Frame 1 (358 bytes on wire, 358 bytes captured) Arrival Time: Nov 24, 2006 14:25:17.071012000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 358 bytes Capture Length: 358 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 344 Identification: 0x0001 (1) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7bef [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.116 (165.227.249.116) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 324 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0xBEF78C06546A3B12 Responder cookie: 0x0000000000000000 Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000000 Length: 316 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: Notification (41) 0... .... = Not critical Length: 24 Nonce Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: RESERVED (0) SPI size: 0 Message type: NAT_DETECTION_SOURCE_IP (16388) Notification Data Notification payload Next payload: Vendor ID (43) 0... .... = Not critical Length: 28 Protocol ID: RESERVED (0) SPI size: 0 Message type: NAT_DETECTION_DESTINATION_IP (16389) Notification Data Vendor ID payload Next payload: RESERVED (0) 0... .... = Not critical Length: 24 Vendor ID: unknown vendor ID: 0x2A6775D0AD2AA7887C33FE1D68BAF308966F0001 0000 00 30 48 41 4f 4b 00 06 b1 33 80 5d 08 00 45 00 .0HAOK...3.]..E. 0010 01 58 00 01 00 00 ff 11 7b ef a5 e3 f9 68 a5 e3 .X......{....h.. 0020 f9 74 01 f4 01 f4 01 44 00 00 be f7 8c 06 54 6a .t.....D......Tj 0030 3b 12 00 00 00 00 00 00 00 00 21 20 22 08 00 00 ;.........! "... 0040 00 00 00 00 01 3c 22 00 00 30 00 00 00 2c 01 01 .....<"..0...,.. 0050 00 04 03 00 00 0c 01 00 00 0c 80 0e 00 80 03 00 ................ 0060 00 08 03 00 00 02 03 00 00 08 02 00 00 02 00 00 ................ 0070 00 08 04 00 00 02 28 00 00 88 00 02 00 00 14 d3 ......(......... 0080 c6 9b fb 36 09 3f 42 38 de fd 0c 41 60 58 d2 c4 ...6.?B8...A`X.. 0090 a3 d7 44 2a 61 b8 5d e3 18 cd 71 c9 ba 1d 19 ed ..D*a.]...q..... 00a0 6b 4b 47 aa 68 a7 76 ba 86 8a 1e 6c 1f 2d a1 36 kKG.h.v....l.-.6 00b0 82 8c cd dd f0 09 d1 f3 12 18 31 9a 3b 2d 11 c9 ..........1.;-.. 00c0 00 a0 ce 3a f0 7f 25 1a 52 d9 a1 07 1c c5 c6 a7 ...:..%.R....... 00d0 17 90 15 73 d2 cf 70 a0 ba d3 d4 a3 9c dc 65 91 ...s..p.......e. 00e0 97 af 93 bb ef 83 d8 ff 75 ed bf 71 cb 87 c4 e3 ........u..q.... 00f0 2b 0d 2b 29 18 1b 75 b2 ee 1b 83 4b fa ec 29 00 +.+)..u....K..). 0100 00 18 a0 7f 7c b5 ed 8e d2 45 d5 0c b3 52 d6 dc ....|....E...R.. 0110 3b f1 bf 17 8e 01 29 00 00 1c 00 00 40 04 63 96 ;.....).....@.c. 0120 14 04 86 52 cd 3d f2 e1 e1 e6 da cc 58 71 d9 f9 ...R.=......Xq.. 0130 a6 60 2b 00 00 1c 00 00 40 05 11 50 14 22 79 df .`+.....@..P."y. 0140 96 d9 df 54 4f f7 6b 7f a5 8b b0 61 26 6c 00 00 ...TO.k....a&l.. 0150 00 18 2a 67 75 d0 ad 2a a7 88 7c 33 fe 1d 68 ba ..*gu..*..|3..h. 0160 f3 08 96 6f 00 01 ...o.. Frame 2 (493 bytes on wire, 493 bytes captured) Arrival Time: Nov 24, 2006 14:25:17.074661000 Time delta from previous packet: 0.003649000 seconds Time since reference or first frame: 0.003649000 seconds Frame Number: 2 Packet Length: 493 bytes Capture Length: 493 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 479 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa69 [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.104 (165.227.249.104) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 459 Checksum: 0x9f73 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBEF78C06546A3B12 Responder cookie: 0x85F87D2B54416400 Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000000 Length: 451 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: Notification (41) 0... .... = Not critical Length: 183 Nonce Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: ISAKMP (1) SPI size: 0 Message type: NAT_DETECTION_DESTINATION_IP (16389) Notification Data Notification payload Next payload: RESERVED (0) 0... .... = Not critical Length: 28 Protocol ID: ISAKMP (1) SPI size: 0 Message type: NAT_DETECTION_SOURCE_IP (16388) Notification Data 0000 00 06 b1 33 80 5d 00 30 48 41 4f 4b 08 00 45 00 ...3.].0HAOK..E. 0010 01 df 00 00 40 00 40 11 fa 69 a5 e3 f9 74 a5 e3 ....@.@..i...t.. 0020 f9 68 01 f4 01 f4 01 cb 9f 73 be f7 8c 06 54 6a .h.......s....Tj 0030 3b 12 85 f8 7d 2b 54 41 64 00 21 20 22 20 00 00 ;...}+TAd.! " .. 0040 00 00 00 00 01 c3 22 00 00 30 00 00 00 2c 01 01 ......"..0...,.. 0050 00 04 03 00 00 0c 01 00 00 0c 80 0e 00 80 03 00 ................ 0060 00 08 03 00 00 02 03 00 00 08 02 00 00 02 00 00 ................ 0070 00 08 04 00 00 02 28 00 00 88 00 02 00 00 00 bc ......(......... 0080 68 bf 6a 58 11 78 81 97 db a3 75 64 77 2d 0a f1 h.jX.x....udw-.. 0090 89 97 b3 4b ab 16 2e 3a 9f 16 0a 94 bd 3e 8b 7f ...K...:.....>.. 00a0 46 aa 75 51 d1 39 26 41 ea 0c cb 77 9e 6b eb 63 F.uQ.9&A...w.k.c 00b0 af c1 36 aa 8d 13 73 c6 b4 7e 7a 16 04 b4 7f b8 ..6...s..~z..... 00c0 b4 c8 90 c3 a3 f8 dd 1e 66 eb b0 fd be d7 0c bb ........f....... 00d0 e0 e9 a1 d1 f7 e6 ba f1 d5 5e a3 3f e8 60 fb ff .........^.?.`.. 00e0 cc ea ed 73 81 67 09 d0 e6 4d ca 27 9b 8d 8f d7 ...s.g...M.'.... 00f0 49 2c 92 7e 85 a2 5a 0e 17 3d 9f 11 53 2d 29 00 I,.~..Z..=..S-). 0100 00 b7 26 de d0 c2 c7 8b e0 9d ad 03 18 3f 8e 50 ..&..........?.P 0110 a0 13 1d d9 12 00 f7 1b fc 7c 81 4c ce 96 99 3d .........|.L...= 0120 ec d2 58 cd 37 80 c5 b9 7a 70 c0 60 3f 48 e9 77 ..X.7...zp.`?H.w 0130 5f 5b f6 ef 72 bd 86 5c d1 06 33 2f 5a e3 bc 8f _[..r..\..3/Z... 0140 8b 1e a9 4f 15 60 f8 d2 9c d8 47 f0 c3 fe 3e 63 ...O.`....G...>c 0150 7b e6 03 30 68 10 7a ea 74 9c 87 e7 1b 07 e7 7f {..0h.z.t....... 0160 e6 01 5b 26 12 1f 38 45 f8 42 d0 cb 47 fe 5e 3f ..[&..8E.B..G.^? 0170 48 f9 7d b5 67 a2 cc 6b 59 33 6c 36 99 15 c2 2d H.}.g..kY3l6...- 0180 34 56 97 95 9e 7f f1 6c cd ad cd 0c b4 ac df a1 4V.....l........ 0190 26 07 17 75 6b 9c 4d 5a ab 82 20 cf 5d 5f 47 9a &..uk.MZ.. .]_G. 01a0 82 d9 99 da 8e 00 63 ba bd 5b ce 0d 79 bf c8 f8 ......c..[..y... 01b0 6e 19 2c b8 f2 29 00 00 1c 01 00 40 05 c3 9e a3 n.,..).....@.... 01c0 74 fc f4 70 77 04 be 83 7e fd c7 b1 16 8c 7b eb t..pw...~.....{. 01d0 5c 00 00 00 1c 01 00 40 04 c2 2d 23 f1 97 b9 f8 \......@..-#.... 01e0 b0 b8 3b 3f 54 0b 76 2a 4a 23 da b3 2b ..;?T.v*J#..+ Frame 3 (278 bytes on wire, 278 bytes captured) Arrival Time: Nov 24, 2006 14:25:17.186088000 Time delta from previous packet: 0.111427000 seconds Time since reference or first frame: 0.115076000 seconds Frame Number: 3 Packet Length: 278 bytes Capture Length: 278 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 264 Identification: 0x0002 (2) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7c3e [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.116 (165.227.249.116) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 244 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0xBEF78C06546A3B12 Responder cookie: 0x85F87D2B54416400 Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000001 Length: 236 Encrypted payload Next payload: Identification - I (35) 0... .... = Not critical Length: 208 Initialization Vector: 0x935FC3DD Encrypted Data 0000 00 30 48 41 4f 4b 00 06 b1 33 80 5d 08 00 45 00 .0HAOK...3.]..E. 0010 01 08 00 02 00 00 ff 11 7c 3e a5 e3 f9 68 a5 e3 ........|>...h.. 0020 f9 74 01 f4 01 f4 00 f4 00 00 be f7 8c 06 54 6a .t............Tj 0030 3b 12 85 f8 7d 2b 54 41 64 00 2e 20 23 08 00 00 ;...}+TAd.. #... 0040 00 01 00 00 00 ec 23 00 00 d0 93 5f c3 dd 62 d5 ......#...._..b. 0050 7c 0d 83 97 8d e0 58 c0 fb 35 4f 42 ee 83 9d b5 |.....X..5OB.... 0060 ed 16 dc c0 61 a7 7f 12 01 2c 85 56 51 49 0c ed ....a....,.VQI.. 0070 b1 f7 a3 bf c7 3d 42 dc 7e 6e 67 a6 23 7b 3b 29 .....=B.~ng.#{;) 0080 82 54 bf 12 d0 a9 15 c7 89 3a c5 6b aa d9 26 8c .T.......:.k..&. 0090 ce 43 80 8b 2a da ee dd 83 3c 59 91 d2 17 c5 33 .C..*.....?.. 00e0 2e ef 49 90 59 78 56 1d 85 89 d4 07 e3 43 dc 9d ..I.YxV......C.. 00f0 b3 19 85 90 56 c9 07 9f 87 56 2b ac d3 60 c7 97 ....V....V+..`.. 0100 77 8e e3 a2 c3 31 2c 34 81 61 fc 67 38 6c 26 5e w....1,4.a.g8l&^ 0110 cb 4f e7 ce ef 49 .O...I Frame 4 (294 bytes on wire, 294 bytes captured) Arrival Time: Nov 24, 2006 14:25:17.200347000 Time delta from previous packet: 0.014259000 seconds Time since reference or first frame: 0.129335000 seconds Frame Number: 4 Packet Length: 294 bytes Capture Length: 294 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 280 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb30 [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.104 (165.227.249.104) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 260 Checksum: 0x3554 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBEF78C06546A3B12 Responder cookie: 0x85F87D2B54416400 Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000001 Length: 252 Encrypted payload Next payload: Identification - R (36) 0... .... = Not critical Length: 224 Initialization Vector: 0x5C1F3EBD Encrypted Data 0000 00 06 b1 33 80 5d 00 30 48 41 4f 4b 08 00 45 00 ...3.].0HAOK..E. 0010 01 18 00 00 40 00 40 11 fb 30 a5 e3 f9 74 a5 e3 ....@.@..0...t.. 0020 f9 68 01 f4 01 f4 01 04 35 54 be f7 8c 06 54 6a .h......5T....Tj 0030 3b 12 85 f8 7d 2b 54 41 64 00 2e 20 23 20 00 00 ;...}+TAd.. # .. 0040 00 01 00 00 00 fc 24 00 00 e0 5c 1f 3e bd 20 7d ......$...\.>. } 0050 75 ba a0 e5 e8 9c f3 e1 88 70 5f 0e b2 0f 7e 24 u........p_...~$ 0060 ab 66 cc fe 2c 8b 92 b1 8c 6f 66 ee 77 44 72 e9 .f..,....of.wDr. 0070 8b 1b bf 8e 8b 64 64 63 0f 29 20 63 02 57 77 25 .....ddc.) c.Ww% 0080 f5 ab f0 a6 02 3f 0b e2 6a 6a a9 8b d8 e4 08 fa .....?..jj...... 0090 bb 22 2b d7 cf 3c b3 99 6d a0 6f c8 9c b1 c8 78 ."+..<..m.o....x 00a0 b3 84 56 65 0f e3 5b dd c3 fb df 93 f6 47 f4 f7 ..Ve..[......G.. 00b0 15 a8 b5 bb a4 8e ab 56 4f 22 fb fe 8a 6e 03 37 .......VO"...n.7 00c0 da 43 22 7e 69 fd 83 dc fb 77 c3 85 42 4f 09 05 .C"~i....w..BO.. 00d0 34 71 cd 4e 7a b9 41 6c 94 0b 1a b6 77 e4 69 59 4q.Nz.Al....w.iY 00e0 8d 30 83 2c a5 5c 36 6d c5 e5 a8 d0 b5 61 c0 a9 .0.,.\6m.....a.. 00f0 96 58 c3 6b 81 b7 57 6e 68 0c 78 70 3f 61 4d eb .X.k..Wnh.xp?aM. 0100 0a e6 00 95 b2 1d 46 a1 8e 15 3e 30 4d 1c 72 0a ......F...>0M.r. 0110 f3 ac 8e 0b 20 96 84 9b da f7 78 95 d9 46 22 2b .... .....x..F"+ 0120 52 8a 6a 35 b4 3c R.j5.< Frame 5 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 24, 2006 14:25:22.216922000 Time delta from previous packet: 5.016575000 seconds Time since reference or first frame: 5.145910000 seconds Frame Number: 5 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7caf [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.116 (165.227.249.116) Encapsulating Security Payload SPI: 0x07f29ab2 Sequence: 1 Data (92 bytes) 0000 00 30 48 41 4f 4b 00 06 b1 33 80 5d 08 00 45 00 .0HAOK...3.]..E. 0010 00 78 00 00 00 00 ff 32 7c af a5 e3 f9 68 a5 e3 .x.....2|....h.. 0020 f9 74 07 f2 9a b2 00 00 00 01 a4 b0 d0 57 0e b5 .t...........W.. 0030 d2 57 f5 42 39 82 ff 57 92 55 ae 1b 5f ce 7c c1 .W.B9..W.U.._.|. 0040 f9 ea a2 c5 e2 bc df b8 5f 28 52 81 66 31 4c 1a ........_(R.f1L. 0050 ef 79 5c ed 9e 37 96 54 df 62 25 33 ee a3 c4 98 .y\..7.T.b%3.... 0060 72 fb fa 93 07 e3 27 92 e8 0d c9 b0 db 53 2a 7e r.....'......S*~ 0070 b4 e4 63 78 51 d4 76 24 02 2d ed b3 1a 05 7f d8 ..cxQ.v$.-...... 0080 09 84 f5 ab 87 93 ...... Frame 6 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 24, 2006 14:25:22.219084000 Time delta from previous packet: 0.002162000 seconds Time since reference or first frame: 5.148072000 seconds Frame Number: 6 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x000a (10) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1da6 [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.104 (165.227.249.104) Encapsulating Security Payload SPI: 0x3c5c5ba5 Sequence: 1 Data (92 bytes) 0000 00 06 b1 33 80 5d 00 30 48 41 4f 4b 08 00 45 00 ...3.].0HAOK..E. 0010 00 78 00 0a 40 00 1e 32 1d a6 a5 e3 f9 74 a5 e3 .x..@..2.....t.. 0020 f9 68 3c 5c 5b a5 00 00 00 01 8d 6d ad 3b 98 9a .h<\[......m.;.. 0030 6a 52 ce 89 dd 06 27 47 05 a5 e9 dc 57 de c2 32 jR....'G....W..2 0040 d7 be ae b4 28 96 17 7a 03 ce 13 22 ed 55 64 2f ....(..z...".Ud/ 0050 7a 1a 88 6d 26 86 f3 4c ba 03 76 71 8e b2 f7 28 z..m&..L..vq...( 0060 5c f6 54 c4 c8 88 02 98 6d ec 81 b8 05 64 ee 17 \.T.....m....d.. 0070 e2 dc 58 35 c5 63 6d 1e c1 e9 5a 42 52 e8 1d f5 ..X5.cm...ZBR... 0080 02 64 c5 ac 25 4d .d..%M Frame 7 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 24, 2006 14:25:23.196453000 Time delta from previous packet: 0.977369000 seconds Time since reference or first frame: 6.125441000 seconds Frame Number: 7 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7cae [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.116 (165.227.249.116) Encapsulating Security Payload SPI: 0x07f29ab2 Sequence: 2 Data (92 bytes) 0000 00 30 48 41 4f 4b 00 06 b1 33 80 5d 08 00 45 00 .0HAOK...3.]..E. 0010 00 78 00 01 00 00 ff 32 7c ae a5 e3 f9 68 a5 e3 .x.....2|....h.. 0020 f9 74 07 f2 9a b2 00 00 00 02 0d 66 c3 33 5b ce .t.........f.3[. 0030 83 33 84 31 5c 98 84 98 0a 37 e9 3b c7 7e 77 40 .3.1\....7.;.~w@ 0040 3d fd 7e 64 a4 ae 32 a0 08 2d 97 58 b6 2d f5 ca =.~d..2..-.X.-.. 0050 b7 32 06 d8 ba 9f 7c 2f b4 68 71 69 19 4a 3e c9 .2....|/.hqi.J>. 0060 0d 41 73 09 15 e0 15 1e de 49 51 a9 72 5d 51 c5 .As......IQ.r]Q. 0070 70 a3 3d 4c fe b4 f5 23 5c f3 0a 59 ae c9 b2 19 p.=L...#\..Y.... 0080 d8 59 d7 dd b6 3a .Y...: Frame 8 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 24, 2006 14:25:23.197180000 Time delta from previous packet: 0.000727000 seconds Time since reference or first frame: 6.126168000 seconds Frame Number: 8 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x000b (11) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1da5 [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.104 (165.227.249.104) Encapsulating Security Payload SPI: 0x3c5c5ba5 Sequence: 2 Data (92 bytes) 0000 00 06 b1 33 80 5d 00 30 48 41 4f 4b 08 00 45 00 ...3.].0HAOK..E. 0010 00 78 00 0b 40 00 1e 32 1d a5 a5 e3 f9 74 a5 e3 .x..@..2.....t.. 0020 f9 68 3c 5c 5b a5 00 00 00 02 8c 1a 5d b2 10 76 .h<\[.......]..v 0030 50 78 ab bd cb 69 b9 ef eb a3 4e 96 20 0a 80 17 Px...i....N. ... 0040 43 07 f3 7b 3f 79 73 a9 16 50 8f 37 50 dd 8d db C..{?ys..P.7P... 0050 6e da 0f 68 34 27 84 b2 b5 d1 7b da 33 a1 e9 f6 n..h4'....{.3... 0060 96 22 75 30 ba b8 73 58 db f3 ef 41 ea 87 d9 c0 ."u0..sX...A.... 0070 73 73 fb 18 89 d8 71 e8 c8 aa ab 2c 17 c2 12 6c ss....q....,...l 0080 a0 e6 90 49 9c a1 ...I.. Frame 9 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 24, 2006 14:25:24.222583000 Time delta from previous packet: 1.025403000 seconds Time since reference or first frame: 7.151571000 seconds Frame Number: 9 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0002 (2) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7cad [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.116 (165.227.249.116) Encapsulating Security Payload SPI: 0x07f29ab2 Sequence: 3 Data (92 bytes) 0000 00 30 48 41 4f 4b 00 06 b1 33 80 5d 08 00 45 00 .0HAOK...3.]..E. 0010 00 78 00 02 00 00 ff 32 7c ad a5 e3 f9 68 a5 e3 .x.....2|....h.. 0020 f9 74 07 f2 9a b2 00 00 00 03 bf 26 83 b6 b5 b3 .t.........&.... 0030 e9 41 1f a7 e9 40 e0 50 02 95 50 a7 48 1a d4 3a .A...@.P..P.H..: 0040 e3 df 71 da b5 c5 b3 02 00 d0 d9 a0 cb 73 a1 d5 ..q..........s.. 0050 3c 96 d3 ae 39 39 56 a1 3d 3a fc cb ce 9d 1f 6e <...99V.=:.....n 0060 0c 40 67 8c 1e 55 b0 2b 1f 44 06 30 f4 1a 6b e3 .@g..U.+.D.0..k. 0070 f6 cc 9c 14 da de 6b 25 09 7b d3 97 a2 39 d8 28 ......k%.{...9.( 0080 42 5b 21 ae 17 00 B[!... Frame 10 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 24, 2006 14:25:24.224693000 Time delta from previous packet: 0.002110000 seconds Time since reference or first frame: 7.153681000 seconds Frame Number: 10 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x000c (12) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1da4 [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.104 (165.227.249.104) Encapsulating Security Payload SPI: 0x3c5c5ba5 Sequence: 3 Data (92 bytes) 0000 00 06 b1 33 80 5d 00 30 48 41 4f 4b 08 00 45 00 ...3.].0HAOK..E. 0010 00 78 00 0c 40 00 1e 32 1d a4 a5 e3 f9 74 a5 e3 .x..@..2.....t.. 0020 f9 68 3c 5c 5b a5 00 00 00 03 bf af 2f 24 ef 0b .h<\[......./$.. 0030 54 7a 93 a7 85 31 61 d1 99 fa c1 f3 82 62 3d 8a Tz...1a......b=. 0040 83 b0 4e 44 f1 04 1b 04 d5 c0 84 b5 24 0e 50 02 ..ND........$.P. 0050 1a 00 f3 96 91 c8 ef 60 84 fb 0d bd a4 b8 49 27 .......`......I' 0060 17 bd 61 93 f3 92 e0 55 7e e5 cd b1 ed e8 fc 63 ..a....U~......c 0070 dd ff 36 d4 bb 76 7a 01 89 d4 e6 fd e1 fa 23 4e ..6..vz.......#N 0080 79 b3 50 4c 09 f5 y.PL..