Frame 1 (142 bytes on wire, 142 bytes captured) Arrival Time: Feb 4, 2011 16:39:28.992525000 [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 142 bytes Capture Length: 142 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37), Dst: 00:23:f8:10:29:12 (00:23:f8:10:29:12) Destination: 00:23:f8:10:29:12 (00:23:f8:10:29:12) Address: 00:23:f8:10:29:12 (00:23:f8:10:29:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Address: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.157 (165.227.249.157), Dst: 165.227.249.156 (165.227.249.156) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0x0003 (3) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb68 [correct] [Good: True] [Bad : False] Source: 165.227.249.157 (165.227.249.157) Destination: 165.227.249.156 (165.227.249.156) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0x4f14 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 79B992DA3EDE43C9 Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Payload length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Payload length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 0 Next payload: NONE (0) Payload length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Next payload: NONE (0) Payload length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 23 f8 10 29 12 00 14 6c a6 ca 37 08 00 45 00 .#..)...l..7..E. 0010 00 80 00 03 40 00 40 11 fb 68 a5 e3 f9 9d a5 e3 ....@.@..h...... 0020 f9 9c 01 f4 01 f4 00 6c 4f 14 79 b9 92 da 3e de .......lO.y...>. 0030 43 c9 00 00 00 00 00 00 00 00 01 10 02 00 00 00 C............... 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 0b 00 01 80 0c 70 80 80 01 00 05 80 02 ........p....... 0070 00 02 80 03 00 01 80 04 00 02 00 00 00 14 af ca ................ 0080 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 2 (158 bytes on wire, 158 bytes captured) Arrival Time: Feb 4, 2011 16:39:28.995469000 [Time delta from previous captured frame: 0.002944000 seconds] [Time delta from previous displayed frame: 0.002944000 seconds] [Time since reference or first frame: 0.002944000 seconds] Frame Number: 2 Frame Length: 158 bytes Capture Length: 158 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:23:f8:10:29:12 (00:23:f8:10:29:12), Dst: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Destination: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Address: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:23:f8:10:29:12 (00:23:f8:10:29:12) Address: 00:23:f8:10:29:12 (00:23:f8:10:29:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.156 (165.227.249.156), Dst: 165.227.249.157 (165.227.249.157) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 144 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb5b [correct] [Good: True] [Bad : False] Source: 165.227.249.156 (165.227.249.156) Destination: 165.227.249.157 (165.227.249.157) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 124 Checksum: 0x3118 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 79B992DA3EDE43C9 Responder cookie: 224220AB49BB12BA Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 116 Security Association payload Next payload: Vendor ID (13) Payload length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Payload length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 0 Next payload: NONE (0) Payload length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Vendor ID: 4F457E717F6B5A4E727D576B Next payload: Vendor ID (13) Payload length: 16 Vendor ID: 4F457E717F6B5A4E727D576B Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Next payload: NONE (0) Payload length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 14 6c a6 ca 37 00 23 f8 10 29 12 08 00 45 00 ..l..7.#..)...E. 0010 00 90 00 00 40 00 40 11 fb 5b a5 e3 f9 9c a5 e3 ....@.@..[...... 0020 f9 9d 01 f4 01 f4 00 7c 31 18 79 b9 92 da 3e de .......|1.y...>. 0030 43 c9 22 42 20 ab 49 bb 12 ba 01 10 02 00 00 00 C."B .I......... 0040 00 00 00 00 00 74 0d 00 00 34 00 00 00 01 00 00 .....t...4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 0b 00 01 80 0c 70 80 80 01 00 05 80 02 ........p....... 0070 00 02 80 03 00 01 80 04 00 02 0d 00 00 10 4f 45 ..............OE 0080 7e 71 7f 6b 5a 4e 72 7d 57 6b 00 00 00 14 af ca ~q.kZNr}Wk...... 0090 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Feb 4, 2011 16:39:29.615575000 [Time delta from previous captured frame: 0.620106000 seconds] [Time delta from previous displayed frame: 0.620106000 seconds] [Time since reference or first frame: 0.623050000 seconds] Frame Number: 3 Frame Length: 222 bytes Capture Length: 222 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37), Dst: 00:23:f8:10:29:12 (00:23:f8:10:29:12) Destination: 00:23:f8:10:29:12 (00:23:f8:10:29:12) Address: 00:23:f8:10:29:12 (00:23:f8:10:29:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Address: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.157 (165.227.249.157), Dst: 165.227.249.156 (165.227.249.156) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0004 (4) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb17 [correct] [Good: True] [Bad : False] Source: 165.227.249.157 (165.227.249.157) Destination: 165.227.249.156 (165.227.249.156) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xa130 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 79B992DA3EDE43C9 Responder cookie: 224220AB49BB12BA Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: NONE (0) Payload length: 20 Nonce Data 0000 00 23 f8 10 29 12 00 14 6c a6 ca 37 08 00 45 00 .#..)...l..7..E. 0010 00 d0 00 04 40 00 40 11 fb 17 a5 e3 f9 9d a5 e3 ....@.@......... 0020 f9 9c 01 f4 01 f4 00 bc a1 30 79 b9 92 da 3e de .........0y...>. 0030 43 c9 22 42 20 ab 49 bb 12 ba 04 10 02 00 00 00 C."B .I......... 0040 00 00 00 00 00 b4 0a 00 00 84 da 97 df 0b 4f 66 ..............Of 0050 eb 2f b7 2d 0b 53 1d e9 82 d5 85 b8 85 78 25 b2 ./.-.S.......x%. 0060 d9 e8 28 bf c4 64 ed 5c 27 ec 1d f4 fb 66 53 c5 ..(..d.\'....fS. 0070 68 10 8b 2c 57 1d eb 2e 92 a9 6c e7 57 22 0a 72 h..,W.....l.W".r 0080 45 25 06 53 58 71 14 c0 56 c6 53 40 ff a6 06 6d E%.SXq..V.S@...m 0090 ec 3f c3 07 7b 47 17 cc 5d f5 09 86 da 22 76 6c .?..{G..]...."vl 00a0 0d f5 59 a8 e9 2e 10 8e 27 fb b6 57 98 c1 b2 27 ..Y.....'..W...' 00b0 3f 4f 73 dc 6e 92 f4 19 2d 91 f5 ba c5 da 37 5f ?Os.n...-.....7_ 00c0 c5 91 13 c9 13 46 50 09 32 fd 00 00 00 14 83 00 .....FP.2....... 00d0 ef 34 7e d5 99 bd b6 43 3a 2a 04 e0 5e 03 .4~....C:*..^. Frame 4 (222 bytes on wire, 222 bytes captured) Arrival Time: Feb 4, 2011 16:39:29.676863000 [Time delta from previous captured frame: 0.061288000 seconds] [Time delta from previous displayed frame: 0.061288000 seconds] [Time since reference or first frame: 0.684338000 seconds] Frame Number: 4 Frame Length: 222 bytes Capture Length: 222 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:23:f8:10:29:12 (00:23:f8:10:29:12), Dst: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Destination: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Address: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:23:f8:10:29:12 (00:23:f8:10:29:12) Address: 00:23:f8:10:29:12 (00:23:f8:10:29:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.156 (165.227.249.156), Dst: 165.227.249.157 (165.227.249.157) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb1b [correct] [Good: True] [Bad : False] Source: 165.227.249.156 (165.227.249.156) Destination: 165.227.249.157 (165.227.249.157) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x9e95 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 79B992DA3EDE43C9 Responder cookie: 224220AB49BB12BA Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: NONE (0) Payload length: 20 Nonce Data 0000 00 14 6c a6 ca 37 00 23 f8 10 29 12 08 00 45 00 ..l..7.#..)...E. 0010 00 d0 00 00 40 00 40 11 fb 1b a5 e3 f9 9c a5 e3 ....@.@......... 0020 f9 9d 01 f4 01 f4 00 bc 9e 95 79 b9 92 da 3e de ..........y...>. 0030 43 c9 22 42 20 ab 49 bb 12 ba 04 10 02 00 00 00 C."B .I......... 0040 00 00 00 00 00 b4 0a 00 00 84 b6 9d 04 97 de 42 ...............B 0050 ef 14 a5 40 cf 22 30 e1 53 70 61 de 8d 7f 24 53 ...@."0.Spa...$S 0060 29 ab d5 0d 14 48 98 1e 03 65 59 89 58 2d 33 97 )....H...eY.X-3. 0070 ac 22 3c 7c 76 65 ed 39 79 26 87 96 6c fa e9 f0 ."<|ve.9y&..l... 0080 85 6a 21 89 df 2a e5 29 52 ac dd 9b 41 8f 53 c0 .j!..*.)R...A.S. 0090 b0 8d ba 0e 34 26 c9 10 a9 04 30 e9 a6 45 36 34 ....4&....0..E64 00a0 cb a1 bb f3 7a f5 79 76 8f 39 cf ac 48 15 0c 25 ....z.yv.9..H..% 00b0 f2 14 37 8d 72 66 ed 16 c0 eb 0c df 41 b8 8e 35 ..7.rf......A..5 00c0 9f 13 d8 96 2e b1 3a 79 d9 3e 00 00 00 14 15 ec ......:y.>...... 00d0 12 bf 9a 63 78 0b b3 db 3a 2c 0b 71 7c 94 ...cx...:,.q|. Frame 5 (110 bytes on wire, 110 bytes captured) Arrival Time: Feb 4, 2011 16:39:29.931846000 [Time delta from previous captured frame: 0.254983000 seconds] [Time delta from previous displayed frame: 0.254983000 seconds] [Time since reference or first frame: 0.939321000 seconds] Frame Number: 5 Frame Length: 110 bytes Capture Length: 110 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37), Dst: 00:23:f8:10:29:12 (00:23:f8:10:29:12) Destination: 00:23:f8:10:29:12 (00:23:f8:10:29:12) Address: 00:23:f8:10:29:12 (00:23:f8:10:29:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Address: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.157 (165.227.249.157), Dst: 165.227.249.156 (165.227.249.156) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0005 (5) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb86 [correct] [Good: True] [Bad : False] Source: 165.227.249.157 (165.227.249.157) Destination: 165.227.249.156 (165.227.249.156) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x98ea [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 79B992DA3EDE43C9 Responder cookie: 224220AB49BB12BA Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 23 f8 10 29 12 00 14 6c a6 ca 37 08 00 45 00 .#..)...l..7..E. 0010 00 60 00 05 40 00 40 11 fb 86 a5 e3 f9 9d a5 e3 .`..@.@......... 0020 f9 9c 01 f4 01 f4 00 4c 98 ea 79 b9 92 da 3e de .......L..y...>. 0030 43 c9 22 42 20 ab 49 bb 12 ba 05 10 02 01 00 00 C."B .I......... 0040 00 00 00 00 00 44 53 ac 77 c0 ea bf 78 88 6d 49 .....DS.w...x.mI 0050 09 a2 ea f4 bc 50 7c d8 0c 77 80 83 2b 14 c1 14 .....P|..w..+... 0060 59 8c 4f 8b 0c e2 01 40 fd 93 49 b8 ac 26 Y.O....@..I..& Frame 6 (118 bytes on wire, 118 bytes captured) Arrival Time: Feb 4, 2011 16:39:29.934290000 [Time delta from previous captured frame: 0.002444000 seconds] [Time delta from previous displayed frame: 0.002444000 seconds] [Time since reference or first frame: 0.941765000 seconds] Frame Number: 6 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:23:f8:10:29:12 (00:23:f8:10:29:12), Dst: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Destination: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Address: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:23:f8:10:29:12 (00:23:f8:10:29:12) Address: 00:23:f8:10:29:12 (00:23:f8:10:29:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.156 (165.227.249.156), Dst: 165.227.249.157 (165.227.249.157) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb83 [correct] [Good: True] [Bad : False] Source: 165.227.249.156 (165.227.249.156) Destination: 165.227.249.157 (165.227.249.157) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xd9d0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 79B992DA3EDE43C9 Responder cookie: 224220AB49BB12BA Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 14 6c a6 ca 37 00 23 f8 10 29 12 08 00 45 00 ..l..7.#..)...E. 0010 00 68 00 00 40 00 40 11 fb 83 a5 e3 f9 9c a5 e3 .h..@.@......... 0020 f9 9d 01 f4 01 f4 00 54 d9 d0 79 b9 92 da 3e de .......T..y...>. 0030 43 c9 22 42 20 ab 49 bb 12 ba 05 10 02 01 00 00 C."B .I......... 0040 00 00 00 00 00 4c 77 54 24 59 03 c9 36 d2 e1 07 .....LwT$Y..6... 0050 c5 65 55 8f 63 67 e4 84 fd 55 ec f1 f0 13 ad 7f .eU.cg...U...... 0060 55 53 ce 83 62 21 16 4b 91 19 dd 61 04 a9 1f 4f US..b!.K...a...O 0070 a5 6b 18 ef 1d 71 .k...q Frame 7 (334 bytes on wire, 334 bytes captured) Arrival Time: Feb 4, 2011 16:39:30.185195000 [Time delta from previous captured frame: 0.250905000 seconds] [Time delta from previous displayed frame: 0.250905000 seconds] [Time since reference or first frame: 1.192670000 seconds] Frame Number: 7 Frame Length: 334 bytes Capture Length: 334 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37), Dst: 00:23:f8:10:29:12 (00:23:f8:10:29:12) Destination: 00:23:f8:10:29:12 (00:23:f8:10:29:12) Address: 00:23:f8:10:29:12 (00:23:f8:10:29:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Address: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.157 (165.227.249.157), Dst: 165.227.249.156 (165.227.249.156) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0006 (6) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfaa5 [correct] [Good: True] [Bad : False] Source: 165.227.249.157 (165.227.249.157) Destination: 165.227.249.156 (165.227.249.156) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x34da [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 79B992DA3EDE43C9 Responder cookie: 224220AB49BB12BA Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x18cec738 Length: 292 Encrypted payload (264 bytes) 0000 00 23 f8 10 29 12 00 14 6c a6 ca 37 08 00 45 00 .#..)...l..7..E. 0010 01 40 00 06 40 00 40 11 fa a5 a5 e3 f9 9d a5 e3 .@..@.@......... 0020 f9 9c 01 f4 01 f4 01 2c 34 da 79 b9 92 da 3e de .......,4.y...>. 0030 43 c9 22 42 20 ab 49 bb 12 ba 08 10 20 01 18 ce C."B .I..... ... 0040 c7 38 00 00 01 24 60 39 76 b4 ad c7 27 2c fd e3 .8...$`9v...',.. 0050 ac 37 e6 94 97 17 7d 4a 84 90 b6 5d 7a b2 6e 95 .7....}J...]z.n. 0060 68 be 7e ee 39 79 d8 26 ec db 9c 01 f7 b6 ce 5e h.~.9y.&.......^ 0070 52 b8 4b 2f 7b 6c be 98 4a ba 2e 1d 31 7a 07 d3 R.K/{l..J...1z.. 0080 5a b6 ab 61 eb 02 59 37 46 10 96 31 03 25 53 54 Z..a..Y7F..1.%ST 0090 cb 80 dd 17 d5 98 52 2b 6c 5a e9 36 d6 d7 8d 1c ......R+lZ.6.... 00a0 28 02 be 48 e4 d6 28 9d 57 4d a0 06 d0 67 48 cb (..H..(.WM...gH. 00b0 ff 37 ea ce 9c d7 54 cf fe 76 cb f3 5b 5c 6d 5e .7....T..v..[\m^ 00c0 88 02 27 c1 10 84 84 93 69 51 e1 84 28 c2 ff 8b ..'.....iQ..(... 00d0 23 d5 75 a0 08 33 13 3f b5 0e ce b4 a8 6a 6e a1 #.u..3.?.....jn. 00e0 db b7 99 5f 82 be 91 4d 1b 78 41 d9 18 0c 17 fe ..._...M.xA..... 00f0 d8 b1 98 8a c2 fc 3c a8 3e 87 4e 75 40 66 3d 7e ......<.>.Nu@f=~ 0100 c7 41 4b 84 8b e7 82 1d 05 6f 73 d2 15 e8 54 48 .AK......os...TH 0110 da c3 5d 1c ca 4b d5 ea 04 b6 21 01 55 78 3c a8 ..]..K....!.Ux<. 0120 20 22 57 0a 50 25 86 d4 34 24 ed c3 47 92 61 d4 "W.P%..4$..G.a. 0130 06 48 d8 dd 6f ea ae 9b c3 3d 9a 3a 1f 39 c6 a9 .H..o....=.:.9.. 0140 e8 b7 3d 48 fa 6b 0f 74 2f e0 82 51 21 c0 ..=H.k.t/..Q!. Frame 8 (334 bytes on wire, 334 bytes captured) Arrival Time: Feb 4, 2011 16:39:30.250096000 [Time delta from previous captured frame: 0.064901000 seconds] [Time delta from previous displayed frame: 0.064901000 seconds] [Time since reference or first frame: 1.257571000 seconds] Frame Number: 8 Frame Length: 334 bytes Capture Length: 334 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:23:f8:10:29:12 (00:23:f8:10:29:12), Dst: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Destination: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Address: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:23:f8:10:29:12 (00:23:f8:10:29:12) Address: 00:23:f8:10:29:12 (00:23:f8:10:29:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.156 (165.227.249.156), Dst: 165.227.249.157 (165.227.249.157) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 320 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfaab [correct] [Good: True] [Bad : False] Source: 165.227.249.156 (165.227.249.156) Destination: 165.227.249.157 (165.227.249.157) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 300 Checksum: 0x169c [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 79B992DA3EDE43C9 Responder cookie: 224220AB49BB12BA Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x18cec738 Length: 292 Encrypted payload (264 bytes) 0000 00 14 6c a6 ca 37 00 23 f8 10 29 12 08 00 45 00 ..l..7.#..)...E. 0010 01 40 00 00 40 00 40 11 fa ab a5 e3 f9 9c a5 e3 .@..@.@......... 0020 f9 9d 01 f4 01 f4 01 2c 16 9c 79 b9 92 da 3e de .......,..y...>. 0030 43 c9 22 42 20 ab 49 bb 12 ba 08 10 20 01 18 ce C."B .I..... ... 0040 c7 38 00 00 01 24 c0 c5 de 12 57 bf 88 23 d3 16 .8...$....W..#.. 0050 0d c3 05 31 a8 53 73 df 29 d8 04 61 e9 f7 ee 5e ...1.Ss.)..a...^ 0060 8f 28 7c b4 0c 85 bd 29 d0 0f 96 90 33 8b ca 8d .(|....)....3... 0070 c9 5d 21 68 41 29 47 1a 5f ca cd 8b 66 e6 27 52 .]!hA)G._...f.'R 0080 04 67 c1 5d 7d 65 e8 a4 5b 50 ee 6b a9 83 e8 99 .g.]}e..[P.k.... 0090 b8 b6 a8 be 8c 0a c2 35 bf 9b 96 0f 17 2c a7 f5 .......5.....,.. 00a0 bb 0c c6 ef af 41 53 9a 5e ab d5 e4 a0 d4 78 03 .....AS.^.....x. 00b0 12 2e 70 a6 91 9c 05 14 e3 bf 7a 33 1f f9 4f 61 ..p.......z3..Oa 00c0 60 08 a7 26 cd a1 d6 82 90 a6 25 35 8a 48 ac 44 `..&......%5.H.D 00d0 28 7d ed 54 50 c9 0e cd 97 ef 56 c9 0c 78 3f 44 (}.TP.....V..x?D 00e0 f6 b1 cf 6c 60 2e 46 2e 83 f6 c8 8e 66 bd 9e 43 ...l`.F.....f..C 00f0 6f d2 48 56 90 78 26 f9 86 61 a3 dc 62 b7 b4 9d o.HV.x&..a..b... 0100 36 6f e2 e8 3b 0a 1f 68 9d 49 55 82 3b 86 28 dd 6o..;..h.IU.;.(. 0110 c6 12 84 d5 53 e5 78 d5 7e e8 05 27 46 47 6f 9f ....S.x.~..'FGo. 0120 6c 06 30 20 c1 7a 00 f9 bb 41 8d 3e 56 c9 a6 54 l.0 .z...A.>V..T 0130 cd 24 b8 2a f1 4f e9 fb 25 6f 3e 00 52 14 4a ac .$.*.O..%o>.R.J. 0140 4e 5e 68 eb 4c 6c 89 6a 87 0d e3 a5 26 5b N^h.Ll.j....&[ Frame 9 (94 bytes on wire, 94 bytes captured) Arrival Time: Feb 4, 2011 16:39:30.819687000 [Time delta from previous captured frame: 0.569591000 seconds] [Time delta from previous displayed frame: 0.569591000 seconds] [Time since reference or first frame: 1.827162000 seconds] Frame Number: 9 Frame Length: 94 bytes Capture Length: 94 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37), Dst: 00:23:f8:10:29:12 (00:23:f8:10:29:12) Destination: 00:23:f8:10:29:12 (00:23:f8:10:29:12) Address: 00:23:f8:10:29:12 (00:23:f8:10:29:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Address: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.157 (165.227.249.157), Dst: 165.227.249.156 (165.227.249.156) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0007 (7) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb94 [correct] [Good: True] [Bad : False] Source: 165.227.249.157 (165.227.249.157) Destination: 165.227.249.156 (165.227.249.156) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0xf971 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 79B992DA3EDE43C9 Responder cookie: 224220AB49BB12BA Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x18cec738 Length: 52 Encrypted payload (24 bytes) 0000 00 23 f8 10 29 12 00 14 6c a6 ca 37 08 00 45 00 .#..)...l..7..E. 0010 00 50 00 07 40 00 40 11 fb 94 a5 e3 f9 9d a5 e3 .P..@.@......... 0020 f9 9c 01 f4 01 f4 00 3c f9 71 79 b9 92 da 3e de .......<.qy...>. 0030 43 c9 22 42 20 ab 49 bb 12 ba 08 10 20 01 18 ce C."B .I..... ... 0040 c7 38 00 00 00 34 c8 19 d6 e8 a0 0c 76 d2 9b 02 .8...4......v... 0050 de 67 b8 70 71 62 30 5e d4 4b 4c 54 e2 12 .g.pqb0^.KLT.. Frame 10 (126 bytes on wire, 126 bytes captured) Arrival Time: Feb 4, 2011 16:39:32.623650000 [Time delta from previous captured frame: 1.803963000 seconds] [Time delta from previous displayed frame: 1.803963000 seconds] [Time since reference or first frame: 3.631125000 seconds] Frame Number: 10 Frame Length: 126 bytes Capture Length: 126 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37), Dst: 00:23:f8:10:29:12 (00:23:f8:10:29:12) Destination: 00:23:f8:10:29:12 (00:23:f8:10:29:12) Address: 00:23:f8:10:29:12 (00:23:f8:10:29:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Address: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.157 (165.227.249.157), Dst: 165.227.249.156 (165.227.249.156) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xdca1 (56481) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x5eb9 [correct] [Good: True] [Bad : False] Source: 165.227.249.157 (165.227.249.157) Destination: 165.227.249.156 (165.227.249.156) Encapsulating Security Payload ESP SPI: 0x1a7f8227 ESP Sequence: 1 0000 00 23 f8 10 29 12 00 14 6c a6 ca 37 08 00 45 00 .#..)...l..7..E. 0010 00 70 dc a1 00 00 40 32 5e b9 a5 e3 f9 9d a5 e3 .p....@2^....... 0020 f9 9c 1a 7f 82 27 00 00 00 01 c3 16 e4 cc 6d 4a .....'........mJ 0030 f9 e7 a4 93 17 f9 0c e9 5e 00 6b 0b 9c e3 45 cd ........^.k...E. 0040 f7 64 b6 7d b9 60 d4 51 8b 62 f1 79 ed c0 68 8a .d.}.`.Q.b.y..h. 0050 14 7e db 47 63 c3 03 bb 21 63 2a 2d 92 41 bd 20 .~.Gc...!c*-.A. 0060 aa 5b 5e ef e4 71 8f ba 82 9b 5c 5a f6 39 3f e8 .[^..q....\Z.9?. 0070 79 4f 87 a1 95 79 9e fb c2 9f 15 6f 45 fb yO...y.....oE. Frame 11 (126 bytes on wire, 126 bytes captured) Arrival Time: Feb 4, 2011 16:39:32.625622000 [Time delta from previous captured frame: 0.001972000 seconds] [Time delta from previous displayed frame: 0.001972000 seconds] [Time since reference or first frame: 3.633097000 seconds] Frame Number: 11 Frame Length: 126 bytes Capture Length: 126 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:23:f8:10:29:12 (00:23:f8:10:29:12), Dst: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Destination: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Address: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:23:f8:10:29:12 (00:23:f8:10:29:12) Address: 00:23:f8:10:29:12 (00:23:f8:10:29:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.156 (165.227.249.156), Dst: 165.227.249.157 (165.227.249.157) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x4f5d (20317) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xebfd [correct] [Good: True] [Bad : False] Source: 165.227.249.156 (165.227.249.156) Destination: 165.227.249.157 (165.227.249.157) Encapsulating Security Payload ESP SPI: 0x0e68fbe1 ESP Sequence: 1 0000 00 14 6c a6 ca 37 00 23 f8 10 29 12 08 00 45 00 ..l..7.#..)...E. 0010 00 70 4f 5d 00 00 40 32 eb fd a5 e3 f9 9c a5 e3 .pO]..@2........ 0020 f9 9d 0e 68 fb e1 00 00 00 01 5b 0a c4 2d 3b f0 ...h......[..-;. 0030 3b 08 a2 4f ec 25 e4 13 67 22 28 90 48 7a 67 bf ;..O.%..g"(.Hzg. 0040 4d c0 ef be 95 57 03 e4 5b bf c6 c1 de 05 35 7e M....W..[.....5~ 0050 e0 58 4c 54 6b bb 15 38 4d 2f dc 2b d5 8c 79 9a .XLTk..8M/.+..y. 0060 4b 2e 55 06 a7 76 d7 15 a1 de 99 fe 49 c8 b7 df K.U..v......I... 0070 a7 45 fb 6a 0a 40 c9 d1 1e 22 fd da cb be .E.j.@...".... Frame 12 (126 bytes on wire, 126 bytes captured) Arrival Time: Feb 4, 2011 16:39:33.617723000 [Time delta from previous captured frame: 0.992101000 seconds] [Time delta from previous displayed frame: 0.992101000 seconds] [Time since reference or first frame: 4.625198000 seconds] Frame Number: 12 Frame Length: 126 bytes Capture Length: 126 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37), Dst: 00:23:f8:10:29:12 (00:23:f8:10:29:12) Destination: 00:23:f8:10:29:12 (00:23:f8:10:29:12) Address: 00:23:f8:10:29:12 (00:23:f8:10:29:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Address: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.157 (165.227.249.157), Dst: 165.227.249.156 (165.227.249.156) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xdca2 (56482) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x5eb8 [correct] [Good: True] [Bad : False] Source: 165.227.249.157 (165.227.249.157) Destination: 165.227.249.156 (165.227.249.156) Encapsulating Security Payload ESP SPI: 0x1a7f8227 ESP Sequence: 2 0000 00 23 f8 10 29 12 00 14 6c a6 ca 37 08 00 45 00 .#..)...l..7..E. 0010 00 70 dc a2 00 00 40 32 5e b8 a5 e3 f9 9d a5 e3 .p....@2^....... 0020 f9 9c 1a 7f 82 27 00 00 00 02 67 e8 eb c3 15 28 .....'....g....( 0030 36 7e f2 f3 21 28 d7 96 38 69 43 2d c8 65 ae f5 6~..!(..8iC-.e.. 0040 bf 12 d9 fe 65 db 79 8b 33 aa f1 74 ea 37 c5 49 ....e.y.3..t.7.I 0050 9a 86 99 62 37 b0 64 9e 3b 16 6a ff 94 2c 8c f0 ...b7.d.;.j..,.. 0060 ee 2f 88 9d 5b e4 dc 64 19 a1 fb 87 98 30 dc 92 ./..[..d.....0.. 0070 49 44 e6 dd 67 76 83 05 ef 23 52 e1 79 79 ID..gv...#R.yy Frame 13 (126 bytes on wire, 126 bytes captured) Arrival Time: Feb 4, 2011 16:39:33.619358000 [Time delta from previous captured frame: 0.001635000 seconds] [Time delta from previous displayed frame: 0.001635000 seconds] [Time since reference or first frame: 4.626833000 seconds] Frame Number: 13 Frame Length: 126 bytes Capture Length: 126 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:23:f8:10:29:12 (00:23:f8:10:29:12), Dst: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Destination: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) Address: 00:14:6c:a6:ca:37 (00:14:6c:a6:ca:37) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:23:f8:10:29:12 (00:23:f8:10:29:12) Address: 00:23:f8:10:29:12 (00:23:f8:10:29:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.156 (165.227.249.156), Dst: 165.227.249.157 (165.227.249.157) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x4f5e (20318) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xebfc [correct] [Good: True] [Bad : False] Source: 165.227.249.156 (165.227.249.156) Destination: 165.227.249.157 (165.227.249.157) Encapsulating Security Payload ESP SPI: 0x0e68fbe1 ESP Sequence: 2 0000 00 14 6c a6 ca 37 00 23 f8 10 29 12 08 00 45 00 ..l..7.#..)...E. 0010 00 70 4f 5e 00 00 40 32 eb fc a5 e3 f9 9c a5 e3 .pO^..@2........ 0020 f9 9d 0e 68 fb e1 00 00 00 02 38 35 d0 78 87 66 ...h......85.x.f 0030 e3 dc f6 78 c9 be 2b 09 90 01 d9 cf 97 ec cf ee ...x..+......... 0040 1a 91 5b ec ab dc 31 ce 2f 39 29 26 7d 69 08 2d ..[...1./9)&}i.- 0050 9f 43 d3 e5 44 89 75 16 0d a3 5d f1 59 2e 5f 04 .C..D.u...].Y._. 0060 64 89 16 f0 99 e8 cb 7d fa 42 c5 39 bf e0 a4 1d d......}.B.9.... 0070 9f bf 39 19 80 bb 3b 49 6f dc c8 32 2b a8 ..9...;Io..2+.