Frame 1 (170 bytes on wire, 170 bytes captured) Arrival Time: Nov 21, 2007 14:20:04.195153000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 170 bytes Capture Length: 170 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61), Dst: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Destination: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.132 (165.227.249.132), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xe0 (DSCP 0x38: Class Selector 7; ECN: 0x00) 1110 00.. = Differentiated Services Codepoint: Class Selector 7 (0x38) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 156 Identification: 0x0eb7 (3767) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2be8 [correct] Good: True Bad : False Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 136 Checksum: 0x7e88 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xDE9F38BC0BFB10E9 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 128 Security Association payload Next payload: Vendor ID (13) Length: 68 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 56 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 2 Transform payload # 1 Next payload: Transform (3) Length: 24 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): MD5 (1) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Transform payload # 2 Next payload: NONE (0) Length: 24 Transform number: 2 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0x424E455300000007 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 0c 29 9c c5 d4 00 e0 7b 00 0d 61 08 00 45 e0 ..).....{..a..E. 0010 00 9c 0e b7 00 00 40 11 2b e8 a5 e3 f9 84 a5 e3 ......@.+....... 0020 f9 86 01 f4 01 f4 00 88 7e 88 de 9f 38 bc 0b fb ........~...8... 0030 10 e9 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 80 0d 00 00 44 00 00 00 01 00 00 .........D...... 0050 00 01 00 00 00 38 01 01 00 02 03 00 00 18 01 01 .....8.......... 0060 00 00 80 01 00 05 80 02 00 01 80 03 00 01 80 04 ................ 0070 00 02 00 00 00 18 02 01 00 00 80 01 00 05 80 02 ................ 0080 00 02 80 03 00 01 80 04 00 02 0d 00 00 0c 42 4e ..............BN 0090 45 53 00 00 00 07 00 00 00 14 af ca d7 13 68 a1 ES............h. 00a0 f1 c9 6b 86 96 fc 77 57 01 00 ..k...wW.. Frame 2 (122 bytes on wire, 122 bytes captured) Arrival Time: Nov 21, 2007 14:20:04.353917000 Time delta from previous packet: 0.158764000 seconds Time since reference or first frame: 0.158764000 seconds Frame Number: 2 Packet Length: 122 bytes Capture Length: 122 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4), Dst: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x5b1b (23323) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe093 [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.132 (165.227.249.132) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x48bb [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xDE9F38BC0BFB10E9 Responder cookie: 0xD104C5309CAC9515 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 2 Next payload: NONE (0) Length: 32 Transform number: 2 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 e0 7b 00 0d 61 00 0c 29 9c c5 d4 08 00 45 00 ..{..a..).....E. 0010 00 6c 5b 1b 00 00 40 11 e0 93 a5 e3 f9 86 a5 e3 .l[...@......... 0020 f9 84 01 f4 01 f4 00 58 48 bb de 9f 38 bc 0b fb .......XH...8... 0030 10 e9 d1 04 c5 30 9c ac 95 15 01 10 02 00 00 00 .....0.......... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 02 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 70 80 ........p. Frame 3 (226 bytes on wire, 226 bytes captured) Arrival Time: Nov 21, 2007 14:20:04.432981000 Time delta from previous packet: 0.079064000 seconds Time since reference or first frame: 0.237828000 seconds Frame Number: 3 Packet Length: 226 bytes Capture Length: 226 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61), Dst: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Destination: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.132 (165.227.249.132), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xe0 (DSCP 0x38: Class Selector 7; ECN: 0x00) 1110 00.. = Differentiated Services Codepoint: Class Selector 7 (0x38) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0eb9 (3769) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2bae [correct] Good: True Bad : False Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0xabb6 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xDE9F38BC0BFB10E9 Responder cookie: 0xD104C5309CAC9515 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 0c 29 9c c5 d4 00 e0 7b 00 0d 61 08 00 45 e0 ..).....{..a..E. 0010 00 d4 0e b9 00 00 40 11 2b ae a5 e3 f9 84 a5 e3 ......@.+....... 0020 f9 86 01 f4 01 f4 00 c0 ab b6 de 9f 38 bc 0b fb ............8... 0030 10 e9 d1 04 c5 30 9c ac 95 15 04 10 02 00 00 00 .....0.......... 0040 00 00 00 00 00 b8 0a 00 00 84 d4 fc 88 01 bf 86 ................ 0050 32 3d 76 35 34 80 0e 3b 03 84 2e cf 2f 5d 16 4b 2=v54..;..../].K 0060 f5 39 73 1b 69 dc 23 72 d9 53 37 97 c3 0d 26 90 .9s.i.#r.S7...&. 0070 2f ab af 0a 0b 31 6c f6 49 30 44 ca 30 52 e8 ac /....1l.I0D.0R.. 0080 77 00 a8 a0 02 df 2a 76 7b 02 51 a8 64 77 1d d6 w.....*v{.Q.dw.. 0090 4c c2 f1 81 d7 ed d9 e4 64 ce bb 54 0a 62 d8 e3 L.......d..T.b.. 00a0 28 f4 91 c9 27 25 55 18 f1 75 f2 d1 40 8b 21 4f (...'%U..u..@.!O 00b0 65 eb ae ac 29 11 f7 10 1f 23 26 d9 94 66 d8 3c e...)....#&..f.< 00c0 2a 23 a0 c8 5e 24 1c eb 6d 53 00 00 00 18 69 33 *#..^$..mS....i3 00d0 14 68 a6 c0 19 85 fd 9c ca 9c 91 ca 61 84 55 98 .h..........a.U. 00e0 9e 77 .w Frame 4 (270 bytes on wire, 270 bytes captured) Arrival Time: Nov 21, 2007 14:20:04.524833000 Time delta from previous packet: 0.091852000 seconds Time since reference or first frame: 0.329680000 seconds Frame Number: 4 Packet Length: 270 bytes Capture Length: 270 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4), Dst: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x5c1b (23579) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xdeff [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.132 (165.227.249.132) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x4d8b [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xDE9F38BC0BFB10E9 Responder cookie: 0xD104C5309CAC9515 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 68 Nonce Data 0000 00 e0 7b 00 0d 61 00 0c 29 9c c5 d4 08 00 45 00 ..{..a..).....E. 0010 01 00 5c 1b 00 00 40 11 de ff a5 e3 f9 86 a5 e3 ..\...@......... 0020 f9 84 01 f4 01 f4 00 ec 4d 8b de 9f 38 bc 0b fb ........M...8... 0030 10 e9 d1 04 c5 30 9c ac 95 15 04 10 02 00 00 00 .....0.......... 0040 00 00 00 00 00 e4 0a 00 00 84 37 f3 25 e9 26 2c ..........7.%.&, 0050 d3 17 f6 a6 85 35 55 e6 e7 78 f0 80 47 1b 1c a4 .....5U..x..G... 0060 f6 4e bf d1 f0 7e 2a 66 51 5c 30 19 a4 4c d4 b1 .N...~*fQ\0..L.. 0070 b9 2a 66 1e 84 a7 df 5b 01 d2 82 b9 63 f8 a2 d1 .*f....[....c... 0080 88 d5 6a 81 40 4d c5 86 af 42 df f3 7d 97 b9 02 ..j.@M...B..}... 0090 2a f8 99 4e 69 84 89 47 eb d4 b1 02 25 dc 40 93 *..Ni..G....%.@. 00a0 c5 45 7c 6d 06 92 fc 50 9a c0 35 ea 76 d8 ea 97 .E|m...P..5.v... 00b0 0f e4 90 94 a7 bd 6c 69 aa f0 31 7f 98 4e c7 eb ......li..1..N.. 00c0 41 e7 ae 25 6f 4d b4 55 4e e4 00 00 00 44 ed 38 A..%oM.UN....D.8 00d0 90 c9 4d 49 a5 60 c9 f0 3d 71 e4 87 c6 fd f4 d3 ..MI.`..=q...... 00e0 f3 2a 3d d0 59 3e 0d 48 a6 37 c5 a1 79 78 23 2e .*=.Y>.H.7..yx#. 00f0 6e 9d 50 10 6a d4 19 fc 6b 89 3d 65 4f f1 61 55 n.P.j...k.=eO.aU 0100 be 32 69 2c f9 64 2e 57 b9 fa 77 49 06 c2 .2i,.d.W..wI.. Frame 5 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 21, 2007 14:20:04.677962000 Time delta from previous packet: 0.153129000 seconds Time since reference or first frame: 0.482809000 seconds Frame Number: 5 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61), Dst: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Destination: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.132 (165.227.249.132), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xe0 (DSCP 0x38: Class Selector 7; ECN: 0x00) 1110 00.. = Differentiated Services Codepoint: Class Selector 7 (0x38) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0eba (3770) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2c09 [correct] Good: True Bad : False Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x8fde [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xDE9F38BC0BFB10E9 Responder cookie: 0xD104C5309CAC9515 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 9c c5 d4 00 e0 7b 00 0d 61 08 00 45 e0 ..).....{..a..E. 0010 00 78 0e ba 00 00 40 11 2c 09 a5 e3 f9 84 a5 e3 .x....@.,....... 0020 f9 86 01 f4 01 f4 00 64 8f de de 9f 38 bc 0b fb .......d....8... 0030 10 e9 d1 04 c5 30 9c ac 95 15 05 10 02 01 00 00 .....0.......... 0040 00 00 00 00 00 5c 68 81 21 1c a1 a8 8d e7 95 52 .....\h.!......R 0050 32 20 a3 85 c8 9d d0 d2 0a 69 50 4f a8 5d c6 53 2 .......iPO.].S 0060 21 3f 69 97 0a 65 7a d3 68 06 5a c5 bc f7 34 51 !?i..ez.h.Z...4Q 0070 5d 52 69 60 83 07 56 3a 76 f4 f0 b3 61 57 dc 6c ]Ri`..V:v...aW.l 0080 28 a8 91 16 de a3 (..... Frame 6 (110 bytes on wire, 110 bytes captured) Arrival Time: Nov 21, 2007 14:20:04.758745000 Time delta from previous packet: 0.080783000 seconds Time since reference or first frame: 0.563592000 seconds Frame Number: 6 Packet Length: 110 bytes Capture Length: 110 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4), Dst: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x5d1b (23835) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xde9f [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.132 (165.227.249.132) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x4351 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xDE9F38BC0BFB10E9 Responder cookie: 0xD104C5309CAC9515 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 9c c5 d4 08 00 45 00 ..{..a..).....E. 0010 00 60 5d 1b 00 00 40 11 de 9f a5 e3 f9 86 a5 e3 .`]...@......... 0020 f9 84 01 f4 01 f4 00 4c 43 51 de 9f 38 bc 0b fb .......LCQ..8... 0030 10 e9 d1 04 c5 30 9c ac 95 15 05 10 02 01 00 00 .....0.......... 0040 00 00 00 00 00 44 0b 2b c4 b7 a6 52 ea e9 63 78 .....D.+...R..cx 0050 92 6a e8 fb 35 54 fa 67 17 78 14 f6 ef 40 95 1e .j..5T.g.x...@.. 0060 58 e5 bf d2 7e 11 df 69 3c 9c f1 57 b1 0d X...~..i<..W.. Frame 7 (342 bytes on wire, 342 bytes captured) Arrival Time: Nov 21, 2007 14:20:04.971249000 Time delta from previous packet: 0.212504000 seconds Time since reference or first frame: 0.776096000 seconds Frame Number: 7 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61), Dst: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Destination: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.132 (165.227.249.132), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xe0 (DSCP 0x38: Class Selector 7; ECN: 0x00) 1110 00.. = Differentiated Services Codepoint: Class Selector 7 (0x38) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0eec (3820) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2b07 [correct] Good: True Bad : False Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xb827 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xDE9F38BC0BFB10E9 Responder cookie: 0xD104C5309CAC9515 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x89E263D3 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 9c c5 d4 00 e0 7b 00 0d 61 08 00 45 e0 ..).....{..a..E. 0010 01 48 0e ec 00 00 40 11 2b 07 a5 e3 f9 84 a5 e3 .H....@.+....... 0020 f9 86 01 f4 01 f4 01 34 b8 27 de 9f 38 bc 0b fb .......4.'..8... 0030 10 e9 d1 04 c5 30 9c ac 95 15 08 10 20 01 89 e2 .....0...... ... 0040 63 d3 00 00 01 2c 82 e8 b3 ab e2 59 3e f6 19 21 c....,.....Y>..! 0050 57 f6 38 b9 87 12 38 1f 07 67 bd 3c 0d 46 72 ad W.8...8..g.<.Fr. 0060 73 db a4 21 fb 77 b2 70 ee 82 25 bd e7 61 54 d7 s..!.w.p..%..aT. 0070 34 3c f5 4f e2 f1 51 00 5b 36 28 f0 9c 0b 07 e4 4<.O..Q.[6(..... 0080 e5 93 88 ac b2 9a 89 2b 02 af f0 92 2c 26 0d 1b .......+....,&.. 0090 ad b7 50 14 3c 0e 03 41 58 ea c9 03 3e 7b 8f ff ..P.<..AX...>{.. 00a0 ee 72 48 ab 6b c2 df ac c6 03 62 f6 35 61 53 51 .rH.k.....b.5aSQ 00b0 c7 1a 62 70 e6 e9 38 be a2 43 00 73 aa 48 54 5b ..bp..8..C.s.HT[ 00c0 09 0c 44 ca 45 97 33 d1 1a 07 46 64 49 44 62 fc ..D.E.3...FdIDb. 00d0 95 65 e6 3e e2 78 41 99 7d c9 65 08 c3 fe fb d8 .e.>.xA.}.e..... 00e0 d1 b3 1e ed a9 c7 8e 8f 59 44 a9 51 c2 ec 22 08 ........YD.Q..". 00f0 02 9c 18 b0 f1 c1 65 b2 cf 8f 63 d9 27 ee cb a7 ......e...c.'... 0100 2a 35 62 e7 8e 45 7b 8f f7 a9 17 e8 21 1a db 35 *5b..E{.....!..5 0110 25 7c 42 1f e7 b0 66 6d 49 a8 02 6b e7 3d ef 73 %|B...fmI..k.=.s 0120 62 cb 7e 46 57 2f 18 f1 77 51 ce ec 8f 9c 56 57 b.~FW/..wQ....VW 0130 39 99 5a 46 1f e8 93 57 c1 59 5d f4 ce 9e 4e ea 9.ZF...W.Y]...N. 0140 e4 8c 99 2c 1c b9 50 9d 5d 22 cf dd 89 04 f3 fb ...,..P.]"...... 0150 6d 9e 2a aa c0 9c m.*... Frame 8 (382 bytes on wire, 382 bytes captured) Arrival Time: Nov 21, 2007 14:20:05.354100000 Time delta from previous packet: 0.382851000 seconds Time since reference or first frame: 1.158947000 seconds Frame Number: 8 Packet Length: 382 bytes Capture Length: 382 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4), Dst: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 368 Identification: 0x5e1b (24091) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xdc8f [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.132 (165.227.249.132) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 348 Checksum: 0xef71 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xDE9F38BC0BFB10E9 Responder cookie: 0xD104C5309CAC9515 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x89E263D3 Length: 340 Encrypted payload (312 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 9c c5 d4 08 00 45 00 ..{..a..).....E. 0010 01 70 5e 1b 00 00 40 11 dc 8f a5 e3 f9 86 a5 e3 .p^...@......... 0020 f9 84 01 f4 01 f4 01 5c ef 71 de 9f 38 bc 0b fb .......\.q..8... 0030 10 e9 d1 04 c5 30 9c ac 95 15 08 10 20 01 89 e2 .....0...... ... 0040 63 d3 00 00 01 54 83 77 2e b7 95 a9 17 18 7c bf c....T.w......|. 0050 b6 4f f9 56 01 3a 4d cf fc a3 28 bf 64 c6 cb 3d .O.V.:M...(.d..= 0060 c3 ab 22 e9 43 26 6c 7b a1 be 1f f2 40 25 6b cb ..".C&l{....@%k. 0070 19 91 66 af 5d 19 96 af 0f a4 9d d6 72 ab 79 f9 ..f.].......r.y. 0080 00 a0 07 b5 b9 6c 63 76 e0 a7 46 d1 8c 92 3c b9 .....lcv..F...<. 0090 23 62 ed ad 82 e6 cc 81 64 e5 de 26 8b 2d 01 e1 #b......d..&.-.. 00a0 af a4 6f a1 60 9c ec 09 66 8e 56 bb 0b 6a 06 26 ..o.`...f.V..j.& 00b0 19 bc c6 bb 0f 3c f9 00 8b 98 be c8 35 00 74 a4 .....<......5.t. 00c0 ad 77 27 b3 94 6c e1 e1 44 54 47 51 d5 9f 09 40 .w'..l..DTGQ...@ 00d0 63 dd ad 54 23 a7 f4 34 b4 96 49 20 1a ca 80 80 c..T#..4..I .... 00e0 ba c6 45 63 9c 13 92 e6 c7 23 e9 a6 42 10 d3 49 ..Ec.....#..B..I 00f0 a2 29 46 ef 49 d8 39 5a 37 c3 0b 7b 69 91 b7 e8 .)F.I.9Z7..{i... 0100 ec e9 68 b6 c9 3e f1 7a ac 3e e6 c9 6f df 9e b9 ..h..>.z.>..o... 0110 3d e7 b2 c5 77 ff 0b ea 63 b3 4c 33 aa 87 02 ba =...w...c.L3.... 0120 91 04 75 1d 6f bd 5c 15 cf 6e 57 59 d0 17 f6 6d ..u.o.\..nWY...m 0130 a1 ac 73 e8 f8 b7 dd 2d a4 74 ee 44 b8 c9 16 d5 ..s....-.t.D.... 0140 a1 ba 79 c8 50 86 b6 d5 cb 04 77 84 b8 34 0b b7 ..y.P.....w..4.. 0150 1d 75 c6 57 7f f5 43 ed f1 89 da 86 60 33 2c 89 .u.W..C.....`3,. 0160 11 44 ab 08 3a 7d 6d 57 50 91 84 2a 02 4c 07 3d .D..:}mWP..*.L.= 0170 a7 eb 41 db 32 6e 1e 6b fb 03 07 d4 9f 01 ..A.2n.k...... Frame 9 (94 bytes on wire, 94 bytes captured) Arrival Time: Nov 21, 2007 14:20:05.463591000 Time delta from previous packet: 0.109491000 seconds Time since reference or first frame: 1.268438000 seconds Frame Number: 9 Packet Length: 94 bytes Capture Length: 94 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61), Dst: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Destination: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.132 (165.227.249.132), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0xe0 (DSCP 0x38: Class Selector 7; ECN: 0x00) 1110 00.. = Differentiated Services Codepoint: Class Selector 7 (0x38) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0ef1 (3825) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x2bfa [correct] Good: True Bad : False Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0xdd1f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xDE9F38BC0BFB10E9 Responder cookie: 0xD104C5309CAC9515 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x89E263D3 Length: 52 Encrypted payload (24 bytes) 0000 00 0c 29 9c c5 d4 00 e0 7b 00 0d 61 08 00 45 e0 ..).....{..a..E. 0010 00 50 0e f1 00 00 40 11 2b fa a5 e3 f9 84 a5 e3 .P....@.+....... 0020 f9 86 01 f4 01 f4 00 3c dd 1f de 9f 38 bc 0b fb .......<....8... 0030 10 e9 d1 04 c5 30 9c ac 95 15 08 10 20 01 89 e2 .....0...... ... 0040 63 d3 00 00 00 34 66 e9 06 4e e9 9a d1 3e 2a 00 c....4f..N...>*. 0050 65 38 6e 4d e5 fd 35 7b 55 69 93 84 a3 6a e8nM..5{Ui...j Frame 10 (126 bytes on wire, 126 bytes captured) Arrival Time: Nov 21, 2007 14:20:08.726411000 Time delta from previous packet: 3.262820000 seconds Time since reference or first frame: 4.531258000 seconds Frame Number: 10 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61), Dst: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Destination: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.132 (165.227.249.132), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0f06 (3846) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x6d83 [correct] Good: True Bad : False Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0xc60cf85d Sequence: 1 Data (84 bytes) 0000 00 0c 29 9c c5 d4 00 e0 7b 00 0d 61 08 00 45 00 ..).....{..a..E. 0010 00 70 0f 06 00 00 ff 32 6d 83 a5 e3 f9 84 a5 e3 .p.....2m....... 0020 f9 86 c6 0c f8 5d 00 00 00 01 4e d7 ef 19 24 cb .....]....N...$. 0030 e7 8e cb a0 aa 9b e6 c1 cd a1 91 71 63 b0 ab 1c ...........qc... 0040 4a 15 46 27 e2 13 50 57 9e 9d 5f 45 1e a5 b8 b3 J.F'..PW.._E.... 0050 76 80 d3 09 15 8f 9d 06 e2 ad b9 85 b6 89 f5 ab v............... 0060 5e 58 61 1b 3b 3a 8f 34 d3 bd b8 78 fc aa d7 44 ^Xa.;:.4...x...D 0070 d1 0b ba 9e 74 68 ce dd 9d 8a 92 fa 74 c2 ....th......t. Frame 11 (126 bytes on wire, 126 bytes captured) Arrival Time: Nov 21, 2007 14:20:08.771047000 Time delta from previous packet: 0.044636000 seconds Time since reference or first frame: 4.575894000 seconds Frame Number: 11 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4), Dst: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x611b (24859) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0x9b6e [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.132 (165.227.249.132) Encapsulating Security Payload SPI: 0x000674bb Sequence: 1 Data (84 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 9c c5 d4 08 00 45 00 ..{..a..).....E. 0010 00 70 61 1b 00 00 7f 32 9b 6e a5 e3 f9 86 a5 e3 .pa....2.n...... 0020 f9 84 00 06 74 bb 00 00 00 01 6c dc 85 1f ff fd ....t.....l..... 0030 c1 ae 8b 16 7f 1f 36 68 6a de 11 c0 9a ef 23 38 ......6hj.....#8 0040 4e 1b c6 c7 17 4f e4 94 7d db f4 01 92 3d 68 f2 N....O..}....=h. 0050 8c dc a8 11 3a 87 0d 38 bc db 14 9b 5a 8c 21 51 ....:..8....Z.!Q 0060 f3 7c ae 69 5a e2 7e fe 2c b8 2c 2f f2 a9 c6 33 .|.iZ.~.,.,/...3 0070 cd 4f 69 d0 7e b8 e3 8e b7 7f 3a b6 41 98 .Oi.~.....:.A. Frame 12 (126 bytes on wire, 126 bytes captured) Arrival Time: Nov 21, 2007 14:20:09.692079000 Time delta from previous packet: 0.921032000 seconds Time since reference or first frame: 5.496926000 seconds Frame Number: 12 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61), Dst: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Destination: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.132 (165.227.249.132), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0f07 (3847) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x6d82 [correct] Good: True Bad : False Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0xc60cf85d Sequence: 2 Data (84 bytes) 0000 00 0c 29 9c c5 d4 00 e0 7b 00 0d 61 08 00 45 00 ..).....{..a..E. 0010 00 70 0f 07 00 00 ff 32 6d 82 a5 e3 f9 84 a5 e3 .p.....2m....... 0020 f9 86 c6 0c f8 5d 00 00 00 02 b8 78 fc aa d7 44 .....].....x...D 0030 d1 0b 16 97 d6 28 5e 94 19 a7 3f e7 e9 09 8c 92 .....(^...?..... 0040 90 10 e5 e4 28 88 ec 0a ca a9 0c fe 0d 0e 14 53 ....(..........S 0050 de 68 ac 48 5d 1c 2e 09 c4 80 b5 d3 ae af bd 84 .h.H]........... 0060 20 50 44 a9 c8 f0 c6 03 59 4d 7f 71 68 0d bd d2 PD.....YM.qh... 0070 ce 5a f6 07 d4 40 93 82 3d fe f2 a3 72 74 .Z...@..=...rt Frame 13 (126 bytes on wire, 126 bytes captured) Arrival Time: Nov 21, 2007 14:20:09.724559000 Time delta from previous packet: 0.032480000 seconds Time since reference or first frame: 5.529406000 seconds Frame Number: 13 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4), Dst: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x631b (25371) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0x996e [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.132 (165.227.249.132) Encapsulating Security Payload SPI: 0x000674bb Sequence: 2 Data (84 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 9c c5 d4 08 00 45 00 ..{..a..).....E. 0010 00 70 63 1b 00 00 7f 32 99 6e a5 e3 f9 86 a5 e3 .pc....2.n...... 0020 f9 84 00 06 74 bb 00 00 00 02 6c dc 85 1f ff fd ....t.....l..... 0030 c1 ae 9c 73 df 70 41 89 31 6c c9 ae 9d fb c8 6f ...s.pA.1l.....o 0040 7a f6 ed 78 fa 35 69 c1 e3 68 e7 04 db ea 35 68 z..x.5i..h....5h 0050 dc 24 ff af 92 5c ac 46 30 d5 18 1c 7a 0f 57 34 .$...\.F0...z.W4 0060 be aa a3 31 8c ce 96 87 fd 06 dd 78 2a 18 50 3e ...1.......x*.P> 0070 00 d7 82 48 23 17 15 22 c6 76 98 84 6b ec ...H#..".v..k. Frame 14 (126 bytes on wire, 126 bytes captured) Arrival Time: Nov 21, 2007 14:20:10.628679000 Time delta from previous packet: 0.904120000 seconds Time since reference or first frame: 6.433526000 seconds Frame Number: 14 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61), Dst: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Destination: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Source: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.132 (165.227.249.132), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0f08 (3848) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x6d81 [correct] Good: True Bad : False Source: 165.227.249.132 (165.227.249.132) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0xc60cf85d Sequence: 3 Data (84 bytes) 0000 00 0c 29 9c c5 d4 00 e0 7b 00 0d 61 08 00 45 00 ..).....{..a..E. 0010 00 70 0f 08 00 00 ff 32 6d 81 a5 e3 f9 84 a5 e3 .p.....2m....... 0020 f9 86 c6 0c f8 5d 00 00 00 03 7f 71 68 0d bd d2 .....].....qh... 0030 ce 5a 0d 89 04 93 22 9f c1 fa 6b 56 c6 b3 82 9f .Z...."...kV.... 0040 24 67 df 12 ab 09 d0 54 e1 9e 5b 4c 50 c8 70 e2 $g.....T..[LP.p. 0050 12 12 c5 8f 22 88 cf e9 64 c6 bc 42 d9 13 f5 6d ...."...d..B...m 0060 37 86 d7 3f 58 d5 15 fc 52 51 86 fc 3d b5 19 3c 7..?X...RQ..=..< 0070 20 66 72 49 db a9 c4 1d 65 9b 37 0f 15 7f frI....e.7... Frame 15 (126 bytes on wire, 126 bytes captured) Arrival Time: Nov 21, 2007 14:20:10.677319000 Time delta from previous packet: 0.048640000 seconds Time since reference or first frame: 6.482166000 seconds Frame Number: 15 Packet Length: 126 bytes Capture Length: 126 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4), Dst: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Destination: 00:e0:7b:00:0d:61 (00:e0:7b:00:0d:61) Source: 00:0c:29:9c:c5:d4 (00:0c:29:9c:c5:d4) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.132 (165.227.249.132) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x651b (25883) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0x976e [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.132 (165.227.249.132) Encapsulating Security Payload SPI: 0x000674bb Sequence: 3 Data (84 bytes) 0000 00 e0 7b 00 0d 61 00 0c 29 9c c5 d4 08 00 45 00 ..{..a..).....E. 0010 00 70 65 1b 00 00 7f 32 97 6e a5 e3 f9 86 a5 e3 .pe....2.n...... 0020 f9 84 00 06 74 bb 00 00 00 03 6c dc 85 1f ff fd ....t.....l..... 0030 c1 ae 35 b4 85 44 43 08 4b 63 3a b9 70 a4 51 e1 ..5..DC.Kc:.p.Q. 0040 a7 9f 15 b1 9c 9a 62 7c 66 dd 83 79 d5 0e 9e 57 ......b|f..y...W 0050 b6 41 74 fc 16 53 f1 8e 38 f5 24 a8 13 03 4f 0b .At..S..8.$...O. 0060 fc b4 2a 19 15 02 4c 80 13 6c 3b f6 ea 68 48 d6 ..*...L..l;..hH. 0070 e7 10 69 62 76 e4 96 6b 75 ff a6 fa 72 8b ..ibv..ku...r.