Frame 1 (358 bytes on wire, 358 bytes captured) Arrival Time: Nov 29, 2006 11:31:55.249029000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 358 bytes Capture Length: 358 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 344 Identification: 0x0005 (5) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7bd9 [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 324 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0xEB4B4ECCC0FC6D50 Responder cookie: 0x0000000000000000 Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000000 Length: 316 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: Notification (41) 0... .... = Not critical Length: 24 Nonce Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: RESERVED (0) SPI size: 0 Message type: NAT_DETECTION_SOURCE_IP (16388) Notification Data Notification payload Next payload: Vendor ID (43) 0... .... = Not critical Length: 28 Protocol ID: RESERVED (0) SPI size: 0 Message type: NAT_DETECTION_DESTINATION_IP (16389) Notification Data Vendor ID payload Next payload: RESERVED (0) 0... .... = Not critical Length: 24 Vendor ID: unknown vendor ID: 0x2A6775D0AD2AA7887C33FE1D68BAF308966F0001 0000 00 0c 29 96 d4 43 00 06 b1 33 80 5d 08 00 45 00 ..)..C...3.]..E. 0010 01 58 00 05 00 00 ff 11 7b d9 a5 e3 f9 68 a5 e3 .X......{....h.. 0020 f9 86 01 f4 01 f4 01 44 00 00 eb 4b 4e cc c0 fc .......D...KN... 0030 6d 50 00 00 00 00 00 00 00 00 21 20 22 08 00 00 mP........! "... 0040 00 00 00 00 01 3c 22 00 00 30 00 00 00 2c 01 01 .....<"..0...,.. 0050 00 04 03 00 00 0c 01 00 00 0c 80 0e 00 80 03 00 ................ 0060 00 08 03 00 00 02 03 00 00 08 02 00 00 02 00 00 ................ 0070 00 08 04 00 00 02 28 00 00 88 00 02 00 00 48 57 ......(.......HW 0080 54 bd 3d c3 6d 6e 9f 11 78 3b ea 97 0a 5b fb be T.=.mn..x;...[.. 0090 d7 52 01 0a d9 99 80 70 a5 63 f3 cf f5 f8 c0 9e .R.....p.c...... 00a0 56 ab 52 d1 fb 0f 8a d4 2f 23 04 ce 42 a3 bd b9 V.R...../#..B... 00b0 53 cd 25 80 0a 16 d0 54 a8 bb 19 1f 04 a0 a7 86 S.%....T........ 00c0 be 8d ea 11 4e 1c 06 af 80 de 4d 3b 67 0f 63 b0 ....N.....M;g.c. 00d0 c1 42 6e b7 5f 40 b9 50 84 64 6a 61 51 90 5c ec .Bn._@.P.djaQ.\. 00e0 a3 77 e9 92 e2 db 06 48 89 e5 89 10 7e 66 1a 14 .w.....H....~f.. 00f0 54 5c b9 97 f1 74 39 2a 7b aa d4 54 61 2d 29 00 T\...t9*{..Ta-). 0100 00 18 0a 2b 4d b7 6e 56 fb d3 9e 8f f4 be ee 50 ...+M.nV.......P 0110 e1 93 db 98 0f 10 29 00 00 1c 00 00 40 04 59 2e ......).....@.Y. 0120 e1 35 a5 19 aa 94 64 4c c4 89 0e 20 89 67 63 94 .5....dL... .gc. 0130 5f 31 2b 00 00 1c 00 00 40 05 c9 d1 30 54 fa dc _1+.....@...0T.. 0140 9f f1 b7 c1 bc e0 a5 16 de cf b8 70 3e d7 00 00 ...........p>... 0150 00 18 2a 67 75 d0 ad 2a a7 88 7c 33 fe 1d 68 ba ..*gu..*..|3..h. 0160 f3 08 96 6f 00 01 ...o.. Frame 2 (322 bytes on wire, 322 bytes captured) Arrival Time: Nov 29, 2006 11:31:55.337430000 Time delta from previous packet: 0.088401000 seconds Time since reference or first frame: 0.088401000 seconds Frame Number: 2 Packet Length: 322 bytes Capture Length: 322 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 308 Identification: 0x8c00 (35840) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xaf02 [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.104 (165.227.249.104) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 288 Checksum: 0xb32c [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xEB4B4ECCC0FC6D50 Responder cookie: 0xB3606C1996D5DB9F Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000000 Length: 280 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: RESERVED (0) 0... .... = Not critical Length: 68 Nonce Data 0000 00 06 b1 33 80 5d 00 0c 29 96 d4 43 08 00 45 00 ...3.]..)..C..E. 0010 01 34 8c 00 00 00 40 11 af 02 a5 e3 f9 86 a5 e3 .4....@......... 0020 f9 68 01 f4 01 f4 01 20 b3 2c eb 4b 4e cc c0 fc .h..... .,.KN... 0030 6d 50 b3 60 6c 19 96 d5 db 9f 21 20 22 20 00 00 mP.`l.....! " .. 0040 00 00 00 00 01 18 22 00 00 30 00 00 00 2c 01 01 ......"..0...,.. 0050 00 04 03 00 00 0c 01 00 00 0c 80 0e 00 80 03 00 ................ 0060 00 08 03 00 00 02 03 00 00 08 02 00 00 02 00 00 ................ 0070 00 08 04 00 00 02 28 00 00 88 00 02 00 00 32 b1 ......(.......2. 0080 ac 5f 90 7c 19 0d f3 28 24 54 43 81 77 65 2e 6f ._.|...($TC.we.o 0090 a8 dc 1f 93 d0 1c 27 65 29 f2 30 11 1c b3 89 8a ......'e).0..... 00a0 ca 5e 24 ea 86 c5 d8 f6 8a 47 0d a2 0f 15 71 92 .^$......G....q. 00b0 c2 07 5b 35 e0 1f de 4a 9b 36 b5 80 21 24 59 ac ..[5...J.6..!$Y. 00c0 38 2a f7 40 98 c7 63 95 5a 4c 2a ee c7 d0 8f c0 8*.@..c.ZL*..... 00d0 c7 36 b4 35 e8 e1 4f 4a a3 58 f0 04 c2 0a d2 1a .6.5..OJ.X...... 00e0 e7 66 b1 45 e4 6f b4 81 72 ff 0a 0a 36 f5 ca 9b .f.E.o..r...6... 00f0 be 04 26 57 3e 65 c1 ac d2 13 90 a7 98 b5 00 00 ..&W>e.......... 0100 00 44 f1 16 5b 8d 13 61 a0 4b cc f3 8e 25 13 30 .D..[..a.K...%.0 0110 ba 76 73 24 ba 3a d3 94 d6 c2 0c 87 ff 03 f6 bc .vs$.:.......... 0120 a2 85 42 36 dc 1f 90 4e ad 4b 77 27 a6 c1 65 ce ..B6...N.Kw'..e. 0130 65 49 6e a0 87 51 cc 34 99 37 fb 36 57 2a ed 35 eIn..Q.4.7.6W*.5 0140 97 97 .. Frame 3 (278 bytes on wire, 278 bytes captured) Arrival Time: Nov 29, 2006 11:31:55.372583000 Time delta from previous packet: 0.035153000 seconds Time since reference or first frame: 0.123554000 seconds Frame Number: 3 Packet Length: 278 bytes Capture Length: 278 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 264 Identification: 0x0006 (6) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7c28 [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 244 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0xEB4B4ECCC0FC6D50 Responder cookie: 0xB3606C1996D5DB9F Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000001 Length: 236 Encrypted payload Next payload: Identification - I (35) 0... .... = Not critical Length: 208 Initialization Vector: 0xFD7A851B Encrypted Data 0000 00 0c 29 96 d4 43 00 06 b1 33 80 5d 08 00 45 00 ..)..C...3.]..E. 0010 01 08 00 06 00 00 ff 11 7c 28 a5 e3 f9 68 a5 e3 ........|(...h.. 0020 f9 86 01 f4 01 f4 00 f4 00 00 eb 4b 4e cc c0 fc ...........KN... 0030 6d 50 b3 60 6c 19 96 d5 db 9f 2e 20 23 08 00 00 mP.`l...... #... 0040 00 01 00 00 00 ec 23 00 00 d0 fd 7a 85 1b 3b 16 ......#....z..;. 0050 88 da 6a aa f7 f5 40 c2 54 45 a2 de 2d 09 2c 7c ..j...@.TE..-.,| 0060 33 82 aa 37 0b 6e 8e 1b 62 9d b8 5b c8 3e 74 04 3..7.n..b..[.>t. 0070 5b 22 19 24 3d 4d a3 06 65 12 07 31 e2 ce e3 59 [".$=M..e..1...Y 0080 49 f0 c9 73 a3 5f ac 18 7d 56 cb 75 53 ab 14 2a I..s._..}V.uS..* 0090 29 5a cf b1 75 2e 20 a5 21 20 43 c5 58 17 bc 19 )Z..u. .! C.X... 00a0 d3 46 e9 1c 34 1c 91 d0 88 c4 2f f8 7f 6b c4 17 .F..4...../..k.. 00b0 ce 16 c7 61 59 21 06 db 67 90 45 ca f5 6e 9a 5c ...aY!..g.E..n.\ 00c0 a1 c6 72 ab fe 27 d5 eb 29 04 42 18 17 6e 8d ba ..r..'..).B..n.. 00d0 8e 79 d3 29 22 72 bd 31 11 5c 1d 80 ad 16 b4 9f .y.)"r.1.\...... 00e0 81 11 2a e9 7f df 6e 22 b5 f5 4c c1 95 45 18 3a ..*...n"..L..E.: 00f0 bc 61 4c f6 b0 f9 9e a1 31 59 80 f7 a6 24 cc 82 .aL.....1Y...$.. 0100 df c4 d6 f8 01 cf 3f 8d a3 85 99 8a 75 f8 58 da ......?.....u.X. 0110 8d 66 f9 de bf 71 .f...q Frame 4 (246 bytes on wire, 246 bytes captured) Arrival Time: Nov 29, 2006 11:31:55.417646000 Time delta from previous packet: 0.045063000 seconds Time since reference or first frame: 0.168617000 seconds Frame Number: 4 Packet Length: 246 bytes Capture Length: 246 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 232 Identification: 0x8c00 (35840) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xaf4e [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.104 (165.227.249.104) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 212 Checksum: 0xeb52 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xEB4B4ECCC0FC6D50 Responder cookie: 0xB3606C1996D5DB9F Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000001 Length: 204 Encrypted payload Next payload: Identification - R (36) 0... .... = Not critical Length: 176 Initialization Vector: 0x72629CEA Encrypted Data 0000 00 06 b1 33 80 5d 00 0c 29 96 d4 43 08 00 45 00 ...3.]..)..C..E. 0010 00 e8 8c 00 00 00 40 11 af 4e a5 e3 f9 86 a5 e3 ......@..N...... 0020 f9 68 01 f4 01 f4 00 d4 eb 52 eb 4b 4e cc c0 fc .h.......R.KN... 0030 6d 50 b3 60 6c 19 96 d5 db 9f 2e 20 23 20 00 00 mP.`l...... # .. 0040 00 01 00 00 00 cc 24 00 00 b0 72 62 9c ea 7a 68 ......$...rb..zh 0050 4b 26 b0 04 c7 86 7f f0 d5 f3 f4 d9 a9 06 db 0a K&.............. 0060 0f f3 fb 96 03 d6 94 6d 37 fa a0 e5 19 9f 86 b6 .......m7....... 0070 bd 36 09 4e ce 18 1d 95 85 6d be 92 b8 85 bd 0a .6.N.....m...... 0080 43 3b ab 7f ff 84 34 db 13 13 a7 40 e5 64 67 f5 C;....4....@.dg. 0090 17 55 a2 cf 16 c1 ca e8 45 5a cd 5d bf 25 ab 17 .U......EZ.].%.. 00a0 ba 0b 3f 15 73 e7 c3 f6 cf 3a ea ae 5b dc ea 38 ..?.s....:..[..8 00b0 06 b0 66 91 b4 59 46 aa 8c 79 ec fc 14 40 41 0a ..f..YF..y...@A. 00c0 ac 7c c0 e0 06 4c b3 34 07 97 3e 31 b3 2e 84 ad .|...L.4..>1.... 00d0 d3 2c 46 fc f2 35 13 ad 8c 57 7d c2 d9 6a 11 57 .,F..5...W}..j.W 00e0 c5 18 71 55 0d 14 34 28 ee 16 4f a1 55 78 41 00 ..qU..4(..O.UxA. 00f0 cf a9 93 32 a7 90 ...2.. Frame 5 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:31:58.552273000 Time delta from previous packet: 3.134627000 seconds Time since reference or first frame: 3.303244000 seconds Frame Number: 5 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0003 (3) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c9a [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0xc5af33cd Sequence: 1 Data (92 bytes) 0000 00 0c 29 96 d4 43 00 06 b1 33 80 5d 08 00 45 00 ..)..C...3.]..E. 0010 00 78 00 03 00 00 ff 32 7c 9a a5 e3 f9 68 a5 e3 .x.....2|....h.. 0020 f9 86 c5 af 33 cd 00 00 00 01 b1 31 e8 ba fa 78 ....3......1...x 0030 e8 b8 05 87 17 0a 97 ce 7a bc 72 f4 5b 48 fd 24 ........z.r.[H.$ 0040 30 b1 a8 8a 82 52 5a 60 36 5e 23 3a e5 8f 75 b8 0....RZ`6^#:..u. 0050 ee b9 7b 14 64 ee 3b 7d d0 6d 88 bb 41 78 90 9a ..{.d.;}.m..Ax.. 0060 45 8a 52 c0 2a 81 67 1f 6f 47 c6 31 3e 71 d7 25 E.R.*.g.oG.1>q.% 0070 7f 9b 90 51 aa 90 59 3a e3 92 47 7d de ea 25 19 ...Q..Y:..G}..%. 0080 77 22 9a f8 90 f5 w".... Frame 6 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:31:58.552275000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 3.303246000 seconds Frame Number: 6 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x8f00 (36608) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0x6d9d [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.104 (165.227.249.104) Encapsulating Security Payload SPI: 0x638401ba Sequence: 1 Data (92 bytes) 0000 00 06 b1 33 80 5d 00 0c 29 96 d4 43 08 00 45 00 ...3.]..)..C..E. 0010 00 78 8f 00 00 00 7f 32 6d 9d a5 e3 f9 86 a5 e3 .x.....2m....... 0020 f9 68 63 84 01 ba 00 00 00 01 04 02 e0 9c f3 a4 .hc............. 0030 8e 00 d1 4b 70 bf c9 d4 2a 35 d4 1c 03 48 3d 27 ...Kp...*5...H=' 0040 5a c2 54 c7 87 30 07 27 0f d0 05 c1 e0 c4 d9 40 Z.T..0.'.......@ 0050 c3 69 22 01 c0 0b a7 3e c8 34 27 d6 c9 41 37 60 .i"....>.4'..A7` 0060 ad d5 45 13 2d fd 6c c3 5b 40 ac ca a0 3e 9b 5d ..E.-.l.[@...>.] 0070 7d 75 9f 50 00 40 34 fb 26 ce 47 af 9e 98 f4 f7 }u.P.@4.&.G..... 0080 ba ab 6d 16 13 9d ..m... Frame 7 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:31:59.328123000 Time delta from previous packet: 0.775848000 seconds Time since reference or first frame: 4.079094000 seconds Frame Number: 7 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0004 (4) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c99 [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0xc5af33cd Sequence: 2 Data (92 bytes) 0000 00 0c 29 96 d4 43 00 06 b1 33 80 5d 08 00 45 00 ..)..C...3.]..E. 0010 00 78 00 04 00 00 ff 32 7c 99 a5 e3 f9 68 a5 e3 .x.....2|....h.. 0020 f9 86 c5 af 33 cd 00 00 00 02 da 14 7b d5 93 22 ....3.......{.." 0030 a0 ba da 02 b0 ba 25 ef 06 61 16 1c 23 fc 71 e3 ......%..a..#.q. 0040 73 d0 a4 80 3e a7 98 4a 34 a9 f0 78 e4 a1 01 66 s...>..J4..x...f 0050 9c 26 8b 83 90 61 65 98 4c ab b1 bb 2b 9d 50 42 .&...ae.L...+.PB 0060 85 1a 39 ca 94 45 0b c7 b5 68 51 86 87 37 50 a9 ..9..E...hQ..7P. 0070 96 a9 03 cf 82 a0 82 3c 07 f0 84 0f 6f be c6 4e .......<....o..N 0080 82 8c af f5 1c db ...... Frame 8 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:31:59.330630000 Time delta from previous packet: 0.002507000 seconds Time since reference or first frame: 4.081601000 seconds Frame Number: 8 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x9100 (37120) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0x6b9d [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.104 (165.227.249.104) Encapsulating Security Payload SPI: 0x638401ba Sequence: 2 Data (92 bytes) 0000 00 06 b1 33 80 5d 00 0c 29 96 d4 43 08 00 45 00 ...3.]..)..C..E. 0010 00 78 91 00 00 00 7f 32 6b 9d a5 e3 f9 86 a5 e3 .x.....2k....... 0020 f9 68 63 84 01 ba 00 00 00 02 04 02 e0 9c f3 a4 .hc............. 0030 8e 00 d1 4b 70 bf c9 d4 2a 35 b7 b2 3b 9f 28 54 ...Kp...*5..;.(T 0040 59 de 82 0e 1a 6b 7c 20 01 5d 89 a2 ef 93 0f 67 Y....k| .].....g 0050 1c 07 f5 0d 92 d8 14 d1 23 25 ba 2a db 0c 53 a4 ........#%.*..S. 0060 8a 26 40 db 6f 57 4b 1d 30 be 98 6e a8 83 a5 6d .&@.oWK.0..n...m 0070 24 c9 45 32 c8 0b 6d 94 39 90 12 7e 84 53 70 7d $.E2..m.9..~.Sp} 0080 20 ea 4d 98 e7 29 .M..)