Frame 1 (429 bytes on wire, 429 bytes captured) Arrival Time: Nov 24, 2006 14:30:43.007153000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 429 bytes Capture Length: 429 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 415 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfaa9 [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.104 (165.227.249.104) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 395 Checksum: 0x6ab0 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x74BAA6967487F0AB Responder cookie: 0x0000000000000000 Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000000 Length: 387 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: Notification (41) 0... .... = Not critical Length: 119 Nonce Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: ISAKMP (1) SPI size: 0 Message type: NAT_DETECTION_DESTINATION_IP (16389) Notification Data Notification payload Next payload: RESERVED (0) 0... .... = Not critical Length: 28 Protocol ID: ISAKMP (1) SPI size: 0 Message type: NAT_DETECTION_SOURCE_IP (16388) Notification Data 0000 00 06 b1 33 80 5d 00 30 48 41 4f 4b 08 00 45 00 ...3.].0HAOK..E. 0010 01 9f 00 00 40 00 40 11 fa a9 a5 e3 f9 74 a5 e3 ....@.@......t.. 0020 f9 68 01 f4 01 f4 01 8b 6a b0 74 ba a6 96 74 87 .h......j.t...t. 0030 f0 ab 00 00 00 00 00 00 00 00 21 20 22 08 00 00 ..........! "... 0040 00 00 00 00 01 83 22 00 00 30 00 00 00 2c 01 01 ......"..0...,.. 0050 00 04 03 00 00 0c 01 00 00 0c 80 0e 00 80 03 00 ................ 0060 00 08 03 00 00 02 03 00 00 08 02 00 00 02 00 00 ................ 0070 00 08 04 00 00 02 28 00 00 88 00 02 00 00 fe 47 ......(........G 0080 ac 23 eb 49 ce 53 81 18 16 b5 ac b8 59 e1 31 ad .#.I.S......Y.1. 0090 23 a3 b9 48 91 d5 2d 21 13 86 a4 f5 06 5e 23 b3 #..H..-!.....^#. 00a0 1b 52 04 41 4d 92 bb 6f 81 ed a4 f8 12 6e 95 98 .R.AM..o.....n.. 00b0 b3 d2 7d 6c cb f7 d6 d7 5a ee 3b de 36 a8 bd 7a ..}l....Z.;.6..z 00c0 3f cc 17 55 88 ca 2a c4 53 7d 7b 43 6a 48 bb 78 ?..U..*.S}{CjH.x 00d0 74 54 46 d8 30 05 46 9f 83 84 3c 60 79 00 20 a5 tTF.0.F...<`y. . 00e0 5a 7a 2b 7c dd c8 35 1d e0 d5 a6 85 4b 75 e8 3f Zz+|..5.....Ku.? 00f0 6a 82 f3 ac 2a bf 77 62 32 49 cc f1 4b 60 29 00 j...*.wb2I..K`). 0100 00 77 9e b4 cd 8d 62 68 0d 31 ee 1a 11 9d 76 d8 .w....bh.1....v. 0110 f6 e0 f5 bf ee cd d8 38 da 5d 69 16 91 47 fc aa .......8.]i..G.. 0120 9d 9d 92 18 52 b6 a9 88 61 a4 66 13 c2 62 1e 03 ....R...a.f..b.. 0130 7a 9d 28 5b bb fe 1c 3b 53 f0 c4 43 c0 8a 5b 96 z.([...;S..C..[. 0140 b0 72 1f b0 f4 93 9d 0a 06 b5 f6 d4 eb bb e7 26 .r.............& 0150 20 01 fd 8f bb 68 f0 95 ca 8a b4 dc e7 70 f0 ed ....h.......p.. 0160 5d 5a 91 53 44 22 0b e5 92 e7 a5 1a 6d 6f 1b 17 ]Z.SD"......mo.. 0170 21 76 ce f7 11 29 00 00 1c 01 00 40 05 5c 81 e4 !v...).....@.\.. 0180 f0 ce 83 a4 a3 13 76 6e 2b 99 12 72 68 0c 70 a6 ......vn+..rh.p. 0190 fa 00 00 00 1c 01 00 40 04 41 6f 7b 0b f6 88 95 .......@.Ao{.... 01a0 05 f0 ba 86 29 ff 0d 4e e0 ce e4 0d 7c ....)..N....| Frame 2 (358 bytes on wire, 358 bytes captured) Arrival Time: Nov 24, 2006 14:30:43.300588000 Time delta from previous packet: 0.293435000 seconds Time since reference or first frame: 0.293435000 seconds Frame Number: 2 Packet Length: 358 bytes Capture Length: 358 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 344 Identification: 0x0003 (3) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7bed [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.116 (165.227.249.116) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 324 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x74BAA6967487F0AB Responder cookie: 0xFD24644DB4036B0E Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000000 Length: 316 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: Notification (41) 0... .... = Not critical Length: 24 Nonce Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: RESERVED (0) SPI size: 0 Message type: NAT_DETECTION_SOURCE_IP (16388) Notification Data Notification payload Next payload: Vendor ID (43) 0... .... = Not critical Length: 28 Protocol ID: RESERVED (0) SPI size: 0 Message type: NAT_DETECTION_DESTINATION_IP (16389) Notification Data Vendor ID payload Next payload: RESERVED (0) 0... .... = Not critical Length: 24 Vendor ID: unknown vendor ID: 0x2A6775D0AD2AA7887C33FE1D68BAF308966F0001 0000 00 30 48 41 4f 4b 00 06 b1 33 80 5d 08 00 45 00 .0HAOK...3.]..E. 0010 01 58 00 03 00 00 ff 11 7b ed a5 e3 f9 68 a5 e3 .X......{....h.. 0020 f9 74 01 f4 01 f4 01 44 00 00 74 ba a6 96 74 87 .t.....D..t...t. 0030 f0 ab fd 24 64 4d b4 03 6b 0e 21 20 22 20 00 00 ...$dM..k.! " .. 0040 00 00 00 00 01 3c 22 00 00 30 00 00 00 2c 01 01 .....<"..0...,.. 0050 00 04 03 00 00 0c 01 00 00 0c 80 0e 00 80 03 00 ................ 0060 00 08 03 00 00 02 03 00 00 08 02 00 00 02 00 00 ................ 0070 00 08 04 00 00 02 28 00 00 88 00 02 00 00 64 e0 ......(.......d. 0080 e8 76 80 4e 5b bc ca 60 be 38 f4 a0 42 95 f4 0d .v.N[..`.8..B... 0090 07 57 ba 58 e8 94 bf d2 82 9b ae 9a c0 22 64 e8 .W.X........."d. 00a0 1e f2 0f 16 a7 8b f3 8a ba 60 a3 8e 8d ff d1 48 .........`.....H 00b0 1d 4f 73 ba 19 55 81 4d ba cf c6 4f 22 fc a5 04 .Os..U.M...O"... 00c0 52 4c d0 42 9f 6e 33 8f f0 47 dd f5 ed 8d de 0e RL.B.n3..G...... 00d0 50 78 d7 cc cb 28 d9 f6 35 45 01 c8 c5 69 9b 11 Px...(..5E...i.. 00e0 5b 71 a6 de bd bc 64 36 e9 cb 67 a6 6d dd 82 04 [q....d6..g.m... 00f0 8f f5 bc 0d 9d af 0d 86 ae 58 b7 b9 79 f1 29 00 .........X..y.). 0100 00 18 fe 46 e7 20 6d 91 83 95 5c d1 a9 45 43 d6 ...F. m...\..EC. 0110 a9 8c 54 16 6c 9a 29 00 00 1c 00 00 40 04 88 24 ..T.l.).....@..$ 0120 ab ca 91 8c cd ea 1b b0 5e b3 7d 07 c0 61 eb 5f ........^.}..a._ 0130 86 42 2b 00 00 1c 00 00 40 05 23 0c 20 9e 00 b3 .B+.....@.#. ... 0140 40 2b 71 24 ae 5c a8 61 aa 01 14 19 65 f6 00 00 @+q$.\.a....e... 0150 00 18 2a 67 75 d0 ad 2a a7 88 7c 33 fe 1d 68 ba ..*gu..*..|3..h. 0160 f3 08 96 6f 00 01 ...o.. Frame 3 (310 bytes on wire, 310 bytes captured) Arrival Time: Nov 24, 2006 14:30:43.316219000 Time delta from previous packet: 0.015631000 seconds Time since reference or first frame: 0.309066000 seconds Frame Number: 3 Packet Length: 310 bytes Capture Length: 310 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 296 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb20 [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.104 (165.227.249.104) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 276 Checksum: 0xc44a [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x74BAA6967487F0AB Responder cookie: 0xFD24644DB4036B0E Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000001 Length: 268 Encrypted payload Next payload: Identification - I (35) 0... .... = Not critical Length: 240 Initialization Vector: 0xF9970C1B Encrypted Data 0000 00 06 b1 33 80 5d 00 30 48 41 4f 4b 08 00 45 00 ...3.].0HAOK..E. 0010 01 28 00 00 40 00 40 11 fb 20 a5 e3 f9 74 a5 e3 .(..@.@.. ...t.. 0020 f9 68 01 f4 01 f4 01 14 c4 4a 74 ba a6 96 74 87 .h.......Jt...t. 0030 f0 ab fd 24 64 4d b4 03 6b 0e 2e 20 23 08 00 00 ...$dM..k.. #... 0040 00 01 00 00 01 0c 23 00 00 f0 f9 97 0c 1b b3 7f ......#......... 0050 76 fd 11 5c 5b e2 b6 bb 11 d9 5e 34 13 8e 79 1c v..\[.....^4..y. 0060 e3 03 b2 f1 86 9c 4b a7 dc de 74 62 f2 bc 91 80 ......K...tb.... 0070 0b 05 59 6c 01 b5 4e 91 a0 29 e7 c4 6a 26 f6 ae ..Yl..N..)..j&.. 0080 b4 e6 66 3f cb 78 c5 9c 91 94 8b 7f a1 49 c4 1b ..f?.x.......I.. 0090 9e b7 54 22 df 81 d9 e8 08 88 90 19 0d 09 8e 8a ..T"............ 00a0 d8 81 7f 1e e1 71 41 42 76 b5 db 36 e8 42 5c 16 .....qABv..6.B\. 00b0 52 89 d3 cc d9 59 cb f9 85 01 d2 46 3a 11 d6 ae R....Y.....F:... 00c0 f0 92 24 4f a8 37 4a 33 45 1f ed 33 66 22 83 ba ..$O.7J3E..3f".. 00d0 b9 a5 a6 35 6d dd c2 c3 81 03 0e 42 c1 1d a9 e7 ...5m......B.... 00e0 e8 a1 41 76 c8 37 63 50 a4 da 23 21 64 d6 2f a2 ..Av.7cP..#!d./. 00f0 0a 1f f1 ea 7a 2a f3 6c 78 a7 cc 1c e4 c6 ea 23 ....z*.lx......# 0100 f9 d5 e5 4c bc 8a f4 1f 4e 4f 17 6d 61 61 ed 4a ...L....NO.maa.J 0110 75 9d f4 96 cf 0f b7 b8 75 b0 4b d4 cd c9 cb 6b u.......u.K....k 0120 6b 72 ba 54 ef a2 49 d5 a3 5e 87 51 f0 85 30 d4 kr.T..I..^.Q..0. 0130 aa 59 ac 92 90 61 .Y...a Frame 4 (246 bytes on wire, 246 bytes captured) Arrival Time: Nov 24, 2006 14:30:43.321493000 Time delta from previous packet: 0.005274000 seconds Time since reference or first frame: 0.314340000 seconds Frame Number: 4 Packet Length: 246 bytes Capture Length: 246 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 232 Identification: 0x0004 (4) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7c5c [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.116 (165.227.249.116) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 212 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x74BAA6967487F0AB Responder cookie: 0xFD24644DB4036B0E Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000001 Length: 204 Encrypted payload Next payload: Identification - R (36) 0... .... = Not critical Length: 176 Initialization Vector: 0x8143A770 Encrypted Data 0000 00 30 48 41 4f 4b 00 06 b1 33 80 5d 08 00 45 00 .0HAOK...3.]..E. 0010 00 e8 00 04 00 00 ff 11 7c 5c a5 e3 f9 68 a5 e3 ........|\...h.. 0020 f9 74 01 f4 01 f4 00 d4 00 00 74 ba a6 96 74 87 .t........t...t. 0030 f0 ab fd 24 64 4d b4 03 6b 0e 2e 20 23 20 00 00 ...$dM..k.. # .. 0040 00 01 00 00 00 cc 24 00 00 b0 81 43 a7 70 a1 98 ......$....C.p.. 0050 13 07 fa 80 48 54 11 0c 2a cf ca e5 2f b4 3f bc ....HT..*.../.?. 0060 4e c4 63 5e ab 65 5c af db 06 76 b8 b6 0f 6c 79 N.c^.e\...v...ly 0070 3b 9c 30 40 a7 d7 00 b3 fc 24 61 b0 15 d6 90 9e ;.0@.....$a..... 0080 95 11 e1 54 c7 97 f9 81 cd fe 9b 73 b5 3c e1 42 ...T.......s.<.B 0090 22 95 35 84 c1 ef 82 53 4b e1 8f f9 f2 64 b7 11 ".5....SK....d.. 00a0 0b 5b f2 38 83 d1 15 0a 2e fc be d8 22 cf b3 2e .[.8........"... 00b0 98 49 22 b5 a6 61 89 c1 d5 c3 3a 74 d8 1e 4d 07 .I"..a....:t..M. 00c0 23 e5 56 09 31 90 d5 0d 34 8d a7 04 18 34 62 06 #.V.1...4....4b. 00d0 54 69 c7 17 7b 1f bb 37 27 8b 82 04 10 aa 18 6c Ti..{..7'......l 00e0 e7 96 c0 07 01 e2 a9 75 bd c6 9a 97 11 2e b2 b9 .......u........ 00f0 6f 7b 4d cf 2a 0d o{M.*. Frame 5 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 24, 2006 14:30:48.520310000 Time delta from previous packet: 5.198817000 seconds Time since reference or first frame: 5.513157000 seconds Frame Number: 5 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0015 (21) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1d9b [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.104 (165.227.249.104) Encapsulating Security Payload SPI: 0xdfbe4b53 Sequence: 1 Data (92 bytes) 0000 00 06 b1 33 80 5d 00 30 48 41 4f 4b 08 00 45 00 ...3.].0HAOK..E. 0010 00 78 00 15 40 00 1e 32 1d 9b a5 e3 f9 74 a5 e3 .x..@..2.....t.. 0020 f9 68 df be 4b 53 00 00 00 01 a9 f5 61 a0 b8 b7 .h..KS......a... 0030 88 b6 cc 28 31 67 67 be f4 d2 99 76 5c 65 56 f8 ...(1gg....v\eV. 0040 64 7f db ed 0f ed 3e 73 04 20 e1 2a 41 89 8e 0a d.....>s. .*A... 0050 12 31 95 be 9a 56 1a 07 e6 34 58 c7 ba 16 e6 85 .1...V...4X..... 0060 be 1d 09 d5 a9 4f e1 47 44 02 ae 57 b6 91 c0 62 .....O.GD..W...b 0070 ce 93 7d 05 6e 40 9a ef 93 6c 34 6b e8 e3 3f 29 ..}.n@...l4k..?) 0080 e6 f4 b6 86 da 43 .....C Frame 6 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 24, 2006 14:30:48.522533000 Time delta from previous packet: 0.002223000 seconds Time since reference or first frame: 5.515380000 seconds Frame Number: 6 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7caf [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.116 (165.227.249.116) Encapsulating Security Payload SPI: 0xe0ad29a0 Sequence: 1 Data (92 bytes) 0000 00 30 48 41 4f 4b 00 06 b1 33 80 5d 08 00 45 00 .0HAOK...3.]..E. 0010 00 78 00 00 00 00 ff 32 7c af a5 e3 f9 68 a5 e3 .x.....2|....h.. 0020 f9 74 e0 ad 29 a0 00 00 00 01 60 94 f3 6b 0a 00 .t..).....`..k.. 0030 db 7b e1 f7 24 86 eb e2 0e 53 c2 16 f3 93 5f 0c .{..$....S...._. 0040 d3 2d 7d 6e 18 c6 e4 8b fa 36 f1 0e 4a 89 cb 34 .-}n.....6..J..4 0050 2e 69 c4 d4 ed 93 ca 7c 19 eb 75 73 93 6b 10 1f .i.....|..us.k.. 0060 94 cc e5 d9 cf 36 85 3d 54 00 c4 c8 19 f5 3f 32 .....6.=T.....?2 0070 58 bc 81 55 a9 3b c9 78 13 2b 58 60 74 a8 d6 e5 X..U.;.x.+X`t... 0080 fc b7 38 74 6d 60 ..8tm` Frame 7 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 24, 2006 14:30:49.507412000 Time delta from previous packet: 0.984879000 seconds Time since reference or first frame: 6.500259000 seconds Frame Number: 7 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0016 (22) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1d9a [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.104 (165.227.249.104) Encapsulating Security Payload SPI: 0xdfbe4b53 Sequence: 2 Data (92 bytes) 0000 00 06 b1 33 80 5d 00 30 48 41 4f 4b 08 00 45 00 ...3.].0HAOK..E. 0010 00 78 00 16 40 00 1e 32 1d 9a a5 e3 f9 74 a5 e3 .x..@..2.....t.. 0020 f9 68 df be 4b 53 00 00 00 02 e5 b4 df 10 69 8d .h..KS........i. 0030 53 2b c3 07 60 cc 2f e3 e9 02 06 58 2a 6f 29 4e S+..`./....X*o)N 0040 da e7 f7 ab 3b 34 f4 2b e0 f7 3c 7b 35 8e 9b 83 ....;4.+..<{5... 0050 80 39 e9 75 d8 a9 a0 86 62 84 8b c7 84 f8 74 57 .9.u....b.....tW 0060 e9 00 eb 00 d2 0f 7a 1f a1 73 30 75 e2 11 8a ec ......z..s0u.... 0070 8e 98 39 c2 14 06 2d 2b b6 af 56 1f a7 32 d9 48 ..9...-+..V..2.H 0080 a0 bd 4c ec ab 12 ..L... Frame 8 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 24, 2006 14:30:49.509063000 Time delta from previous packet: 0.001651000 seconds Time since reference or first frame: 6.501910000 seconds Frame Number: 8 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7cae [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.116 (165.227.249.116) Encapsulating Security Payload SPI: 0xe0ad29a0 Sequence: 2 Data (92 bytes) 0000 00 30 48 41 4f 4b 00 06 b1 33 80 5d 08 00 45 00 .0HAOK...3.]..E. 0010 00 78 00 01 00 00 ff 32 7c ae a5 e3 f9 68 a5 e3 .x.....2|....h.. 0020 f9 74 e0 ad 29 a0 00 00 00 02 f4 15 2a 2a 0b eb .t..).......**.. 0030 d7 50 8a a1 62 0e 5f a3 62 0e ff a3 01 da 60 e1 .P..b._.b.....`. 0040 d3 0d 3a e6 6c 66 8a 62 7e e0 79 b0 7c ce 3b 9c ..:.lf.b~.y.|.;. 0050 74 e3 21 48 de f3 38 c4 c1 54 10 27 18 46 3c 5e t.!H..8..T.'.F<^ 0060 43 f1 4b 74 17 80 56 6f 4f 0f f8 88 cb bd 06 9e C.Kt..VoO....... 0070 27 e7 03 e4 e2 ec b5 61 d0 d9 29 a7 77 cb df 02 '......a..).w... 0080 88 a5 e1 7a 98 89 ...z.. Frame 9 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 24, 2006 14:30:50.456304000 Time delta from previous packet: 0.947241000 seconds Time since reference or first frame: 7.449151000 seconds Frame Number: 9 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0017 (23) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1d99 [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.104 (165.227.249.104) Encapsulating Security Payload SPI: 0xdfbe4b53 Sequence: 3 Data (92 bytes) 0000 00 06 b1 33 80 5d 00 30 48 41 4f 4b 08 00 45 00 ...3.].0HAOK..E. 0010 00 78 00 17 40 00 1e 32 1d 99 a5 e3 f9 74 a5 e3 .x..@..2.....t.. 0020 f9 68 df be 4b 53 00 00 00 03 df b6 6b 5d eb 6d .h..KS......k].m 0030 9b b0 fe ca bd 27 72 1e f4 3c 19 32 58 7b 44 9d .....'r..<.2X{D. 0040 37 0d 1b 89 21 db f1 53 e9 64 c5 4a 95 02 ab 54 7...!..S.d.J...T 0050 d0 70 89 40 1c f9 97 8e 92 7c 47 a3 72 79 1c c3 .p.@.....|G.ry.. 0060 c5 82 3c 10 8a d4 e1 8e 09 9a 40 77 dc 70 aa c3 ..<.......@w.p.. 0070 34 43 4b 6b d6 1f f3 bb 3e 8e f5 0d 67 7b e9 17 4CKk....>...g{.. 0080 6c 4f 74 d0 a3 86 lOt... Frame 10 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 24, 2006 14:30:50.457960000 Time delta from previous packet: 0.001656000 seconds Time since reference or first frame: 7.450807000 seconds Frame Number: 10 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0002 (2) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7cad [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.116 (165.227.249.116) Encapsulating Security Payload SPI: 0xe0ad29a0 Sequence: 3 Data (92 bytes) 0000 00 30 48 41 4f 4b 00 06 b1 33 80 5d 08 00 45 00 .0HAOK...3.]..E. 0010 00 78 00 02 00 00 ff 32 7c ad a5 e3 f9 68 a5 e3 .x.....2|....h.. 0020 f9 74 e0 ad 29 a0 00 00 00 03 e7 07 ab eb 18 ba .t..)........... 0030 f1 4e 4a 07 8f f1 0a 07 cf 50 a3 4a 82 6c c1 55 .NJ......P.J.l.U 0040 02 d8 ce 8e a8 00 88 01 b4 9f e1 b4 fe f2 7c d5 ..............|. 0050 b4 b9 57 7e 2e 8a 47 81 cc 23 63 d6 59 aa ab 4d ..W~..G..#c.Y..M 0060 20 48 c0 bf 49 2c 73 74 08 ae f4 dd 80 ff a2 e9 H..I,st........ 0070 42 5d d3 51 67 f2 f5 cf 7c cf 9d f0 4f ee 8e 9e B].Qg...|...O... 0080 58 75 4c 5c f4 c6 XuL\..