Frame 1 (222 bytes on wire, 222 bytes captured) Arrival Time: Aug 14, 2006 13:01:10.776017000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Destination: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.107 (165.227.249.107) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0234 (564) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf91f [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.107 (165.227.249.107) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x7b43 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x2F95B390B98CBEAC Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 c0 02 11 42 56 00 0c 29 96 e1 fa 08 00 45 00 ....BV..).....E. 0010 00 d0 02 34 00 00 80 11 f9 1f a5 e3 f9 96 a5 e3 ...4............ 0020 f9 6b 01 f4 01 f4 00 bc 7b 43 2f 95 b3 90 b9 8c .k......{C/..... 0030 be ac 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 b4 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 4a 13 ........p.....J. 0080 1c 81 07 03 58 45 5c 57 28 f2 0e 95 45 2f 0d 00 ....XE\W(...E/.. 0090 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 ..}...S..o,....R 00a0 9d 56 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .V........>.in.c 00b0 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 15 2d 18 b6 ...B{.....D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 00 00 00 14 af ca .....F.y........ 00d0 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 2 (122 bytes on wire, 122 bytes captured) Arrival Time: Aug 14, 2006 13:01:10.793384000 Time delta from previous packet: 0.017367000 seconds Time since reference or first frame: 0.017367000 seconds Frame Number: 2 Packet Length: 122 bytes Capture Length: 122 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:c0:02:11:42:56 (00:c0:02:11:42:56), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.107 (165.227.249.107), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x0224 (548) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3994 [correct] Good: True Bad : False Source: 165.227.249.107 (165.227.249.107) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x71ea [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x2F95B390B98CBEAC Responder cookie: 0xC7EA5DE3B7549B8F Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 96 e1 fa 00 c0 02 11 42 56 08 00 45 00 ..).......BV..E. 0010 00 6c 02 24 00 00 40 11 39 94 a5 e3 f9 6b a5 e3 .l.$..@.9....k.. 0020 f9 96 01 f4 01 f4 00 58 71 ea 2f 95 b3 90 b9 8c .......Xq./..... 0030 be ac c7 ea 5d e3 b7 54 9b 8f 01 10 02 00 00 00 ....]..T........ 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 ........p. Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Aug 14, 2006 13:01:10.812501000 Time delta from previous packet: 0.019117000 seconds Time since reference or first frame: 0.036484000 seconds Frame Number: 3 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Destination: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.107 (165.227.249.107) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0235 (565) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf91e [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.107 (165.227.249.107) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x2678 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x2F95B390B98CBEAC Responder cookie: 0xC7EA5DE3B7549B8F Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 c0 02 11 42 56 00 0c 29 96 e1 fa 08 00 45 00 ....BV..).....E. 0010 00 d0 02 35 00 00 80 11 f9 1e a5 e3 f9 96 a5 e3 ...5............ 0020 f9 6b 01 f4 01 f4 00 bc 26 78 2f 95 b3 90 b9 8c .k......&x/..... 0030 be ac c7 ea 5d e3 b7 54 9b 8f 04 10 02 00 00 00 ....]..T........ 0040 00 00 00 00 00 b4 0a 00 00 84 9c 4d 82 79 4f f1 ...........M.yO. 0050 01 47 bf fe 8f 16 4e 60 12 46 ba 81 38 9f 58 d2 .G....N`.F..8.X. 0060 58 62 1d b1 72 d2 d5 2e 23 1e b3 0c 9f dc dc e2 Xb..r...#....... 0070 25 08 06 6b b7 10 e5 6a 07 12 34 85 19 ba e9 02 %..k...j..4..... 0080 fb 48 94 b1 63 9e 6b 07 c8 4b c4 d3 6c 14 ab 37 .H..c.k..K..l..7 0090 49 41 ff e4 88 5e ec f4 10 5d b5 be 59 8e 7c 2c IA...^...]..Y.|, 00a0 a8 36 75 be 95 5d f1 f7 e3 7f 41 71 ab 4e 27 35 .6u..]....Aq.N'5 00b0 8e f0 1f 0a e0 13 ed cc d6 d7 58 64 74 21 3c 4e ..........Xdt!.j.N...i...... 0090 2c 63 42 ec 4b 1f 8a ad b4 26 b1 3f 8d 7f 02 fc ,cB.K....&.?.... 00a0 e8 84 83 e0 fc 97 40 a7 73 1d 08 69 5d 45 db c1 ......@.s..i]E.. 00b0 3d 31 76 4f b6 ff ea 9b 6c 4b 87 cb ae e1 c6 1a =1vO....lK...... 00c0 11 8f 52 40 79 a8 e7 45 24 e9 73 31 65 9e fe f6 ..R@y..E$.s1e... 00d0 db 1b 7f c3 92 d7 69 69 30 8d 1c 46 12 17 ab a8 ......ii0..F.... 00e0 5a 02 5f 70 5d 72 23 66 b2 e2 43 33 44 02 f3 d6 Z._p]r#f..C3D... 00f0 d9 bb 04 01 96 49 86 fc d7 77 72 74 6f 48 70 ab .....I...wrtoHp. 0100 00 19 fb 5d 72 9e 4f 2e 48 12 4c 33 6e 4f dd 0a ...]r.O.H.L3nO.. 0110 64 cd 6e 7c 7f 83 91 e6 37 12 1d d9 3e 9d 2c c6 d.n|....7...>.,. 0120 5c 66 2e f2 53 95 35 4a c9 13 16 66 b6 6f f8 68 \f..S.5J...f.o.h 0130 79 54 e1 91 dd 2b 6b ec dc ec 65 d5 8f bc 42 fc yT...+k...e...B. 0140 0b ba f4 3a b0 f8 a3 84 1d 25 87 2f 66 e9 ...:.....%./f. Frame 8 (320 bytes on wire, 320 bytes captured) Arrival Time: Aug 14, 2006 13:01:15.372421000 Time delta from previous packet: 1.350774000 seconds Time since reference or first frame: 4.596404000 seconds Frame Number: 8 Packet Length: 320 bytes Capture Length: 320 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:c0:02:11:42:56 (00:c0:02:11:42:56), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Type: IP (0x0800) Trailer: 42FC Internet Protocol, Src: 165.227.249.107 (165.227.249.107), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 304 Identification: 0x0227 (551) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x38cd [correct] Good: True Bad : False Source: 165.227.249.107 (165.227.249.107) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 284 Checksum: 0x5bcc [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x2F95B390B98CBEAC Responder cookie: 0xC7EA5DE3B7549B8F Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBF0BB379 Length: 276 Encrypted payload (248 bytes) 0000 00 0c 29 96 e1 fa 00 c0 02 11 42 56 08 00 45 00 ..).......BV..E. 0010 01 30 02 27 00 00 40 11 38 cd a5 e3 f9 6b a5 e3 .0.'..@.8....k.. 0020 f9 96 01 f4 01 f4 01 1c 5b cc 2f 95 b3 90 b9 8c ........[./..... 0030 be ac c7 ea 5d e3 b7 54 9b 8f 08 10 20 01 bf 0b ....]..T.... ... 0040 b3 79 00 00 01 14 b2 d2 e7 ff 8a ac 18 55 81 df .y...........U.. 0050 7a 97 be 88 54 95 b1 1f 1c ef 3f c6 49 e8 0c d0 z...T.....?.I... 0060 63 f3 12 a3 34 a1 fa 0b 2e 7e e9 74 8f 57 42 02 c...4....~.t.WB. 0070 69 61 08 75 e2 07 2a f9 89 e8 68 a3 d0 89 9f 56 ia.u..*...h....V 0080 48 ad c7 74 84 42 92 cb a7 b9 fd b8 e2 66 e1 d2 H..t.B.......f.. 0090 ea cd f0 e5 b9 ff 00 93 e2 f4 ff ca 70 b3 a0 33 ............p..3 00a0 ff be 16 0b 47 18 da b9 db f9 b0 5c b5 74 e0 ab ....G......\.t.. 00b0 13 fc 78 a0 91 b7 b9 1d f3 9a 8a 4f 80 39 4f 94 ..x........O.9O. 00c0 d9 0a 08 9a 33 33 0e 10 60 a1 f4 f3 d9 e1 cc 43 ....33..`......C 00d0 8a 8a 97 ac 45 c8 95 5d 04 5f 10 6c dd e0 e5 10 ....E..]._.l.... 00e0 f8 e7 ec e0 6f b6 b6 11 0b 24 87 c5 73 c1 a2 59 ....o....$..s..Y 00f0 47 12 fb fc 12 d6 13 44 8e 3e b9 19 79 31 d2 7e G......D.>..y1.~ 0100 9b aa 41 7d 51 0f 9a 20 5b b3 5f a4 34 7b cb e9 ..A}Q.. [._.4{.. 0110 d6 d7 24 6f 80 c6 8a 18 be 6c 04 1b 27 8e 6a 7f ..$o.....l..'.j. 0120 d6 21 b5 15 de db fe 9f 05 0d 8b 72 7a 70 b2 96 .!.........rzp.. 0130 b1 59 1a e0 d8 ea ee eb 6a 47 9c fb ee c6 42 fc .Y......jG....B. Frame 9 (102 bytes on wire, 102 bytes captured) Arrival Time: Aug 14, 2006 13:01:15.491038000 Time delta from previous packet: 0.118617000 seconds Time since reference or first frame: 4.715021000 seconds Frame Number: 9 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Destination: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.107 (165.227.249.107) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0238 (568) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf993 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.107 (165.227.249.107) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x4aab [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x2F95B390B98CBEAC Responder cookie: 0xC7EA5DE3B7549B8F Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBF0BB379 Length: 60 Encrypted payload (32 bytes) 0000 00 c0 02 11 42 56 00 0c 29 96 e1 fa 08 00 45 00 ....BV..).....E. 0010 00 58 02 38 00 00 80 11 f9 93 a5 e3 f9 96 a5 e3 .X.8............ 0020 f9 6b 01 f4 01 f4 00 44 4a ab 2f 95 b3 90 b9 8c .k.....DJ./..... 0030 be ac c7 ea 5d e3 b7 54 9b 8f 08 10 20 01 bf 0b ....]..T.... ... 0040 b3 79 00 00 00 3c 66 ec 36 02 d6 35 7f de 04 29 .y.....y1.~ 0100 9b aa 41 7d 51 0f 9a 20 5b b3 5f a4 34 7b cb e9 ..A}Q.. [._.4{.. 0110 d6 d7 24 6f 80 c6 8a 18 be 6c 04 1b 27 8e 6a 7f ..$o.....l..'.j. 0120 d6 21 b5 15 de db fe 9f 05 0d 8b 72 7a 70 b2 96 .!.........rzp.. 0130 b1 59 1a e0 d8 ea ee eb 6a 47 9c fb ee c6 68 20 .Y......jG....h Frame 11 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 14, 2006 13:01:21.890298000 Time delta from previous packet: 0.580843000 seconds Time since reference or first frame: 11.114281000 seconds Frame Number: 11 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Destination: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.107 (165.227.249.107) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x023a (570) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xf848 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.107 (165.227.249.107) Encapsulating Security Payload SPI: 0xb0692856 Sequence: 1 Data (356 bytes) 0000 00 c0 02 11 42 56 00 0c 29 96 e1 fa 08 00 45 00 ....BV..).....E. 0010 01 80 02 3a 00 00 80 32 f8 48 a5 e3 f9 96 a5 e3 ...:...2.H...... 0020 f9 6b b0 69 28 56 00 00 00 01 4e 08 bb 60 eb 8c .k.i(V....N..`.. 0030 2d c2 08 1b 63 fa f6 87 b2 33 69 61 9d 5f 3f 5e -...c....3ia._?^ 0040 72 54 da 8e 25 e0 e8 d4 4a 31 55 77 e8 4e 6f e4 rT..%...J1Uw.No. 0050 b1 dd 2c 8a 4d 1b cd fa 1a 7b d9 a6 d5 32 81 0e ..,.M....{...2.. 0060 8c 08 af 2e 59 46 0b 83 19 d8 b0 2f ee b2 60 4e ....YF...../..`N 0070 e5 75 db e7 2c 20 71 cf b2 b6 47 01 74 05 6a 77 .u.., q...G.t.jw 0080 c3 5c d8 15 b1 d2 4b 35 2e 38 75 cf c9 fb c5 e8 .\....K5.8u..... 0090 d1 06 f4 a1 a5 49 c9 78 4f 20 64 26 0c c6 dc 09 .....I.xO d&.... 00a0 1f 00 3e 1b 2b 15 db ec f0 f1 68 12 9b 1e b3 71 ..>.+.....h....q 00b0 7e 8a 03 c0 25 45 9d 94 09 ba 95 99 cb d3 24 17 ~...%E........$. 00c0 fe bc 0b 12 6d 34 6f 56 b8 1d c4 bb 0a 26 d3 01 ....m4oV.....&.. 00d0 d2 13 e9 fc 27 8a 26 b9 a8 ff 24 05 3f 75 63 76 ....'.&...$.?ucv 00e0 a4 c7 6d c9 91 10 6f b3 9a 86 f9 38 aa c2 23 d1 ..m...o....8..#. 00f0 1c 34 63 d4 b3 8c 2a 0f 87 db af fb 20 97 ba 9b .4c...*..... ... 0100 ed 13 61 8d f4 03 5d df cb 23 80 40 85 d0 44 ce ..a...]..#.@..D. 0110 62 6c 25 23 f3 9d a0 9d 05 80 61 e9 ea cf ce db bl%#......a..... 0120 ec e2 71 db 83 89 a6 e6 bd fa b5 f7 72 2c 00 48 ..q.........r,.H 0130 7f 8d 07 f7 0c fe 31 b3 44 bf e9 38 02 ee e7 87 ......1.D..8.... 0140 7a 88 43 c3 0b b1 a8 98 61 42 41 95 2d aa 89 e3 z.C.....aBA.-... 0150 5e d7 de 39 77 4e d6 d0 01 10 15 b9 c1 70 a0 56 ^..9wN.......p.V 0160 4a 95 1d df 08 e4 49 8a ed 8a 98 f7 0a dc f7 90 J.....I......... 0170 f8 e1 54 58 da b0 1b af 3f 73 18 e9 5e d8 fa bc ..TX....?s..^... 0180 0d f5 1e c3 ed 01 56 1b 87 22 de dd 47 8c ......V.."..G. Frame 12 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 14, 2006 13:01:21.900295000 Time delta from previous packet: 0.009997000 seconds Time since reference or first frame: 11.124278000 seconds Frame Number: 12 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:c0:02:11:42:56 (00:c0:02:11:42:56), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:c0:02:11:42:56 (00:c0:02:11:42:56) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.107 (165.227.249.107), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x69d7 (27095) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xf2ab [correct] Good: True Bad : False Source: 165.227.249.107 (165.227.249.107) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload SPI: 0x91a32efc Sequence: 1 Data (356 bytes) 0000 00 0c 29 96 e1 fa 00 c0 02 11 42 56 08 00 45 00 ..).......BV..E. 0010 01 80 69 d7 00 00 1e 32 f2 ab a5 e3 f9 6b a5 e3 ..i....2.....k.. 0020 f9 96 91 a3 2e fc 00 00 00 01 90 04 9d 33 f6 25 .............3.% 0030 58 c3 45 1e 08 63 17 89 c3 f3 b9 96 0a bc f1 9e X.E..c.......... 0040 a0 1f a1 8c 96 b9 09 d3 ad c5 56 a2 68 ce 8d 7a ..........V.h..z 0050 86 6a de 6b 33 7d 8a 7b 72 56 45 fc 9a d8 8f b3 .j.k3}.{rVE..... 0060 ba 75 83 19 00 f1 15 e5 b7 5f 39 59 6f 7e fb 60 .u......._9Yo~.` 0070 77 60 ba 4f dc 9d 95 ae 65 be 56 83 3c c2 6a ba w`.O....e.V.<.j. 0080 d6 85 4b f4 a0 63 07 9a 17 5c fa 81 53 50 88 a6 ..K..c...\..SP.. 0090 55 c2 ec 8c 7f 71 8d 86 fc 42 03 b9 23 cc b5 3e U....q...B..#..> 00a0 0c 22 28 00 a0 ab 6e c4 5d 28 07 95 0b 5f d3 7f ."(...n.](..._.. 00b0 25 c9 6a f2 2e 10 40 91 d2 e7 d6 03 45 51 de 47 %.j...@.....EQ.G 00c0 61 67 1a 79 24 c3 02 9e 5e 26 a7 2f c2 63 a1 c4 ag.y$...^&./.c.. 00d0 16 32 f7 76 3b a3 7b d1 96 53 c8 3a 20 f8 65 39 .2.v;.{..S.: .e9 00e0 d7 03 cd 5d da ad cf f3 85 0f d8 41 54 ad 41 7c ...].......AT.A| 00f0 f0 ae 88 24 15 ff 2c e5 3c 58 71 6c ba 78 63 20 ...$..,.