Frame 1 (222 bytes on wire, 222 bytes captured) Arrival Time: Aug 10, 2006 14:36:34.496888000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Destination: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.114 (165.227.249.114) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x025f (607) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8ed [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.114 (165.227.249.114) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xb68f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x538CE12347F9A362 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 01 4e 00 1c aa 00 0c 29 96 e1 fa 08 00 45 00 ..N.....).....E. 0010 00 d0 02 5f 00 00 80 11 f8 ed a5 e3 f9 96 a5 e3 ..._............ 0020 f9 72 01 f4 01 f4 00 bc b6 8f 53 8c e1 23 47 f9 .r........S..#G. 0030 a3 62 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .b.............. 0040 00 00 00 00 00 b4 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 4a 13 ........p.....J. 0080 1c 81 07 03 58 45 5c 57 28 f2 0e 95 45 2f 0d 00 ....XE\W(...E/.. 0090 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 ..}...S..o,....R 00a0 9d 56 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .V........>.in.c 00b0 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 15 2d 18 b6 ...B{.....D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 00 00 00 14 af ca .....F.y........ 00d0 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 2 (142 bytes on wire, 142 bytes captured) Arrival Time: Aug 10, 2006 14:36:34.505754000 Time delta from previous packet: 0.008866000 seconds Time since reference or first frame: 0.008866000 seconds Frame Number: 2 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.114 (165.227.249.114), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb9c [correct] Good: True Bad : False Source: 165.227.249.114 (165.227.249.114) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x41ba [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x538CE12347F9A362 Responder cookie: 0x0B8ECE86B8E1EE3C Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 0000 00 0c 29 96 e1 fa 00 01 4e 00 1c aa 08 00 45 00 ..).....N.....E. 0010 00 80 00 00 40 00 40 11 fb 9c a5 e3 f9 72 a5 e3 ....@.@......r.. 0020 f9 96 01 f4 01 f4 00 6c 41 ba 53 8c e1 23 47 f9 .......lA.S..#G. 0030 a3 62 0b 8e ce 86 b8 e1 ee 3c 01 10 02 00 00 00 .b.......<...... 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 00 00 00 14 44 85 ........p.....D. 0080 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc .-.......F.y.. Frame 3 (270 bytes on wire, 270 bytes captured) Arrival Time: Aug 10, 2006 14:36:34.562711000 Time delta from previous packet: 0.056957000 seconds Time since reference or first frame: 0.065823000 seconds Frame Number: 3 Packet Length: 270 bytes Capture Length: 270 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Destination: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.114 (165.227.249.114) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x0260 (608) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8bc [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.114 (165.227.249.114) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0xcd9b [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x538CE12347F9A362 Responder cookie: 0x0B8ECE86B8E1EE3C Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 20 Nonce Data NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 24 Hash of address and port: 26011595B82450E6938B4A61A74F5CA42D4A11F7 NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NONE (0) Length: 24 Hash of address and port: 5DD29703AFA5DCA06787BC314549AB24B9DF6065 0000 00 01 4e 00 1c aa 00 0c 29 96 e1 fa 08 00 45 00 ..N.....).....E. 0010 01 00 02 60 00 00 80 11 f8 bc a5 e3 f9 96 a5 e3 ...`............ 0020 f9 72 01 f4 01 f4 00 ec cd 9b 53 8c e1 23 47 f9 .r........S..#G. 0030 a3 62 0b 8e ce 86 b8 e1 ee 3c 04 10 02 00 00 00 .b.......<...... 0040 00 00 00 00 00 e4 0a 00 00 84 28 cd ec b7 83 59 ..........(....Y 0050 28 52 c6 05 60 a4 db 76 0f 9e f7 72 fc a2 e7 59 (R..`..v...r...Y 0060 da 01 cd ea 22 07 d9 69 19 db 67 8a 6c 10 64 50 ...."..i..g.l.dP 0070 f0 0a 3c 56 e1 2b fe bb 6c 77 1e 45 d8 a9 c3 99 ..^w..`... 00e0 00 18 26 01 15 95 b8 24 50 e6 93 8b 4a 61 a7 4f ..&....$P...Ja.O 00f0 5c a4 2d 4a 11 f7 00 00 00 18 5d d2 97 03 af a5 \.-J......]..... 0100 dc a0 67 87 bc 31 45 49 ab 24 b9 df 60 65 ..g..1EI.$..`e Frame 4 (286 bytes on wire, 286 bytes captured) Arrival Time: Aug 10, 2006 14:36:34.865444000 Time delta from previous packet: 0.302733000 seconds Time since reference or first frame: 0.368556000 seconds Frame Number: 4 Packet Length: 286 bytes Capture Length: 286 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.114 (165.227.249.114), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 272 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb0c [correct] Good: True Bad : False Source: 165.227.249.114 (165.227.249.114) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 252 Checksum: 0xdbf3 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x538CE12347F9A362 Responder cookie: 0x0B8ECE86B8E1EE3C Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 244 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 12 Nonce Data NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 24 Hash of address and port: 5DD29703AFA5DCA06787BC314549AB24B9DF6065 NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Length: 24 Hash of address and port: 7DCCF1FBBA43B4EFB63394E4651C654E4B00F24D NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NONE (0) Length: 24 Hash of address and port: 26011595B82450E6938B4A61A74F5CA42D4A11F7 0000 00 0c 29 96 e1 fa 00 01 4e 00 1c aa 08 00 45 00 ..).....N.....E. 0010 01 10 00 00 40 00 40 11 fb 0c a5 e3 f9 72 a5 e3 ....@.@......r.. 0020 f9 96 01 f4 01 f4 00 fc db f3 53 8c e1 23 47 f9 ..........S..#G. 0030 a3 62 0b 8e ce 86 b8 e1 ee 3c 04 10 02 00 00 00 .b.......<...... 0040 00 00 00 00 00 f4 0a 00 00 84 7d 1e d5 77 7f a1 ..........}..w.. 0050 92 e7 3e 32 63 c2 54 28 60 57 bd 1f a5 ee 34 3a ..>2c.T(`W....4: 0060 7c 99 12 7d fb 24 07 19 25 dd d2 89 89 2d be 02 |..}.$..%....-.. 0070 3e a9 37 82 52 26 f0 f1 23 c7 d0 bf 8a 5b ad e4 >.7.R&..#....[.. 0080 cf 82 66 bc 1a 01 59 1d 80 75 a4 bd 41 b0 eb 9b ..f...Y..u..A... 0090 a9 fb 2a 6a a9 aa 5b de 09 73 af e1 08 0d 9d 97 ..*j..[..s...... 00a0 71 93 10 ad b4 bf fe 2f df 52 76 1b e1 db de 89 q....../.Rv..... 00b0 ac 5d 32 b7 99 fc ae 2a 9d 46 dd 96 73 03 57 73 .]2....*.F..s.Ws 00c0 9a f9 73 1b b5 69 1b 2b 27 59 82 00 00 0c be b6 ..s..i.+'Y...... 00d0 97 f0 ea e8 21 53 82 00 00 18 5d d2 97 03 af a5 ....!S....]..... 00e0 dc a0 67 87 bc 31 45 49 ab 24 b9 df 60 65 82 00 ..g..1EI.$..`e.. 00f0 00 18 7d cc f1 fb ba 43 b4 ef b6 33 94 e4 65 1c ..}....C...3..e. 0100 65 4e 4b 00 f2 4d 00 00 00 18 26 01 15 95 b8 24 eNK..M....&....$ 0110 50 e6 93 8b 4a 61 a7 4f 5c a4 2d 4a 11 f7 P...Ja.O\.-J.. Frame 5 (142 bytes on wire, 142 bytes captured) Arrival Time: Aug 10, 2006 14:36:34.908115000 Time delta from previous packet: 0.042671000 seconds Time since reference or first frame: 0.411227000 seconds Frame Number: 5 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Destination: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.114 (165.227.249.114) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x0261 (609) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf93b [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.114 (165.227.249.114) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x09c0 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x538CE12347F9A362 Responder cookie: 0x0B8ECE86B8E1EE3C Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Encrypted payload (72 bytes) 0000 00 01 4e 00 1c aa 00 0c 29 96 e1 fa 08 00 45 00 ..N.....).....E. 0010 00 80 02 61 00 00 80 11 f9 3b a5 e3 f9 96 a5 e3 ...a.....;...... 0020 f9 72 01 f4 01 f4 00 6c 09 c0 53 8c e1 23 47 f9 .r.....l..S..#G. 0030 a3 62 0b 8e ce 86 b8 e1 ee 3c 05 10 02 01 00 00 .b.......<...... 0040 00 00 00 00 00 64 04 f6 54 f3 70 5d bd 14 9e 39 .....d..T.p]...9 0050 53 8e cc 33 4c 08 99 e5 e5 28 25 af 29 8e 90 b0 S..3L....(%.)... 0060 6b a8 6e 80 c8 14 bc 43 93 f2 3f 99 93 1d 83 28 k.n....C..?....( 0070 ec a8 10 1a 74 de ab 5a 44 25 6d 5a 92 48 3c 76 ....t..ZD%mZ.H.t.B........ Frame 7 (334 bytes on wire, 334 bytes captured) Arrival Time: Aug 10, 2006 14:36:35.251581000 Time delta from previous packet: 0.048170000 seconds Time since reference or first frame: 0.754693000 seconds Frame Number: 7 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Destination: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.114 (165.227.249.114) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0262 (610) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf87a [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.114 (165.227.249.114) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0xdb29 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x538CE12347F9A362 Responder cookie: 0x0B8ECE86B8E1EE3C Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x2D6BA53F Length: 292 Encrypted payload (264 bytes) 0000 00 01 4e 00 1c aa 00 0c 29 96 e1 fa 08 00 45 00 ..N.....).....E. 0010 01 40 02 62 00 00 80 11 f8 7a a5 e3 f9 96 a5 e3 .@.b.....z...... 0020 f9 72 01 f4 01 f4 01 2c db 29 53 8c e1 23 47 f9 .r.....,.)S..#G. 0030 a3 62 0b 8e ce 86 b8 e1 ee 3c 08 10 20 01 2d 6b .b.......<.. .-k 0040 a5 3f 00 00 01 24 96 b5 53 d2 41 8b fb 5c 6c 03 .?...$..S.A..\l. 0050 51 62 df da e6 32 5d 90 4d 78 9d f9 ba aa a5 79 Qb...2].Mx.....y 0060 64 6f a7 75 74 b8 69 8f 32 72 a9 56 59 af 3b 10 do.ut.i.2r.VY.;. 0070 bd 2e 2e f0 fd e3 89 18 58 b3 62 6f 7c 97 30 a6 ........X.bo|.0. 0080 6f 26 67 50 3b 9e cd cf 12 c9 d3 09 d4 c1 31 7c o&gP;.........1| 0090 91 1d 1f b5 d7 a0 90 3e 0d 0d de 42 a0 94 a8 41 .......>...B...A 00a0 94 5c ab 72 8e e4 87 95 19 d7 bc 63 b3 42 7a c1 .\.r.......c.Bz. 00b0 79 bf ba 43 79 ff d1 f0 fd 6e 8d 9e 40 c5 a6 06 y..Cy....n..@... 00c0 8e c1 58 50 df 86 de 72 64 c4 68 91 d1 61 0d 7e ..XP...rd.h..a.~ 00d0 96 d9 19 9b 50 79 a0 67 b2 af 16 a5 aa ec 5c 89 ....Py.g......\. 00e0 40 b0 65 61 9a fd ef 1e f6 04 5f b5 60 77 bf c5 @.ea......_.`w.. 00f0 cd b5 77 f1 c9 3d 7e ac 4d c0 16 59 51 e2 64 c3 ..w..=~.M..YQ.d. 0100 98 3a fa 56 c2 a6 95 1c 33 69 2e 0b f5 db f9 22 .:.V....3i....." 0110 00 4e 35 d3 1c 03 89 f9 66 53 3c 56 63 b2 9c da .N5.....fSO..a!.H\.g 0090 b0 e4 b1 25 c9 fe d9 d5 32 b8 01 4b 5f 64 42 67 ...%....2..K_dBg 00a0 3a 06 f1 60 cb bf e9 85 64 1b be d4 98 68 22 0b :..`....d....h". 00b0 5e 68 6e 06 03 b5 13 25 e1 88 90 9f ad a0 46 cf ^hn....%......F. 00c0 a0 35 8c f3 c8 81 23 0e e7 14 fd df 5a 0d 57 8f .5....#.....Z.W. 00d0 06 c5 73 f1 24 12 3d 58 6e 3d 20 ce 52 d9 47 34 ..s.$.=Xn= .R.G4 00e0 d4 6b f5 89 8e 06 1b ab 40 e3 4d d5 a8 e7 d3 18 .k......@.M..... 00f0 a2 73 0c 5a 38 fe 7f 29 d1 b4 40 de 8c ef 4c e4 .s.Z8..)..@...L. 0100 ca ab 10 2d 46 d2 93 17 19 06 7f 43 59 a5 ef ef ...-F......CY... 0110 29 dc 06 89 3d 10 6d fb 7e a4 87 cf e9 4e 13 3c )...=.m.~....N.< 0120 8c fc 04 ff a7 e6 4c 5f bf 41 56 99 05 98 50 59 ......L_.AV...PY 0130 64 95 d3 96 02 5e 8b d9 30 22 24 31 cc 8a d....^..0"$1.. Frame 9 (102 bytes on wire, 102 bytes captured) Arrival Time: Aug 10, 2006 14:36:35.620451000 Time delta from previous packet: 0.145314000 seconds Time since reference or first frame: 1.123563000 seconds Frame Number: 9 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Destination: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.114 (165.227.249.114) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0263 (611) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf961 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.114 (165.227.249.114) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x7265 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x538CE12347F9A362 Responder cookie: 0x0B8ECE86B8E1EE3C Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x2D6BA53F Length: 60 Encrypted payload (32 bytes) 0000 00 01 4e 00 1c aa 00 0c 29 96 e1 fa 08 00 45 00 ..N.....).....E. 0010 00 58 02 63 00 00 80 11 f9 61 a5 e3 f9 96 a5 e3 .X.c.....a...... 0020 f9 72 01 f4 01 f4 00 44 72 65 53 8c e1 23 47 f9 .r.....DreS..#G. 0030 a3 62 0b 8e ce 86 b8 e1 ee 3c 08 10 20 01 2d 6b .b.......<.. .-k 0040 a5 3f 00 00 00 3c 4d ce dc ee 37 c1 d7 85 0f f8 .?...O..a!.H\.g 0090 b0 e4 b1 25 c9 fe d9 d5 32 b8 01 4b 5f 64 42 67 ...%....2..K_dBg 00a0 3a 06 f1 60 cb bf e9 85 64 1b be d4 98 68 22 0b :..`....d....h". 00b0 5e 68 6e 06 03 b5 13 25 e1 88 90 9f ad a0 46 cf ^hn....%......F. 00c0 a0 35 8c f3 c8 81 23 0e e7 14 fd df 5a 0d 57 8f .5....#.....Z.W. 00d0 06 c5 73 f1 24 12 3d 58 6e 3d 20 ce 52 d9 47 34 ..s.$.=Xn= .R.G4 00e0 d4 6b f5 89 8e 06 1b ab 40 e3 4d d5 a8 e7 d3 18 .k......@.M..... 00f0 a2 73 0c 5a 38 fe 7f 29 d1 b4 40 de 8c ef 4c e4 .s.Z8..)..@...L. 0100 ca ab 10 2d 46 d2 93 17 19 06 7f 43 59 a5 ef ef ...-F......CY... 0110 29 dc 06 89 3d 10 6d fb 7e a4 87 cf e9 4e 13 3c )...=.m.~....N.< 0120 8c fc 04 ff a7 e6 4c 5f bf 41 56 99 05 98 50 59 ......L_.AV...PY 0130 64 95 d3 96 02 5e 8b d9 30 22 24 31 cc 8a d....^..0"$1.. Frame 11 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 10, 2006 14:36:44.820773000 Time delta from previous packet: 3.678551000 seconds Time since reference or first frame: 10.323885000 seconds Frame Number: 11 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Destination: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.114 (165.227.249.114) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x0265 (613) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xf816 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.114 (165.227.249.114) Encapsulating Security Payload SPI: 0x59f35988 Sequence: 1 Data (356 bytes) 0000 00 01 4e 00 1c aa 00 0c 29 96 e1 fa 08 00 45 00 ..N.....).....E. 0010 01 80 02 65 00 00 80 32 f8 16 a5 e3 f9 96 a5 e3 ...e...2........ 0020 f9 72 59 f3 59 88 00 00 00 01 8b 70 8f 8f 6f 2f .rY.Y......p..o/ 0030 a4 76 fc e4 c7 d5 a0 80 05 96 10 cc 04 cb 0f 1a .v.............. 0040 2c 35 6f 6d 10 4f 6d 2b 7c 36 81 45 57 8e c9 ac ,5om.Om+|6.EW... 0050 4c 06 25 95 4c 81 93 bf f5 48 6f 3f 0a a4 02 e8 L.%.L....Ho?.... 0060 07 43 a3 07 32 a5 86 d1 b3 fe 0b 10 58 8f a3 e8 .C..2.......X... 0070 1b 7c 2f cb 7e 76 5c 93 b9 b7 2b 59 f9 25 d3 f4 .|/.~v\...+Y.%.. 0080 d9 a3 a7 c8 32 78 8c 42 a5 93 2e 27 ef 84 29 11 ....2x.B...'..). 0090 dd 9e 1f c9 fe c6 3c 2c a6 05 46 56 27 37 57 1b ......<,..FV'7W. 00a0 61 04 3f c9 c2 62 f2 95 d1 e6 e8 31 25 f6 bf 08 a.?..b.....1%... 00b0 2b 97 33 cb 84 cd 7b c3 77 16 31 40 0b 38 4b 4c +.3...{.w.1@.8KL 00c0 34 41 d9 d5 90 d1 6b 38 2c 1e d3 2b 45 9b eb 66 4A....k8,..+E..f 00d0 cc 38 17 d4 92 ad a4 55 cb da 57 30 b7 20 de 9e .8.....U..W0. .. 00e0 e8 35 3a 46 60 02 df a6 3c 1e a2 e5 94 09 0a b1 .5:F`...<....... 00f0 06 58 9f 62 a6 9c 7e bc 89 63 c0 6e 6a aa d7 64 .X.b..~..c.nj..d 0100 f3 98 42 bf 6a 93 05 88 9f 08 1f 80 cc 38 6b de ..B.j........8k. 0110 75 a1 6a 08 9f 80 6e 0f 3a 57 ac 8c 97 d5 dd 70 u.j...n.:W.....p 0120 a6 a0 8a 86 d2 bd cf 6e df 39 72 57 a3 63 0f df .......n.9rW.c.. 0130 11 4e 14 64 1c 2a e7 13 2a b5 77 13 9a 87 d2 15 .N.d.*..*.w..... 0140 b4 68 e7 1e 76 ca 40 9f da 92 af bd 02 53 ce 00 .h..v.@......S.. 0150 e2 78 a1 d3 f4 05 4c 1b a1 3d 59 5c b8 cb 0a a2 .x....L..=Y\.... 0160 d9 64 c8 9e e2 ee f7 94 12 bc 95 70 89 6c ad 0a .d.........p.l.. 0170 15 56 e8 ca 43 7d 68 7a 17 e4 f0 cc ed 27 e4 e5 .V..C}hz.....'.. 0180 ad 68 4b e1 b1 fd 42 75 74 76 b8 fc e9 bd .hK...Butv.... Frame 12 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 10, 2006 14:36:44.830983000 Time delta from previous packet: 0.010210000 seconds Time since reference or first frame: 10.334095000 seconds Frame Number: 12 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.114 (165.227.249.114), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x0000 (0) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5c7c [correct] Good: True Bad : False Source: 165.227.249.114 (165.227.249.114) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload SPI: 0x37add185 Sequence: 1 Data (356 bytes) 0000 00 0c 29 96 e1 fa 00 01 4e 00 1c aa 08 00 45 00 ..).....N.....E. 0010 01 80 00 00 00 00 1e 32 5c 7c a5 e3 f9 72 a5 e3 .......2\|...r.. 0020 f9 96 37 ad d1 85 00 00 00 01 da 2e ae 79 83 fe ..7..........y.. 0030 17 0c e3 1e ce f0 e3 52 d8 2c 6b f2 b2 0d 0c ad .......R.,k..... 0040 cc 49 19 5d 33 7f 0f 80 be 35 52 84 4a 8c 68 a4 .I.]3....5R.J.h. 0050 06 f6 44 f9 a6 18 84 15 e4 b4 f7 d8 a4 73 b9 7d ..D..........s.} 0060 bc 37 0b 48 df e4 fa 04 21 37 21 d1 9f 7a 92 fe .7.H....!7!..z.. 0070 39 07 79 52 46 b8 6f 58 b8 d0 af 43 7f 51 57 72 9.yRF.oX...C.QWr 0080 4f d2 0d 2c e7 41 ae d8 2d 91 57 38 da ba 2d b5 O..,.A..-.W8..-. 0090 a7 15 fb 32 42 2b f0 81 22 01 9c 25 08 d1 69 78 ...2B+.."..%..ix 00a0 73 df b5 f0 9a 6a cd 6c 00 c7 5c 2c da 1c 72 a6 s....j.l..\,..r. 00b0 51 4e ea ec 83 a9 d2 cc 32 7d 3a 2d 22 f2 98 1d QN......2}:-"... 00c0 34 ba 7f 3b 3e 64 90 2d 58 89 37 b7 2c 02 5a ef 4..;>d.-X.7.,.Z. 00d0 3f 29 b6 4d 54 b8 c6 79 61 0e 82 0f 84 72 9a a2 ?).MT..ya....r.. 00e0 95 49 ab ea cf f2 3c 75 fa 02 66 f3 09 9f d2 be .I....O..a!.H\.g 0090 b0 e4 b1 25 c9 fe d9 d5 32 b8 01 4b 5f 64 42 67 ...%....2..K_dBg 00a0 3a 06 f1 60 cb bf e9 85 64 1b be d4 98 68 22 0b :..`....d....h". 00b0 5e 68 6e 06 03 b5 13 25 e1 88 90 9f ad a0 46 cf ^hn....%......F. 00c0 a0 35 8c f3 c8 81 23 0e e7 14 fd df 5a 0d 57 8f .5....#.....Z.W. 00d0 06 c5 73 f1 24 12 3d 58 6e 3d 20 ce 52 d9 47 34 ..s.$.=Xn= .R.G4 00e0 d4 6b f5 89 8e 06 1b ab 40 e3 4d d5 a8 e7 d3 18 .k......@.M..... 00f0 a2 73 0c 5a 38 fe 7f 29 d1 b4 40 de 8c ef 4c e4 .s.Z8..)..@...L. 0100 ca ab 10 2d 46 d2 93 17 19 06 7f 43 59 a5 ef ef ...-F......CY... 0110 29 dc 06 89 3d 10 6d fb 7e a4 87 cf e9 4e 13 3c )...=.m.~....N.< 0120 8c fc 04 ff a7 e6 4c 5f bf 41 56 99 05 98 50 59 ......L_.AV...PY 0130 64 95 d3 96 02 5e 8b d9 30 22 24 31 cc 8a d....^..0"$1.. Frame 14 (318 bytes on wire, 318 bytes captured) Arrival Time: Aug 10, 2006 14:36:51.171238000 Time delta from previous packet: 5.029014000 seconds Time since reference or first frame: 16.674350000 seconds Frame Number: 14 Packet Length: 318 bytes Capture Length: 318 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.114 (165.227.249.114), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 304 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfaec [correct] Good: True Bad : False Source: 165.227.249.114 (165.227.249.114) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 284 Checksum: 0x11d6 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x538CE12347F9A362 Responder cookie: 0x0B8ECE86B8E1EE3C Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x2D6BA53F Length: 276 Encrypted payload (248 bytes) 0000 00 0c 29 96 e1 fa 00 01 4e 00 1c aa 08 00 45 00 ..).....N.....E. 0010 01 30 00 00 40 00 40 11 fa ec a5 e3 f9 72 a5 e3 .0..@.@......r.. 0020 f9 96 01 f4 01 f4 01 1c 11 d6 53 8c e1 23 47 f9 ..........S..#G. 0030 a3 62 0b 8e ce 86 b8 e1 ee 3c 08 10 20 01 2d 6b .b.......<.. .-k 0040 a5 3f 00 00 01 14 c4 e4 1f 78 13 ba c2 03 1e c8 .?.......x...... 0050 6c 9c 97 85 6a eb f9 fc 1a db 08 bc 34 bf c8 e7 l...j.......4... 0060 47 b3 1a ac 74 17 e4 65 5c 91 f9 ec 00 4f 56 7b G...t..e\....OV{ 0070 45 8b 0c 1a ef 8e 31 9f c3 cf 13 45 03 00 b7 3c E.....1....E...< 0080 86 cd 4d 25 71 3e 4f 14 d5 61 21 f4 48 5c b0 67 ..M%q>O..a!.H\.g 0090 b0 e4 b1 25 c9 fe d9 d5 32 b8 01 4b 5f 64 42 67 ...%....2..K_dBg 00a0 3a 06 f1 60 cb bf e9 85 64 1b be d4 98 68 22 0b :..`....d....h". 00b0 5e 68 6e 06 03 b5 13 25 e1 88 90 9f ad a0 46 cf ^hn....%......F. 00c0 a0 35 8c f3 c8 81 23 0e e7 14 fd df 5a 0d 57 8f .5....#.....Z.W. 00d0 06 c5 73 f1 24 12 3d 58 6e 3d 20 ce 52 d9 47 34 ..s.$.=Xn= .R.G4 00e0 d4 6b f5 89 8e 06 1b ab 40 e3 4d d5 a8 e7 d3 18 .k......@.M..... 00f0 a2 73 0c 5a 38 fe 7f 29 d1 b4 40 de 8c ef 4c e4 .s.Z8..)..@...L. 0100 ca ab 10 2d 46 d2 93 17 19 06 7f 43 59 a5 ef ef ...-F......CY... 0110 29 dc 06 89 3d 10 6d fb 7e a4 87 cf e9 4e 13 3c )...=.m.~....N.< 0120 8c fc 04 ff a7 e6 4c 5f bf 41 56 99 05 98 50 59 ......L_.AV...PY 0130 64 95 d3 96 02 5e 8b d9 30 22 24 31 cc 8a d....^..0"$1.. Frame 15 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 10, 2006 14:36:54.137365000 Time delta from previous packet: 2.966127000 seconds Time since reference or first frame: 19.640477000 seconds Frame Number: 15 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Destination: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.114 (165.227.249.114) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x0268 (616) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xf813 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.114 (165.227.249.114) Encapsulating Security Payload SPI: 0x59f35988 Sequence: 2 Data (356 bytes) 0000 00 01 4e 00 1c aa 00 0c 29 96 e1 fa 08 00 45 00 ..N.....).....E. 0010 01 80 02 68 00 00 80 32 f8 13 a5 e3 f9 96 a5 e3 ...h...2........ 0020 f9 72 59 f3 59 88 00 00 00 02 11 2b 86 4f c9 0f .rY.Y......+.O.. 0030 c7 ef 4c 96 4d 27 b1 ea 9a a1 3b ba 86 b9 bc 22 ..L.M'....;...." 0040 2b f8 e2 cc 83 f6 57 54 4e 90 a0 44 0f 41 62 9e +.....WTN..D.Ab. 0050 7c 34 92 42 88 1e b2 e3 e3 9e 8c ba 6a be 13 94 |4.B........j... 0060 84 e7 22 0c 96 c5 ef 1c be f8 92 ee ee 8d 62 d8 .."...........b. 0070 23 47 78 9d 94 ba c9 09 ca 12 d5 a8 d5 8f 51 3a #Gx...........Q: 0080 52 26 01 5e 63 b3 45 75 23 ba a0 da 16 82 65 a3 R&.^c.Eu#.....e. 0090 f1 5d 1f f5 4f 7d 5d 31 10 4c da 89 a5 9f 5d d0 .]..O}]1.L....]. 00a0 42 39 1f 7d bc 56 81 1c 22 2d 30 fc 74 ca 74 ab B9.}.V.."-0.t.t. 00b0 ec 73 89 90 a4 b8 4b f2 64 ea 33 6b f5 eb bd cc .s....K.d.3k.... 00c0 b7 82 dc e1 cb 54 45 29 da 0e 42 7e 71 15 9e 8c .....TE)..B~q... 00d0 7d a1 78 36 88 0c a1 68 d9 24 98 92 07 9f b6 e1 }.x6...h.$...... 00e0 b6 52 76 58 71 44 df df c4 0f 1b 67 db b7 1d 7c .RvXqD.....g...| 00f0 68 c3 09 fc a3 9d a2 86 92 e2 c5 b8 28 4e c1 69 h...........(N.i 0100 6f 66 d5 2f 9a cd 33 3f ab 01 0d d7 3c cc 7e 61 of./..3?....<.~a 0110 6d 48 a8 96 ca e2 e9 36 71 dc d8 9e fd 74 ce f1 mH.....6q....t.. 0120 78 b8 b7 8a 15 fc e0 10 26 36 e3 14 64 3c 15 e1 x.......&6..d<.. 0130 60 e6 b1 74 d5 c3 82 13 a8 4a 29 67 6b 25 5a 37 `..t.....J)gk%Z7 0140 58 a3 0a 74 66 97 d7 8d 3c b2 45 b4 83 05 31 1f X..tf...<.E...1. 0150 b1 3f 2c 9d 71 ef 22 aa 43 37 0b d3 cf cf d4 35 .?,.q.".C7.....5 0160 16 85 3d dc 16 c4 0c c5 b3 74 fe 10 97 7a d1 19 ..=......t...z.. 0170 f4 10 1e ab 13 17 b0 8a 49 fa b1 6b 68 95 14 7f ........I..kh... 0180 d7 d3 86 76 39 b7 6a 85 7d 65 a0 f8 e2 3d ...v9.j.}e...= Frame 16 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 10, 2006 14:36:54.146217000 Time delta from previous packet: 0.008852000 seconds Time since reference or first frame: 19.649329000 seconds Frame Number: 16 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:01:4e:00:1c:aa (00:01:4e:00:1c:aa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.114 (165.227.249.114), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x0001 (1) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x5c7b [correct] Good: True Bad : False Source: 165.227.249.114 (165.227.249.114) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload SPI: 0x37add185 Sequence: 2 Data (356 bytes) 0000 00 0c 29 96 e1 fa 00 01 4e 00 1c aa 08 00 45 00 ..).....N.....E. 0010 01 80 00 01 00 00 1e 32 5c 7b a5 e3 f9 72 a5 e3 .......2\{...r.. 0020 f9 96 37 ad d1 85 00 00 00 02 ff bd d9 cc 37 77 ..7...........7w 0030 e9 38 0b dd 22 ea 02 b2 32 78 ba df ea c5 0c 48 .8.."...2x.....H 0040 a7 0e 8d d3 66 b4 d0 d4 ab d5 65 dc 4b 79 27 ed ....f.....e.Ky'. 0050 49 29 f5 e6 31 c4 e4 14 f1 09 a9 6e 1b df 50 b4 I)..1......n..P. 0060 46 d8 17 a2 38 00 4f ca 1a 53 61 ae 1a 68 85 1b F...8.O..Sa..h.. 0070 61 46 e4 4a dc 20 f1 f0 f3 70 41 00 85 b9 48 e7 aF.J. ...pA...H. 0080 a0 c9 0d 94 8e e4 4d 16 c9 56 2d 7c 00 79 a7 7d ......M..V-|.y.} 0090 d9 7a f2 59 7f 10 b0 d4 de 46 71 cd e1 97 dd 45 .z.Y.....Fq....E 00a0 25 69 22 f8 a0 e3 75 63 58 b3 46 6c 52 dc 49 ba %i"...ucX.FlR.I. 00b0 1c 3e 15 d2 91 aa e3 61 3e 38 91 5d 51 4e 02 7e .>.....a>8.]QN.~ 00c0 fa 32 1e 95 cf e8 c0 7c 55 63 fe c0 cc 96 83 ed .2.....|Uc...... 00d0 df 51 e0 8b cd 76 3f 8b 78 1e 64 00 54 97 75 97 .Q...v?.x.d.T.u. 00e0 2b dc 6a 1b ad a2 81 fe b0 60 8e 9e 07 11 70 33 +.j......`....p3 00f0 97 16 7d f0 ca 65 55 aa 5d d9 65 50 b9 1a c0 b9 ..}..eU.].eP.... 0100 61 27 ef a7 8c fd 50 e2 a9 7a e5 fc 47 e7 ca f0 a'....P..z..G... 0110 f2 a7 57 1d 88 d8 5a da f4 07 26 78 cd 75 46 ee ..W...Z...&x.uF. 0120 ae 95 32 51 3e 6e 4a 2f b7 e4 32 d9 28 eb 50 05 ..2Q>nJ/..2.(.P. 0130 63 b7 9a b1 09 e1 1e db bb d3 82 5f d8 d1 c9 95 c.........._.... 0140 b6 ac 8a f2 0d e5 76 90 c5 c6 e2 ea 4b 41 c7 b4 ......v.....KA.. 0150 1c 87 fc 2b e1 a5 ed a3 f5 6a 30 45 54 3b a7 4d ...+.....j0ET;.M 0160 e8 ac 7f d8 b6 2e 85 f1 d0 9d 86 8e 7f 58 36 89 .............X6. 0170 e9 5b e3 b0 1b 04 ba e2 ab e6 83 c1 33 25 bc 59 .[..........3%.Y 0180 79 30 27 29 71 99 97 09 6f 29 7c e4 90 06 y0')q...o)|...