Frame 1 (525 bytes on wire, 525 bytes captured) Arrival Time: Nov 24, 2006 14:02:02.811730000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 525 bytes Capture Length: 525 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 511 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa3a [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.119 (165.227.249.119) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 491 Checksum: 0x0513 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x65AA20340B4BD39D Responder cookie: 0x0000000000000000 Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000000 Length: 483 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: Notification (41) 0... .... = Not critical Length: 215 Nonce Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: ISAKMP (1) SPI size: 0 Message type: NAT_DETECTION_DESTINATION_IP (16389) Notification Data Notification payload Next payload: RESERVED (0) 0... .... = Not critical Length: 28 Protocol ID: ISAKMP (1) SPI size: 0 Message type: NAT_DETECTION_SOURCE_IP (16388) Notification Data 0000 00 0c 29 66 91 21 00 30 48 41 4f 4b 08 00 45 00 ..)f.!.0HAOK..E. 0010 01 ff 00 00 40 00 40 11 fa 3a a5 e3 f9 74 a5 e3 ....@.@..:...t.. 0020 f9 77 01 f4 01 f4 01 eb 05 13 65 aa 20 34 0b 4b .w........e. 4.K 0030 d3 9d 00 00 00 00 00 00 00 00 21 20 22 08 00 00 ..........! "... 0040 00 00 00 00 01 e3 22 00 00 30 00 00 00 2c 01 01 ......"..0...,.. 0050 00 04 03 00 00 0c 01 00 00 0c 80 0e 00 80 03 00 ................ 0060 00 08 03 00 00 02 03 00 00 08 02 00 00 02 00 00 ................ 0070 00 08 04 00 00 02 28 00 00 88 00 02 00 00 e2 c6 ......(......... 0080 bd a2 f3 94 40 4d c5 9e 69 4e 25 44 e6 47 76 9e ....@M..iN%D.Gv. 0090 bc 5d 59 f5 b3 cd b1 9b ac 74 15 32 83 49 66 92 .]Y......t.2.If. 00a0 c3 66 c3 a9 6c 0d 73 34 76 e5 61 70 39 f4 28 98 .f..l.s4v.ap9.(. 00b0 74 cd 47 3e ae f6 55 98 e2 b0 93 a1 82 da 12 82 t.G>..U......... 00c0 59 7b d0 f5 81 11 8f 42 49 d5 83 c5 a8 e7 87 c9 Y{.....BI....... 00d0 31 e9 c7 57 a4 29 a1 1e 2b da ad 95 30 08 98 aa 1..W.)..+...0... 00e0 bd 2f 20 f2 34 cb 09 ef 79 56 6b b5 ee 38 45 be ./ .4...yVk..8E. 00f0 e0 91 45 8f a4 41 ef e5 78 c6 52 5a 2f 2b 29 00 ..E..A..x.RZ/+). 0100 00 d7 00 e0 8f 81 77 41 87 2e d7 8d f4 2f ac d2 ......wA...../.. 0110 a5 48 8f 0a 9f 10 c1 02 72 be f6 d8 85 52 41 e0 .H......r....RA. 0120 2d c5 2d 65 4c 49 66 28 4b 89 79 74 ff cb a6 c8 -.-eLIf(K.yt.... 0130 6f 60 b0 36 57 df 9e 80 f4 df a5 18 3c f4 f2 d1 o`.6W.......<... 0140 3f e5 a2 83 17 62 d8 74 70 8d 1b 6b 6a 6a e4 07 ?....b.tp..kjj.. 0150 24 58 fd cf b1 73 72 66 bd ff 5d 54 fc 41 f3 e3 $X...srf..]T.A.. 0160 f8 bc e7 45 f3 06 0d 07 d7 03 9f 75 de 58 0d 9c ...E.......u.X.. 0170 c3 5c 99 30 33 a3 07 fa 76 7b 8f 45 d8 44 54 9c .\.03...v{.E.DT. 0180 5b 58 e5 2b 1f e8 5c c3 76 b2 46 21 a8 e9 94 b8 [X.+..\.v.F!.... 0190 6b 74 bc 62 21 1d 90 46 9d 7e 52 66 54 d2 56 30 kt.b!..F.~RfT.V0 01a0 32 98 b9 ee cb 30 22 e2 8a 8b 05 61 cd a9 1c a6 2....0"....a.... 01b0 2e de 7c d9 d9 7e af 27 c7 8e 8f c6 36 3d d3 0a ..|..~.'....6=.. 01c0 3d ec 72 bf fb 53 84 ff f1 a8 ac 6a a8 d7 72 2f =.r..S.....j..r/ 01d0 b1 4f a6 6f 8d 29 00 00 1c 01 00 40 05 a3 40 8a .O.o.).....@..@. 01e0 70 19 c0 04 f3 f6 33 3f 4e e6 99 13 d2 c5 29 3c p.....3?N.....)< 01f0 d2 00 00 00 1c 01 00 40 04 43 60 d4 aa e9 e2 b7 .......@.C`..... 0200 bd 36 bd ad 85 a2 fc 23 1c 99 1e 39 17 .6.....#...9. Frame 2 (394 bytes on wire, 394 bytes captured) Arrival Time: Nov 24, 2006 14:02:02.849153000 Time delta from previous packet: 0.037423000 seconds Time since reference or first frame: 0.037423000 seconds Frame Number: 2 Packet Length: 394 bytes Capture Length: 394 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 380 Identification: 0x1000 (4096) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xeabd [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.116 (165.227.249.116) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 360 Checksum: 0xe067 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x65AA20340B4BD39D Responder cookie: 0x5BD2D042A27E6AB9 Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000000 Length: 352 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: Notification (41) 0... .... = Not critical Length: 36 Nonce Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: RESERVED (0) SPI size: 0 Message type: NAT_DETECTION_SOURCE_IP (16388) Notification Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: RESERVED (0) SPI size: 0 Message type: NAT_DETECTION_DESTINATION_IP (16389) Notification Data Notification payload Next payload: Vendor ID (43) 0... .... = Not critical Length: 8 Protocol ID: ISAKMP (1) SPI size: 0 Message type: HTTP_CERT_LOOKUP_SUPPORTED (16392) Vendor ID payload Next payload: Vendor ID (43) 0... .... = Not critical Length: 20 Vendor ID: unknown vendor ID: 0xF758F22668750F03B08DF6EBE1D00300 Vendor ID payload Next payload: RESERVED (0) 0... .... = Not critical Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F 0000 00 30 48 41 4f 4b 00 0c 29 66 91 21 08 00 45 00 .0HAOK..)f.!..E. 0010 01 7c 10 00 00 00 80 11 ea bd a5 e3 f9 77 a5 e3 .|...........w.. 0020 f9 74 01 f4 01 f4 01 68 e0 67 65 aa 20 34 0b 4b .t.....h.ge. 4.K 0030 d3 9d 5b d2 d0 42 a2 7e 6a b9 21 20 22 20 00 00 ..[..B.~j.! " .. 0040 00 00 00 00 01 60 22 00 00 30 00 00 00 2c 01 01 .....`"..0...,.. 0050 00 04 03 00 00 0c 01 00 00 0c 80 0e 00 80 03 00 ................ 0060 00 08 02 00 00 02 03 00 00 08 03 00 00 02 00 00 ................ 0070 00 08 04 00 00 02 28 00 00 88 00 02 00 00 f3 dd ......(......... 0080 df ba bd 75 0b 90 e8 b4 65 a3 34 53 d8 c1 eb 85 ...u....e.4S.... 0090 51 25 ca 23 97 7f c1 e6 f0 7b 94 17 90 4e da 3e Q%.#.....{...N.> 00a0 1f cd 89 21 b9 3a ff 97 78 55 bc ef 8a 18 90 e7 ...!.:..xU...... 00b0 2c cb 54 60 13 52 25 79 42 58 6c bf 58 39 e8 4d ,.T`.R%yBXl.X9.M 00c0 82 dc c7 85 66 c3 8a 09 47 0d 87 1b bb b3 a7 38 ....f...G......8 00d0 3e db b7 a3 b0 ea be ac da e9 3c c8 d8 35 ab d9 >.........<..5.. 00e0 6b 25 e3 6a c0 2c b1 e3 09 6a 0d fc fb b3 74 63 k%.j.,...j....tc 00f0 d2 18 5a 39 6a 27 82 a3 ca 87 98 00 dd 1c 29 00 ..Z9j'........). 0100 00 24 df c5 bf 69 90 e3 3f bf 07 95 d0 b0 85 e4 .$...i..?....... 0110 fc ac 09 f0 34 e0 bc d3 10 4c f0 0c af e6 ea 14 ....4....L...... 0120 35 72 29 00 00 1c 00 00 40 04 f1 51 80 0c 0c 19 5r).....@..Q.... 0130 0f 16 ab 31 39 05 60 2c 2f 76 1f 3e 12 3d 29 00 ...19.`,/v.>.=). 0140 00 1c 00 00 40 05 ba fc 3c fc 61 6e 62 85 e5 76 ....@...<.anb..v 0150 bc 1e 95 d0 af 0f 29 23 b3 71 2b 00 00 08 01 00 ......)#.q+..... 0160 40 08 2b 00 00 14 f7 58 f2 26 68 75 0f 03 b0 8d @.+....X.&hu.... 0170 f6 eb e1 d0 03 00 00 00 00 14 4a 13 1c 81 07 03 ..........J..... 0180 58 45 5c 57 28 f2 0e 95 45 2f XE\W(...E/ Frame 3 (310 bytes on wire, 310 bytes captured) Arrival Time: Nov 24, 2006 14:02:02.849155000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.037425000 seconds Frame Number: 3 Packet Length: 310 bytes Capture Length: 310 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 296 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb11 [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.119 (165.227.249.119) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 276 Checksum: 0x126b [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x65AA20340B4BD39D Responder cookie: 0x5BD2D042A27E6AB9 Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000001 Length: 268 Encrypted payload Next payload: Identification - I (35) 0... .... = Not critical Length: 240 Initialization Vector: 0xF0A46629 Encrypted Data 0000 00 0c 29 66 91 21 00 30 48 41 4f 4b 08 00 45 00 ..)f.!.0HAOK..E. 0010 01 28 00 00 40 00 40 11 fb 11 a5 e3 f9 74 a5 e3 .(..@.@......t.. 0020 f9 77 01 f4 01 f4 01 14 12 6b 65 aa 20 34 0b 4b .w.......ke. 4.K 0030 d3 9d 5b d2 d0 42 a2 7e 6a b9 2e 20 23 08 00 00 ..[..B.~j.. #... 0040 00 01 00 00 01 0c 23 00 00 f0 f0 a4 66 29 fb 4f ......#.....f).O 0050 35 ae 23 5b 5e 40 41 3f 9b 24 a3 5d d6 63 47 ce 5.#[^@A?.$.].cG. 0060 77 41 96 fa 2f b1 77 5e 52 fe 60 bf 38 ed 05 22 wA../.w^R.`.8.." 0070 5d 77 99 60 f7 3a 62 e1 93 d3 f1 f1 62 35 3e cc ]w.`.:b.....b5>. 0080 0f 35 b2 39 ad b3 b0 5e df cb 70 89 71 02 0c 6a .5.9...^..p.q..j 0090 49 61 bb 4a b1 b3 ea d1 40 44 4c f6 fc 8c 16 9a Ia.J....@DL..... 00a0 1e 48 27 7f f5 21 c3 b3 a5 d6 35 54 76 96 03 b4 .H'..!....5Tv... 00b0 56 2d b2 5a 7f 69 e2 b5 38 fb 14 43 0a a6 f0 f6 V-.Z.i..8..C.... 00c0 0f d1 3e 0e 1d 34 15 21 53 7a b5 a6 30 e4 85 d8 ..>..4.!Sz..0... 00d0 ab db 4b a3 f9 c9 f4 39 a7 9a 41 51 71 65 4a 09 ..K....9..AQqeJ. 00e0 bb bb 54 ec e7 3c 7d f6 95 93 3a 35 30 cf 01 59 ..T..<}...:50..Y 00f0 1b 1a 14 0b a3 ec f1 d5 89 48 73 8d bb 0d ec 54 .........Hs....T 0100 8d 81 10 af 87 b2 c0 f8 d8 f1 c9 c4 68 bb dc 05 ............h... 0110 90 f1 8a dc 85 0e 9d 48 a6 c3 db 18 ac c9 38 46 .......H......8F 0120 52 4d 28 07 2f 16 49 52 93 b4 db 03 f9 ec 57 31 RM(./.IR......W1 0130 97 bb 87 7e a7 da ...~.. Frame 4 (262 bytes on wire, 262 bytes captured) Arrival Time: Nov 24, 2006 14:02:02.853018000 Time delta from previous packet: 0.003863000 seconds Time since reference or first frame: 0.041288000 seconds Frame Number: 4 Packet Length: 262 bytes Capture Length: 262 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x1001 (4097) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xeb40 [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.116 (165.227.249.116) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0xa41f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x65AA20340B4BD39D Responder cookie: 0x5BD2D042A27E6AB9 Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000001 Length: 220 Encrypted payload Next payload: Identification - R (36) 0... .... = Not critical Length: 192 Initialization Vector: 0x7DF12E37 Encrypted Data 0000 00 30 48 41 4f 4b 00 0c 29 66 91 21 08 00 45 00 .0HAOK..)f.!..E. 0010 00 f8 10 01 00 00 80 11 eb 40 a5 e3 f9 77 a5 e3 .........@...w.. 0020 f9 74 01 f4 01 f4 00 e4 a4 1f 65 aa 20 34 0b 4b .t........e. 4.K 0030 d3 9d 5b d2 d0 42 a2 7e 6a b9 2e 20 23 20 00 00 ..[..B.~j.. # .. 0040 00 01 00 00 00 dc 24 00 00 c0 7d f1 2e 37 22 ec ......$...}..7". 0050 80 9c 30 2a 48 42 30 12 ec 33 5e f9 40 bd 6a d2 ..0*HB0..3^.@.j. 0060 58 da 08 1b 32 8a 3e 65 1c 08 7f a7 7d 59 7a b4 X...2.>e....}Yz. 0070 ce 10 4f 28 41 aa 1f d0 6a 0b 26 b5 62 fe 23 b7 ..O(A...j.&.b.#. 0080 68 ed 1a f9 92 9b c9 37 1b 6c 8c 9a 48 7c 1f 7c h......7.l..H|.| 0090 80 69 b4 0b b9 67 3d c1 2f 38 b8 de 33 5b 71 ea .i...g=./8..3[q. 00a0 ae 7b 0b fa fc e4 8a eb 33 a4 fe 4d d7 de a7 63 .{......3..M...c 00b0 43 35 e7 38 b1 03 3c 7e 22 61 62 72 21 c6 60 d2 C5.8..<~"abr!.`. 00c0 e3 80 f7 76 8b d5 ea a3 07 71 3a 41 e6 a2 d3 f2 ...v.....q:A.... 00d0 e9 2c 59 d1 0f da dd 9e 13 8e 92 dc d3 ea a9 95 .,Y............. 00e0 22 5b 43 d9 2a bf 70 68 b4 f8 8b be ba ab 67 51 "[C.*.ph......gQ 00f0 57 ea 2c 42 6f 51 a3 d9 5a ec 94 c0 14 fa 99 b8 W.,BoQ..Z....... 0100 f4 b1 66 e8 c4 b7 ..f... Frame 5 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 24, 2006 14:02:08.001582000 Time delta from previous packet: 5.148564000 seconds Time since reference or first frame: 5.189852000 seconds Frame Number: 5 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0007 (7) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1d9a [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.119 (165.227.249.119) Encapsulating Security Payload SPI: 0x20be4caa Sequence: 1 Data (92 bytes) 0000 00 0c 29 66 91 21 00 30 48 41 4f 4b 08 00 45 00 ..)f.!.0HAOK..E. 0010 00 78 00 07 40 00 1e 32 1d 9a a5 e3 f9 74 a5 e3 .x..@..2.....t.. 0020 f9 77 20 be 4c aa 00 00 00 01 ac 25 2a 89 8f 5b .w .L......%*..[ 0030 e7 73 a9 13 58 fd 59 51 6e eb e3 be 65 9f da 55 .s..X.YQn...e..U 0040 eb 1a b8 bc 89 a6 1f 9e d3 fd 62 42 42 30 e6 e9 ..........bBB0.. 0050 36 90 f6 37 54 6f e8 31 cc 77 dd ea 6d ea 64 34 6..7To.1.w..m.d4 0060 31 ae 41 1c dc 5b 3f c1 4a 92 3f 1c 73 01 c6 8d 1.A..[?.J.?.s... 0070 ea e6 e7 bb 88 00 7b 79 36 80 a6 2a 17 76 b8 0e ......{y6..*.v.. 0080 18 4e bf 85 ca 67 .N...g Frame 6 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 24, 2006 14:02:08.011188000 Time delta from previous packet: 0.009606000 seconds Time since reference or first frame: 5.199458000 seconds Frame Number: 6 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0004 (4) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b9c [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.116 (165.227.249.116) Encapsulating Security Payload SPI: 0x5d5d99cc Sequence: 1 Data (92 bytes) 0000 00 30 48 41 4f 4b 00 0c 29 66 91 21 08 00 45 00 .0HAOK..)f.!..E. 0010 00 78 00 04 00 00 f0 32 8b 9c a5 e3 f9 77 a5 e3 .x.....2.....w.. 0020 f9 74 5d 5d 99 cc 00 00 00 01 39 a8 93 cc 9c 0e .t]]......9..... 0030 73 9b 50 6c 3e 33 5b 04 30 15 d5 27 f2 ee 2b b2 s.Pl>3[.0..'..+. 0040 c6 b5 02 8e c4 54 d7 ac 62 b4 4c 62 50 77 0e 46 .....T..b.LbPw.F 0050 97 32 2b c5 3c d3 cf 00 bd d1 20 76 99 8d 25 8b .2+.<..... v..%. 0060 aa ff 78 ed 50 0d e0 1c 93 bf 57 79 89 f9 56 99 ..x.P.....Wy..V. 0070 67 91 51 ad c9 57 7c 83 40 d0 c1 00 e6 2a 5e 07 g.Q..W|.@....*^. 0080 c6 6d b2 ee 71 c0 .m..q. Frame 7 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 24, 2006 14:02:09.029466000 Time delta from previous packet: 1.018278000 seconds Time since reference or first frame: 6.217736000 seconds Frame Number: 7 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0008 (8) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1d99 [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.119 (165.227.249.119) Encapsulating Security Payload SPI: 0x20be4caa Sequence: 2 Data (92 bytes) 0000 00 0c 29 66 91 21 00 30 48 41 4f 4b 08 00 45 00 ..)f.!.0HAOK..E. 0010 00 78 00 08 40 00 1e 32 1d 99 a5 e3 f9 74 a5 e3 .x..@..2.....t.. 0020 f9 77 20 be 4c aa 00 00 00 02 ee 61 b7 5c 4f 12 .w .L......a.\O. 0030 1a a8 b2 8e 1c 3f d2 a9 c9 74 91 80 b8 8d bb 51 .....?...t.....Q 0040 99 23 dd 13 79 12 a7 62 a5 a7 d2 13 cd 3f 3c 49 .#..y..b.....?.D.. 0050 56 68 2a 02 d7 c8 45 38 c8 c2 df 62 cb ce 98 d2 Vh*...E8...b.... 0060 50 95 09 8a 7d f0 7c 7a 0d b9 34 5c 98 78 97 b5 P...}.|z..4\.x.. 0070 af 0b ed e2 33 dd d3 35 7b 79 92 1f 48 03 7b f7 ....3..5{y..H.{. 0080 a0 68 da e9 9a 4f .h...O Frame 10 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 24, 2006 14:02:10.033121000 Time delta from previous packet: 0.000384000 seconds Time since reference or first frame: 7.221391000 seconds Frame Number: 10 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0006 (6) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b9a [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.116 (165.227.249.116) Encapsulating Security Payload SPI: 0x5d5d99cc Sequence: 3 Data (92 bytes) 0000 00 30 48 41 4f 4b 00 0c 29 66 91 21 08 00 45 00 .0HAOK..)f.!..E. 0010 00 78 00 06 00 00 f0 32 8b 9a a5 e3 f9 77 a5 e3 .x.....2.....w.. 0020 f9 74 5d 5d 99 cc 00 00 00 03 ee cb b9 40 c0 d9 .t]].........@.. 0030 a9 fb 09 f4 6c bf 71 aa 7c 30 77 32 ed 13 a4 6b ....l.q.|0w2...k 0040 7e 88 18 f7 4f 37 d6 2a c4 0c 12 e7 d4 08 c8 2c ~...O7.*......., 0050 33 03 c0 94 eb 0a a0 fd fd b4 3a 01 74 2f 21 8e 3.........:.t/!. 0060 ac 56 0c db d2 75 b7 5a 46 d6 c1 da 59 4c e6 9f .V...u.ZF...YL.. 0070 dc 38 11 bc 6e f6 4c fa ca c4 8a f6 76 7a 94 a6 .8..n.L.....vz.. 0080 8b 0a 96 d3 4c b4 ....L.