Frame 1 (358 bytes on wire, 358 bytes captured) Arrival Time: Nov 29, 2006 14:21:54.720121000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 358 bytes Capture Length: 358 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 344 Identification: 0x0004 (4) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7be9 [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.119 (165.227.249.119) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 324 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0xA0227BCBF94A703D Responder cookie: 0x0000000000000000 Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000000 Length: 316 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: Notification (41) 0... .... = Not critical Length: 24 Nonce Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: RESERVED (0) SPI size: 0 Message type: NAT_DETECTION_SOURCE_IP (16388) Notification Data Notification payload Next payload: Vendor ID (43) 0... .... = Not critical Length: 28 Protocol ID: RESERVED (0) SPI size: 0 Message type: NAT_DETECTION_DESTINATION_IP (16389) Notification Data Vendor ID payload Next payload: RESERVED (0) 0... .... = Not critical Length: 24 Vendor ID: unknown vendor ID: 0x2A6775D0AD2AA7887C33FE1D68BAF308966F0001 0000 00 0c 29 66 91 21 00 06 b1 33 80 5d 08 00 45 00 ..)f.!...3.]..E. 0010 01 58 00 04 00 00 ff 11 7b e9 a5 e3 f9 68 a5 e3 .X......{....h.. 0020 f9 77 01 f4 01 f4 01 44 00 00 a0 22 7b cb f9 4a .w.....D..."{..J 0030 70 3d 00 00 00 00 00 00 00 00 21 20 22 08 00 00 p=........! "... 0040 00 00 00 00 01 3c 22 00 00 30 00 00 00 2c 01 01 .....<"..0...,.. 0050 00 04 03 00 00 0c 01 00 00 0c 80 0e 00 80 03 00 ................ 0060 00 08 03 00 00 02 03 00 00 08 02 00 00 02 00 00 ................ 0070 00 08 04 00 00 02 28 00 00 88 00 02 00 00 17 f1 ......(......... 0080 95 31 7d df 80 79 66 b2 3f fe 09 72 36 2e 64 f4 .1}..yf.?..r6.d. 0090 be 7e 4c 47 90 8e f6 85 c2 61 31 85 e8 4a 0e ca .~LG.....a1..J.. 00a0 b0 ad cf 7e ab 45 c6 cf 92 bb c8 67 ba 50 55 aa ...~.E.....g.PU. 00b0 a9 a9 68 e9 e3 35 89 60 df 04 44 d2 ce 94 ca 97 ..h..5.`..D..... 00c0 f8 da 10 d9 9b 90 0e 1e a4 9c 31 62 2b e3 07 98 ..........1b+... 00d0 d8 bb b8 5f 5a d4 52 88 7e 92 92 98 40 89 fd 6c ..._Z.R.~...@..l 00e0 69 b5 51 8f 6a 19 72 e5 82 11 05 d7 a7 52 f4 1f i.Q.j.r......R.. 00f0 a9 92 ff 93 d7 2b 70 b5 8c 9a c7 17 77 09 29 00 .....+p.....w.). 0100 00 18 97 63 7a 35 34 02 2d c0 8b 48 e1 d9 3e 97 ...cz54.-..H..>. 0110 90 71 df 79 b1 d7 29 00 00 1c 00 00 40 04 81 47 .q.y..).....@..G 0120 70 09 28 96 48 40 76 f9 b1 d6 a0 f0 2d a3 51 ed p.(.H@v.....-.Q. 0130 05 a0 2b 00 00 1c 00 00 40 05 a1 33 1e 1c c8 15 ..+.....@..3.... 0140 7f 61 b9 15 1b 87 6f 39 af 47 28 12 98 e1 00 00 .a....o9.G(..... 0150 00 18 2a 67 75 d0 ad 2a a7 88 7c 33 fe 1d 68 ba ..*gu..*..|3..h. 0160 f3 08 96 6f 00 01 ...o.. Frame 2 (394 bytes on wire, 394 bytes captured) Arrival Time: Nov 29, 2006 14:21:54.768501000 Time delta from previous packet: 0.048380000 seconds Time since reference or first frame: 0.048380000 seconds Frame Number: 2 Packet Length: 394 bytes Capture Length: 394 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 380 Identification: 0x134b (4939) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xe77e [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.104 (165.227.249.104) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 360 Checksum: 0x8333 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xA0227BCBF94A703D Responder cookie: 0x74CE87A34505C965 Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000000 Length: 352 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: Notification (41) 0... .... = Not critical Length: 36 Nonce Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: RESERVED (0) SPI size: 0 Message type: NAT_DETECTION_SOURCE_IP (16388) Notification Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: RESERVED (0) SPI size: 0 Message type: NAT_DETECTION_DESTINATION_IP (16389) Notification Data Notification payload Next payload: Vendor ID (43) 0... .... = Not critical Length: 8 Protocol ID: ISAKMP (1) SPI size: 0 Message type: HTTP_CERT_LOOKUP_SUPPORTED (16392) Vendor ID payload Next payload: Vendor ID (43) 0... .... = Not critical Length: 20 Vendor ID: unknown vendor ID: 0xF758F22668750F03B08DF6EBE1D00300 Vendor ID payload Next payload: RESERVED (0) 0... .... = Not critical Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F 0000 00 06 b1 33 80 5d 00 0c 29 66 91 21 08 00 45 00 ...3.]..)f.!..E. 0010 01 7c 13 4b 00 00 80 11 e7 7e a5 e3 f9 77 a5 e3 .|.K.....~...w.. 0020 f9 68 01 f4 01 f4 01 68 83 33 a0 22 7b cb f9 4a .h.....h.3."{..J 0030 70 3d 74 ce 87 a3 45 05 c9 65 21 20 22 20 00 00 p=t...E..e! " .. 0040 00 00 00 00 01 60 22 00 00 30 00 00 00 2c 01 01 .....`"..0...,.. 0050 00 04 03 00 00 0c 01 00 00 0c 80 0e 00 80 03 00 ................ 0060 00 08 02 00 00 02 03 00 00 08 03 00 00 02 00 00 ................ 0070 00 08 04 00 00 02 28 00 00 88 00 02 00 00 fb f6 ......(......... 0080 10 76 11 90 f8 b3 bf e5 36 75 c7 32 5e 0b 67 25 .v......6u.2^.g% 0090 dd 29 08 3c d5 b7 13 34 e9 3f 00 53 7e 24 94 59 .).<...4.?.S~$.Y 00a0 0d b1 f4 15 3a d7 26 af 05 8e 71 2a 32 1e 3d 8f ....:.&...q*2.=. 00b0 59 2d de b6 08 2c b9 91 c2 2b 83 3c 9c 4c 1d 1f Y-...,...+.<.L.. 00c0 a4 b9 4b 9c 21 8e cd ad 78 7c 8a 1e aa 17 cd 26 ..K.!...x|.....& 00d0 5e af 82 6c e9 f8 63 18 57 20 e4 e3 a5 fc 1e 0e ^..l..c.W ...... 00e0 b2 85 8a 16 fb bc 6c 94 c4 ff 83 94 40 8b 2f 4d ......l.....@./M 00f0 46 b2 5e 82 bd f7 f6 f5 85 a1 d9 89 5b cc 29 00 F.^.........[.). 0100 00 24 6e 29 13 57 a3 76 9b 50 1a 7f f1 87 05 9d .$n).W.v.P...... 0110 14 d7 06 8a 69 2b 40 12 e6 e7 ae 37 e9 58 b4 a7 ....i+@....7.X.. 0120 32 68 29 00 00 1c 00 00 40 04 0b 86 31 d7 6d 3d 2h).....@...1.m= 0130 16 48 85 9e 71 58 32 c5 e8 28 6f 7d cb 1a 29 00 .H..qX2..(o}..). 0140 00 1c 00 00 40 05 1c 1d 8a c1 5b db 92 10 1c 9e ....@.....[..... 0150 a1 0b cb 4c 60 a6 ca 5a 71 9e 2b 00 00 08 01 00 ...L`..Zq.+..... 0160 40 08 2b 00 00 14 f7 58 f2 26 68 75 0f 03 b0 8d @.+....X.&hu.... 0170 f6 eb e1 d0 03 00 00 00 00 14 4a 13 1c 81 07 03 ..........J..... 0180 58 45 5c 57 28 f2 0e 95 45 2f XE\W(...E/ Frame 3 (278 bytes on wire, 278 bytes captured) Arrival Time: Nov 29, 2006 14:21:54.948306000 Time delta from previous packet: 0.179805000 seconds Time since reference or first frame: 0.228185000 seconds Frame Number: 3 Packet Length: 278 bytes Capture Length: 278 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 264 Identification: 0x0005 (5) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7c38 [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.119 (165.227.249.119) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 244 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0xA0227BCBF94A703D Responder cookie: 0x74CE87A34505C965 Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000001 Length: 236 Encrypted payload Next payload: Identification - I (35) 0... .... = Not critical Length: 208 Initialization Vector: 0x15D9FEB8 Encrypted Data 0000 00 0c 29 66 91 21 00 06 b1 33 80 5d 08 00 45 00 ..)f.!...3.]..E. 0010 01 08 00 05 00 00 ff 11 7c 38 a5 e3 f9 68 a5 e3 ........|8...h.. 0020 f9 77 01 f4 01 f4 00 f4 00 00 a0 22 7b cb f9 4a .w........."{..J 0030 70 3d 74 ce 87 a3 45 05 c9 65 2e 20 23 08 00 00 p=t...E..e. #... 0040 00 01 00 00 00 ec 23 00 00 d0 15 d9 fe b8 b9 88 ......#......... 0050 af 13 35 7b 19 60 aa 3f 36 a8 7b 76 b6 a1 84 10 ..5{.`.?6.{v.... 0060 bb f5 91 95 7c aa f4 3e 5d 03 a0 4e 82 a2 73 44 ....|..>]..N..sD 0070 e0 ac c9 ea b9 b7 37 fe d5 66 e6 7c 07 41 43 b8 ......7..f.|.AC. 0080 ed fe ee fc 3b bf bb 03 43 df f4 36 6a be 42 80 ....;...C..6j.B. 0090 5c 4a 4c 94 e2 c6 78 72 91 a0 47 cf 02 15 3a d1 \JL...xr..G...:. 00a0 8c c6 bd 9b 83 9a 32 a6 a5 c2 bc 14 71 4e 08 53 ......2.....qN.S 00b0 d6 a6 d3 5a a4 05 2e 1c e1 b9 85 db a9 18 1c 04 ...Z............ 00c0 c5 65 e3 0a 6e 9c 41 a3 7e 3a 97 51 4f 31 3e 38 .e..n.A.~:.QO1>8 00d0 03 d5 4b d2 74 c4 36 e8 b0 84 56 e3 bd 15 af 53 ..K.t.6...V....S 00e0 28 cf 63 a7 9d 37 6e 32 63 c5 e1 b8 02 bb 89 f2 (.c..7n2c....... 00f0 12 f9 69 2b 4e 52 be fd 02 42 f8 01 a6 ee 68 ec ..i+NR...B....h. 0100 45 72 b6 7c 30 0f 7e 0c ed 84 b1 c6 04 4d 2e 67 Er.|0.~......M.g 0110 bb 9b 71 05 50 4b ..q.PK Frame 4 (262 bytes on wire, 262 bytes captured) Arrival Time: Nov 29, 2006 14:21:54.948308000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.228187000 seconds Frame Number: 4 Packet Length: 262 bytes Capture Length: 262 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x134c (4940) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xe801 [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.104 (165.227.249.104) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0xf308 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xA0227BCBF94A703D Responder cookie: 0x74CE87A34505C965 Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000001 Length: 220 Encrypted payload Next payload: Identification - R (36) 0... .... = Not critical Length: 192 Initialization Vector: 0x16EAAF4B Encrypted Data 0000 00 06 b1 33 80 5d 00 0c 29 66 91 21 08 00 45 00 ...3.]..)f.!..E. 0010 00 f8 13 4c 00 00 80 11 e8 01 a5 e3 f9 77 a5 e3 ...L.........w.. 0020 f9 68 01 f4 01 f4 00 e4 f3 08 a0 22 7b cb f9 4a .h........."{..J 0030 70 3d 74 ce 87 a3 45 05 c9 65 2e 20 23 20 00 00 p=t...E..e. # .. 0040 00 01 00 00 00 dc 24 00 00 c0 16 ea af 4b 87 47 ......$......K.G 0050 f5 e8 9c 08 7b aa af e5 ca b0 3c ee 0e 4a 14 ea ....{.....<..J.. 0060 d6 c7 ea 5e 1c 44 0f 50 f0 24 4e fe 89 77 c9 6d ...^.D.P.$N..w.m 0070 01 95 0c 8d f3 b9 43 51 93 7e 2c 65 a3 7f 36 ff ......CQ.~,e..6. 0080 1a c9 ce d3 5e b2 ba f3 70 2c ee 5e e1 81 0a d4 ....^...p,.^.... 0090 dc 35 8a 2a 7c 9f 21 b6 73 67 18 41 39 3d 22 e1 .5.*|.!.sg.A9=". 00a0 01 ca cd d3 57 dc 5e da fc dd 7d 1d 16 c5 67 7a ....W.^...}...gz 00b0 39 fa 94 d6 a8 b3 ae d0 e2 9d 01 65 c9 14 cd 8c 9..........e.... 00c0 4f 19 49 51 d2 27 63 f6 f8 10 99 2a 53 dd 45 62 O.IQ.'c....*S.Eb 00d0 e2 98 66 2a 39 75 92 ce f8 5a 33 6f ac 55 18 3f ..f*9u...Z3o.U.? 00e0 3e 7d d7 d5 01 5d 02 e8 23 54 b5 c5 2c 23 f2 8d >}...]..#T..,#.. 00f0 a2 18 01 45 d8 ec 80 b3 c7 16 bb b4 85 bd 6c e2 ...E..........l. 0100 90 27 93 cc 2b e2 .'..+. Frame 5 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 14:22:00.146028000 Time delta from previous packet: 5.197720000 seconds Time since reference or first frame: 5.425907000 seconds Frame Number: 5 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0004 (4) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7ca8 [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.119 (165.227.249.119) Encapsulating Security Payload SPI: 0xa88d8b42 Sequence: 1 Data (92 bytes) 0000 00 0c 29 66 91 21 00 06 b1 33 80 5d 08 00 45 00 ..)f.!...3.]..E. 0010 00 78 00 04 00 00 ff 32 7c a8 a5 e3 f9 68 a5 e3 .x.....2|....h.. 0020 f9 77 a8 8d 8b 42 00 00 00 01 73 c5 20 8d 1c ba .w...B....s. ... 0030 de 7b 98 9f f3 16 c2 cd e1 16 36 f1 61 92 69 10 .{........6.a.i. 0040 e5 a5 b9 ce ad 78 26 4f 3b fa bf 72 74 b1 64 f2 .....x&O;..rt.d. 0050 bf d8 a7 8a 78 d6 0d 49 5e 07 d2 16 88 25 eb 7c ....x..I^....%.| 0060 f7 c1 ee 00 cb 33 fc 84 8b 40 67 3e 29 32 50 af .....3...@g>)2P. 0070 af 9a b9 a0 c0 35 bc e4 64 d2 5c cf c3 b6 c0 b3 .....5..d.\..... 0080 93 96 e1 9f 7c 93 ....|. Frame 6 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 14:22:00.148543000 Time delta from previous packet: 0.002515000 seconds Time since reference or first frame: 5.428422000 seconds Frame Number: 6 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0022 (34) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b8a [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.104 (165.227.249.104) Encapsulating Security Payload SPI: 0xe2dd3399 Sequence: 1 Data (92 bytes) 0000 00 06 b1 33 80 5d 00 0c 29 66 91 21 08 00 45 00 ...3.]..)f.!..E. 0010 00 78 00 22 00 00 f0 32 8b 8a a5 e3 f9 77 a5 e3 .x."...2.....w.. 0020 f9 68 e2 dd 33 99 00 00 00 01 82 5c 23 f4 13 86 .h..3......\#... 0030 b8 5f e7 32 08 b3 62 ed 18 4f d3 b5 30 29 8e 65 ._.2..b..O..0).e 0040 cf 59 ee 66 74 52 b8 c2 8d 0f 03 fb 28 71 9e 6a .Y.ftR......(q.j 0050 08 74 9a f9 3a c9 a3 96 20 48 48 c7 f5 65 dc be .t..:... HH..e.. 0060 e8 98 ab a1 c5 e2 ef 15 77 16 ef 40 91 90 6a f7 ........w..@..j. 0070 1f 14 fb 2d 13 8c c4 0d 42 87 2d 5d f2 f2 38 9e ...-....B.-]..8. 0080 1d 68 17 41 ab 5f .h.A._ Frame 7 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 14:22:01.125181000 Time delta from previous packet: 0.976638000 seconds Time since reference or first frame: 6.405060000 seconds Frame Number: 7 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0005 (5) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7ca7 [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.119 (165.227.249.119) Encapsulating Security Payload SPI: 0xa88d8b42 Sequence: 2 Data (92 bytes) 0000 00 0c 29 66 91 21 00 06 b1 33 80 5d 08 00 45 00 ..)f.!...3.]..E. 0010 00 78 00 05 00 00 ff 32 7c a7 a5 e3 f9 68 a5 e3 .x.....2|....h.. 0020 f9 77 a8 8d 8b 42 00 00 00 02 63 bf fb ab 38 61 .w...B....c...8a 0030 04 54 38 60 0d 1e e2 b2 99 9a f6 bb a8 1b 6a 78 .T8`..........jx 0040 f7 ad ee 82 c2 90 83 d5 1f f7 19 b1 eb ba bc 58 ...............X 0050 1c d1 08 e5 8b 98 d6 b6 ea 31 e2 24 94 70 43 e4 .........1.$.pC. 0060 dd 6a 2a 9d 65 cf 50 5f ed a6 45 a2 8b a6 3a 72 .j*.e.P_..E...:r 0070 5a e8 03 cc 8f 49 b8 d9 d6 21 83 db 14 d8 99 16 Z....I...!...... 0080 39 91 d6 96 a8 e5 9..... Frame 8 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 14:22:01.125864000 Time delta from previous packet: 0.000683000 seconds Time since reference or first frame: 6.405743000 seconds Frame Number: 8 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0023 (35) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b89 [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.104 (165.227.249.104) Encapsulating Security Payload SPI: 0xe2dd3399 Sequence: 2 Data (92 bytes) 0000 00 06 b1 33 80 5d 00 0c 29 66 91 21 08 00 45 00 ...3.]..)f.!..E. 0010 00 78 00 23 00 00 f0 32 8b 89 a5 e3 f9 77 a5 e3 .x.#...2.....w.. 0020 f9 68 e2 dd 33 99 00 00 00 02 de 3c ac 07 ff ba .h..3......<.... 0030 48 d6 6f d1 4d 30 82 dc b8 6e 0f 42 92 35 d2 bf H.o.M0...n.B.5.. 0040 e9 85 3b d5 1d 09 1f f6 b2 7a 0b 6b ed da 0d c7 ..;......z.k.... 0050 e0 46 28 c3 0a 5f 3d e6 14 26 ea 13 9b 22 4e a5 .F(.._=..&..."N. 0060 30 dd 53 1b 34 73 10 b2 33 28 19 c1 ab 63 6c 3a 0.S.4s..3(...cl: 0070 47 64 81 bb b3 a8 4e 85 42 78 52 92 d2 d9 66 28 Gd....N.BxR...f( 0080 fd a4 0e 79 15 e8 ...y.. Frame 9 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 14:22:02.155720000 Time delta from previous packet: 1.029856000 seconds Time since reference or first frame: 7.435599000 seconds Frame Number: 9 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0006 (6) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7ca6 [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.119 (165.227.249.119) Encapsulating Security Payload SPI: 0xa88d8b42 Sequence: 3 Data (92 bytes) 0000 00 0c 29 66 91 21 00 06 b1 33 80 5d 08 00 45 00 ..)f.!...3.]..E. 0010 00 78 00 06 00 00 ff 32 7c a6 a5 e3 f9 68 a5 e3 .x.....2|....h.. 0020 f9 77 a8 8d 8b 42 00 00 00 03 b4 00 6f 02 4b 7b .w...B......o.K{ 0030 35 50 df ce 88 bf 97 8c 88 af 93 8d 84 0a a7 58 5P.............X 0040 74 d7 cb 5e 78 10 b4 a0 2f 40 76 77 c2 f7 54 f6 t..^x.../@vw..T. 0050 73 1f db ba 8e a4 34 14 e1 6b 69 cc e9 71 a9 f2 s.....4..ki..q.. 0060 f7 1b d7 01 b1 e4 4e 86 4e e3 ab fc d6 39 cd 8f ......N.N....9.. 0070 1d ac ff 5e db 1a 82 7f 84 3a ad 2c 36 62 82 27 ...^.....:.,6b.' 0080 31 88 6e 2a 24 61 1.n*$a Frame 10 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 14:22:02.155722000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 7.435601000 seconds Frame Number: 10 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0024 (36) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b88 [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.104 (165.227.249.104) Encapsulating Security Payload SPI: 0xe2dd3399 Sequence: 3 Data (92 bytes) 0000 00 06 b1 33 80 5d 00 0c 29 66 91 21 08 00 45 00 ...3.]..)f.!..E. 0010 00 78 00 24 00 00 f0 32 8b 88 a5 e3 f9 77 a5 e3 .x.$...2.....w.. 0020 f9 68 e2 dd 33 99 00 00 00 03 ec da 76 87 37 c9 .h..3.......v.7. 0030 6a ab 66 8d 24 55 77 1a e5 11 5c a9 87 45 ea 8e j.f.$Uw...\..E.. 0040 32 c9 70 57 6b ba 0f 49 4b 83 8a 1b 60 7f 76 b2 2.pWk..IK...`.v. 0050 0d a4 86 5e dd a3 63 ae 4b df 76 a3 d5 e7 86 7f ...^..c.K.v..... 0060 55 21 70 bf 44 5e 2a f0 07 ac dc ae fe 3f 98 27 U!p.D^*......?.' 0070 dc 05 06 ea ea 82 9c b2 eb e9 6e 4c ad fa f9 6d ..........nL...m 0080 1b 48 88 f0 bf ae .H....