Frame 1 (222 bytes on wire, 222 bytes captured) Arrival Time: Aug 13, 2006 12:53:53.869013000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x02bc (700) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf888 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x3f3d [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xADC3C915B13A6F42 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 0c 29 89 f2 82 00 0c 29 96 e1 fa 08 00 45 00 ..).....).....E. 0010 00 d0 02 bc 00 00 80 11 f8 88 a5 e3 f9 96 a5 e3 ................ 0020 f9 7a 01 f4 01 f4 00 bc 3f 3d ad c3 c9 15 b1 3a .z......?=.....: 0030 6f 42 00 00 00 00 00 00 00 00 01 10 02 00 00 00 oB.............. 0040 00 00 00 00 00 b4 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 4a 13 ........p.....J. 0080 1c 81 07 03 58 45 5c 57 28 f2 0e 95 45 2f 0d 00 ....XE\W(...E/.. 0090 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 ..}...S..o,....R 00a0 9d 56 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .V........>.in.c 00b0 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 15 2d 18 b6 ...B{.....D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 00 00 00 14 af ca .....F.y........ 00d0 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 2 (122 bytes on wire, 122 bytes captured) Arrival Time: Aug 13, 2006 12:53:53.882656000 Time delta from previous packet: 0.013643000 seconds Time since reference or first frame: 0.013643000 seconds Frame Number: 2 Packet Length: 122 bytes Capture Length: 122 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x006a (106) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb3e [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x2ffb [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xADC3C915B13A6F42 Responder cookie: 0x3A25A84365DF3653 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 96 e1 fa 00 0c 29 89 f2 82 08 00 45 00 ..).....).....E. 0010 00 6c 00 6a 40 00 40 11 fb 3e a5 e3 f9 7a a5 e3 .l.j@.@..>...z.. 0020 f9 96 01 f4 01 f4 00 58 2f fb ad c3 c9 15 b1 3a .......X/......: 0030 6f 42 3a 25 a8 43 65 df 36 53 01 10 02 00 00 00 oB:%.Ce.6S...... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 ........p. Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Aug 13, 2006 12:53:53.936573000 Time delta from previous packet: 0.053917000 seconds Time since reference or first frame: 0.067560000 seconds Frame Number: 3 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x02bd (701) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf887 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x74ca [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xADC3C915B13A6F42 Responder cookie: 0x3A25A84365DF3653 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 89 f2 82 00 0c 29 96 e1 fa 08 00 45 00 ..).....).....E. 0010 00 d0 02 bd 00 00 80 11 f8 87 a5 e3 f9 96 a5 e3 ................ 0020 f9 7a 01 f4 01 f4 00 bc 74 ca ad c3 c9 15 b1 3a .z......t......: 0030 6f 42 3a 25 a8 43 65 df 36 53 04 10 02 00 00 00 oB:%.Ce.6S...... 0040 00 00 00 00 00 b4 0a 00 00 84 a8 0d a2 ed 02 9b ................ 0050 f1 cd 5b 36 7a 41 8d cb 1e 53 1f 3a 44 3c db bf ..[6zA...S.:D<.. 0060 30 78 96 a7 ef ca 6d a2 4f 6a 98 b5 09 88 99 33 0x....m.Oj.....3 0070 d5 77 0c 01 fb d9 f5 9f 99 5b 6a 45 a0 cd 38 0c .w.......[jE..8. 0080 e5 38 11 f9 2f c2 41 a4 95 a2 b3 d1 f1 83 b6 ea .8../.A......... 0090 f8 64 45 b6 63 30 51 3a b7 f0 4d 37 1a 7f b3 b4 .dE.c0Q:..M7.... 00a0 41 0c cc dd 53 33 93 97 a2 a6 9f 98 41 4b ff 24 A...S3......AK.$ 00b0 c8 73 76 26 01 90 68 31 4c 23 e4 5f be 17 e8 36 .sv&..h1L#._...6 00c0 ff 8c 91 36 69 d9 4f c3 da e4 00 00 00 14 bf b5 ...6i.O......... 00d0 d9 93 9c f9 1d 4f d0 50 ac 47 d4 37 df fe .....O.P.G.7.. Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Aug 13, 2006 12:53:53.936575000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.067562000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x006b (107) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfad5 [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x6cf1 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xADC3C915B13A6F42 Responder cookie: 0x3A25A84365DF3653 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 0c 29 96 e1 fa 00 0c 29 89 f2 82 08 00 45 00 ..).....).....E. 0010 00 d4 00 6b 40 00 40 11 fa d5 a5 e3 f9 7a a5 e3 ...k@.@......z.. 0020 f9 96 01 f4 01 f4 00 c0 6c f1 ad c3 c9 15 b1 3a ........l......: 0030 6f 42 3a 25 a8 43 65 df 36 53 04 10 02 00 00 00 oB:%.Ce.6S...... 0040 00 00 00 00 00 b8 0a 00 00 84 3a 25 86 ef 20 5d ..........:%.. ] 0050 d4 9c 9c eb d0 4a 9a e0 c4 c1 ca 8f f4 8d 3f e1 .....J........?. 0060 68 4c b0 30 06 03 a1 7e 58 d9 63 ab ce c5 06 f8 hL.0...~X.c..... 0070 ea 71 b8 db cc f8 98 17 f3 b4 09 12 f8 c8 98 8e .q.............. 0080 ce ff fb d5 cc 54 e3 bd 61 44 6c 83 57 d4 76 22 .....T..aDl.W.v" 0090 ad 59 be 41 67 77 e3 d7 11 84 f5 fb 1a 8a d5 1b .Y.Agw.......... 00a0 21 3d e8 b0 61 73 88 ec 3f 6b 65 0f fa a8 b0 f1 !=..as..?ke..... 00b0 dc e4 79 05 2c a3 51 4f 96 e9 ee 9f 5c b9 a7 8e ..y.,.QO....\... 00c0 5a 29 06 aa 07 23 aa 7e 1f fa 00 00 00 18 18 0a Z)...#.~........ 00d0 ea 20 3e 44 fd 86 b2 58 7b 95 b8 bf ed c0 d7 39 . >D...X{......9 00e0 39 ea 9. Frame 5 (142 bytes on wire, 142 bytes captured) Arrival Time: Aug 13, 2006 12:53:53.976179000 Time delta from previous packet: 0.039604000 seconds Time since reference or first frame: 0.107166000 seconds Frame Number: 5 Packet Length: 142 bytes Capture Length: 142 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x02be (702) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8d6 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0xb2a5 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xADC3C915B13A6F42 Responder cookie: 0x3A25A84365DF3653 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Encrypted payload (72 bytes) 0000 00 0c 29 89 f2 82 00 0c 29 96 e1 fa 08 00 45 00 ..).....).....E. 0010 00 80 02 be 00 00 80 11 f8 d6 a5 e3 f9 96 a5 e3 ................ 0020 f9 7a 01 f4 01 f4 00 6c b2 a5 ad c3 c9 15 b1 3a .z.....l.......: 0030 6f 42 3a 25 a8 43 65 df 36 53 05 10 02 01 00 00 oB:%.Ce.6S...... 0040 00 00 00 00 00 64 47 62 d5 27 73 94 25 ab e7 83 .....dGb.'s.%... 0050 c2 2f 89 9c 89 ef 51 31 7d 58 44 15 81 c6 bf 1d ./....Q1}XD..... 0060 fe cb 77 b4 97 fb 39 8b bb e5 08 6f c0 20 4c 04 ..w...9....o. L. 0070 6b c2 5e 7f 57 d2 78 c9 62 8d 01 ca 40 98 a5 ef k.^.W.x.b...@... 0080 aa 8e db 5d a2 e9 7b 7e e7 5c 0b 5b 90 71 ...]..{~.\.[.q Frame 6 (110 bytes on wire, 110 bytes captured) Arrival Time: Aug 13, 2006 12:53:53.976181000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.107168000 seconds Frame Number: 6 Packet Length: 110 bytes Capture Length: 110 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x006c (108) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb48 [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x7a51 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xADC3C915B13A6F42 Responder cookie: 0x3A25A84365DF3653 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 96 e1 fa 00 0c 29 89 f2 82 08 00 45 00 ..).....).....E. 0010 00 60 00 6c 40 00 40 11 fb 48 a5 e3 f9 7a a5 e3 .`.l@.@..H...z.. 0020 f9 96 01 f4 01 f4 00 4c 7a 51 ad c3 c9 15 b1 3a .......LzQ.....: 0030 6f 42 3a 25 a8 43 65 df 36 53 05 10 02 01 00 00 oB:%.Ce.6S...... 0040 00 00 00 00 00 44 fe 35 fe 1a 73 63 8e 7f f4 e4 .....D.5..sc.... 0050 22 f2 4e 9a d0 8e a1 88 76 76 45 44 ef 89 af 7a ".N.....vvED...z 0060 00 27 be 88 80 78 b6 74 3d 5e e0 8c df f8 .'...x.t=^.... Frame 7 (110 bytes on wire, 110 bytes captured) Arrival Time: Aug 13, 2006 12:53:53.997834000 Time delta from previous packet: 0.021653000 seconds Time since reference or first frame: 0.128821000 seconds Frame Number: 7 Packet Length: 110 bytes Capture Length: 110 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x006d (109) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb47 [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x7a51 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xADC3C915B13A6F42 Responder cookie: 0x3A25A84365DF3653 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 96 e1 fa 00 0c 29 89 f2 82 08 00 45 00 ..).....).....E. 0010 00 60 00 6d 40 00 40 11 fb 47 a5 e3 f9 7a a5 e3 .`.m@.@..G...z.. 0020 f9 96 01 f4 01 f4 00 4c 7a 51 ad c3 c9 15 b1 3a .......LzQ.....: 0030 6f 42 3a 25 a8 43 65 df 36 53 05 10 02 01 00 00 oB:%.Ce.6S...... 0040 00 00 00 00 00 44 fe 35 fe 1a 73 63 8e 7f f4 e4 .....D.5..sc.... 0050 22 f2 4e 9a d0 8e a1 88 76 76 45 44 ef 89 af 7a ".N.....vvED...z 0060 00 27 be 88 80 78 b6 74 3d 5e e0 8c df f8 .'...x.t=^.... Frame 8 (334 bytes on wire, 334 bytes captured) Arrival Time: Aug 13, 2006 12:53:54.002852000 Time delta from previous packet: 0.005018000 seconds Time since reference or first frame: 0.133839000 seconds Frame Number: 8 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x02bf (703) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf815 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x33dc [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xADC3C915B13A6F42 Responder cookie: 0x3A25A84365DF3653 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x4962E422 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 89 f2 82 00 0c 29 96 e1 fa 08 00 45 00 ..).....).....E. 0010 01 40 02 bf 00 00 80 11 f8 15 a5 e3 f9 96 a5 e3 .@.............. 0020 f9 7a 01 f4 01 f4 01 2c 33 dc ad c3 c9 15 b1 3a .z.....,3......: 0030 6f 42 3a 25 a8 43 65 df 36 53 08 10 20 01 49 62 oB:%.Ce.6S.. .Ib 0040 e4 22 00 00 01 24 56 b9 62 9c 65 fa 69 7f 8b ee ."...$V.b.e.i... 0050 41 cd 95 2d c0 1f 2a 0e 30 88 14 f9 01 6b 1a fe A..-..*.0....k.. 0060 8a ec 41 36 82 26 0f 43 78 49 e7 70 a5 21 7f dc ..A6.&.CxI.p.!.. 0070 c0 60 1e 07 c8 e4 cb e2 49 ea f6 72 74 ac b5 f6 .`......I..rt... 0080 53 4d 94 ed b2 f9 08 14 07 ee 68 e2 00 d9 63 a2 SM........h...c. 0090 70 31 5b c1 22 f1 7f 13 0f 2c d5 91 2e 13 49 2d p1[."....,....I- 00a0 f0 51 d2 53 61 64 df 45 97 0b 68 a1 3d 5d 1f 0e .Q.Sad.E..h.=].. 00b0 f8 5c f2 6c bb 5e 58 b6 d5 ad 8c f4 89 b8 9c 93 .\.l.^X......... 00c0 a5 72 20 fe 3b 6c 8f 09 57 d0 dc 64 6e 05 a3 2e .r .;l..W..dn... 00d0 8b 5a 7f b3 1d c8 55 76 19 06 cd be 3e 16 b8 ec .Z....Uv....>... 00e0 a9 cd de 23 e1 5e 57 b2 9c a6 47 1b 2c ac d7 91 ...#.^W...G.,... 00f0 4a e5 d9 8c 4b dd ce 0f 01 3b 0d 9b 8f 81 db 39 J...K....;.....9 0100 f4 ea 1f c4 a0 05 43 19 aa 46 3b 49 5b ca 47 b9 ......C..F;I[.G. 0110 6a 17 42 0f 5f 95 ab 8b 48 16 24 64 f4 98 81 ec j.B._...H.$d.... 0120 29 e9 74 1c e9 42 5e 74 0e d2 6a 90 72 83 fd 28 ).t..B^t..j.r..( 0130 8f 02 d8 3c b4 af 3e 2a 89 9d a0 53 f4 ae cc ce ...<..>*...S.... 0140 f3 be 59 27 87 a7 57 e7 a6 88 46 e4 1b 90 ..Y'..W...F... Frame 9 (334 bytes on wire, 334 bytes captured) Arrival Time: Aug 13, 2006 12:53:54.006661000 Time delta from previous packet: 0.003809000 seconds Time since reference or first frame: 0.137648000 seconds Frame Number: 9 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x006e (110) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa66 [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x1a5d [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xADC3C915B13A6F42 Responder cookie: 0x3A25A84365DF3653 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x4962E422 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 96 e1 fa 00 0c 29 89 f2 82 08 00 45 00 ..).....).....E. 0010 01 40 00 6e 40 00 40 11 fa 66 a5 e3 f9 7a a5 e3 .@.n@.@..f...z.. 0020 f9 96 01 f4 01 f4 01 2c 1a 5d ad c3 c9 15 b1 3a .......,.].....: 0030 6f 42 3a 25 a8 43 65 df 36 53 08 10 20 01 49 62 oB:%.Ce.6S.. .Ib 0040 e4 22 00 00 01 24 68 46 45 93 3e 70 05 2c de 4a ."...$hFE.>p.,.J 0050 3d ac f6 dd 8c 5a 20 3d 9b 59 c9 6b db 4f 7d fd =....Z =.Y.k.O}. 0060 ca 55 fa 0d ac df d8 44 30 85 d9 eb 12 3b 72 b2 .U.....D0....;r. 0070 39 47 83 9f fb 17 4d 0a 81 90 09 98 25 d2 52 19 9G....M.....%.R. 0080 2a 0f 5d 7c c6 d0 c0 09 2a f0 b0 30 fc 9f 65 fa *.]|....*..0..e. 0090 39 9f 48 7e fe 67 ee 50 fd 04 b3 c2 3e 36 23 b2 9.H~.g.P....>6#. 00a0 aa 4f 81 74 c4 ba 46 86 94 51 4a 34 df 44 46 1b .O.t..F..QJ4.DF. 00b0 02 f5 98 98 75 c8 3e 39 98 12 94 3a eb 41 b8 03 ....u.>9...:.A.. 00c0 ad ec d2 57 ca 59 57 ef af 94 37 dd 8e df 03 3b ...W.YW...7....; 00d0 06 bf 37 a4 3e dd 67 0c bc 25 a0 07 27 28 b0 95 ..7.>.g..%..'(.. 00e0 0e fa 1c f3 7d 91 30 d9 56 d7 16 e9 77 54 d9 76 ....}.0.V...wT.v 00f0 a2 66 eb 8a 72 4f cc 45 8a 26 ae 5f 0b 55 58 7a .f..rO.E.&._.UXz 0100 27 bf 8f 8b 0b 9e ec d6 04 2f 78 27 33 b7 99 88 '......../x'3... 0110 22 5d 42 2c d5 42 a4 28 93 f0 5a a3 8a 71 86 4b "]B,.B.(..Z..q.K 0120 4a 49 ab 7a bf aa ff 23 af 8b eb f6 72 85 79 90 JI.z...#....r.y. 0130 4e cb 65 74 33 12 c0 e7 c9 71 cd 02 b1 26 a6 f6 N.et3....q...&.. 0140 02 e9 db dc ce fe a0 4d 26 2e 0c b5 5b 83 .......M&...[. Frame 10 (334 bytes on wire, 334 bytes captured) Arrival Time: Aug 13, 2006 12:53:54.017791000 Time delta from previous packet: 0.011130000 seconds Time since reference or first frame: 0.148778000 seconds Frame Number: 10 Packet Length: 334 bytes Capture Length: 334 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x02c0 (704) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf814 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x33dc [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xADC3C915B13A6F42 Responder cookie: 0x3A25A84365DF3653 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x4962E422 Length: 292 Encrypted payload (264 bytes) 0000 00 0c 29 89 f2 82 00 0c 29 96 e1 fa 08 00 45 00 ..).....).....E. 0010 01 40 02 c0 00 00 80 11 f8 14 a5 e3 f9 96 a5 e3 .@.............. 0020 f9 7a 01 f4 01 f4 01 2c 33 dc ad c3 c9 15 b1 3a .z.....,3......: 0030 6f 42 3a 25 a8 43 65 df 36 53 08 10 20 01 49 62 oB:%.Ce.6S.. .Ib 0040 e4 22 00 00 01 24 56 b9 62 9c 65 fa 69 7f 8b ee ."...$V.b.e.i... 0050 41 cd 95 2d c0 1f 2a 0e 30 88 14 f9 01 6b 1a fe A..-..*.0....k.. 0060 8a ec 41 36 82 26 0f 43 78 49 e7 70 a5 21 7f dc ..A6.&.CxI.p.!.. 0070 c0 60 1e 07 c8 e4 cb e2 49 ea f6 72 74 ac b5 f6 .`......I..rt... 0080 53 4d 94 ed b2 f9 08 14 07 ee 68 e2 00 d9 63 a2 SM........h...c. 0090 70 31 5b c1 22 f1 7f 13 0f 2c d5 91 2e 13 49 2d p1[."....,....I- 00a0 f0 51 d2 53 61 64 df 45 97 0b 68 a1 3d 5d 1f 0e .Q.Sad.E..h.=].. 00b0 f8 5c f2 6c bb 5e 58 b6 d5 ad 8c f4 89 b8 9c 93 .\.l.^X......... 00c0 a5 72 20 fe 3b 6c 8f 09 57 d0 dc 64 6e 05 a3 2e .r .;l..W..dn... 00d0 8b 5a 7f b3 1d c8 55 76 19 06 cd be 3e 16 b8 ec .Z....Uv....>... 00e0 a9 cd de 23 e1 5e 57 b2 9c a6 47 1b 2c ac d7 91 ...#.^W...G.,... 00f0 4a e5 d9 8c 4b dd ce 0f 01 3b 0d 9b 8f 81 db 39 J...K....;.....9 0100 f4 ea 1f c4 a0 05 43 19 aa 46 3b 49 5b ca 47 b9 ......C..F;I[.G. 0110 6a 17 42 0f 5f 95 ab 8b 48 16 24 64 f4 98 81 ec j.B._...H.$d.... 0120 29 e9 74 1c e9 42 5e 74 0e d2 6a 90 72 83 fd 28 ).t..B^t..j.r..( 0130 8f 02 d8 3c b4 af 3e 2a 89 9d a0 53 f4 ae cc ce ...<..>*...S.... 0140 f3 be 59 27 87 a7 57 e7 a6 88 46 e4 1b 90 ..Y'..W...F... Frame 11 (102 bytes on wire, 102 bytes captured) Arrival Time: Aug 13, 2006 12:53:54.129259000 Time delta from previous packet: 0.111468000 seconds Time since reference or first frame: 0.260246000 seconds Frame Number: 11 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x02c1 (705) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8fb [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xe171 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xADC3C915B13A6F42 Responder cookie: 0x3A25A84365DF3653 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x4962E422 Length: 60 Encrypted payload (32 bytes) 0000 00 0c 29 89 f2 82 00 0c 29 96 e1 fa 08 00 45 00 ..).....).....E. 0010 00 58 02 c1 00 00 80 11 f8 fb a5 e3 f9 96 a5 e3 .X.............. 0020 f9 7a 01 f4 01 f4 00 44 e1 71 ad c3 c9 15 b1 3a .z.....D.q.....: 0030 6f 42 3a 25 a8 43 65 df 36 53 08 10 20 01 49 62 oB:%.Ce.6S.. .Ib 0040 e4 22 00 00 00 3c 7f 82 34 d5 f6 ec aa 84 0b 72 ."...<..4......r 0050 cb 66 55 ea 22 0b e1 99 95 25 ad a6 f8 40 1c 0d .fU."....%...@.. 0060 fc bc cd 1d c8 48 .....H Frame 12 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 13, 2006 12:54:00.844750000 Time delta from previous packet: 6.715491000 seconds Time since reference or first frame: 6.975737000 seconds Frame Number: 12 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Destination: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x02c2 (706) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xf7b1 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0xc83c0446 Sequence: 1 Data (356 bytes) 0000 00 0c 29 89 f2 82 00 0c 29 96 e1 fa 08 00 45 00 ..).....).....E. 0010 01 80 02 c2 00 00 80 32 f7 b1 a5 e3 f9 96 a5 e3 .......2........ 0020 f9 7a c8 3c 04 46 00 00 00 01 28 5f d7 7b 74 8f .z.<.F....(_.{t. 0030 a5 f8 05 33 49 eb 84 af cd a1 c1 0a 68 f4 d8 c7 ...3I.......h... 0040 8d c3 26 27 b6 c9 82 99 cf 14 22 e1 10 54 b5 8c ..&'......"..T.. 0050 cf f4 90 1d 67 9f d7 c1 57 e5 ce 82 fb e0 8d 4f ....g...W......O 0060 8b 55 46 2f e7 d8 a4 b0 c9 17 31 8a 97 d6 75 2a .UF/......1...u* 0070 80 17 ea a9 6a 26 61 df 33 06 81 a7 87 b2 88 0e ....j&a.3....... 0080 bb 9f 86 2c e0 58 62 7e 5d 27 ea 6f e4 15 c9 b4 ...,.Xb~]'.o.... 0090 c0 78 c9 ce 67 cf 65 35 2d aa fd 36 52 18 79 a8 .x..g.e5-..6R.y. 00a0 73 34 ee 9d 3c 25 f0 5a 30 9a ce 44 c4 3e fc db s4..<%.Z0..D.>.. 00b0 f8 73 75 f6 2f 1f f7 6b d9 19 f7 38 41 19 7b 40 .su./..k...8A.{@ 00c0 46 c1 5c d8 dd 18 7e 31 67 56 0e f2 18 3c 0b 4f F.\...~1gV...<.O 00d0 20 c5 33 2a 04 fe a7 40 6f 47 7f cf 0e 7d 95 b5 .3*...@oG...}.. 00e0 d9 62 55 58 8a 88 ff 1b 2c 8f d7 72 88 01 24 57 .bUX....,..r..$W 00f0 e3 fe 0e 0f 07 fe 4a 12 e8 13 a0 cb 81 23 dc 18 ......J......#.. 0100 5a 46 9f 32 2c 0c 08 3a d9 e6 51 5d 7f 85 2d c8 ZF.2,..:..Q]..-. 0110 2a 1d 5f d8 59 6c 18 38 31 04 28 e0 a5 15 a5 e1 *._.Yl.81.(..... 0120 1a cd 6c 7b ba 7d 57 0d d9 05 d8 3a a0 50 72 47 ..l{.}W....:.PrG 0130 a3 87 bd 64 e9 74 e8 25 96 6c cb 85 fe e4 79 7e ...d.t.%.l....y~ 0140 7a 4a 41 35 ae ad 81 64 a5 76 00 9c 01 42 ac 7d zJA5...d.v...B.} 0150 e3 eb 03 03 11 5c 66 d7 e4 e1 2d 64 5d b7 43 6b .....\f...-d].Ck 0160 9f c7 2f d6 fb 01 8c 75 34 1f 24 c8 71 d9 d1 61 ../....u4.$.q..a 0170 85 28 34 af 28 3f 80 2d 94 81 82 3d 10 87 d7 52 .(4.(?.-...=...R 0180 89 0a f5 fa b6 5c cb 84 89 71 4f e4 a0 b6 .....\...qO... Frame 13 (398 bytes on wire, 398 bytes captured) Arrival Time: Aug 13, 2006 12:54:00.848666000 Time delta from previous packet: 0.003916000 seconds Time since reference or first frame: 6.979653000 seconds Frame Number: 13 Packet Length: 398 bytes Capture Length: 398 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0c:29:89:f2:82 (00:0c:29:89:f2:82) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x0039 (57) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7b3a [correct] Good: True Bad : False Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload SPI: 0xf97f93bd Sequence: 1 Data (356 bytes) 0000 00 0c 29 96 e1 fa 00 0c 29 89 f2 82 08 00 45 00 ..).....).....E. 0010 01 80 00 39 00 00 ff 32 7b 3a a5 e3 f9 7a a5 e3 ...9...2{:...z.. 0020 f9 96 f9 7f 93 bd 00 00 00 01 e0 cd aa a4 07 52 ...............R 0030 d5 27 8d 09 95 0c a3 15 f7 25 40 71 8d fa 4a 93 .'.......%@q..J. 0040 9b 9f 11 fa b4 20 55 d9 29 d3 df 92 db 7f 27 28 ..... U.).....'( 0050 dc e9 4e b7 35 2e 77 14 e6 d4 09 a7 92 5c 31 45 ..N.5.w......\1E 0060 da 98 6d 95 68 67 b7 7a fe fc 19 50 6c 58 98 c0 ..m.hg.z...PlX.. 0070 4f ae b1 e4 55 eb db 66 85 35 dc ac 24 71 3c b3 O...U..f.5..$q<. 0080 4a 00 2f f7 0b a0 06 d0 f3 b2 d6 ac 85 2f 69 4c J./........../iL 0090 ff e7 1b ad 0c a1 b4 40 d8 76 32 01 7d 03 0c 88 .......@.v2.}... 00a0 b9 aa 46 00 a8 76 c4 2f 51 fb 9c 0a 4b ef 06 4e ..F..v./Q...K..N 00b0 c0 36 56 ff d3 36 15 ca 18 7a 10 37 27 4b 52 1e .6V..6...z.7'KR. 00c0 df b1 9c 8d 9d 9a a4 bd 5b 80 ba cd 65 3b 10 48 ........[...e;.H 00d0 81 b3 42 ea 73 f4 75 ff 2f 0d 7d c8 20 49 78 70 ..B.s.u./.}. Ixp 00e0 41 35 d3 b8 a6 12 9d 4d e9 ba 42 85 19 f6 24 88 A5.....M..B...$. 00f0 e3 52 d3 38 54 2c f5 ee 4c 6a ae 13 cf 18 1c 49 .R.8T,..Lj.....I 0100 5d f1 1f f5 fb ee ef 53 d7 8b b1 57 88 5d d6 b8 ]......S...W.].. 0110 3a b7 5f 5a 03 4c b1 94 10 93 23 ad bc c4 31 6f :._Z.L....#...1o 0120 39 f0 b6 ab 86 57 10 73 8c c3 9b 67 c7 15 a4 7c 9....W.s...g...| 0130 89 2a 78 98 68 15 11 45 5f 64 63 dc be 29 cb 4a .*x.h..E_dc..).J 0140 78 14 21 ca ae 11 be f7 81 74 89 03 72 b9 10 07 x.!......t..r... 0150 f0 4e b6 e7 cb 92 60 2e 9c f9 f8 bc d3 7f bd 0e .N....`......... 0160 fa f6 73 92 bc e0 a8 a0 45 2b 5d 04 15 6b f5 0f ..s.....E+]..k.. 0170 70 a5 db b0 99 a8 83 28 0b fb 8d 0a 97 df ea bd p......(........ 0180 5c d3 4d 9f 27 93 fd 3f 45 c6 3c 9e 85 78 \.M.'..?E.<..x