25 41 ae 7e ec e1 df f4 62 d8 9e 77 d2 5d 3.%A.~....b..w.] 0300 36 3f a1 fd 1b a0 50 e6 5c 49 8c 72 bb 41 97 24 6?....P.\I.r.A.$ 0310 46 ff d9 d2 c6 2f 2c f6 dd af 3b e2 86 01 aa 77 F..../,...;....w 0320 88 d0 e7 5d 03 fe 5e fe 65 fe 6e d1 d5 a0 26 01 ...]..^.e.n...&. 0330 f2 68 3b be ed e6 89 b8 a9 d2 25 1f 2e 11 04 77 .h;.......%....w 0340 6c 43 a7 13 1a c9 b3 2e 7e a3 53 67 d5 be 26 00 lC......~.Sg..&. 0350 93 ac 84 dd 72 3e d4 35 e3 20 9a 8a 06 82 42 3a ....r>.5. ....B: 0360 f3 67 e3 5d af d5 a5 95 37 69 98 38 71 87 66 1f .g.]....7i.8q.f. 0370 69 30 97 cd a3 1b 86 4f f0 e4 ba 14 7a 2d 16 6e i0.....O....z-.n 0380 c4 aa f0 49 5e 8f f8 6f 61 ac 09 bf ab 0a 0c 8e ...I^..oa....... 0390 2f 1d 4a c5 81 1f b4 b3 3e c7 5d 0c 3e 2f 9d 4d /.J.....>.].>/.M 03a0 d5 ce ab f1 f2 0a 6f ac 55 23 c7 fa 81 1a 2e 08 ......o.U#...... 03b0 05 14 ef e7 68 31 69 88 71 44 ca b3 82 03 09 16 ....h1i.qD...... 03c0 eb fa a2 1b eb 17 31 c3 a5 87 22 ff eb f1 c0 d4 ......1..."..... 03d0 f4 5a 76 91 bd 2b d6 05 75 19 9f ab 31 ed d3 4b .Zv..+..u...1..K 03e0 5f 45 a5 66 27 e1 f3 18 f3 af da 98 ae a7 be 3a _E.f'..........: 03f0 43 18 a5 51 f1 c3 31 36 5f b3 66 41 98 87 b8 7c C..Q..16_.fA...| 0400 73 66 01 05 04 54 cb b0 65 7a 79 6e 38 ec 7f ba sf...T..ezyn8... 0410 ae 03 10 b6 50 0f 6e 61 c8 eb 43 f9 5e 41 40 f0 ....P.na..C.^A@. 0420 61 7d 56 81 9f 1d 40 4a b9 fa 7a 4e 00 9e dd 89 a}V...@J..zN.... 0430 8f 1e 9d 3c 69 44 c7 1d 07 e6 53 a3 5d 1e d9 e1 ... 0500 ea ac f3 b3 d2 f2 02 34 13 7a d5 fd d5 bc 79 5c .......4.z....y\ 0510 fb a4 ba cb cb db 45 ee bc b2 9e 7d 0c 6e bd aa ......E....}.n.. 0520 b1 86 9e c2 19 7f 31 54 de 24 46 b5 70 ee 5e f7 ......1T.$F.p.^. 0530 19 7c 9d 5b 38 fd 0d 4f e7 47 0a cb 1a 47 af e6 .|.[8..O.G...G.. 0540 67 13 18 fd da 03 9a 6b 68 80 a1 15 8e 1c 5f 4c g......kh....._L 0550 a8 30 b1 b8 66 61 4a e6 3b 83 b9 59 32 3b e5 bf .0..faJ.;..Y2;.. 0560 e6 53 68 02 50 1d 76 58 04 23 fe b8 d0 e5 51 e7 .Sh.P.vX.#....Q. 0570 65 ec 04 b2 3a d7 c9 f7 7f 1e d3 e4 36 a1 4b 89 e...:.......6.K. 0580 0f f1 5f 5c 20 ac cc f0 7c 4c 15 e4 d3 09 6b e4 .._\ ...|L....k. 0590 95 0f 39 4e 31 61 0c 6b d8 50 e4 75 dc 72 cd a0 ..9N1a.k.P.u.r.. 05a0 34 02 dc 77 9b dc 00 99 c7 67 24 8a da a4 f0 05 4..w.....g$..... 05b0 cb 81 c5 0f 65 8f dd b6 94 25 31 ac 6e 64 00 c6 ....e....%1.nd.. 05c0 2e a7 c9 4a 21 04 a7 70 96 b0 49 dc e0 94 5b b3 ...J!..p..I...[. 05d0 f6 42 c6 88 cf 1f d5 f3 28 c9 9a 76 94 e0 8e 46 .B......(..v...F 05e0 22 e5 62 87 b6 28 ".b..( Frame 51 (1510 bytes on wire, 1510 bytes captured) Arrival Time: Feb 25, 2010 15:05:56.699406000 [Time delta from previous captured frame: 0.000011000 seconds] [Time delta from previous displayed frame: 0.000011000 seconds] [Time since reference or first frame: 47.162338000 seconds] Frame Number: 51 Frame Length: 1510 bytes Capture Length: 1510 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.130 (165.227.249.130), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 1496 Identification: 0x0002 (2) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x462a [correct] [Good: True] [Bad : False] Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.125 (165.227.249.125) Encapsulating Security Payload ESP SPI: 0xe9d7c757 ESP Sequence: 3 0000 00 09 5b 2b a8 d7 00 0c 29 64 f8 4a 08 00 45 00 ..[+....)d.J..E. 0010 05 d8 00 02 40 00 f0 32 46 2a a5 e3 f9 82 a5 e3 ....@..2F*...... 0020 f9 7d e9 d7 c7 57 00 00 00 03 db d4 18 4b 22 32 .}...W.......K"2 0030 35 e0 7e f9 1b 32 a1 1c 2f 00 7c c2 4b 26 6e 22 5.~..2../.|.K&n" 0040 ad 7b 4d 83 6e c4 e7 38 2a 18 62 b1 db 07 6d 83 .{M.n..8*.b...m. 0050 47 7b 03 fe 39 82 29 1f 76 4d 79 b2 ac ce ee 94 G{..9.).vMy..... 0060 96 57 2b 65 c5 f4 fa 4d ca 0a e2 b8 c3 f5 ff a6 .W+e...M........ 0070 69 38 ad 00 4f 6c 4c 78 3f 30 ec ec 73 7c f3 9e i8..OlLx?0..s|.. 0080 71 7d b8 14 f0 bb 82 5c a1 11 6d 11 e6 0e 7b 97 q}.....\..m...{. 0090 59 45 b8 49 fb ca 71 fd e7 08 ab d8 a5 a0 c9 e3 YE.I..q......... 00a0 c4 eb 24 ed 35 87 9e b3 46 dd 33 c3 8a 95 ab 6e ..$.5...F.3....n 00b0 7a bd 3f 3a 96 53 95 22 98 be 6c f6 63 5c 0c c6 z.?:.S."..l.c\.. 00c0 56 d4 5f 36 cf 12 b4 f0 a9 54 37 41 ce 71 13 0f V._6.....T7A.q.. 00d0 c2 bf 32 44 3a bf 34 61 60 ef 57 9b 0d 2b 25 13 ..2D:.4a`.W..+%. 00e0 1c 64 aa f2 a9 d8 55 33 0e e7 82 a7 fc b9 16 d8 .d....U3........ 00f0 f6 03 a7 2e 87 fe 16 14 36 8d 39 99 7c 4e a3 b4 ........6.9.|N.. 0100 26 8b d6 c1 53 0a ae 00 e0 1b b9 a9 b7 67 b9 52 &...S........g.R 0110 a0 41 e3 1c ae 09 97 f6 6b 78 d0 4d 79 0b 47 38 .A......kx.My.G8 0120 cf 32 46 5b 19 28 df 0c d5 d9 67 74 2b bb 64 1e .2F[.(....gt+.d. 0130 cb fb 7f 3c 58 18 30 04 25 b7 e9 48 e1 54 ae 1d ...1..?g\.. 0200 06 41 ce db cd 59 ab 66 bf f4 0f 62 79 d4 6a 84 .A...Y.f...by.j. 0210 b3 6a ef b2 da f6 47 02 09 71 1c 24 f2 f2 46 0e .j....G..q.$..F. 0220 d9 39 d6 53 81 1c ac 57 7b 74 c8 6d 87 07 20 30 .9.S...W{t.m.. 0 0230 ce 31 f9 e8 9f 6d 52 d5 b5 9e a4 1d db 65 ea 69 .1...mR......e.i 0240 0d ab d5 e1 6f f8 85 cb 73 b1 4c 4b 5f ae 39 1c ....o...s.LK_.9. 0250 82 ad 99 1f a2 6d e7 75 2d 9e 2d 00 3d 18 aa 61 .....m.u-.-.=..a 0260 02 98 07 f0 02 cb 76 e9 15 01 df 9f 93 e9 b2 ae ......v......... 0270 fb 23 5a 68 62 44 5a 47 34 8d 82 f1 33 87 43 5f .#ZhbDZG4...3.C_ 0280 70 53 0c 7f 47 81 a0 a3 83 1d 52 77 23 70 d2 79 pS..G.....Rw#p.y 0290 dd ce cb c2 2d 13 20 2b 33 be 48 59 a5 b8 c8 d0 ....-. +3.HY.... 02a0 b5 9a 92 ec c1 ad 67 74 8d 76 44 c4 18 06 6f 89 ......gt.vD...o. 02b0 97 f4 12 65 28 1a 41 57 b5 42 fa 3e 40 18 d5 57 ...e(.AW.B.>@..W 02c0 14 df 2c d3 03 d3 16 e0 d6 27 61 58 2f ec e5 f8 ..,......'aX/... 02d0 51 b9 21 3e fb 3f 63 63 a6 fc 01 a5 e0 62 eb 41 Q.!>.?cc.....b.A 02e0 3e 18 fb 3d 37 ff 94 e2 1f b3 5f ee cf 11 be c2 >..=7....._..... 02f0 33 dc 25 41 ae 7e ec e1 df f4 62 d8 9e 77 d2 5d 3.%A.~....b..w.] 0300 36 3f a1 fd 1b a0 50 e6 5c 49 8c 72 bb 41 97 24 6?....P.\I.r.A.$ 0310 46 ff d9 d2 c6 2f 2c f6 dd af 3b e2 86 01 aa 77 F..../,...;....w 0320 88 d0 e7 5d 03 fe 5e fe 65 fe 6e d1 d5 a0 26 01 ...]..^.e.n...&. 0330 f2 68 3b be ed e6 89 b8 a9 d2 25 1f 2e 11 04 77 .h;.......%....w 0340 6c 43 a7 13 1a c9 b3 2e 7e a3 53 67 d5 be 26 00 lC......~.Sg..&. 0350 93 ac 84 dd 72 3e d4 35 e3 20 9a 8a 06 82 42 3a ....r>.5. ....B: 0360 f3 67 e3 5d af d5 a5 95 37 69 98 38 71 87 66 1f .g.]....7i.8q.f. 0370 69 30 97 cd a3 1b 86 4f f0 e4 ba 14 7a 2d 16 6e i0.....O....z-.n 0380 c4 aa f0 49 5e 8f f8 6f 61 ac 09 bf ab 0a 0c 8e ...I^..oa....... 0390 2f 1d 4a c5 81 1f b4 b3 3e c7 5d 0c 3e 2f 9d 4d /.J.....>.].>/.M 03a0 d5 ce ab f1 f2 0a 6f ac 55 23 c7 fa 81 1a 2e 08 ......o.U#...... 03b0 05 14 ef e7 68 31 69 88 71 44 ca b3 82 03 09 16 ....h1i.qD...... 03c0 eb fa a2 1b eb 17 31 c3 a5 87 22 ff eb f1 c0 d4 ......1..."..... 03d0 f4 5a 76 91 bd 2b d6 05 75 19 9f ab 31 ed d3 4b .Zv..+..u...1..K 03e0 5f 45 a5 66 27 e1 f3 18 f3 af da 98 ae a7 be 3a _E.f'..........: 03f0 43 18 a5 51 f1 c3 31 36 5f b3 66 41 98 87 b8 7c C..Q..16_.fA...| 0400 73 66 01 05 04 54 cb b0 65 7a 79 6e 38 ec 7f ba sf...T..ezyn8... 0410 ae 03 10 b6 50 0f 6e 61 c8 eb 43 f9 5e 41 40 f0 ....P.na..C.^A@. 0420 61 7d 56 81 9f 1d 40 4a b9 fa 7a 4e 00 9e dd 89 a}V...@J..zN.... 0430 8f 1e 9d 3c 69 44 c7 1d 07 e6 53 a3 5d 1e d9 e1 ... 0500 ea ac f3 b3 d2 f2 02 34 13 7a d5 fd d5 bc 79 5c .......4.z....y\ 0510 fb a4 ba cb cb db 45 ee bc b2 9e 7d 0c 6e bd aa ......E....}.n.. 0520 b1 86 9e c2 19 7f 31 54 de 24 46 b5 70 ee 5e f7 ......1T.$F.p.^. 0530 19 7c 9d 5b 38 fd 0d 4f e7 47 0a cb 1a 47 af e6 .|.[8..O.G...G.. 0540 67 13 18 fd da 03 9a 6b 68 80 a1 15 8e 1c 5f 4c g......kh....._L 0550 a8 30 b1 b8 66 61 4a e6 3b 83 b9 59 32 3b e5 bf .0..faJ.;..Y2;.. 0560 e6 53 68 02 50 1d 76 58 04 23 fe b8 d0 e5 51 e7 .Sh.P.vX.#....Q. 0570 65 ec 04 b2 3a d7 c9 f7 7f 1e d3 e4 36 a1 4b 89 e...:.......6.K. 0580 0f f1 5f 5c 20 ac cc f0 7c 4c 15 e4 d3 09 6b e4 .._\ ...|L....k. 0590 95 0f 39 4e 31 61 0c 6b d8 50 e4 75 dc 72 cd a0 ..9N1a.k.P.u.r.. 05a0 34 02 dc 77 9b dc 00 99 c7 67 24 8a da a4 f0 05 4..w.....g$..... 05b0 cb 81 c5 0f 65 8f dd b6 94 25 31 ac 6e 64 00 c6 ....e....%1.nd.. 05c0 2e a7 c9 4a 21 04 a7 70 96 b0 49 dc e0 94 5b b3 ...J!..p..I...[. 05d0 f6 42 c6 88 cf 1f d5 f3 28 c9 9a 76 94 e0 8e 46 .B......(..v...F 05e0 22 e5 62 87 b6 28 ".b..( Frame 52 (470 bytes on wire, 470 bytes captured) Arrival Time: Feb 25, 2010 15:05:56.699600000 [Time delta from previous captured frame: 0.000194000 seconds] [Time delta from previous displayed frame: 0.000194000 seconds] [Time since reference or first frame: 47.162532000 seconds] Frame Number: 52 Frame Length: 470 bytes Capture Length: 470 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.130 (165.227.249.130), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 456 Identification: 0x0003 (3) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x4a39 [correct] [Good: True] [Bad : False] Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.125 (165.227.249.125) Encapsulating Security Payload ESP SPI: 0xe9d7c757 ESP Sequence: 4 0000 00 09 5b 2b a8 d7 00 0c 29 64 f8 4a 08 00 45 00 ..[+....)d.J..E. 0010 01 c8 00 03 40 00 f0 32 4a 39 a5 e3 f9 82 a5 e3 ....@..2J9...... 0020 f9 7d e9 d7 c7 57 00 00 00 04 ac a3 8f 07 01 76 .}...W.........v 0030 6a cd fc af 22 fa 8b 6e 4f 9c 30 3f 31 02 34 f0 j..."..nO.0?1.4. 0040 48 89 63 ac 65 bf 97 d0 1b e9 ef 9b e1 66 16 34 H.c.e........f.4 0050 84 9c 00 41 36 83 9a 48 04 e0 f8 2a e1 c3 c8 f6 ...A6..H...*.... 0060 d9 b4 3a fd 8e 99 45 94 8a 5f 8a c3 5f 5d 26 cd ..:...E.._.._]&. 0070 27 c3 ed a6 1d 93 b6 08 95 01 39 8c 1d 60 9a 27 '.........9..`.' 0080 0d 50 ce 48 2c 25 e2 de 88 fe 56 9d e5 b6 1e dc .P.H,%....V..... 0090 2e 0b 06 47 e8 4c 1d f3 62 9b d5 1e 2d 64 21 3e ...G.L..b...-d!> 00a0 e6 41 3c 09 46 19 f1 2c 0a 5f 32 b4 c3 34 d7 31 .A<.F..,._2..4.1 00b0 0c 59 57 08 0d ed a6 45 64 80 29 3f 48 46 d9 63 .YW....Ed.)?HF.c 00c0 07 90 ae cc d3 d4 4a 2b 28 78 67 c0 aa 9c 95 80 ......J+(xg..... 00d0 e9 a8 37 04 8e 3d 21 d7 6c 64 2d 0c 0f 40 2c 0a ..7..=!.ld-..@,. 00e0 04 f9 68 65 d5 ae ed ef a5 a9 a3 16 56 d9 7c 81 ..he........V.|. 00f0 c7 30 c2 ed 82 8c af af 6e 34 8d 83 a4 08 bf bb .0......n4...... 0100 c8 21 1b b4 8f df 6f 22 ab d5 8b 20 e1 10 3d 3f .!....o"... ..=? 0110 f3 cf e0 44 d1 2c 95 65 41 d4 5b ec 39 f6 61 b2 ...D.,.eA.[.9.a. 0120 e2 8c 75 57 0d a6 3a dd 01 1c 49 ab 5c 1f 9f b4 ..uW..:...I.\... 0130 30 e2 53 6c 23 c0 7c cf e0 0a fc 5d b3 74 17 34 0.Sl#.|....].t.4 0140 d7 04 f0 c0 ff 9a e6 a5 74 f3 e8 bf 6f 59 97 9c ........t...oY.. 0150 12 6c 47 b9 5d e0 86 7d d8 70 5c e3 fa 47 2c a7 .lG.]..}.p\..G,. 0160 28 e7 1e 22 70 06 ef ea 08 53 05 63 82 05 38 08 (.."p....S.c..8. 0170 b2 9e bd e7 eb 30 b7 96 aa 09 e6 c6 c8 29 2c 09 .....0.......),. 0180 d7 81 39 f0 5b 78 cd ad 3d e0 c3 4c 11 fd b2 fe ..9.[x..=..L.... 0190 83 5e f7 53 dc a7 19 56 ab f6 31 72 eb 27 ae 01 .^.S...V..1r.'.. 01a0 4e 8f 8b 79 5c 85 b5 c3 05 fb 57 61 e5 bb b4 6b N..y\.....Wa...k 01b0 02 f5 b8 bd 35 c3 1a cf 1e 99 d8 cb e2 4e dc ce ....5........N.. 01c0 3e 74 04 62 cf c7 b6 e6 2e 13 5b a3 4a a8 66 91 >t.b......[.J.f. 01d0 8e 20 3b 2b aa 14 . ;+.. Frame 53 (470 bytes on wire, 470 bytes captured) Arrival Time: Feb 25, 2010 15:05:56.699612000 [Time delta from previous captured frame: 0.000012000 seconds] [Time delta from previous displayed frame: 0.000012000 seconds] [Time since reference or first frame: 47.162544000 seconds] Frame Number: 53 Frame Length: 470 bytes Capture Length: 470 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.130 (165.227.249.130), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 456 Identification: 0x0003 (3) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x4a39 [correct] [Good: True] [Bad : False] Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.125 (165.227.249.125) Encapsulating Security Payload ESP SPI: 0xe9d7c757 ESP Sequence: 4 0000 00 09 5b 2b a8 d7 00 0c 29 64 f8 4a 08 00 45 00 ..[+....)d.J..E. 0010 01 c8 00 03 40 00 f0 32 4a 39 a5 e3 f9 82 a5 e3 ....@..2J9...... 0020 f9 7d e9 d7 c7 57 00 00 00 04 ac a3 8f 07 01 76 .}...W.........v 0030 6a cd fc af 22 fa 8b 6e 4f 9c 30 3f 31 02 34 f0 j..."..nO.0?1.4. 0040 48 89 63 ac 65 bf 97 d0 1b e9 ef 9b e1 66 16 34 H.c.e........f.4 0050 84 9c 00 41 36 83 9a 48 04 e0 f8 2a e1 c3 c8 f6 ...A6..H...*.... 0060 d9 b4 3a fd 8e 99 45 94 8a 5f 8a c3 5f 5d 26 cd ..:...E.._.._]&. 0070 27 c3 ed a6 1d 93 b6 08 95 01 39 8c 1d 60 9a 27 '.........9..`.' 0080 0d 50 ce 48 2c 25 e2 de 88 fe 56 9d e5 b6 1e dc .P.H,%....V..... 0090 2e 0b 06 47 e8 4c 1d f3 62 9b d5 1e 2d 64 21 3e ...G.L..b...-d!> 00a0 e6 41 3c 09 46 19 f1 2c 0a 5f 32 b4 c3 34 d7 31 .A<.F..,._2..4.1 00b0 0c 59 57 08 0d ed a6 45 64 80 29 3f 48 46 d9 63 .YW....Ed.)?HF.c 00c0 07 90 ae cc d3 d4 4a 2b 28 78 67 c0 aa 9c 95 80 ......J+(xg..... 00d0 e9 a8 37 04 8e 3d 21 d7 6c 64 2d 0c 0f 40 2c 0a ..7..=!.ld-..@,. 00e0 04 f9 68 65 d5 ae ed ef a5 a9 a3 16 56 d9 7c 81 ..he........V.|. 00f0 c7 30 c2 ed 82 8c af af 6e 34 8d 83 a4 08 bf bb .0......n4...... 0100 c8 21 1b b4 8f df 6f 22 ab d5 8b 20 e1 10 3d 3f .!....o"... ..=? 0110 f3 cf e0 44 d1 2c 95 65 41 d4 5b ec 39 f6 61 b2 ...D.,.eA.[.9.a. 0120 e2 8c 75 57 0d a6 3a dd 01 1c 49 ab 5c 1f 9f b4 ..uW..:...I.\... 0130 30 e2 53 6c 23 c0 7c cf e0 0a fc 5d b3 74 17 34 0.Sl#.|....].t.4 0140 d7 04 f0 c0 ff 9a e6 a5 74 f3 e8 bf 6f 59 97 9c ........t...oY.. 0150 12 6c 47 b9 5d e0 86 7d d8 70 5c e3 fa 47 2c a7 .lG.]..}.p\..G,. 0160 28 e7 1e 22 70 06 ef ea 08 53 05 63 82 05 38 08 (.."p....S.c..8. 0170 b2 9e bd e7 eb 30 b7 96 aa 09 e6 c6 c8 29 2c 09 .....0.......),. 0180 d7 81 39 f0 5b 78 cd ad 3d e0 c3 4c 11 fd b2 fe ..9.[x..=..L.... 0190 83 5e f7 53 dc a7 19 56 ab f6 31 72 eb 27 ae 01 .^.S...V..1r.'.. 01a0 4e 8f 8b 79 5c 85 b5 c3 05 fb 57 61 e5 bb b4 6b N..y\.....Wa...k 01b0 02 f5 b8 bd 35 c3 1a cf 1e 99 d8 cb e2 4e dc ce ....5........N.. 01c0 3e 74 04 62 cf c7 b6 e6 2e 13 5b a3 4a a8 66 91 >t.b......[.J.f. 01d0 8e 20 3b 2b aa 14 . ;+.. Frame 54 (110 bytes on wire, 110 bytes captured) Arrival Time: Feb 25, 2010 15:05:56.703110000 [Time delta from previous captured frame: 0.003498000 seconds] [Time delta from previous displayed frame: 0.003498000 seconds] [Time since reference or first frame: 47.166042000 seconds] Frame Number: 54 Frame Length: 110 bytes Capture Length: 110 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0d47 (3399) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x505e [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0xc8c48114 ESP Sequence: 4 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 60 0d 47 00 00 1e 32 50 5e a5 e3 f9 7d a5 e3 .`.G...2P^...}.. 0020 f9 82 c8 c4 81 14 00 00 00 04 52 a4 dc 2b 8a 97 ..........R..+.. 0030 9d 0a 50 cc d2 a3 ed 95 b7 d8 b5 bc 0e fe ee 0a ..P............. 0040 2e 7f a7 de 42 b3 d1 ea 1e c6 44 76 cb 0d c0 82 ....B.....Dv.... 0050 e0 b3 22 cd 31 37 35 55 e8 39 62 e6 c9 60 11 02 ..".175U.9b..`.. 0060 74 b0 05 dc 37 8f e8 a2 05 10 4f 01 5a ba t...7.....O.Z. Frame 55 (1510 bytes on wire, 1510 bytes captured) Arrival Time: Feb 25, 2010 15:05:56.707269000 [Time delta from previous captured frame: 0.004159000 seconds] [Time delta from previous displayed frame: 0.004159000 seconds] [Time since reference or first frame: 47.170201000 seconds] Frame Number: 55 Frame Length: 1510 bytes Capture Length: 1510 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 1496 Identification: 0x8c9f (35999) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xcb8d [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0xc8c48114 ESP Sequence: 5 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 05 d8 8c 9f 00 00 1e 32 cb 8d a5 e3 f9 7d a5 e3 .......2.....}.. 0020 f9 82 c8 c4 81 14 00 00 00 05 62 e6 c9 60 11 02 ..........b..`.. 0030 74 b0 3d 72 0a 9a 51 65 96 3b af eb b1 fa 6a 92 t.=r..Qe.;....j. 0040 39 4a 39 97 19 1a ee 54 30 8e 1e 68 02 7b 46 38 9J9....T0..h.{F8 0050 06 8d b3 56 01 24 78 ee 54 6d 40 82 d3 64 ec 27 ...V.$x.Tm@..d.' 0060 6c 93 ce d3 06 e0 3b 4e 8c e4 ea 3b b6 24 0e 1e l.....;N...;.$.. 0070 fc af a6 6a 88 94 6d 7c f9 d2 72 bb c2 6d 41 aa ...j..m|..r..mA. 0080 94 e3 4d c0 64 b7 f2 18 bd bd 70 d1 ef 21 a7 25 ..M.d.....p..!.% 0090 e4 59 eb e3 8e ad b1 e5 96 f1 eb 9c 04 bd 36 6c .Y............6l 00a0 81 15 db 90 fa ae 8e b7 b5 ab 02 00 4e 50 6d 0c ............NPm. 00b0 4d 23 36 a3 aa f8 ee 99 3e c1 a7 ff 5e 24 ba 8c M#6.....>...^$.. 00c0 98 54 3a 6a 64 b9 6c e1 03 87 50 03 2f 74 fe 45 .T:jd.l...P./t.E 00d0 4c e7 0c 6d 56 02 72 54 b2 74 c5 2e 69 2d be c9 L..mV.rT.t..i-.. 00e0 76 54 54 b5 fe 94 6a d6 73 4c cc e4 bb 34 65 46 vTT...j.sL...4eF 00f0 c1 86 34 c2 91 7f cc 1f 9f 5f 38 8c 27 63 1e bb ..4......_8.'c.. 0100 a7 d2 02 2b 86 a0 8f 51 6a 97 9e ff b6 29 80 ce ...+...Qj....).. 0110 1a 81 db 3d d4 7e d3 c5 b6 65 1d cd cd 88 2f d3 ...=.~...e..../. 0120 e1 76 12 41 50 56 06 91 ae 1c 85 6e 32 6d 60 1c .v.APV.....n2m`. 0130 79 09 13 34 a9 69 1a 5c a0 37 f4 f0 d7 0d 96 13 y..4.i.\.7...... 0140 e0 00 4a 67 ef 6e b1 fa 8a 85 d3 a6 3b 5d 24 6a ..Jg.n......;]$j 0150 76 2c 89 c0 18 be d8 83 13 36 ca fb be 94 3c 25 v,.......6....<% 0160 46 4e fc a1 e4 8d 2c e3 77 12 0c 02 d9 47 3d 76 FN....,.w....G=v 0170 ed 21 70 f1 c5 44 50 0c 9c 03 80 b4 45 ce 16 bb .!p..DP.....E... 0180 69 2d 35 38 3b eb 15 29 1e fb 09 72 c1 5d ea 18 i-58;..)...r.].. 0190 88 5d 2e d5 bd 11 a1 e3 62 b2 f8 fd 84 c4 37 48 .]......b.....7H 01a0 d4 43 13 0b 2f 6b ff 5d 99 41 3f ae d1 1e 42 0a .C../k.].A?...B. 01b0 45 a4 bd ab 8c 4e 3a 89 82 b1 a6 f5 77 c6 55 79 E....N:.....w.Uy 01c0 24 c5 0b bf d5 ab 1a 96 2b c0 dc 5c 50 7e ae 8c $.......+..\P~.. 01d0 43 51 18 71 d5 e7 2c fb 0a 14 15 7c 2e 9c b0 2f CQ.q..,....|.../ 01e0 03 66 4d 06 21 a1 b8 e7 33 98 9e 11 78 b8 c1 15 .fM.!...3...x... 01f0 f1 7a fb e1 b2 43 f4 80 7d 04 ee 9d e4 a0 5e 2d .z...C..}.....^- 0200 5e 7f 27 5b de ae 7c 96 e9 b8 ed da 56 fb 80 8d ^.'[..|.....V... 0210 39 40 ea 05 d4 4d ee 4a 2d 4f 45 c7 6f 79 71 b4 9@...M.J-OE.oyq. 0220 fa 09 96 a8 1e 14 c3 a3 14 04 9f 57 e6 f9 33 2d ...........W..3- 0230 ae cb 34 11 58 51 3a 22 42 ef f0 d5 25 75 58 1c ..4.XQ:"B...%uX. 0240 6f 9f 5b 59 cf e2 85 3a 6f 05 bd 36 0e 53 10 0e o.[Y...:o..6.S.. 0250 0d eb 01 15 96 51 db ab a7 5a 04 e1 14 5f 0e ff .....Q...Z..._.. 0260 ec e0 51 4d ca c8 13 b2 d0 02 20 80 20 93 94 d8 ..QM...... . ... 0270 1e 26 76 27 3e 39 de bb 59 36 19 8a 3a 60 2b 33 .&v'>9..Y6..:`+3 0280 d5 ae ba 6f d8 b1 3c ce 74 1f 0b 9f e9 09 7b 7d ...o..<.t.....{} 0290 ac 28 b4 a8 87 fb b0 47 9a ee be 4c 31 ff a6 17 .(.....G...L1... 02a0 cf 9f 90 a9 be 7e f1 8e d4 43 21 78 f9 b0 8f e0 .....~...C!x.... 02b0 37 a8 15 ff 23 2f cd 67 df fa 14 96 17 0f 90 f8 7...#/.g........ 02c0 01 37 69 e0 6e e2 ff 38 c3 cc 13 6e 3a 79 59 b0 .7i.n..8...n:yY. 02d0 2e 85 9c ca c3 3b 4d 83 4d 4b a4 69 0d 23 26 00 .....;M.MK.i.#&. 02e0 36 95 47 83 dc e9 b8 13 3e 1c 12 98 f9 f1 8d 80 6.G.....>....... 02f0 04 7e 60 34 35 74 0c c1 37 3c 52 9e e9 6a 31 fc .~`45t..7.pR..%' 0410 38 30 78 a6 63 9e 6e c9 bb 87 59 22 d0 c1 29 c7 80x.c.n...Y"..). 0420 33 28 dd a7 75 37 44 a8 22 26 0b 4a a9 ef 39 44 3(..u7D."&.J..9D 0430 68 2a ba 22 7c 7a 37 48 6a 86 0d d8 a0 be b1 bf h*."|z7Hj....... 0440 23 db 99 f3 4b ac 51 7b 37 75 fc 30 4b 11 5a a3 #...K.Q{7u.0K.Z. 0450 a9 3a 81 4f 53 01 d0 6b a0 ea 27 1a eb 66 64 4c .:.OS..k..'..fdL 0460 2e 2e 41 14 f5 f8 bc 2c 98 94 47 b4 05 9f d9 a2 ..A....,..G..... 0470 41 45 57 ed 05 c4 26 5c 47 7a d9 97 ec c8 23 06 AEW...&\Gz....#. 0480 36 fa a9 d0 49 9c 3d 26 b6 39 3b 54 a8 2b dc 90 6...I.=&.9;T.+.. 0490 8a a7 92 bf 04 6f b2 68 f2 a6 5e 49 22 7c a2 09 .....o.h..^I"|.. 04a0 28 a4 ef cd f4 11 41 db 40 be b8 31 c3 62 a3 fe (.....A.@..1.b.. 04b0 9d 72 2b 17 a5 f0 a6 1a 65 ef 98 2d e6 d3 0d ec .r+.....e..-.... 04c0 77 e3 0a 5f cf 77 cb 4e ef cb ab be 3d 73 ed 05 w.._.w.N....=s.. 04d0 8d 49 75 92 e1 bb 36 10 d5 8d 87 8d 36 17 c5 c9 .Iu...6.....6... 04e0 03 a1 2c ee af 80 ec 7e 51 78 59 2a 39 20 db 52 ..,....~QxY*9 .R 04f0 8d f0 43 0d 87 50 e7 83 b9 12 dd 5b e7 ea 25 0c ..C..P.....[..%. 0500 44 66 46 8b fe 46 c7 16 6d 80 64 88 42 92 68 cf DfF..F..m.d.B.h. 0510 c3 39 d5 28 f0 96 d5 7e 59 de a5 cb 32 ae 02 e8 .9.(...~Y...2... 0520 dd dc 33 0c 9b 3e ef 2c 95 de 20 60 11 87 35 76 ..3..>.,.. `..5v 0530 23 2d f5 c4 60 61 8d d5 40 05 70 1e 56 3e 00 3d #-..`a..@.p.V>.= 0540 17 d5 59 bd f2 3e cf 96 c1 3f 45 af c8 81 ba 85 ..Y..>...?E..... 0550 52 fc 7b 2c b5 da 90 69 1d f1 f6 d9 d7 2e e4 2e R.{,...i........ 0560 c5 3c ac b7 c1 17 ab b5 bb db 2f 10 e8 57 91 b0 .<......../..W.. 0570 68 9b 13 0b 40 79 2c c9 c4 d6 99 a3 54 01 17 16 h...@y,.....T... 0580 83 d4 34 c2 1b 60 ba 0a fd 1b 98 14 2c e6 3d 27 ..4..`......,.=' 0590 8d f2 64 97 61 11 f8 62 ae f0 20 c8 75 3c d5 41 ..d.a..b.. .u<.A 05a0 4d 4a be 3f 13 bc 69 77 3b 90 00 9c 25 da c5 8d MJ.?..iw;...%... 05b0 41 a2 0f 0e 98 02 7f 40 ea 6b 18 64 cb c0 33 30 A......@.k.d..30 05c0 a2 35 d0 d4 a1 78 63 55 98 06 b8 62 70 17 b4 07 .5...xcU...bp... 05d0 4a 4e e8 eb 48 0f 0b 0c c8 1c c3 65 12 5f 94 13 JN..H......e._.. 05e0 0d c6 7c ba c8 01 ..|... Frame 56 (630 bytes on wire, 630 bytes captured) Arrival Time: Feb 25, 2010 15:05:56.707789000 [Time delta from previous captured frame: 0.000520000 seconds] [Time delta from previous displayed frame: 0.000520000 seconds] [Time since reference or first frame: 47.170721000 seconds] Frame Number: 56 Frame Length: 630 bytes Capture Length: 630 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 616 Identification: 0xf708 (63240) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x6494 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0xc8c48114 ESP Sequence: 6 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 02 68 f7 08 00 00 1e 32 64 94 a5 e3 f9 7d a5 e3 .h.....2d....}.. 0020 f9 82 c8 c4 81 14 00 00 00 06 e8 eb 48 0f 0b 0c ............H... 0030 c8 1c 65 d8 71 24 10 81 bb 6e 4d 84 69 b5 1d 0e ..e.q$...nM.i... 0040 7c 83 24 ba 97 08 75 c2 c1 1e ab d4 50 a8 4b d1 |.$...u.....P.K. 0050 af 96 e5 fe 4c 74 73 16 ab 00 07 2f 8e 8c b2 40 ....Lts..../...@ 0060 49 e2 04 55 9c 11 57 98 a3 90 bd 93 fa 12 5b 63 I..U..W.......[c 0070 b8 36 15 88 fd c5 0e 0f f7 05 35 e1 18 d0 5f 66 .6........5..._f 0080 1a 5f d9 71 5b 1a 06 b3 9f 2d e1 a5 b3 37 66 52 ._.q[....-...7fR 0090 c5 bd 2e 4a fc 0d 67 05 52 ac 19 96 ca 81 da 6f ...J..g.R......o 00a0 e3 df ff fe 09 cb 85 72 35 54 5d 63 39 54 e5 06 .......r5T]c9T.. 00b0 ec df c4 18 07 25 66 56 5f 2d c9 a9 a1 e4 39 bb .....%fV_-....9. 00c0 57 ef a1 00 ad 4c 3d 37 8d 18 d4 d7 0d 92 11 28 W....L=7.......( 00d0 88 e0 21 75 d7 2e 28 9e 69 0c ac 0e 5f a7 6e a7 ..!u..(.i..._.n. 00e0 17 2a 7b 5d ea cd e7 cd 99 46 7e d5 48 f7 85 b7 .*{].....F~.H... 00f0 a0 c5 04 cf 61 be ec 6f 0b 1e 83 f7 cb 87 3c 5e ....a..o......<^ 0100 8e c7 40 00 15 dc 28 14 20 71 74 d8 57 59 f4 b5 ..@...(. qt.WY.. 0110 53 3c 75 c5 94 48 18 d1 5d 4a 05 d9 9a b8 40 b7 S.|..V. 0190 3a e0 4a ba b9 b5 7c 2e 96 c4 fe 89 05 f7 c6 a4 :.J...|......... 01a0 aa db 30 c2 7b c7 7f 44 bc 41 34 75 76 6a 8c 78 ..0.{..D.A4uvj.x 01b0 63 e0 5a a8 ca 73 01 6d e4 76 51 c1 72 7a ed bd c.Z..s.m.vQ.rz.. 01c0 a7 42 aa b0 90 a2 37 2d bc fe 5c a3 fe 84 d4 9c .B....7-..\..... 01d0 0c 95 5a 87 72 8d 04 d3 53 3b 88 0a ba 40 33 d4 ..Z.r...S;...@3. 01e0 6b 4b 02 ff 9d a5 b1 e0 f8 27 6d d5 fa 2d ae b9 kK.......'m..-.. 01f0 2f b6 0e 73 41 4a f4 21 0f c4 e6 0d 84 53 e4 38 /..sAJ.!.....S.8 0200 78 39 0c 44 0a b8 04 41 69 63 a3 2c cc 84 ee f9 x9.D...Aic.,.... 0210 dc 6c 76 63 88 cf 96 5f bf 5e 5e ab 7c 4d a4 80 .lvc..._.^^.|M.. 0220 cb ce 76 5e 95 5d ba 16 fd d4 d8 28 85 aa 51 e6 ..v^.].....(..Q. 0230 37 b1 ba 9e 71 f8 ee 54 5d 34 e9 ce 20 97 df c8 7...q..T]4.. ... 0240 ac 86 2c 0a c7 5a 69 1b fe fd 1e 02 eb 4e 4c 70 ..,..Zi......NLp 0250 78 ed 68 ca 31 43 18 46 de a2 9d b9 9e 7e 1b 2f x.h.1C.F.....~./ 0260 c2 41 5e 37 d1 85 93 61 6d 02 34 a6 80 02 27 fd .A^7...am.4...'. 0270 99 71 a4 4b ed 79 .q.K.y Frame 57 (110 bytes on wire, 110 bytes captured) Arrival Time: Feb 25, 2010 15:05:56.715834000 [Time delta from previous captured frame: 0.008045000 seconds] [Time delta from previous displayed frame: 0.008045000 seconds] [Time since reference or first frame: 47.178766000 seconds] Frame Number: 57 Frame Length: 110 bytes Capture Length: 110 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.130 (165.227.249.130), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0004 (4) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x4ba0 [correct] [Good: True] [Bad : False] Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.125 (165.227.249.125) Encapsulating Security Payload ESP SPI: 0xe9d7c757 ESP Sequence: 5 0000 00 09 5b 2b a8 d7 00 0c 29 64 f8 4a 08 00 45 00 ..[+....)d.J..E. 0010 00 60 00 04 40 00 f0 32 4b a0 a5 e3 f9 82 a5 e3 .`..@..2K....... 0020 f9 7d e9 d7 c7 57 00 00 00 05 32 7b c1 63 a7 21 .}...W....2{.c.! 0030 9c 75 8d b0 30 8e 10 78 19 9d 46 c4 3e 22 e4 c7 .u..0..x..F.>".. 0040 9b 2d 94 4e 6e 76 e3 37 1e 5f 79 cc c6 41 5b c6 .-.Nnv.7._y..A[. 0050 d8 73 03 a0 0e 06 8a 6b 83 cd 61 ea 52 ac 90 b0 .s.....k..a.R... 0060 f3 03 61 52 31 0c 2e 2d 85 01 48 65 19 bc ..aR1..-..He.. Frame 58 (110 bytes on wire, 110 bytes captured) Arrival Time: Feb 25, 2010 15:05:56.715848000 [Time delta from previous captured frame: 0.000014000 seconds] [Time delta from previous displayed frame: 0.000014000 seconds] [Time since reference or first frame: 47.178780000 seconds] Frame Number: 58 Frame Length: 110 bytes Capture Length: 110 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.130 (165.227.249.130), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0004 (4) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x4ba0 [correct] [Good: True] [Bad : False] Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.125 (165.227.249.125) Encapsulating Security Payload ESP SPI: 0xe9d7c757 ESP Sequence: 5 0000 00 09 5b 2b a8 d7 00 0c 29 64 f8 4a 08 00 45 00 ..[+....)d.J..E. 0010 00 60 00 04 40 00 f0 32 4b a0 a5 e3 f9 82 a5 e3 .`..@..2K....... 0020 f9 7d e9 d7 c7 57 00 00 00 05 32 7b c1 63 a7 21 .}...W....2{.c.! 0030 9c 75 8d b0 30 8e 10 78 19 9d 46 c4 3e 22 e4 c7 .u..0..x..F.>".. 0040 9b 2d 94 4e 6e 76 e3 37 1e 5f 79 cc c6 41 5b c6 .-.Nnv.7._y..A[. 0050 d8 73 03 a0 0e 06 8a 6b 83 cd 61 ea 52 ac 90 b0 .s.....k..a.R... 0060 f3 03 61 52 31 0c 2e 2d 85 01 48 65 19 bc ..aR1..-..He.. Frame 59 (374 bytes on wire, 374 bytes captured) Arrival Time: Feb 25, 2010 15:05:56.774328000 [Time delta from previous captured frame: 0.058480000 seconds] [Time delta from previous displayed frame: 0.058480000 seconds] [Time since reference or first frame: 47.237260000 seconds] Frame Number: 59 Frame Length: 374 bytes Capture Length: 374 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 360 Identification: 0x4756 (18262) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1547 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0xc8c48114 ESP Sequence: 7 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 01 68 47 56 00 00 1e 32 15 47 a5 e3 f9 7d a5 e3 .hGV...2.G...}.. 0020 f9 82 c8 c4 81 14 00 00 00 07 5e 37 d1 85 93 61 ..........^7...a 0030 6d 02 92 15 26 97 90 03 c8 aa 84 24 50 44 81 9d m...&......$PD.. 0040 9a 11 6d 90 c8 f1 c7 ee be f0 04 00 8d 0b 44 c9 ..m...........D. 0050 77 62 bd 87 4c 2d ac 03 3b a8 db 89 18 b1 48 cf wb..L-..;.....H. 0060 24 3d 03 d6 ae 12 fd 66 2e 99 ad 43 58 70 1f 22 $=.....f...CXp." 0070 9a ac 48 c5 33 83 47 de 56 1a 4d 72 8a 0f 0f 65 ..H.3.G.V.Mr...e 0080 2e d8 d7 c0 ac 04 1f d7 72 f8 dc 2f e4 87 bc 01 ........r../.... 0090 59 36 65 94 f3 2a ec a2 df 50 79 0a 01 1a 95 03 Y6e..*...Py..... 00a0 29 5e 12 bf 8b 40 e4 87 64 67 29 67 82 08 15 2e )^...@..dg)g.... 00b0 b3 37 5c 86 de a1 13 18 dd f8 e7 e2 67 1f d9 96 .7\.........g... 00c0 aa e7 e8 57 0b 11 a9 84 85 73 69 aa 8d 79 da fb ...W.....si..y.. 00d0 69 cd 66 35 1f 4c 87 98 31 30 a4 fe ac a6 74 ef i.f5.L..10....t. 00e0 d9 fe 26 7c 7c 56 ff f9 85 2a 16 43 24 90 1c 61 ..&||V...*.C$..a 00f0 f0 1e 6d a5 39 9c c0 3d e7 0f 4f 8c 67 42 36 04 ..m.9..=..O.gB6. 0100 ac 4a 9e cf 30 26 fa 27 fe c8 39 d1 a0 db 4d 59 .J..0&.'..9...MY 0110 be c1 e3 49 b7 a1 ca 57 e7 81 19 14 39 d9 e1 95 ...I...W....9... 0120 39 86 f2 73 0a 2b 6e c2 53 38 5e 4e b6 cd 16 55 9..s.+n.S8^N...U 0130 b6 e0 db 66 97 90 34 d2 73 ef 82 d0 f4 43 d0 d2 ...f..4.s....C.. 0140 0e a7 87 3d b6 04 76 a6 6b bd fc 10 89 32 21 6d ...=..v.k....2!m 0150 f6 ee c2 60 04 77 d3 37 c4 be d5 a3 35 78 cd e8 ...`.w.7....5x.. 0160 9f 41 97 43 71 0e 9d e4 ff 32 74 68 3c 56 9c 75 .A.Cq....2th.8e.R 0030 a7 10 99 1b e9 35 23 d6 20 c6 fe 66 87 9f 13 ac .....5#. ..f.... 0040 bb 50 9d b8 01 68 7f 2d 66 2b 9f 0c f7 2b 8e dc .P...h.-f+...+.. 0050 91 f9 75 ba 42 a4 50 d9 c7 2a 8b e3 4a 31 44 3a ..u.B.P..*..J1D: 0060 e3 0b 14 85 6b cd 61 49 bd f7 85 0c 75 b1 ....k.aI....u. Frame 64 (110 bytes on wire, 110 bytes captured) Arrival Time: Feb 25, 2010 15:05:56.810040000 [Time delta from previous captured frame: 0.000011000 seconds] [Time delta from previous displayed frame: 0.000011000 seconds] [Time since reference or first frame: 47.272972000 seconds] Frame Number: 64 Frame Length: 110 bytes Capture Length: 110 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.130 (165.227.249.130), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0006 (6) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x4b9e [correct] [Good: True] [Bad : False] Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.125 (165.227.249.125) Encapsulating Security Payload ESP SPI: 0xe9d7c757 ESP Sequence: 7 0000 00 09 5b 2b a8 d7 00 0c 29 64 f8 4a 08 00 45 00 ..[+....)d.J..E. 0010 00 60 00 06 40 00 f0 32 4b 9e a5 e3 f9 82 a5 e3 .`..@..2K....... 0020 f9 7d e9 d7 c7 57 00 00 00 07 3e 1b 38 65 c5 52 .}...W....>.8e.R 0030 a7 10 99 1b e9 35 23 d6 20 c6 fe 66 87 9f 13 ac .....5#. ..f.... 0040 bb 50 9d b8 01 68 7f 2d 66 2b 9f 0c f7 2b 8e dc .P...h.-f+...+.. 0050 91 f9 75 ba 42 a4 50 d9 c7 2a 8b e3 4a 31 44 3a ..u.B.P..*..J1D: 0060 e3 0b 14 85 6b cd 61 49 bd f7 85 0c 75 b1 ....k.aI....u. Frame 65 (158 bytes on wire, 158 bytes captured) Arrival Time: Feb 25, 2010 15:05:56.810580000 [Time delta from previous captured frame: 0.000540000 seconds] [Time delta from previous displayed frame: 0.000540000 seconds] [Time since reference or first frame: 47.273512000 seconds] Frame Number: 65 Frame Length: 158 bytes Capture Length: 158 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.130 (165.227.249.130), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 144 Identification: 0x0007 (7) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x4b6d [correct] [Good: True] [Bad : False] Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.125 (165.227.249.125) Encapsulating Security Payload ESP SPI: 0xe9d7c757 ESP Sequence: 8 0000 00 09 5b 2b a8 d7 00 0c 29 64 f8 4a 08 00 45 00 ..[+....)d.J..E. 0010 00 90 00 07 40 00 f0 32 4b 6d a5 e3 f9 82 a5 e3 ....@..2Km...... 0020 f9 7d e9 d7 c7 57 00 00 00 08 38 ca 41 67 9f 87 .}...W....8.Ag.. 0030 c4 42 2c 54 53 ab 77 b4 02 9c a8 e5 fa 26 21 77 .B,TS.w......&!w 0040 55 cf 72 ce 5d e0 e7 e4 4e 9f 44 ad 4d 26 f4 35 U.r.]...N.D.M&.5 0050 bd a2 e6 9e 7d bf 8c 91 1e 26 74 3e 22 c9 dc 0e ....}....&t>"... 0060 a9 1a 28 4d fb fb 8b 4d 39 4e ac 35 78 0d b8 c0 ..(M...M9N.5x... 0070 26 70 8e 3a c3 39 e1 33 80 24 ac e7 39 a3 87 a1 &p.:.9.3.$..9... 0080 38 cc 88 11 08 c2 f6 6b c8 40 26 53 59 27 83 5e 8......k.@&SY'.^ 0090 12 fa 6f db b4 80 3d 1c 81 48 64 4f 9b f5 ..o...=..HdO.. Frame 66 (158 bytes on wire, 158 bytes captured) Arrival Time: Feb 25, 2010 15:05:56.810589000 [Time delta from previous captured frame: 0.000009000 seconds] [Time delta from previous displayed frame: 0.000009000 seconds] [Time since reference or first frame: 47.273521000 seconds] Frame Number: 66 Frame Length: 158 bytes Capture Length: 158 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.130 (165.227.249.130), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 144 Identification: 0x0007 (7) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x4b6d [correct] [Good: True] [Bad : False] Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.125 (165.227.249.125) Encapsulating Security Payload ESP SPI: 0xe9d7c757 ESP Sequence: 8 0000 00 09 5b 2b a8 d7 00 0c 29 64 f8 4a 08 00 45 00 ..[+....)d.J..E. 0010 00 90 00 07 40 00 f0 32 4b 6d a5 e3 f9 82 a5 e3 ....@..2Km...... 0020 f9 7d e9 d7 c7 57 00 00 00 08 38 ca 41 67 9f 87 .}...W....8.Ag.. 0030 c4 42 2c 54 53 ab 77 b4 02 9c a8 e5 fa 26 21 77 .B,TS.w......&!w 0040 55 cf 72 ce 5d e0 e7 e4 4e 9f 44 ad 4d 26 f4 35 U.r.]...N.D.M&.5 0050 bd a2 e6 9e 7d bf 8c 91 1e 26 74 3e 22 c9 dc 0e ....}....&t>"... 0060 a9 1a 28 4d fb fb 8b 4d 39 4e ac 35 78 0d b8 c0 ..(M...M9N.5x... 0070 26 70 8e 3a c3 39 e1 33 80 24 ac e7 39 a3 87 a1 &p.:.9.3.$..9... 0080 38 cc 88 11 08 c2 f6 6b c8 40 26 53 59 27 83 5e 8......k.@&SY'.^ 0090 12 fa 6f db b4 80 3d 1c 81 48 64 4f 9b f5 ..o...=..HdO.. Frame 67 (110 bytes on wire, 110 bytes captured) Arrival Time: Feb 25, 2010 15:05:57.005209000 [Time delta from previous captured frame: 0.194620000 seconds] [Time delta from previous displayed frame: 0.194620000 seconds] [Time since reference or first frame: 47.468141000 seconds] Frame Number: 67 Frame Length: 110 bytes Capture Length: 110 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x852c (34092) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xd878 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0xc8c48114 ESP Sequence: 9 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 60 85 2c 00 00 1e 32 d8 78 a5 e3 f9 7d a5 e3 .`.,...2.x...}.. 0020 f9 82 c8 c4 81 14 00 00 00 09 04 96 85 77 f1 30 .............w.0 0030 fd 65 4f bb 3b e7 66 fc cb f6 a0 dc e8 2b 99 13 .eO.;.f......+.. 0040 df fc c8 15 40 ce c0 20 1c 0d d3 ad 92 6f c4 e3 ....@.. .....o.. 0050 be 73 78 ea 5b dd a2 2d 5e cb 91 0e aa b3 07 68 .sx.[..-^......h 0060 f5 a4 2e d1 ff 99 50 12 89 7b 05 a5 74 75 ......P..{..tu Frame 68 (142 bytes on wire, 142 bytes captured) Arrival Time: Feb 25, 2010 15:05:57.068264000 [Time delta from previous captured frame: 0.063055000 seconds] [Time delta from previous displayed frame: 0.063055000 seconds] [Time since reference or first frame: 47.531196000 seconds] Frame Number: 68 Frame Length: 142 bytes Capture Length: 142 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x6781 (26497) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xf603 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0xc8c48114 ESP Sequence: 10 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 80 67 81 00 00 1e 32 f6 03 a5 e3 f9 7d a5 e3 ..g....2.....}.. 0020 f9 82 c8 c4 81 14 00 00 00 0a 91 0e aa b3 07 68 ...............h 0030 f5 a4 b6 9b e5 07 be d0 18 be db fc 5a c4 50 84 ............Z.P. 0040 bc a7 ab 58 27 a4 37 76 ae 67 4d 4f 1c a2 83 7e ...X'.7v.gMO...~ 0050 6c 15 12 19 c4 fb 6e b8 57 d2 9d 28 75 1e 2e 93 l.....n.W..(u... 0060 ca 96 a4 5f 9d 81 23 d3 f9 55 36 b8 87 a7 70 cb ..._..#..U6...p. 0070 c2 10 9a 32 61 28 8c 94 88 9d 32 cc 40 e6 c4 10 ...2a(....2.@... 0080 95 0a be b0 88 21 a7 f1 75 15 ed b9 f6 16 .....!..u..... Frame 69 (366 bytes on wire, 366 bytes captured) Arrival Time: Feb 25, 2010 15:05:57.069626000 [Time delta from previous captured frame: 0.001362000 seconds] [Time delta from previous displayed frame: 0.001362000 seconds] [Time since reference or first frame: 47.532558000 seconds] Frame Number: 69 Frame Length: 366 bytes Capture Length: 366 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.130 (165.227.249.130), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 352 Identification: 0x0008 (8) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x4a9c [correct] [Good: True] [Bad : False] Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.125 (165.227.249.125) Encapsulating Security Payload ESP SPI: 0xe9d7c757 ESP Sequence: 9 0000 00 09 5b 2b a8 d7 00 0c 29 64 f8 4a 08 00 45 00 ..[+....)d.J..E. 0010 01 60 00 08 40 00 f0 32 4a 9c a5 e3 f9 82 a5 e3 .`..@..2J....... 0020 f9 7d e9 d7 c7 57 00 00 00 09 b0 e0 a1 af 78 25 .}...W........x% 0030 17 50 8a 93 70 e0 0a 09 2a 64 41 8a 54 f2 46 54 .P..p...*dA.T.FT 0040 68 e3 8d 79 d9 f7 39 51 02 45 83 98 2c 73 3b 54 h..y..9Q.E..,s;T 0050 b9 d6 ca bf 93 29 32 91 3b 30 9e 23 2e 7a 7b 07 .....)2.;0.#.z{. 0060 1f 40 6c 54 e8 64 b2 4a ca 36 63 f6 75 01 e7 28 .@lT.d.J.6c.u..( 0070 e0 0b 31 30 fd 6e 54 5e ec be 5d fc e1 d6 75 f1 ..10.nT^..]...u. 0080 17 7a 6c f9 45 74 22 78 cd a4 36 55 a8 b1 d0 08 .zl.Et"x..6U.... 0090 ff f0 f1 79 dd 9e 7a cc e1 d6 12 69 06 50 fd 81 ...y..z....i.P.. 00a0 d7 fb 83 c2 fd b8 58 e5 0c d1 cb 2e 26 64 36 26 ......X.....&d6& 00b0 50 19 59 e8 de 57 98 5d 32 45 79 85 1e ad 6c ab P.Y..W.]2Ey...l. 00c0 a0 9f 38 bf 3a 10 7c 44 90 2d 8c 2e 4e d4 0a d8 ..8.:.|D.-..N... 00d0 c7 8b 20 0f e1 7f a8 60 6c 6f 33 36 5f bc 2a 93 .. ....`lo36_.*. 00e0 df f9 9c db 91 d8 71 ce ea 65 d5 0b 4d 98 20 8f ......q..e..M. . 00f0 f1 8d d9 6e 2c f8 32 a6 2d 6a f7 7e aa 7b 8f 01 ...n,.2.-j.~.{.. 0100 39 76 b3 40 72 d9 bd a8 97 8a 04 91 b4 74 d8 96 9v.@r........t.. 0110 de 39 88 9e e5 27 ba 85 f0 3f 31 3a 6a 00 2c e0 .9...'...?1:j.,. 0120 df a5 02 4a 3e f1 e6 5b 26 ae f9 d3 3c e9 19 f0 ...J>..[&...<... 0130 eb f1 5c 75 a9 4e dd c8 1e 29 40 cd b7 51 2d 0a ..\u.N...)@..Q-. 0140 fa 59 99 c1 b7 ab 71 38 96 9b 02 43 ba a1 2c c9 .Y....q8...C..,. 0150 bb 54 a1 87 74 a7 fa 10 c8 6e 42 e9 cb 79 bc 48 .T..t....nB..y.H 0160 17 70 8e 94 b2 28 16 15 bf ce 5f 41 df 60 .p...(...._A.` Frame 70 (366 bytes on wire, 366 bytes captured) Arrival Time: Feb 25, 2010 15:05:57.069640000 [Time delta from previous captured frame: 0.000014000 seconds] [Time delta from previous displayed frame: 0.000014000 seconds] [Time since reference or first frame: 47.532572000 seconds] Frame Number: 70 Frame Length: 366 bytes Capture Length: 366 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.130 (165.227.249.130), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 352 Identification: 0x0008 (8) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x4a9c [correct] [Good: True] [Bad : False] Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.125 (165.227.249.125) Encapsulating Security Payload ESP SPI: 0xe9d7c757 ESP Sequence: 9 0000 00 09 5b 2b a8 d7 00 0c 29 64 f8 4a 08 00 45 00 ..[+....)d.J..E. 0010 01 60 00 08 40 00 f0 32 4a 9c a5 e3 f9 82 a5 e3 .`..@..2J....... 0020 f9 7d e9 d7 c7 57 00 00 00 09 b0 e0 a1 af 78 25 .}...W........x% 0030 17 50 8a 93 70 e0 0a 09 2a 64 41 8a 54 f2 46 54 .P..p...*dA.T.FT 0040 68 e3 8d 79 d9 f7 39 51 02 45 83 98 2c 73 3b 54 h..y..9Q.E..,s;T 0050 b9 d6 ca bf 93 29 32 91 3b 30 9e 23 2e 7a 7b 07 .....)2.;0.#.z{. 0060 1f 40 6c 54 e8 64 b2 4a ca 36 63 f6 75 01 e7 28 .@lT.d.J.6c.u..( 0070 e0 0b 31 30 fd 6e 54 5e ec be 5d fc e1 d6 75 f1 ..10.nT^..]...u. 0080 17 7a 6c f9 45 74 22 78 cd a4 36 55 a8 b1 d0 08 .zl.Et"x..6U.... 0090 ff f0 f1 79 dd 9e 7a cc e1 d6 12 69 06 50 fd 81 ...y..z....i.P.. 00a0 d7 fb 83 c2 fd b8 58 e5 0c d1 cb 2e 26 64 36 26 ......X.....&d6& 00b0 50 19 59 e8 de 57 98 5d 32 45 79 85 1e ad 6c ab P.Y..W.]2Ey...l. 00c0 a0 9f 38 bf 3a 10 7c 44 90 2d 8c 2e 4e d4 0a d8 ..8.:.|D.-..N... 00d0 c7 8b 20 0f e1 7f a8 60 6c 6f 33 36 5f bc 2a 93 .. ....`lo36_.*. 00e0 df f9 9c db 91 d8 71 ce ea 65 d5 0b 4d 98 20 8f ......q..e..M. . 00f0 f1 8d d9 6e 2c f8 32 a6 2d 6a f7 7e aa 7b 8f 01 ...n,.2.-j.~.{.. 0100 39 76 b3 40 72 d9 bd a8 97 8a 04 91 b4 74 d8 96 9v.@r........t.. 0110 de 39 88 9e e5 27 ba 85 f0 3f 31 3a 6a 00 2c e0 .9...'...?1:j.,. 0120 df a5 02 4a 3e f1 e6 5b 26 ae f9 d3 3c e9 19 f0 ...J>..[&...<... 0130 eb f1 5c 75 a9 4e dd c8 1e 29 40 cd b7 51 2d 0a ..\u.N...)@..Q-. 0140 fa 59 99 c1 b7 ab 71 38 96 9b 02 43 ba a1 2c c9 .Y....q8...C..,. 0150 bb 54 a1 87 74 a7 fa 10 c8 6e 42 e9 cb 79 bc 48 .T..t....nB..y.H 0160 17 70 8e 94 b2 28 16 15 bf ce 5f 41 df 60 .p...(...._A.` Frame 71 (110 bytes on wire, 110 bytes captured) Arrival Time: Feb 25, 2010 15:05:57.223082000 [Time delta from previous captured frame: 0.153442000 seconds] [Time delta from previous displayed frame: 0.153442000 seconds] [Time since reference or first frame: 47.686014000 seconds] Frame Number: 71 Frame Length: 110 bytes Capture Length: 110 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0xfb19 (64281) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x628b [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0xc8c48114 ESP Sequence: 11 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 60 fb 19 00 00 1e 32 62 8b a5 e3 f9 7d a5 e3 .`.....2b....}.. 0020 f9 82 c8 c4 81 14 00 00 00 0b 32 cc 40 e6 c4 10 ..........2.@... 0030 95 0a 2d e1 02 c2 96 df 4d da b4 15 3d 72 9a eb ..-.....M...=r.. 0040 4a 77 15 8e 51 85 fd 9f 5d 92 ae 91 af d9 68 c3 Jw..Q...].....h. 0050 6f 5d 18 e6 e5 c0 d8 49 e0 bd 86 14 51 f5 6f 63 o].....I....Q.oc 0060 f5 24 23 c2 70 a6 3a 4e 0d ce 22 de a1 98 .$#.p.:N.."... Frame 72 (126 bytes on wire, 126 bytes captured) Arrival Time: Feb 25, 2010 15:05:59.407870000 [Time delta from previous captured frame: 2.184788000 seconds] [Time delta from previous displayed frame: 2.184788000 seconds] [Time since reference or first frame: 49.870802000 seconds] Frame Number: 72 Frame Length: 126 bytes Capture Length: 126 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x609c (24732) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xfcf8 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0xc8c48114 ESP Sequence: 12 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 70 60 9c 00 00 1e 32 fc f8 a5 e3 f9 7d a5 e3 .p`....2.....}.. 0020 f9 82 c8 c4 81 14 00 00 00 0c 86 14 51 f5 6f 63 ............Q.oc 0030 f5 24 ee 92 91 1f 91 a3 53 f3 4c 6d c2 d6 b2 1c .$......S.Lm.... 0040 a1 b7 7e 8f 21 1e d5 66 bb d1 c4 a0 f7 fa e7 56 ..~.!..f.......V 0050 72 5d 63 0f b0 1b d2 12 d9 d1 33 dd d1 aa 16 71 r]c.......3....q 0060 db 69 4e 2a db 24 9e c5 65 d2 a5 af 9a 59 de 41 .iN*.$..e....Y.A 0070 e3 72 28 72 97 7c 75 39 bf c6 29 12 b5 5d .r(r.|u9..)..] Frame 73 (126 bytes on wire, 126 bytes captured) Arrival Time: Feb 25, 2010 15:05:59.411262000 [Time delta from previous captured frame: 0.003392000 seconds] [Time delta from previous displayed frame: 0.003392000 seconds] [Time since reference or first frame: 49.874194000 seconds] Frame Number: 73 Frame Length: 126 bytes Capture Length: 126 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.130 (165.227.249.130), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0009 (9) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b8b [correct] [Good: True] [Bad : False] Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.125 (165.227.249.125) Encapsulating Security Payload ESP SPI: 0xe9d7c757 ESP Sequence: 10 0000 00 09 5b 2b a8 d7 00 0c 29 64 f8 4a 08 00 45 00 ..[+....)d.J..E. 0010 00 70 00 09 00 00 f0 32 8b 8b a5 e3 f9 82 a5 e3 .p.....2........ 0020 f9 7d e9 d7 c7 57 00 00 00 0a 06 31 87 6d d4 46 .}...W.....1.m.F 0030 82 3a ea 4d 05 1d 46 dd 45 f8 10 e0 c5 fb 7b d0 .:.M..F.E.....{. 0040 77 3b 1f b1 1f 3c 6d 2e b7 25 85 67 01 c0 40 72 w;... 0090 a5 02 cf 5f 49 1c ca 2b 3f e5 0d b7 86 21 ca 08 ..._I..+?....!.. 00a0 35 4c 06 60 aa 1c 8b cf ed 93 63 61 2d a9 b5 1b 5L.`......ca-... 00b0 2d 4b aa 59 05 9f aa fe 91 fe 87 d9 72 18 7a 65 -K.Y........r.ze 00c0 a8 21 60 fe a4 cd af a0 b7 2c 9e 3d dc 8d c7 37 .!`......,.=...7 00d0 d1 71 0f 11 ef 08 72 44 81 84 f0 b0 9b 1e 23 07 .q....rD......#. 00e0 68 d9 e9 26 8b 4a 84 9b f3 04 45 45 7f 12 a7 99 h..&.J....EE.... 00f0 6a e9 25 3e 39 50 c2 d6 41 be e1 8a eb cf d7 5f j.%>9P..A......_ 0100 0c da 66 d6 e6 51 52 50 73 34 9f 3b b9 fe 54 3e ..f..QRPs4.;..T> 0110 09 69 29 e8 56 56 4d cd 87 e8 10 12 cd 34 a7 17 .i).VVM......4.. 0120 32 63 c8 d4 bf d9 79 87 2c 24 e5 c9 3d 3b 35 67 2c....y.,$..=;5g 0130 0d 62 bf f6 fc ea cc f5 bd b9 72 2a f3 dc 29 73 .b........r*..)s 0140 20 8a 88 c4 d2 c8 ..... Frame 76 (94 bytes on wire, 94 bytes captured) Arrival Time: Feb 25, 2010 15:05:59.857991000 [Time delta from previous captured frame: 0.000293000 seconds] [Time delta from previous displayed frame: 0.000293000 seconds] [Time since reference or first frame: 50.320923000 seconds] Frame Number: 76 Frame Length: 94 bytes Capture Length: 94 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.130 (165.227.249.130), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbd5 [correct] [Good: True] [Bad : False] Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x78ef [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 102E095949085170 Responder cookie: B134A567E87E3363 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xff5c5f40 Length: 52 Encrypted payload (24 bytes) 0000 00 09 5b 2b a8 d7 00 0c 29 64 f8 4a 08 00 45 00 ..[+....)d.J..E. 0010 00 50 00 00 40 00 40 11 fb d5 a5 e3 f9 82 a5 e3 .P..@.@......... 0020 f9 7d 01 f4 01 f4 00 3c 78 ef 10 2e 09 59 49 08 .}..........1@}...... 0060 be ca 41 81 d5 08 37 fd 02 ed 54 a0 a0 2d 2a dc ..A...7...T..-*. 0070 97 9f eb b5 2b e1 74 b8 1e 47 ac 48 2a 58 ....+.t..G.H*X Frame 80 (126 bytes on wire, 126 bytes captured) Arrival Time: Feb 25, 2010 15:06:00.412420000 [Time delta from previous captured frame: 0.000013000 seconds] [Time delta from previous displayed frame: 0.000013000 seconds] [Time since reference or first frame: 50.875352000 seconds] Frame Number: 80 Frame Length: 126 bytes Capture Length: 126 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.130 (165.227.249.130), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x000a (10) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b8a [correct] [Good: True] [Bad : False] Source: 165.227.249.130 (165.227.249.130) Destination: 165.227.249.125 (165.227.249.125) Encapsulating Security Payload ESP SPI: 0xe9d7c757 ESP Sequence: 11 0000 00 09 5b 2b a8 d7 00 0c 29 64 f8 4a 08 00 45 00 ..[+....)d.J..E. 0010 00 70 00 0a 00 00 f0 32 8b 8a a5 e3 f9 82 a5 e3 .p.....2........ 0020 f9 7d e9 d7 c7 57 00 00 00 0b 37 73 de 4d dd 45 .}...W....7s.M.E 0030 11 0e ad d5 57 2b 66 3b ca 73 66 c3 b3 a7 2e c6 ....W+f;.sf..... 0040 2b 64 41 c6 7b 0d c8 14 24 ea bb 70 93 1b d2 1c +dA.{...$..p.... 0050 cd 3e 9d ae a2 a0 aa 31 40 7d 90 ae b7 df 10 e2 .>.....1@}...... 0060 be ca 41 81 d5 08 37 fd 02 ed 54 a0 a0 2d 2a dc ..A...7...T..-*. 0070 97 9f eb b5 2b e1 74 b8 1e 47 ac 48 2a 58 ....+.t..G.H*X Frame 81 (142 bytes on wire, 142 bytes captured) Arrival Time: Feb 25, 2010 15:06:02.069997000 [Time delta from previous captured frame: 1.657577000 seconds] [Time delta from previous displayed frame: 1.657577000 seconds] [Time since reference or first frame: 52.532929000 seconds] Frame Number: 81 Frame Length: 142 bytes Capture Length: 142 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Destination: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) Address: 00:0c:29:64:f8:4a (00:0c:29:64:f8:4a) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.130 (165.227.249.130) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0xee89 (61065) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x6efb [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.130 (165.227.249.130) Encapsulating Security Payload ESP SPI: 0xc8c48114 ESP Sequence: 14 0000 00 0c 29 64 f8 4a 00 09 5b 2b a8 d7 08 00 45 00 ..)d.J..[+....E. 0010 00 80 ee 89 00 00 1e 32 6e fb a5 e3 f9 7d a5 e3 .......2n....}.. 0020 f9 82 c8 c4 81 14 00 00 00 0e 49 70 62 7b da 5e ..........Ipb{.^ 0030 13 4b da 4d 87 c7 cb 8c 07 af 12 88 86 78 ab b5 .K.M.........x.. 0040 d6 7d 33 8a 06 15 bd fa 6d 4e f1 07 8f 7b 5d 2f .}3.....mN...{]/ 0050 f9 57 a4 fc 07 95 ab 18 89 31 84 a6 d4 93 5f d4 .W.......1...._. 0060 fe e4 5f 11 8e bb 40 80 57 34 2a 29 ca 33 b0 e5 .._...@.W4*).3.. 0070 94 f3 b2 9f 4e 3a 37 a2 d2 b3 c3 bc 9b df 9b 81 ....N:7......... 0080 5d f9 3f 1b 73 07 1b ad f3 1f 60 9f 1b cc ].?.s.....`...