Frame 1 (222 bytes on wire, 222 bytes captured) Arrival Time: Dec 13, 2009 16:38:17.733360000 [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 222 bytes Capture Length: 222 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x110d (4365) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xea34 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x7371 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 2A1BEF47A2FDA6BE Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Security Association payload Next payload: Vendor ID (13) Payload length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Next payload: Vendor ID (13) Payload length: 20 Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Next payload: NONE (0) Payload length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 09 5b 2b a8 d7 00 0c 29 93 b9 00 08 00 45 00 ..[+....).....E. 0010 00 d0 11 0d 00 00 80 11 ea 34 a5 e3 f9 96 a5 e3 .........4...... 0020 f9 7d 01 f4 01 f4 00 bc 73 71 2a 1b ef 47 a2 fd .}......sq*..G.. 0030 a6 be 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 b4 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 4a 13 ........p.....J. 0080 1c 81 07 03 58 45 5c 57 28 f2 0e 95 45 2f 0d 00 ....XE\W(...E/.. 0090 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 ..}...S..o,....R 00a0 9d 56 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .V........>.in.c 00b0 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 15 2d 18 b6 ...B{.....D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 00 00 00 14 af ca .....F.y........ 00d0 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 2 (222 bytes on wire, 222 bytes captured) Arrival Time: Dec 13, 2009 16:38:17.733374000 [Time delta from previous captured frame: 0.000014000 seconds] [Time delta from previous displayed frame: 0.000014000 seconds] [Time since reference or first frame: 0.000014000 seconds] Frame Number: 2 Frame Length: 222 bytes Capture Length: 222 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x110d (4365) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xea34 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x7371 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 2A1BEF47A2FDA6BE Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Security Association payload Next payload: Vendor ID (13) Payload length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Next payload: Vendor ID (13) Payload length: 20 Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Next payload: NONE (0) Payload length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 09 5b 2b a8 d7 00 0c 29 93 b9 00 08 00 45 00 ..[+....).....E. 0010 00 d0 11 0d 00 00 80 11 ea 34 a5 e3 f9 96 a5 e3 .........4...... 0020 f9 7d 01 f4 01 f4 00 bc 73 71 2a 1b ef 47 a2 fd .}......sq*..G.. 0030 a6 be 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 b4 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 0d 00 00 14 4a 13 ........p.....J. 0080 1c 81 07 03 58 45 5c 57 28 f2 0e 95 45 2f 0d 00 ....XE\W(...E/.. 0090 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 ..}...S..o,....R 00a0 9d 56 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .V........>.in.c 00b0 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 15 2d 18 b6 ...B{.....D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 00 00 00 14 af ca .....F.y........ 00d0 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 3 (122 bytes on wire, 122 bytes captured) Arrival Time: Dec 13, 2009 16:38:17.739351000 [Time delta from previous captured frame: 0.005977000 seconds] [Time delta from previous displayed frame: 0.005977000 seconds] [Time since reference or first frame: 0.005991000 seconds] Frame Number: 3 Frame Length: 122 bytes Capture Length: 122 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Destination: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x0280 (640) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3926 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x07f1 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 2A1BEF47A2FDA6BE Responder cookie: 867DB0CCF671AD1D Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Payload length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 40 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 32 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 93 b9 00 00 09 5b 2b a8 d7 08 00 45 00 ..).....[+....E. 0010 00 6c 02 80 00 00 40 11 39 26 a5 e3 f9 7d a5 e3 .l....@.9&...}.. 0020 f9 96 01 f4 01 f4 00 58 07 f1 2a 1b ef 47 a2 fd .......X..*..G.. 0030 a6 be 86 7d b0 cc f6 71 ad 1d 01 10 02 00 00 00 ...}...q........ 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 01 01 00 01 00 00 00 20 01 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 04 00 02 80 03 ................ 0070 00 01 80 0b 00 01 80 0c 70 80 ........p. Frame 4 (270 bytes on wire, 270 bytes captured) Arrival Time: Dec 13, 2009 16:38:17.747196000 [Time delta from previous captured frame: 0.007845000 seconds] [Time delta from previous displayed frame: 0.007845000 seconds] [Time since reference or first frame: 0.013836000 seconds] Frame Number: 4 Frame Length: 270 bytes Capture Length: 270 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x110e (4366) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xea03 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0xb16c [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 2A1BEF47A2FDA6BE Responder cookie: 867DB0CCF671AD1D Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: NONE (0) Payload length: 68 Nonce Data 0000 00 09 5b 2b a8 d7 00 0c 29 93 b9 00 08 00 45 00 ..[+....).....E. 0010 01 00 11 0e 00 00 80 11 ea 03 a5 e3 f9 96 a5 e3 ................ 0020 f9 7d 01 f4 01 f4 00 ec b1 6c 2a 1b ef 47 a2 fd .}.......l*..G.. 0030 a6 be 86 7d b0 cc f6 71 ad 1d 04 10 02 00 00 00 ...}...q........ 0040 00 00 00 00 00 e4 0a 00 00 84 c4 95 e8 00 9f 4e ...............N 0050 d1 ca 1a 56 a1 ba a0 ce 2d 6d 73 8c 2f 66 9d 52 ...V....-ms./f.R 0060 8c f1 ed 93 c3 f3 45 77 5c 63 1d 10 8e 39 62 d9 ......Ew\c...9b. 0070 3c eb 79 0a 8c ce 1a a7 6a 36 a8 55 42 53 72 0a <.y.....j6.UBSr. 0080 b3 09 f6 ad 6e 6e bf 79 bb ea b0 51 ab b5 ad 6d ....nn.y...Q...m 0090 3b 15 96 db 59 67 e1 49 f4 70 76 a1 41 e3 71 af ;...Yg.I.pv.A.q. 00a0 bb 60 21 88 0b 29 a6 5d 50 e5 e1 5a cd c4 2a 91 .`!..).]P..Z..*. 00b0 60 65 34 82 32 e8 ab e4 6b 89 84 ce e4 77 5a d2 `e4.2...k....wZ. 00c0 04 52 06 ce 92 26 57 18 7d 3d 00 00 00 44 3d 56 .R...&W.}=...D=V 00d0 25 38 da e0 ba 62 f8 8b b9 7f 16 fd 82 39 c5 07 %8...b.......9.. 00e0 c6 bc 86 60 bc 91 b2 ee 3f e5 c4 12 4f c8 70 2c ...`....?...O.p, 00f0 40 2f 6d a6 83 c9 38 94 65 f7 e3 e7 e5 68 5e 8e @/m...8.e....h^. 0100 e5 88 6a 3f 4a 14 3e dc 0f 59 f7 5e c8 c1 ..j?J.>..Y.^.. Frame 5 (270 bytes on wire, 270 bytes captured) Arrival Time: Dec 13, 2009 16:38:17.747230000 [Time delta from previous captured frame: 0.000034000 seconds] [Time delta from previous displayed frame: 0.000034000 seconds] [Time since reference or first frame: 0.013870000 seconds] Frame Number: 5 Frame Length: 270 bytes Capture Length: 270 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x110e (4366) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xea03 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0xb16c [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 2A1BEF47A2FDA6BE Responder cookie: 867DB0CCF671AD1D Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: NONE (0) Payload length: 68 Nonce Data 0000 00 09 5b 2b a8 d7 00 0c 29 93 b9 00 08 00 45 00 ..[+....).....E. 0010 01 00 11 0e 00 00 80 11 ea 03 a5 e3 f9 96 a5 e3 ................ 0020 f9 7d 01 f4 01 f4 00 ec b1 6c 2a 1b ef 47 a2 fd .}.......l*..G.. 0030 a6 be 86 7d b0 cc f6 71 ad 1d 04 10 02 00 00 00 ...}...q........ 0040 00 00 00 00 00 e4 0a 00 00 84 c4 95 e8 00 9f 4e ...............N 0050 d1 ca 1a 56 a1 ba a0 ce 2d 6d 73 8c 2f 66 9d 52 ...V....-ms./f.R 0060 8c f1 ed 93 c3 f3 45 77 5c 63 1d 10 8e 39 62 d9 ......Ew\c...9b. 0070 3c eb 79 0a 8c ce 1a a7 6a 36 a8 55 42 53 72 0a <.y.....j6.UBSr. 0080 b3 09 f6 ad 6e 6e bf 79 bb ea b0 51 ab b5 ad 6d ....nn.y...Q...m 0090 3b 15 96 db 59 67 e1 49 f4 70 76 a1 41 e3 71 af ;...Yg.I.pv.A.q. 00a0 bb 60 21 88 0b 29 a6 5d 50 e5 e1 5a cd c4 2a 91 .`!..).]P..Z..*. 00b0 60 65 34 82 32 e8 ab e4 6b 89 84 ce e4 77 5a d2 `e4.2...k....wZ. 00c0 04 52 06 ce 92 26 57 18 7d 3d 00 00 00 44 3d 56 .R...&W.}=...D=V 00d0 25 38 da e0 ba 62 f8 8b b9 7f 16 fd 82 39 c5 07 %8...b.......9.. 00e0 c6 bc 86 60 bc 91 b2 ee 3f e5 c4 12 4f c8 70 2c ...`....?...O.p, 00f0 40 2f 6d a6 83 c9 38 94 65 f7 e3 e7 e5 68 5e 8e @/m...8.e....h^. 0100 e5 88 6a 3f 4a 14 3e dc 0f 59 f7 5e c8 c1 ..j?J.>..Y.^.. Frame 6 (214 bytes on wire, 214 bytes captured) Arrival Time: Dec 13, 2009 16:38:18.154664000 [Time delta from previous captured frame: 0.407434000 seconds] [Time delta from previous displayed frame: 0.407434000 seconds] [Time since reference or first frame: 0.421304000 seconds] Frame Number: 6 Frame Length: 214 bytes Capture Length: 214 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Destination: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 200 Identification: 0x0281 (641) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x38c9 [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 180 Checksum: 0xb554 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 2A1BEF47A2FDA6BE Responder cookie: 867DB0CCF671AD1D Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 172 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: NONE (0) Payload length: 12 Nonce Data 0000 00 0c 29 93 b9 00 00 09 5b 2b a8 d7 08 00 45 00 ..).....[+....E. 0010 00 c8 02 81 00 00 40 11 38 c9 a5 e3 f9 7d a5 e3 ......@.8....}.. 0020 f9 96 01 f4 01 f4 00 b4 b5 54 2a 1b ef 47 a2 fd .........T*..G.. 0030 a6 be 86 7d b0 cc f6 71 ad 1d 04 10 02 00 00 00 ...}...q........ 0040 00 00 00 00 00 ac 0a 00 00 84 aa ab 3c 73 1e 6d ...............*..- 0060 95 f3 19 6a dc 32 46 a8 60 01 b9 ac 69 65 5c 32 ...j.2F.`...ie\2 0070 b1 01 c1 03 98 b2 c0 f8 89 ae a6 1a 2d 25 a0 43 ............-%.C 0080 26 73 8f ad ad fa c4 74 b5 aa 1e 61 83 da 13 fe &s.....t...a.... 0090 1e 39 de e1 1c 91 b9 f5 e0 71 cd 2b 04 c9 49 a7 .9.......q.+..I. 00a0 eb fb da 1f b0 1d 1b 9a ba b7 f5 39 35 59 8c 6f ...........95Y.o 00b0 48 11 7b 76 35 90 cc 0a 9a 5e f1 c4 e7 4d 46 14 H.{v5....^...MF. 00c0 8d 35 fd 92 a6 47 63 2b 31 b2 73 01 5d df 08 0b .5...Gc+1.s.]... 00d0 35 3b 1b 06 89 ec 00 e0 aa a6 3c b1 82 f1 0c 56 5;........<....V 00e0 ce 06 cf fe 2d e9 f1 63 74 96 a0 11 e5 f6 b1 65 ....-..ct......e 00f0 c7 7e 0f 15 07 51 da 3c a8 50 7d fe 34 19 05 a7 .~...Q.<.P}.4... 0100 57 6c c8 cf a8 40 b7 b0 2d 2f b3 47 89 b6 d3 fc Wl...@..-/.G.... 0110 f3 6d 0e 6f 6c 68 d2 89 38 0c 0b 67 f7 08 33 fd .m.olh..8..g..3. 0120 02 9b 4b 34 1c 8a 8e f4 88 62 4e 5d da 0a b3 79 ..K4.....bN]...y 0130 dd 67 76 1e 47 0c e6 ea c3 89 5b 8d a2 32 ba 3a .gv.G.....[..2.: 0140 45 98 2d e5 5e 0a 05 a4 58 2f c6 0d ea 7d 2c 0a E.-.^...X/...},. 0150 c1 be 74 a1 5f a4 be 2a 1a ca 47 e1 b7 1e be e1 ..t._..*..G..... 0160 bf 38 fa ab fa 32 34 ec 01 e8 74 94 d0 f7 a8 0c .8...24...t..... 0170 be 1e 44 67 0f e3 17 a3 25 53 f9 80 cc d7 ..Dg....%S.... Frame 11 (382 bytes on wire, 382 bytes captured) Arrival Time: Dec 13, 2009 16:38:18.664167000 [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.930807000 seconds] Frame Number: 11 Frame Length: 382 bytes Capture Length: 382 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 368 Identification: 0x1110 (4368) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xe991 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 348 Checksum: 0x0d81 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 2A1BEF47A2FDA6BE Responder cookie: 867DB0CCF671AD1D Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xa675077a Length: 340 Encrypted payload (312 bytes) 0000 00 09 5b 2b a8 d7 00 0c 29 93 b9 00 08 00 45 00 ..[+....).....E. 0010 01 70 11 10 00 00 80 11 e9 91 a5 e3 f9 96 a5 e3 .p.............. 0020 f9 7d 01 f4 01 f4 01 5c 0d 81 2a 1b ef 47 a2 fd .}.....\..*..G.. 0030 a6 be 86 7d b0 cc f6 71 ad 1d 08 10 20 01 a6 75 ...}...q.... ..u 0040 07 7a 00 00 01 54 b6 d0 3d 37 56 02 9d 2d d8 8f .z...T..=7V..-.. 0050 c0 d4 94 be fb 0f 8b 87 3e 93 ed d3 2a 12 e3 2d ........>...*..- 0060 95 f3 19 6a dc 32 46 a8 60 01 b9 ac 69 65 5c 32 ...j.2F.`...ie\2 0070 b1 01 c1 03 98 b2 c0 f8 89 ae a6 1a 2d 25 a0 43 ............-%.C 0080 26 73 8f ad ad fa c4 74 b5 aa 1e 61 83 da 13 fe &s.....t...a.... 0090 1e 39 de e1 1c 91 b9 f5 e0 71 cd 2b 04 c9 49 a7 .9.......q.+..I. 00a0 eb fb da 1f b0 1d 1b 9a ba b7 f5 39 35 59 8c 6f ...........95Y.o 00b0 48 11 7b 76 35 90 cc 0a 9a 5e f1 c4 e7 4d 46 14 H.{v5....^...MF. 00c0 8d 35 fd 92 a6 47 63 2b 31 b2 73 01 5d df 08 0b .5...Gc+1.s.]... 00d0 35 3b 1b 06 89 ec 00 e0 aa a6 3c b1 82 f1 0c 56 5;........<....V 00e0 ce 06 cf fe 2d e9 f1 63 74 96 a0 11 e5 f6 b1 65 ....-..ct......e 00f0 c7 7e 0f 15 07 51 da 3c a8 50 7d fe 34 19 05 a7 .~...Q.<.P}.4... 0100 57 6c c8 cf a8 40 b7 b0 2d 2f b3 47 89 b6 d3 fc Wl...@..-/.G.... 0110 f3 6d 0e 6f 6c 68 d2 89 38 0c 0b 67 f7 08 33 fd .m.olh..8..g..3. 0120 02 9b 4b 34 1c 8a 8e f4 88 62 4e 5d da 0a b3 79 ..K4.....bN]...y 0130 dd 67 76 1e 47 0c e6 ea c3 89 5b 8d a2 32 ba 3a .gv.G.....[..2.: 0140 45 98 2d e5 5e 0a 05 a4 58 2f c6 0d ea 7d 2c 0a E.-.^...X/...},. 0150 c1 be 74 a1 5f a4 be 2a 1a ca 47 e1 b7 1e be e1 ..t._..*..G..... 0160 bf 38 fa ab fa 32 34 ec 01 e8 74 94 d0 f7 a8 0c .8...24...t..... 0170 be 1e 44 67 0f e3 17 a3 25 53 f9 80 cc d7 ..Dg....%S.... Frame 12 (318 bytes on wire, 318 bytes captured) Arrival Time: Dec 13, 2009 16:38:19.072717000 [Time delta from previous captured frame: 0.408550000 seconds] [Time delta from previous displayed frame: 0.408550000 seconds] [Time since reference or first frame: 1.339357000 seconds] Frame Number: 12 Frame Length: 318 bytes Capture Length: 318 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7), Dst: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Destination: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.125 (165.227.249.125), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 304 Identification: 0x0283 (643) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x385f [correct] [Good: True] [Bad : False] Source: 165.227.249.125 (165.227.249.125) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 284 Checksum: 0x8de1 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 2A1BEF47A2FDA6BE Responder cookie: 867DB0CCF671AD1D Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xa675077a Length: 276 Encrypted payload (248 bytes) 0000 00 0c 29 93 b9 00 00 09 5b 2b a8 d7 08 00 45 00 ..).....[+....E. 0010 01 30 02 83 00 00 40 11 38 5f a5 e3 f9 7d a5 e3 .0....@.8_...}.. 0020 f9 96 01 f4 01 f4 01 1c 8d e1 2a 1b ef 47 a2 fd ..........*..G.. 0030 a6 be 86 7d b0 cc f6 71 ad 1d 08 10 20 01 a6 75 ...}...q.... ..u 0040 07 7a 00 00 01 14 56 6c e2 1f 37 3f 30 b9 7e bd .z....Vl..7?0.~. 0050 84 7d c0 21 4b a6 ad 3d 17 b4 61 d0 ad f6 da 19 .}.!K..=..a..... 0060 bd 09 29 45 17 0c 28 ea 80 28 a2 d9 d6 42 b2 3a ..)E..(..(...B.: 0070 02 59 35 d5 19 fb 4e 7f f8 0b 88 56 cb 0f d8 ea .Y5...N....V.... 0080 f9 cc aa 06 72 a2 21 f2 b5 d2 de aa 51 74 75 0c ....r.!.....Qtu. 0090 a6 ae 1c ff 5c d0 b7 61 9e 9f 54 42 5c 0b 45 8c ....\..a..TB\.E. 00a0 9f f6 16 60 06 99 ae c7 d5 dd af 7a cc 5c ff c4 ...`.......z.\.. 00b0 21 aa 1f b8 64 b3 21 0b 8b c4 3e 9d 31 84 a0 df !...d.!...>.1... 00c0 8c 85 19 98 d6 b0 bc 34 05 39 c6 72 a1 49 bc 09 .......4.9.r.I.. 00d0 83 41 0a 24 c1 e5 23 2e 39 4a 7e 9a c5 c8 0f 3d .A.$..#.9J~....= 00e0 fd 6a e6 9c 7a 5c db 76 4e e3 4d 19 81 aa 1b 7e .j..z\.vN.M....~ 00f0 1e f7 92 16 bf 42 30 01 25 37 04 f4 30 75 a9 2f .....B0.%7..0u./ 0100 27 27 45 51 30 d5 a2 9e 41 c8 18 62 8d 65 be ae ''EQ0...A..b.e.. 0110 dd ba 3f 11 4d be 8c 25 d3 52 0f eb f9 bb 6a dd ..?.M..%.R....j. 0120 c0 b8 d7 9c 13 e2 8f 04 84 3b 07 ea 8c f3 cb c0 .........;...... 0130 2d 60 d0 be 76 06 8d 9d 44 81 09 67 f5 09 -`..v...D..g.. Frame 13 (102 bytes on wire, 102 bytes captured) Arrival Time: Dec 13, 2009 16:38:19.092710000 [Time delta from previous captured frame: 0.019993000 seconds] [Time delta from previous displayed frame: 0.019993000 seconds] [Time since reference or first frame: 1.359350000 seconds] Frame Number: 13 Frame Length: 102 bytes Capture Length: 102 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x1111 (4369) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xeaa8 [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.125 (165.227.249.125) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x9281 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 2A1BEF47A2FDA6BE Responder cookie: 867DB0CCF671AD1D Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xa675077a Length: 60 Encrypted payload (32 bytes) 0000 00 09 5b 2b a8 d7 00 0c 29 93 b9 00 08 00 45 00 ..[+....).....E. 0010 00 58 11 11 00 00 80 11 ea a8 a5 e3 f9 96 a5 e3 .X.............. 0020 f9 7d 01 f4 01 f4 00 44 92 81 2a 1b ef 47 a2 fd .}.....D..*..G.. 0030 a6 be 86 7d b0 cc f6 71 ad 1d 08 10 20 01 a6 75 ...}...q.... ..u 0040 07 7a 00 00 00 3c ae 27 80 04 ff 42 22 27 c0 07 .z...<.'...B"'.. 0050 fe 8d 2f d6 3a 02 0d 3c 4a 1a 8a 5f d0 33 00 cf ../.:...1... 00c0 8c 85 19 98 d6 b0 bc 34 05 39 c6 72 a1 49 bc 09 .......4.9.r.I.. 00d0 83 41 0a 24 c1 e5 23 2e 39 4a 7e 9a c5 c8 0f 3d .A.$..#.9J~....= 00e0 fd 6a e6 9c 7a 5c db 76 4e e3 4d 19 81 aa 1b 7e .j..z\.vN.M....~ 00f0 1e f7 92 16 bf 42 30 01 25 37 04 f4 30 75 a9 2f .....B0.%7..0u./ 0100 27 27 45 51 30 d5 a2 9e 41 c8 18 62 8d 65 be ae ''EQ0...A..b.e.. 0110 dd ba 3f 11 4d be 8c 25 d3 52 0f eb f9 bb 6a dd ..?.M..%.R....j. 0120 c0 b8 d7 9c 13 e2 8f 04 84 3b 07 ea 8c f3 cb c0 .........;...... 0130 2d 60 d0 be 76 06 8d 9d 44 81 09 67 f5 09 -`..v...D..g.. Frame 16 (398 bytes on wire, 398 bytes captured) Arrival Time: Dec 13, 2009 16:38:23.985969000 [Time delta from previous captured frame: 0.806753000 seconds] [Time delta from previous displayed frame: 0.806753000 seconds] [Time since reference or first frame: 6.252609000 seconds] Frame Number: 16 Frame Length: 398 bytes Capture Length: 398 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00), Dst: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Destination: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) Address: 00:09:5b:2b:a8:d7 (00:09:5b:2b:a8:d7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) Address: 00:0c:29:93:b9:00 (00:0c:29:93:b9:00) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.125 (165.227.249.125) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 384 Identification: 0x1113 (4371) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xe95d [correct] [Good: True] [Bad : False] Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.125 (165.227.249.125) Encapsulating Security Payload ESP SPI: 0xefffcbb2 ESP Sequence: 1 0000 00 09 5b 2b a8 d7 00 0c 29 93 b9 00 08 00 45 00 ..[+....).....E. 0010 01 80 11 13 00 00 80 32 e9 5d a5 e3 f9 96 a5 e3 .......2.]...... 0020 f9 7d ef ff cb b2 00 00 00 01 f9 3b 23 ba d5 0c .}.........;#... 0030 75 9d 9a 44 4f d0 a1 86 ba 72 16 46 7e 3b b8 a7 u..DO....r.F~;.. 0040 19 2b 8b 44 1f 0c f0 72 78 92 72 9b 59 f1 91 42 .+.D...rx.r.Y..B 0050 77 a2 81 ce 48 9b ca 0e d1 49 94 fa 73 05 83 08 w...H....I..s... 0060 00 97 5b 76 32 97 38 d9 5e 0e fc e3 ae 28 15 52 ..[v2.8.^....(.R 0070 b5 66 44 5b 49 4c 52 30 a0 02 2e 03 ff c0 85 db .fD[ILR0........ 0080 98 67 49 32 20 83 d6 b9 06 c9 e0 ef 59 f0 c7 2f .gI2 .......Y../ 0090 4b b8 23 74 0e c6 e0 74 e1 e5 ea 33 c1 c2 a9 f5 K.#t...t...3.... 00a0 6d d1 30 e5 20 c7 9b ef b8 00 94 46 75 b8 23 25 m.0. ......Fu.#% 00b0 2e bc 38 88 29 47 5a e0 25 a6 98 28 27 d5 e4 bf ..8.)GZ.%..('... 00c0 ff e4 6c 59 6f 64 37 95 ff 6b fb 3c 56 9a 45 b3 ..lYod7..k.D..8.~..]..". 00d0 e7 c9 08 66 f4 54 af f2 3d 69 dc 5c 69 46 5b dc ...f.T..=i.\iF[. 00e0 91 4f 4f ff a9 4f 15 af 86 bb ed 93 23 d3 4b f7 .OO..O......#.K. 00f0 9d f6 df db f6 3e 6a 15 33 85 eb e5 d9 17 45 7c .....>j.3.....E| 0100 42 23 8e 6c c3 01 98 61 a8 d4 fa 76 f2 f3 ff eb B#.l...a...v.... 0110 f9 8d 70 6d b6 9e d4 04 bf 8e 9d b9 53 9e 1c 83 ..pm........S... 0120 98 3d 82 45 02 f7 00 aa 5b f4 5f 00 8b 8e 32 69 .=.E....[._...2i 0130 f6 0c ea a1 5c e1 83 f7 4a 85 c6 ca 4a b9 2d 8a ....\...J...J.-. 0140 21 37 04 0a 51 68 3a 0b a3 2f 05 97 0d 15 80 97 !7..Qh:../...... 0150 b3 ea 99 17 9e d9 71 d9 6e 50 da 43 13 74 0d ab ......q.nP.C.t.. 0160 86 18 d8 f1 4f a9 f1 89 69 1d c4 54 cc ef 3b 9f ....O...i..T..;. 0170 bf fc 13 bf ba 9d 5c d4 0b d7 e2 e6 1b 60 90 cb ......\......`.. 0180 c1 ef 02 a8 99 8d c8 36 33 0c ce d0 1f 33 .......63....3