Frame 1 (130 bytes on wire, 130 bytes captured) Arrival Time: Jan 26, 2008 15:38:54.330244000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 130 bytes Capture Length: 130 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.152 (165.227.249.152), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 116 Identification: 0x89aa (35242) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xb1d8 [correct] Good: True Bad : False Source: 165.227.249.152 (165.227.249.152) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 96 Checksum: 0x7881 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x12173550B1B6D36B Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 88 Security Association payload Next payload: NONE (0) Length: 60 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 48 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 40 Transform number: 1 Transform ID: KEY_IKE (1) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 96 e1 fa 00 90 7f 3e ca 91 08 00 45 00 ..)......>....E. 0010 00 74 89 aa 00 00 40 11 b1 d8 a5 e3 f9 98 a5 e3 .t....@......... 0020 f9 96 01 f4 01 f4 00 60 78 81 12 17 35 50 b1 b6 .......`x...5P.. 0030 d3 6b 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .k.............. 0040 00 00 00 00 00 58 00 00 00 3c 00 00 00 01 00 00 .....X...<...... 0050 00 01 00 00 00 30 01 01 00 01 00 00 00 28 01 01 .....0.......(.. 0060 00 00 80 04 00 02 80 03 00 01 80 01 00 07 80 0e ................ 0070 00 80 80 02 00 02 80 0b 00 01 00 0c 00 04 00 00 ................ 0080 70 80 p. Frame 2 (130 bytes on wire, 130 bytes captured) Arrival Time: Jan 26, 2008 15:38:56.413206000 Time delta from previous packet: 2.082962000 seconds Time since reference or first frame: 2.082962000 seconds Frame Number: 2 Packet Length: 130 bytes Capture Length: 130 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.152 (165.227.249.152), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 116 Identification: 0x89ab (35243) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xb1d7 [correct] Good: True Bad : False Source: 165.227.249.152 (165.227.249.152) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 96 Checksum: 0x7881 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x12173550B1B6D36B Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 88 Security Association payload Next payload: NONE (0) Length: 60 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 48 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 40 Transform number: 1 Transform ID: KEY_IKE (1) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 96 e1 fa 00 90 7f 3e ca 91 08 00 45 00 ..)......>....E. 0010 00 74 89 ab 00 00 40 11 b1 d7 a5 e3 f9 98 a5 e3 .t....@......... 0020 f9 96 01 f4 01 f4 00 60 78 81 12 17 35 50 b1 b6 .......`x...5P.. 0030 d3 6b 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .k.............. 0040 00 00 00 00 00 58 00 00 00 3c 00 00 00 01 00 00 .....X...<...... 0050 00 01 00 00 00 30 01 01 00 01 00 00 00 28 01 01 .....0.......(.. 0060 00 00 80 04 00 02 80 03 00 01 80 01 00 07 80 0e ................ 0070 00 80 80 02 00 02 80 0b 00 01 00 0c 00 04 00 00 ................ 0080 70 80 p. Frame 3 (130 bytes on wire, 130 bytes captured) Arrival Time: Jan 26, 2008 15:38:59.420336000 Time delta from previous packet: 3.007130000 seconds Time since reference or first frame: 5.090092000 seconds Frame Number: 3 Packet Length: 130 bytes Capture Length: 130 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.152 (165.227.249.152), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 116 Identification: 0x89ac (35244) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xb1d6 [correct] Good: True Bad : False Source: 165.227.249.152 (165.227.249.152) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 96 Checksum: 0x7881 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x12173550B1B6D36B Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 88 Security Association payload Next payload: NONE (0) Length: 60 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 48 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 40 Transform number: 1 Transform ID: KEY_IKE (1) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 96 e1 fa 00 90 7f 3e ca 91 08 00 45 00 ..)......>....E. 0010 00 74 89 ac 00 00 40 11 b1 d6 a5 e3 f9 98 a5 e3 .t....@......... 0020 f9 96 01 f4 01 f4 00 60 78 81 12 17 35 50 b1 b6 .......`x...5P.. 0030 d3 6b 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .k.............. 0040 00 00 00 00 00 58 00 00 00 3c 00 00 00 01 00 00 .....X...<...... 0050 00 01 00 00 00 30 01 01 00 01 00 00 00 28 01 01 .....0.......(.. 0060 00 00 80 04 00 02 80 03 00 01 80 01 00 07 80 0e ................ 0070 00 80 80 02 00 02 80 0b 00 01 00 0c 00 04 00 00 ................ 0080 70 80 p. Frame 4 (130 bytes on wire, 130 bytes captured) Arrival Time: Jan 26, 2008 15:39:02.428910000 Time delta from previous packet: 3.008574000 seconds Time since reference or first frame: 8.098666000 seconds Frame Number: 4 Packet Length: 130 bytes Capture Length: 130 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.152 (165.227.249.152), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 116 Identification: 0x89ad (35245) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xb1d5 [correct] Good: True Bad : False Source: 165.227.249.152 (165.227.249.152) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 96 Checksum: 0x7881 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x12173550B1B6D36B Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 88 Security Association payload Next payload: NONE (0) Length: 60 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 48 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 40 Transform number: 1 Transform ID: KEY_IKE (1) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 96 e1 fa 00 90 7f 3e ca 91 08 00 45 00 ..)......>....E. 0010 00 74 89 ad 00 00 40 11 b1 d5 a5 e3 f9 98 a5 e3 .t....@......... 0020 f9 96 01 f4 01 f4 00 60 78 81 12 17 35 50 b1 b6 .......`x...5P.. 0030 d3 6b 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .k.............. 0040 00 00 00 00 00 58 00 00 00 3c 00 00 00 01 00 00 .....X...<...... 0050 00 01 00 00 00 30 01 01 00 01 00 00 00 28 01 01 .....0.......(.. 0060 00 00 80 04 00 02 80 03 00 01 80 01 00 07 80 0e ................ 0070 00 80 80 02 00 02 80 0b 00 01 00 0c 00 04 00 00 ................ 0080 70 80 p. Frame 5 (226 bytes on wire, 226 bytes captured) Arrival Time: Jan 26, 2008 15:39:07.974540000 Time delta from previous packet: 5.545630000 seconds Time since reference or first frame: 13.644296000 seconds Frame Number: 5 Packet Length: 226 bytes Capture Length: 226 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91) Destination: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.152 (165.227.249.152) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x41cc (16844) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xb956 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.152 (165.227.249.152) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0x8cf4 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xF0E5993A624CDC6B Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 90 7f 3e ca 91 00 0c 29 96 e1 fa 08 00 45 00 ...>....).....E. 0010 00 d4 41 cc 00 00 80 11 b9 56 a5 e3 f9 96 a5 e3 ..A......V...... 0020 f9 98 01 f4 01 f4 00 c0 8c f4 f0 e5 99 3a 62 4c .............:bL 0030 dc 6b 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .k.............. 0040 00 00 00 00 00 b8 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 4a 13 1c 81 07 03 58 45 5c 57 28 f2 0e 95 ..J.....XE\W(... 0090 45 2f 0d 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 E/....}...S..o,. 00a0 9d 92 15 52 9d 56 0d 00 00 14 90 cb 80 91 3e bb ...R.V........>. 00b0 69 6e 08 63 81 b5 ec 42 7b 1f 0d 00 00 14 44 85 in.c...B{.....D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 00 00 .-.......F.y.... 00d0 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 00e0 01 00 .. Frame 6 (138 bytes on wire, 138 bytes captured) Arrival Time: Jan 26, 2008 15:39:07.974542000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 13.644298000 seconds Frame Number: 6 Packet Length: 138 bytes Capture Length: 138 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.152 (165.227.249.152), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 124 Identification: 0x89ae (35246) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xb1cc [correct] Good: True Bad : False Source: 165.227.249.152 (165.227.249.152) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 104 Checksum: 0x6137 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xF0E5993A624CDC6B Responder cookie: 0x3EB6B825581D787A Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 96 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 0c 29 96 e1 fa 00 90 7f 3e ca 91 08 00 45 00 ..)......>....E. 0010 00 7c 89 ae 00 00 40 11 b1 cc a5 e3 f9 98 a5 e3 .|....@......... 0020 f9 96 01 f4 01 f4 00 68 61 37 f0 e5 99 3a 62 4c .......ha7...:bL 0030 dc 6b 3e b6 b8 25 58 1d 78 7a 01 10 02 00 00 00 .k>..%X.xz...... 0040 00 00 00 00 00 60 0d 00 00 38 00 00 00 01 00 00 .....`...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 00 00 ............p... 0080 00 0c 09 00 26 89 df d6 b7 12 ....&..... Frame 7 (222 bytes on wire, 222 bytes captured) Arrival Time: Jan 26, 2008 15:39:07.974544000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 13.644300000 seconds Frame Number: 7 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91) Destination: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.152 (165.227.249.152) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x41cd (16845) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xb959 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.152 (165.227.249.152) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x06eb [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xF0E5993A624CDC6B Responder cookie: 0x3EB6B825581D787A Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 90 7f 3e ca 91 00 0c 29 96 e1 fa 08 00 45 00 ...>....).....E. 0010 00 d0 41 cd 00 00 80 11 b9 59 a5 e3 f9 96 a5 e3 ..A......Y...... 0020 f9 98 01 f4 01 f4 00 bc 06 eb f0 e5 99 3a 62 4c .............:bL 0030 dc 6b 3e b6 b8 25 58 1d 78 7a 04 10 02 00 00 00 .k>..%X.xz...... 0040 00 00 00 00 00 b4 0a 00 00 84 0e 5e 2a fb 64 b8 ...........^*.d. 0050 9b 48 c6 c3 78 cd b5 4e 94 23 54 8b c3 f4 27 39 .H..x..N.#T...'9 0060 0a 75 18 dd 85 43 5a 29 cf d8 52 5e c0 1b 19 e1 .u...CZ)..R^.... 0070 10 05 f0 4f 2f d4 82 ed fb 72 0b 4b 54 a5 9d e4 ...O/....r.KT... 0080 63 08 41 5c 12 fa 82 72 8f c6 0e 85 12 22 2b 96 c.A\...r....."+. 0090 80 08 1c 10 ac 2f c7 6c be fb c2 07 e9 89 8b 1a ...../.l........ 00a0 fd 1e 27 02 22 ae 72 0e 73 90 4a 9e 8c b4 88 7b ..'.".r.s.J....{ 00b0 ae 2f ca 9e 9d 23 ea fe 93 6e bf 89 20 eb 7e a7 ./...#...n.. .~. 00c0 44 88 fd a7 c7 27 36 c8 25 36 00 00 00 14 cf 40 D....'6.%6.....@ 00d0 fe e6 d4 d3 30 19 a9 c2 47 3c 70 94 30 b2 ....0...G....E. 0010 00 c8 89 af 00 00 40 11 b1 7f a5 e3 f9 98 a5 e3 ......@......... 0020 f9 96 01 f4 01 f4 00 b4 9f d5 f0 e5 99 3a 62 4c .............:bL 0030 dc 6b 3e b6 b8 25 58 1d 78 7a 04 10 02 00 00 00 .k>..%X.xz...... 0040 00 00 00 00 00 ac 0a 00 00 84 c0 47 55 aa c9 c1 ...........GU... 0050 29 1d 69 e5 07 9e e2 ca fc 5b a3 db 1f 2d 7a e7 ).i......[...-z. 0060 bc c8 52 f9 7f 68 b5 11 43 7e 92 15 a2 22 9e b3 ..R..h..C~...".. 0070 f2 9d 7b 7c 92 08 02 f4 d8 a6 ef d0 73 5d fa 52 ..{|........s].R 0080 bd 8b 70 2c 21 dd 43 31 06 52 93 3d 51 ae c4 aa ..p,!.C1.R.=Q... 0090 68 5d 0c 62 35 89 a1 46 e3 d0 ff d5 f2 a8 29 9c h].b5..F......). 00a0 48 34 80 26 3e 75 ca 44 e9 c5 b1 cd c0 45 64 d1 H4.&>u.D.....Ed. 00b0 21 e0 9c 68 89 7b 42 dd 7f 26 94 1b 52 bb d9 bb !..h.{B..&..R... 00c0 e4 3b 2f 27 65 38 51 09 12 88 00 00 00 0c fe 67 .;/'e8Q........g 00d0 19 e7 7b 70 f4 b6 ..{p.. Frame 9 (150 bytes on wire, 150 bytes captured) Arrival Time: Jan 26, 2008 15:39:08.023008000 Time delta from previous packet: 0.043439000 seconds Time since reference or first frame: 13.692764000 seconds Frame Number: 9 Packet Length: 150 bytes Capture Length: 150 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91) Destination: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.152 (165.227.249.152) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x41ce (16846) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xb9a0 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.152 (165.227.249.152) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 116 Checksum: 0x4295 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xF0E5993A624CDC6B Responder cookie: 0x3EB6B825581D787A Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 108 Encrypted payload (80 bytes) 0000 00 90 7f 3e ca 91 00 0c 29 96 e1 fa 08 00 45 00 ...>....).....E. 0010 00 88 41 ce 00 00 80 11 b9 a0 a5 e3 f9 96 a5 e3 ..A............. 0020 f9 98 01 f4 01 f4 00 74 42 95 f0 e5 99 3a 62 4c .......tB....:bL 0030 dc 6b 3e b6 b8 25 58 1d 78 7a 05 10 02 01 00 00 .k>..%X.xz...... 0040 00 00 00 00 00 6c 69 d3 7c 6e c3 2d 03 d8 d7 af .....li.|n.-.... 0050 36 a6 6b d1 f9 ee d0 9d 68 c1 10 29 28 cd de 37 6.k.....h..)(..7 0060 ab 83 48 3e 71 0b ca b0 4b 13 4c fa f0 58 93 4b ..H>q...K.L..X.K 0070 d4 5e 2a 9d 55 d9 d2 fb e3 b8 7e 0f 6d 45 40 25 .^*.U.....~.mE@% 0080 9d 67 4d 59 b9 a3 d5 94 53 33 4c f6 af ab 57 65 .gMY....S3L...We 0090 a7 3d 12 9d 12 9a .=.... Frame 10 (118 bytes on wire, 118 bytes captured) Arrival Time: Jan 26, 2008 15:39:08.040812000 Time delta from previous packet: 0.017804000 seconds Time since reference or first frame: 13.710568000 seconds Frame Number: 10 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.152 (165.227.249.152), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x89b0 (35248) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xb1de [correct] Good: True Bad : False Source: 165.227.249.152 (165.227.249.152) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x5a31 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xF0E5993A624CDC6B Responder cookie: 0x3EB6B825581D787A Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 96 e1 fa 00 90 7f 3e ca 91 08 00 45 00 ..)......>....E. 0010 00 68 89 b0 00 00 40 11 b1 de a5 e3 f9 98 a5 e3 .h....@......... 0020 f9 96 01 f4 01 f4 00 54 5a 31 f0 e5 99 3a 62 4c .......TZ1...:bL 0030 dc 6b 3e b6 b8 25 58 1d 78 7a 05 10 02 01 00 00 .k>..%X.xz...... 0040 00 00 00 00 00 4c 2c 4c bd f6 64 23 24 be 37 35 .....L,L..d#$.75 0050 0b de da 61 8b c7 c1 90 0d b5 45 e4 dd 6f a7 0d ...a......E..o.. 0060 5f 6f eb fc 9a d4 74 84 55 d7 93 65 57 3d 41 c2 _o....t.U..eW=A. 0070 c5 97 2b 62 46 88 ..+bF. Frame 11 (342 bytes on wire, 342 bytes captured) Arrival Time: Jan 26, 2008 15:39:08.058332000 Time delta from previous packet: 0.017520000 seconds Time since reference or first frame: 13.728088000 seconds Frame Number: 11 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91) Destination: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.152 (165.227.249.152) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x41cf (16847) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xb8df [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.152 (165.227.249.152) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xd24f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xF0E5993A624CDC6B Responder cookie: 0x3EB6B825581D787A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xE2CEDD06 Length: 300 Encrypted payload (272 bytes) 0000 00 90 7f 3e ca 91 00 0c 29 96 e1 fa 08 00 45 00 ...>....).....E. 0010 01 48 41 cf 00 00 80 11 b8 df a5 e3 f9 96 a5 e3 .HA............. 0020 f9 98 01 f4 01 f4 01 34 d2 4f f0 e5 99 3a 62 4c .......4.O...:bL 0030 dc 6b 3e b6 b8 25 58 1d 78 7a 08 10 20 01 e2 ce .k>..%X.xz.. ... 0040 dd 06 00 00 01 2c a9 c4 9f c0 87 6e 64 1a 52 85 .....,.....nd.R. 0050 55 d6 74 c0 54 2d cc a4 96 de a0 42 8d 8d 82 25 U.t.T-.....B...% 0060 83 07 b0 d4 77 55 71 c9 70 d2 e7 6f a4 fd b9 11 ....wUq.p..o.... 0070 13 b6 4f f9 52 44 78 e1 29 87 52 f2 12 82 04 dc ..O.RDx.).R..... 0080 02 30 5f c3 4a 23 f1 3c fc 00 2b ab db 79 4e 8f .0_.J#.<..+..yN. 0090 db 6a e6 18 80 32 50 1e 04 c7 ad 68 da 87 49 9a .j...2P....h..I. 00a0 75 7e b8 f0 d5 30 2e 69 76 e6 54 d4 d4 ff 52 99 u~...0.iv.T...R. 00b0 9d de 93 dc fa 49 59 e4 f3 c9 bd c4 dd 98 39 22 .....IY.......9" 00c0 69 84 63 63 19 5a 10 7a cd 4c ae e6 14 00 d5 4e i.cc.Z.z.L.....N 00d0 18 da 4a a6 71 32 2b 1c 5f 5e ff fe 02 eb 88 fb ..J.q2+._^...... 00e0 3d 05 f0 26 3b 38 48 e9 bb 71 73 73 27 78 aa 02 =..&;8H..qss'x.. 00f0 90 76 de 51 fa 6b 2f 12 73 82 50 7a 54 dd ba 18 .v.Q.k/.s.PzT... 0100 88 46 7e 25 22 ae 2d 22 bb c3 91 35 23 ec d8 c1 .F~%".-"...5#... 0110 b1 0b 6f 58 52 c9 6e fa b6 5d 11 37 54 d3 5b df ..oXR.n..].7T.[. 0120 30 e2 f7 83 09 cf ea 82 85 a6 89 70 4c 9f fc 0f 0..........pL... 0130 d5 6c 6b d2 a2 52 c2 8c 87 33 64 0c 1c 4b 1e 7c .lk..R...3d..K.| 0140 fe de 52 9d e2 d0 30 cd 5e e7 e4 30 9b ac 86 4c ..R...0.^..0...L 0150 d9 a6 ef 4f 22 1c ...O". Frame 12 (358 bytes on wire, 358 bytes captured) Arrival Time: Jan 26, 2008 15:39:08.062565000 Time delta from previous packet: 0.004233000 seconds Time since reference or first frame: 13.732321000 seconds Frame Number: 12 Packet Length: 358 bytes Capture Length: 358 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.152 (165.227.249.152), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 344 Identification: 0x89b1 (35249) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xb0ed [correct] Good: True Bad : False Source: 165.227.249.152 (165.227.249.152) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 324 Checksum: 0x3f03 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xF0E5993A624CDC6B Responder cookie: 0x3EB6B825581D787A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xE2CEDD06 Length: 316 Encrypted payload (288 bytes) 0000 00 0c 29 96 e1 fa 00 90 7f 3e ca 91 08 00 45 00 ..)......>....E. 0010 01 58 89 b1 00 00 40 11 b0 ed a5 e3 f9 98 a5 e3 .X....@......... 0020 f9 96 01 f4 01 f4 01 44 3f 03 f0 e5 99 3a 62 4c .......D?....:bL 0030 dc 6b 3e b6 b8 25 58 1d 78 7a 08 10 20 01 e2 ce .k>..%X.xz.. ... 0040 dd 06 00 00 01 3c ad 6c 6c 6e 71 08 ad 5c d5 9a .....<.llnq..\.. 0050 13 f8 57 37 f6 3e 0b b3 76 2c fa 91 43 3d 3d f4 ..W7.>..v,..C==. 0060 95 94 26 bf 21 dd a9 b2 9c 6a d6 19 fe e4 9c 72 ..&.!....j.....r 0070 c7 c3 29 c1 95 92 52 4a 05 02 bc 04 7a b3 20 92 ..)...RJ....z. . 0080 f7 f2 55 96 7d 45 c8 90 b3 80 fb dc 61 01 5e 3e ..U.}E......a.^> 0090 69 33 ad 4f 2e 15 51 31 2f 1f 7b 37 64 d7 15 bf i3.O..Q1/.{7d... 00a0 b5 a4 2b 31 a2 e5 8c bc 98 bd 34 99 d2 dc 15 49 ..+1......4....I 00b0 95 14 67 62 ce 01 8c 8a 2e 40 2b bf 84 24 0a d5 ..gb.....@+..$.. 00c0 00 aa db 56 58 d8 3c 93 2e d9 b5 33 39 d0 4d 92 ...VX.<....39.M. 00d0 3f 97 2f 6b 5b e2 7f 79 52 42 9c 6a f4 a7 48 34 ?./k[..yRB.j..H4 00e0 99 64 56 8c c3 05 0d d9 ab 9c 44 84 2c 0e c0 d8 .dV.......D.,... 00f0 55 fa 61 e4 4d fc c5 a5 98 77 dd af a3 be 2f cd U.a.M....w..../. 0100 fb 28 32 98 00 b5 03 92 73 3e 0d 18 4e 17 58 87 .(2.....s>..N.X. 0110 48 83 07 8a 1b 36 2b 3d c9 cf 81 d0 e8 97 0c 93 H....6+=........ 0120 ac ef a7 87 c7 1f d2 64 89 67 8a 3b f7 85 32 20 .......d.g.;..2 0130 5d f1 6a 3e 8f 00 7e 40 bc a1 27 46 bb ad 47 d5 ].j>..~@..'F..G. 0140 d9 b9 7a 1f 41 de 0e 3e 05 54 00 93 74 73 3b 82 ..z.A..>.T..ts;. 0150 7a 24 e2 a3 a5 24 84 f3 03 81 4a 59 09 7a 57 0a z$...$....JY.zW. 0160 5b 74 a6 ee 57 68 [t..Wh Frame 13 (102 bytes on wire, 102 bytes captured) Arrival Time: Jan 26, 2008 15:39:08.325359000 Time delta from previous packet: 0.262794000 seconds Time since reference or first frame: 13.995115000 seconds Frame Number: 13 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91) Destination: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.152 (165.227.249.152) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x41d0 (16848) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xb9ce [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.152 (165.227.249.152) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xd0c9 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xF0E5993A624CDC6B Responder cookie: 0x3EB6B825581D787A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xE2CEDD06 Length: 60 Encrypted payload (32 bytes) 0000 00 90 7f 3e ca 91 00 0c 29 96 e1 fa 08 00 45 00 ...>....).....E. 0010 00 58 41 d0 00 00 80 11 b9 ce a5 e3 f9 96 a5 e3 .XA............. 0020 f9 98 01 f4 01 f4 00 44 d0 c9 f0 e5 99 3a 62 4c .......D.....:bL 0030 dc 6b 3e b6 b8 25 58 1d 78 7a 08 10 20 01 e2 ce .k>..%X.xz.. ... 0040 dd 06 00 00 00 3c b7 4f 5a a2 de c1 08 62 01 8c .....<.OZ....b.. 0050 ae f4 8a 61 62 87 4f 0f 3f e0 b5 c0 13 2b 64 45 ...ab.O.?....+dE 0060 a8 04 c5 17 b3 91 ...... Frame 14 (406 bytes on wire, 406 bytes captured) Arrival Time: Jan 26, 2008 15:39:16.053688000 Time delta from previous packet: 7.728329000 seconds Time since reference or first frame: 21.723444000 seconds Frame Number: 14 Packet Length: 406 bytes Capture Length: 406 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91) Destination: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.152 (165.227.249.152) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 392 Identification: 0x41d1 (16849) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xb87c [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.152 (165.227.249.152) Encapsulating Security Payload SPI: 0x6181338c Sequence: 1 Data (364 bytes) 0000 00 90 7f 3e ca 91 00 0c 29 96 e1 fa 08 00 45 00 ...>....).....E. 0010 01 88 41 d1 00 00 80 32 b8 7c a5 e3 f9 96 a5 e3 ..A....2.|...... 0020 f9 98 61 81 33 8c 00 00 00 01 20 2b dc 1b d3 ce ..a.3..... +.... 0030 35 4d d6 df 44 0f 92 db 49 b1 69 24 ec 57 4e 95 5M..D...I.i$.WN. 0040 92 e4 81 e5 f4 39 94 fb 06 d2 6a 98 b7 ec 4f f0 .....9....j...O. 0050 b0 ef 1e fb 76 6a b6 4c fb 73 83 16 05 64 91 db ....vj.L.s...d.. 0060 fb 5c ce 2f 74 f8 64 d1 7a e6 59 26 8b 7e 19 80 .\./t.d.z.Y&.~.. 0070 1f 46 81 eb 13 5f 56 d7 79 fe cc 0e 70 cb e1 77 .F..._V.y...p..w 0080 9e e2 64 ba aa b2 15 c4 fc 59 1f fb 39 92 f0 ba ..d......Y..9... 0090 ff 6c 92 35 1d 3a 80 53 8c 45 d9 d7 18 be 1d 17 .l.5.:.S.E...... 00a0 d8 e3 88 bc c4 8d 26 62 6e 44 fd 8d b3 89 0a c5 ......&bnD...... 00b0 54 5a af 03 19 f7 6c 43 e4 8d 3e 2e 16 95 20 8c TZ....lC..>... . 00c0 83 12 e5 c0 f9 ee 56 1b f5 41 d2 86 77 d4 a4 fc ......V..A..w... 00d0 e4 cc 6b c4 87 0d 87 2a e7 ef 46 b5 20 f5 a5 3d ..k....*..F. ..= 00e0 e9 4d 5a 33 7b a4 cd 07 af 12 55 d1 71 f6 37 74 .MZ3{.....U.q.7t 00f0 19 7b 7a 45 c4 e1 13 53 89 dc b7 46 67 54 4c 06 .{zE...S...FgTL. 0100 45 1c 73 6f 25 33 ea 05 0c b9 58 44 14 1e a4 fc E.so%3....XD.... 0110 e5 92 c1 ef 2a 54 6e c2 98 7c cd b7 b7 c3 38 f7 ....*Tn..|....8. 0120 38 87 95 a3 d6 b8 0f 49 e5 4b f2 3d 3b 89 85 c0 8......I.K.=;... 0130 91 37 77 80 a6 c5 9f f8 44 c0 8f b1 0a 55 cb 02 .7w.....D....U.. 0140 2c ff 67 47 3d 5e 1c 20 db a5 2e 29 f2 e9 90 a0 ,.gG=^. ...).... 0150 5a 90 e6 53 6f 34 9a f9 be 22 66 11 03 fa 74 a4 Z..So4..."f...t. 0160 3f b5 d0 5c 44 86 61 f6 8c c1 d9 b1 2a bc 6f 21 ?..\D.a.....*.o! 0170 9f 35 c1 d0 f6 4b e7 5e a5 25 51 bc 7e cc 69 ce .5...K.^.%Q.~.i. 0180 a8 b5 e9 0f 0b 9a 07 3e fa 34 bb 49 2d 2e 33 f6 .......>.4.I-.3. 0190 f3 48 2d fb 2c 0c .H-.,. Frame 15 (406 bytes on wire, 406 bytes captured) Arrival Time: Jan 26, 2008 15:39:16.062598000 Time delta from previous packet: 0.008910000 seconds Time since reference or first frame: 21.732354000 seconds Frame Number: 15 Packet Length: 406 bytes Capture Length: 406 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:90:7f:3e:ca:91 (00:90:7f:3e:ca:91) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.152 (165.227.249.152), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 392 Identification: 0x0001 (1) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: ESP (0x32) Header checksum: 0x3b4d [correct] Good: True Bad : False Source: 165.227.249.152 (165.227.249.152) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload SPI: 0x4d8fa0f1 Sequence: 1 Data (364 bytes) 0000 00 0c 29 96 e1 fa 00 90 7f 3e ca 91 08 00 45 00 ..)......>....E. 0010 01 88 00 01 00 00 3f 32 3b 4d a5 e3 f9 98 a5 e3 ......?2;M...... 0020 f9 96 4d 8f a0 f1 00 00 00 01 95 39 2f 99 60 72 ..M........9/.`r 0030 00 3f 7f ce 61 3c dc a5 b5 ab 45 16 18 bb 66 06 .?..a<....E...f. 0040 1a 55 b1 c2 ca 22 15 60 86 c9 6e 95 65 6b 4d 4e .U...".`..n.ekMN 0050 75 6c f4 5c a0 09 bf 8e a2 24 b4 6e d2 23 68 32 ul.\.....$.n.#h2 0060 ac ae 6f ef 5e 58 a4 65 68 93 39 64 6e 69 47 be ..o.^X.eh.9dniG. 0070 4c cc 99 5f ec d9 24 f9 ac 02 03 70 a7 df 9a dc L.._..$....p.... 0080 09 21 8f 7d 49 11 57 da c0 35 36 e6 68 f1 c7 a2 .!.}I.W..56.h... 0090 10 04 f6 06 37 aa 72 82 2d 0e 3b a7 70 c0 58 8d ....7.r.-.;.p.X. 00a0 55 f9 fa 3e f5 a7 0c 1c e2 ec 08 c3 c2 cd 78 2b U..>..........x+ 00b0 04 91 db 42 d6 2b 4a f0 78 af 34 77 61 b7 52 a8 ...B.+J.x.4wa.R. 00c0 7b 94 28 56 44 2e 8e f7 9e 6e 2f ee d8 c1 c7 b4 {.(VD....n/..... 00d0 61 fd e6 a8 d5 fa 79 ac af 19 a3 06 5e 89 cd 2d a.....y.....^..- 00e0 52 8a b1 77 31 fb 47 c7 25 74 93 7f f3 4f 9c 6d R..w1.G.%t...O.m 00f0 99 b6 5c fe 40 61 44 e2 24 71 cd 5f 73 18 22 ba ..\.@aD.$q._s.". 0100 b2 24 95 df d1 a7 aa c6 f8 1b d7 f1 a7 f9 18 c7 .$.............. 0110 75 fa 55 ce 11 04 49 c2 3c cd 7d 22 54 4f bb 7e u.U...I.<.}"TO.~ 0120 2a 13 e1 b6 18 6f fb b6 c9 72 6c d3 23 cc 68 06 *....o...rl.#.h. 0130 c1 89 ab e2 b8 d0 e5 df 69 85 62 6d 48 87 79 b0 ........i.bmH.y. 0140 39 a8 4e de 90 b4 6b 48 4e e0 ba 7b 1a b5 b1 38 9.N...kHN..{...8 0150 1d 63 36 6d 82 3e cc c8 55 88 8e 7b e6 38 51 f0 .c6m.>..U..{.8Q. 0160 28 09 2c 1b 3d 0e 96 e5 c6 0b 26 fe 2c d3 50 54 (.,.=.....&.,.PT 0170 e2 a6 7b d4 40 dc 4e b5 a4 61 18 d2 06 dd fb 1f ..{.@.N..a...... 0180 96 16 48 dd d7 8e 5f 7d ba b8 7a 24 a6 5b 80 24 ..H..._}..z$.[.$ 0190 90 7f 91 31 62 ff ...1b.