Frame 1 (364 bytes on wire, 364 bytes captured) Arrival Time: Nov 29, 2006 11:46:43.816938000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 364 bytes Capture Length: 364 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 350 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfacc [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 330 Checksum: 0x7b99 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x4C76457C1E7E6B1E Responder cookie: 0x0000000000000000 Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000000 Length: 322 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: Notification (41) 0... .... = Not critical Length: 54 Nonce Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: ISAKMP (1) SPI size: 0 Message type: NAT_DETECTION_DESTINATION_IP (16389) Notification Data Notification payload Next payload: RESERVED (0) 0... .... = Not critical Length: 28 Protocol ID: ISAKMP (1) SPI size: 0 Message type: NAT_DETECTION_SOURCE_IP (16388) Notification Data 0000 00 0c 29 96 d4 43 00 30 48 41 4f 4b 08 00 45 00 ..)..C.0HAOK..E. 0010 01 5e 00 00 40 00 40 11 fa cc a5 e3 f9 74 a5 e3 .^..@.@......t.. 0020 f9 86 01 f4 01 f4 01 4a 7b 99 4c 76 45 7c 1e 7e .......J{.LvE|.~ 0030 6b 1e 00 00 00 00 00 00 00 00 21 20 22 08 00 00 k.........! "... 0040 00 00 00 00 01 42 22 00 00 30 00 00 00 2c 01 01 .....B"..0...,.. 0050 00 04 03 00 00 0c 01 00 00 0c 80 0e 00 80 03 00 ................ 0060 00 08 03 00 00 02 03 00 00 08 02 00 00 02 00 00 ................ 0070 00 08 04 00 00 02 28 00 00 88 00 02 00 00 b0 43 ......(........C 0080 89 90 16 95 35 bb e1 1e 26 21 d9 42 da 74 24 94 ....5...&!.B.t$. 0090 bb ae 2d ed 83 d3 7a 93 ae 42 cf b4 93 43 6a 70 ..-...z..B...Cjp 00a0 32 98 15 bd af 8c 79 4b 80 f3 9d a9 ca c6 51 9d 2.....yK......Q. 00b0 9c cc e4 75 64 4d 08 ef 09 e4 9b bb b5 be c8 aa ...udM.......... 00c0 81 bd 3f 66 c2 fd 38 31 34 e7 30 98 6a 4f 55 d1 ..?f..814.0.jOU. 00d0 b6 4a 9f c5 3c 24 7c 03 3b 9e 4e 01 0d 38 66 b3 .J..<$|.;.N..8f. 00e0 5e 20 a1 66 52 c0 12 39 13 48 a1 bb 2c 18 3e ca ^ .fR..9.H..,.>. 00f0 88 ea b9 67 73 24 94 f1 6f 0d a0 2f 59 22 29 00 ...gs$..o../Y"). 0100 00 36 82 c6 f5 ea 49 27 c2 8e be bf c7 23 32 9d .6....I'.....#2. 0110 17 d0 2f 3c 3b de 29 1a 17 89 c2 3f 3c d3 2e d5 ../<;.)....?<... 0120 51 13 0d 5e 3c 42 bd eb cd b3 71 58 5e 08 64 2b Q..^...w. 0090 da c3 98 a9 ad 4d 59 40 19 08 20 a9 38 22 5b 6d .....MY@.. .8"[m 00a0 f4 f5 40 01 ff ad 64 74 fd ab d9 b6 aa 06 00 48 ..@...dt.......H 00b0 e8 2b c5 c3 93 21 c1 6a 60 98 37 df 4f f5 4c fc .+...!.j`.7.O.L. 00c0 b5 31 06 29 12 aa 40 e8 b5 2d 92 03 3b d5 63 3c .1.)..@..-..;.c< 00d0 7b 05 70 31 77 ae 75 fe cc b3 c9 22 0a 0b 48 0e {.p1w.u...."..H. 00e0 a1 9e b6 07 63 3e fd a4 56 b9 e5 86 5c 2e 51 14 ....c>..V...\.Q. 00f0 0b 7d c7 f5 61 f9 fc 5e 63 96 a8 19 ff 12 0e b2 .}..a..^c....... 0100 dc 5c 86 72 84 a0 80 77 69 f4 ab 8f 7d 78 18 ff .\.r...wi...}x.. 0110 4e 84 0e 97 1c 51 41 d8 2b af 84 70 24 70 f6 75 N....QA.+..p$p.u 0120 8a 4f 17 de e5 7b cf 94 cd d7 84 68 c7 57 60 ca .O...{.....h.W`. 0130 2c 9b 83 ab a8 33 ,....3 Frame 4 (246 bytes on wire, 246 bytes captured) Arrival Time: Nov 29, 2006 11:46:44.012256000 Time delta from previous packet: 0.050215000 seconds Time since reference or first frame: 0.195318000 seconds Frame Number: 4 Packet Length: 246 bytes Capture Length: 246 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 232 Identification: 0x4100 (16640) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa42 [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.116 (165.227.249.116) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 212 Checksum: 0xec00 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x4C76457C1E7E6B1E Responder cookie: 0x22CBF9EE5C7904EF Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000001 Length: 204 Encrypted payload Next payload: Identification - R (36) 0... .... = Not critical Length: 176 Initialization Vector: 0xC28E850E Encrypted Data 0000 00 30 48 41 4f 4b 00 0c 29 96 d4 43 08 00 45 00 .0HAOK..)..C..E. 0010 00 e8 41 00 00 00 40 11 fa 42 a5 e3 f9 86 a5 e3 ..A...@..B...... 0020 f9 74 01 f4 01 f4 00 d4 ec 00 4c 76 45 7c 1e 7e .t........LvE|.~ 0030 6b 1e 22 cb f9 ee 5c 79 04 ef 2e 20 23 20 00 00 k."...\y... # .. 0040 00 01 00 00 00 cc 24 00 00 b0 c2 8e 85 0e 01 e9 ......$......... 0050 c3 bd 2a 7f ce 43 6e 92 56 41 eb 18 6e af c4 ef ..*..Cn.VA..n... 0060 7e fc a5 4e be c3 0d d8 ed f0 75 6c 3f a6 be fe ~..N......ul?... 0070 30 ba 73 b1 ee c5 eb e6 c2 7b 57 3e dd d4 b0 d0 0.s......{W>.... 0080 e0 15 b1 00 5e 63 ed 16 d0 02 34 e0 c9 39 5e 1f ....^c....4..9^. 0090 2c 75 67 6b bc 2a d6 ac 53 a9 dd 79 d6 d9 f7 42 ,ugk.*..S..y...B 00a0 09 0e 23 75 1b eb 89 17 ab c3 36 3d ab d7 97 68 ..#u......6=...h 00b0 8f 23 7a cf 77 93 ab c3 ad 60 29 79 7c fe 4c 84 .#z.w....`)y|.L. 00c0 fd 10 47 fa a1 33 e4 a6 1c 3e fb 0e 75 98 22 41 ..G..3...>..u."A 00d0 4a 03 64 25 36 c7 2f 1d 9d 73 57 4d 5e d7 29 19 J.d%6./..sWM^.). 00e0 74 fa 99 7b 8d c7 f9 c3 f0 66 94 12 17 bb fc dc t..{.....f...... 00f0 08 4b 09 02 1c d9 .K.... Frame 5 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:46:47.002586000 Time delta from previous packet: 2.990330000 seconds Time since reference or first frame: 3.185648000 seconds Frame Number: 5 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1d92 [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x0709093b Sequence: 1 Data (92 bytes) 0000 00 0c 29 96 d4 43 00 30 48 41 4f 4b 08 00 45 00 ..)..C.0HAOK..E. 0010 00 78 00 00 40 00 1e 32 1d 92 a5 e3 f9 74 a5 e3 .x..@..2.....t.. 0020 f9 86 07 09 09 3b 00 00 00 01 9a 78 65 e8 91 82 .....;.....xe... 0030 69 e2 f8 ae af 51 66 59 0d 1d 1e 1f 24 c5 ec fe i....QfY....$... 0040 b5 7d f9 63 25 06 d5 6d 28 d8 db 03 51 c1 41 23 .}.c%..m(...Q.A# 0050 37 e1 66 0b 31 19 82 80 0d da 6f e2 33 aa 63 fe 7.f.1.....o.3.c. 0060 44 40 fe d0 32 a6 26 74 76 73 53 6e ef 53 d9 f3 D@..2.&tvsSn.S.. 0070 8c 0d 51 35 0d a8 72 23 4d 82 34 e2 93 14 83 0a ..Q5..r#M.4..... 0080 6e 77 4a ef d9 a3 nwJ... Frame 6 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:46:47.009642000 Time delta from previous packet: 0.007056000 seconds Time since reference or first frame: 3.192704000 seconds Frame Number: 6 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x4500 (17664) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0xb791 [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.116 (165.227.249.116) Encapsulating Security Payload SPI: 0x6d891b92 Sequence: 1 Data (92 bytes) 0000 00 30 48 41 4f 4b 00 0c 29 96 d4 43 08 00 45 00 .0HAOK..)..C..E. 0010 00 78 45 00 00 00 7f 32 b7 91 a5 e3 f9 86 a5 e3 .xE....2........ 0020 f9 74 6d 89 1b 92 00 00 00 01 e4 84 bf 8d 9f e6 .tm............. 0030 9e bc d0 73 18 b6 d0 a5 3d 45 6a 77 eb 06 68 02 ...s....=Ejw..h. 0040 f8 85 a9 22 b4 ad 16 41 98 70 6c eb 36 26 b3 be ..."...A.pl.6&.. 0050 ac 0a 5b 09 17 81 09 8e b7 e7 3e 2f c1 2c 61 7d ..[.......>/.,a} 0060 78 ca 7f c1 b4 9c 1f 1e 44 d5 40 f1 b9 aa f0 b7 x.......D.@..... 0070 a1 2c 76 63 e8 6c dc 57 79 35 6d bf f7 76 cf b9 .,vc.l.Wy5m..v.. 0080 2f 67 19 bb c0 cc /g.... Frame 7 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:46:47.816269000 Time delta from previous packet: 0.806627000 seconds Time since reference or first frame: 3.999331000 seconds Frame Number: 7 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1d91 [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x0709093b Sequence: 2 Data (92 bytes) 0000 00 0c 29 96 d4 43 00 30 48 41 4f 4b 08 00 45 00 ..)..C.0HAOK..E. 0010 00 78 00 01 40 00 1e 32 1d 91 a5 e3 f9 74 a5 e3 .x..@..2.....t.. 0020 f9 86 07 09 09 3b 00 00 00 02 9b 19 b5 fd b5 6c .....;.........l 0030 af 1a 8c 62 e6 f7 00 63 65 89 a8 2c 7a ca f6 17 ...b...ce..,z... 0040 c0 f4 02 4f 0f 80 81 fb 38 64 30 e8 ac 2e 45 9a ...O....8d0...E. 0050 3b b5 22 52 81 81 41 c0 89 e5 8c 40 a2 f8 e2 fb ;."R..A....@.... 0060 35 4b ab 5c 75 4c b3 8b 04 16 df 42 7e cd dc 9f 5K.\uL.....B~... 0070 66 12 b5 56 ab d2 81 1a 91 ed 76 04 13 b3 f1 e1 f..V......v..... 0080 d3 93 cc 15 06 56 .....V Frame 8 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:46:47.820330000 Time delta from previous packet: 0.004061000 seconds Time since reference or first frame: 4.003392000 seconds Frame Number: 8 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x4700 (18176) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0xb591 [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.116 (165.227.249.116) Encapsulating Security Payload SPI: 0x6d891b92 Sequence: 2 Data (92 bytes) 0000 00 30 48 41 4f 4b 00 0c 29 96 d4 43 08 00 45 00 .0HAOK..)..C..E. 0010 00 78 47 00 00 00 7f 32 b5 91 a5 e3 f9 86 a5 e3 .xG....2........ 0020 f9 74 6d 89 1b 92 00 00 00 02 e4 84 bf 8d 9f e6 .tm............. 0030 9e bc d0 73 18 b6 d0 a5 3d 45 1c 73 bf f7 e7 0d ...s....=E.s.... 0040 b4 00 a3 f5 0c 24 11 b7 c0 05 b3 5c ab 84 84 db .....$.....\.... 0050 54 93 68 0b 13 48 bf bc cc a3 0e bf be c6 f3 cc T.h..H.......... 0060 c3 7a 3c e2 61 1f b6 a9 01 e6 1f 0f 9a c6 df b7 .z<.a........... 0070 ff ee 6f 70 ba b0 9a 8e fd e0 d7 aa aa 15 84 2d ..op...........- 0080 d4 b5 b0 08 e9 1a ...... Frame 9 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:46:48.321014000 Time delta from previous packet: 0.500684000 seconds Time since reference or first frame: 4.504076000 seconds Frame Number: 9 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0002 (2) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1d90 [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x0709093b Sequence: 3 Data (92 bytes) 0000 00 0c 29 96 d4 43 00 30 48 41 4f 4b 08 00 45 00 ..)..C.0HAOK..E. 0010 00 78 00 02 40 00 1e 32 1d 90 a5 e3 f9 74 a5 e3 .x..@..2.....t.. 0020 f9 86 07 09 09 3b 00 00 00 03 9c 1a 90 37 11 04 .....;.......7.. 0030 64 e3 c4 7d 0d 7d 78 0b 2d 01 1b f0 4e 8e ac c4 d..}.}x.-...N... 0040 ef 75 11 4b 50 d2 42 7b d2 eb f3 c5 5d 23 47 44 .u.KP.B{....]#GD 0050 7c 3c 7a 89 70 8f f5 e4 5d 7b f6 a9 ef e7 15 57 | Frame 10 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:46:48.324066000 Time delta from previous packet: 0.003052000 seconds Time since reference or first frame: 4.507128000 seconds Frame Number: 10 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x4900 (18688) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0xb391 [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.116 (165.227.249.116) Encapsulating Security Payload SPI: 0x6d891b92 Sequence: 3 Data (92 bytes) 0000 00 30 48 41 4f 4b 00 0c 29 96 d4 43 08 00 45 00 .0HAOK..)..C..E. 0010 00 78 49 00 00 00 7f 32 b3 91 a5 e3 f9 86 a5 e3 .xI....2........ 0020 f9 74 6d 89 1b 92 00 00 00 03 e4 84 bf 8d 9f e6 .tm............. 0030 9e bc d0 73 18 b6 d0 a5 3d 45 83 f5 b5 f7 1e 5e ...s....=E.....^ 0040 32 5b a9 0b f2 43 c4 24 54 6e a9 61 aa fc 48 70 2[...C.$Tn.a..Hp 0050 4e bf 7b 21 4b 0e c7 1c ed 73 06 09 ac 65 d5 01 N.{!K....s...e.. 0060 88 0d c0 59 2b 59 5c 6c 69 b3 88 de d9 e6 7b ed ...Y+Y\li.....{. 0070 28 46 84 3e de cd e5 34 db 2f 8b c9 28 35 5c 73 (F.>...4./..(5\s 0080 85 f3 00 4a da 0b ...J..