Frame 1 (410 bytes on wire, 410 bytes captured) Arrival Time: Nov 29, 2006 14:21:01.714870000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 410 bytes Capture Length: 410 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 396 Identification: 0x1332 (4914) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xe787 [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.104 (165.227.249.104) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 376 Checksum: 0x9732 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xD10026741C25F5B5 Responder cookie: 0x0000000000000000 Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000000 Length: 368 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 72 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 68 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 6 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (192) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (256) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: Notification (41) 0... .... = Not critical Length: 36 Nonce Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: RESERVED (0) SPI size: 0 Message type: NAT_DETECTION_SOURCE_IP (16388) Notification Data Notification payload Next payload: Vendor ID (43) 0... .... = Not critical Length: 28 Protocol ID: RESERVED (0) SPI size: 0 Message type: NAT_DETECTION_DESTINATION_IP (16389) Notification Data Vendor ID payload Next payload: Vendor ID (43) 0... .... = Not critical Length: 20 Vendor ID: unknown vendor ID: 0xF758F22668750F03B08DF6EBE1D00300 Vendor ID payload Next payload: RESERVED (0) 0... .... = Not critical Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F 0000 00 06 b1 33 80 5d 00 0c 29 66 91 21 08 00 45 00 ...3.]..)f.!..E. 0010 01 8c 13 32 00 00 80 11 e7 87 a5 e3 f9 77 a5 e3 ...2.........w.. 0020 f9 68 01 f4 01 f4 01 78 97 32 d1 00 26 74 1c 25 .h.....x.2..&t.% 0030 f5 b5 00 00 00 00 00 00 00 00 21 20 22 08 00 00 ..........! "... 0040 00 00 00 00 01 70 22 00 00 48 00 00 00 44 01 01 .....p"..H...D.. 0050 00 06 03 00 00 0c 01 00 00 0c 80 0e 00 80 03 00 ................ 0060 00 0c 01 00 00 0c 80 0e 00 c0 03 00 00 0c 01 00 ................ 0070 00 0c 80 0e 01 00 03 00 00 08 02 00 00 02 03 00 ................ 0080 00 08 03 00 00 02 00 00 00 08 04 00 00 02 28 00 ..............(. 0090 00 88 00 02 00 00 4d ce b8 7c 0c 0f 76 ac c6 31 ......M..|..v..1 00a0 74 55 fa be 35 9b d7 73 81 92 0a 79 66 05 26 07 tU..5..s...yf.&. 00b0 71 4f 9c 2b 7a d9 c2 b1 ea 14 ca 94 94 5b 77 50 qO.+z........[wP 00c0 d1 28 d1 f1 a3 fb 3d af 50 47 c3 59 58 dd fd 54 .(....=.PG.YX..T 00d0 5e 3f f0 4f 8e 18 34 8b 2b 97 5e 99 75 ec f5 85 ^?.O..4.+.^.u... 00e0 c7 3d 0d 1a 42 cd 87 fa d4 55 9a 0d 07 86 94 1d .=..B....U...... 00f0 2a 7f 63 e5 22 e4 2f 6b 94 0a 39 2b cf 8c 9b 44 *.c."./k..9+...D 0100 06 b1 0a f6 7f c9 c9 c3 fb 7d af 66 7e 34 37 f9 .........}.f~47. 0110 c8 c4 f6 54 e6 f6 29 00 00 24 10 99 e1 91 2d 6a ...T..)..$....-j 0120 17 63 0f c7 c9 86 62 1d 60 07 39 b7 4e 45 e2 4a .c....b.`.9.NE.J 0130 54 27 dc 25 c4 08 f8 22 ba e5 29 00 00 1c 00 00 T'.%..."..)..... 0140 40 04 55 f1 b2 b8 22 a5 66 03 b6 02 9e f7 08 d1 @.U...".f....... 0150 fa 79 68 01 d2 2f 2b 00 00 1c 00 00 40 05 bb 69 .yh../+.....@..i 0160 31 d6 55 1f dc 50 1e f8 ca 41 91 58 0d ae ac e8 1.U..P...A.X.... 0170 d2 7d 2b 00 00 14 f7 58 f2 26 68 75 0f 03 b0 8d .}+....X.&hu.... 0180 f6 eb e1 d0 03 00 00 00 00 14 4a 13 1c 81 07 03 ..........J..... 0190 58 45 5c 57 28 f2 0e 95 45 2f XE\W(...E/ Frame 2 (358 bytes on wire, 358 bytes captured) Arrival Time: Nov 29, 2006 14:21:02.102173000 Time delta from previous packet: 0.387303000 seconds Time since reference or first frame: 0.387303000 seconds Frame Number: 2 Packet Length: 358 bytes Capture Length: 358 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 344 Identification: 0x0001 (1) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7bec [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.119 (165.227.249.119) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 324 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0xD10026741C25F5B5 Responder cookie: 0x3495B9EA174D5D87 Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000000 Length: 316 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: Notification (41) 0... .... = Not critical Length: 24 Nonce Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: RESERVED (0) SPI size: 0 Message type: NAT_DETECTION_SOURCE_IP (16388) Notification Data Notification payload Next payload: Vendor ID (43) 0... .... = Not critical Length: 28 Protocol ID: RESERVED (0) SPI size: 0 Message type: NAT_DETECTION_DESTINATION_IP (16389) Notification Data Vendor ID payload Next payload: RESERVED (0) 0... .... = Not critical Length: 24 Vendor ID: unknown vendor ID: 0x2A6775D0AD2AA7887C33FE1D68BAF308966F0001 0000 00 0c 29 66 91 21 00 06 b1 33 80 5d 08 00 45 00 ..)f.!...3.]..E. 0010 01 58 00 01 00 00 ff 11 7b ec a5 e3 f9 68 a5 e3 .X......{....h.. 0020 f9 77 01 f4 01 f4 01 44 00 00 d1 00 26 74 1c 25 .w.....D....&t.% 0030 f5 b5 34 95 b9 ea 17 4d 5d 87 21 20 22 20 00 00 ..4....M].! " .. 0040 00 00 00 00 01 3c 22 00 00 30 00 00 00 2c 01 01 .....<"..0...,.. 0050 00 04 03 00 00 0c 01 00 00 0c 80 0e 00 80 03 00 ................ 0060 00 08 03 00 00 02 03 00 00 08 02 00 00 02 00 00 ................ 0070 00 08 04 00 00 02 28 00 00 88 00 02 00 00 16 5a ......(........Z 0080 0b 3b c1 27 70 41 33 ae a5 f5 1e f0 97 64 8d eb .;.'pA3......d.. 0090 08 85 e7 80 23 68 3a bd 67 8d 98 9e 05 a5 01 d9 ....#h:.g....... 00a0 cb 24 3a e4 d3 7b 22 7a 0d 11 d0 94 3d 43 d3 21 .$:..{"z....=C.! 00b0 56 fe 33 23 41 04 08 2d 81 e0 41 f0 32 ef c7 49 V.3#A..-..A.2..I 00c0 d8 e2 ed e7 1d ca 98 eb bc 47 f6 bd 6d c3 30 60 .........G..m.0` 00d0 d3 d1 cc 15 fa 96 ec 74 73 bd 2c 1d d7 97 32 68 .......ts.,...2h 00e0 68 6f 38 22 e2 f2 b0 b3 bc ba 77 a0 28 29 09 7d ho8"......w.().} 00f0 d7 79 1d 58 a7 1d 2d 93 e4 f0 bc 49 0a 14 29 00 .y.X..-....I..). 0100 00 18 d6 4b d7 42 bc 1b bf 8b 25 7b 4e 1e f1 6b ...K.B....%{N..k 0110 57 08 61 c6 2e 28 29 00 00 1c 00 00 40 04 75 5d W.a..().....@.u] 0120 7b cf eb 24 eb 51 a6 66 be 65 09 d8 2a 60 5f 3b {..$.Q.f.e..*`_; 0130 eb d3 2b 00 00 1c 00 00 40 05 6a aa 7b d8 74 23 ..+.....@.j.{.t# 0140 5f f3 a5 1c 98 a1 36 15 1a 34 22 f8 6b c8 00 00 _.....6..4".k... 0150 00 18 2a 67 75 d0 ad 2a a7 88 7c 33 fe 1d 68 ba ..*gu..*..|3..h. 0160 f3 08 96 6f 00 01 ...o.. Frame 3 (326 bytes on wire, 326 bytes captured) Arrival Time: Nov 29, 2006 14:21:02.102175000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.387305000 seconds Frame Number: 3 Packet Length: 326 bytes Capture Length: 326 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x1333 (4915) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xe7da [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.104 (165.227.249.104) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0xffcc [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xD10026741C25F5B5 Responder cookie: 0x3495B9EA174D5D87 Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000001 Length: 284 Encrypted payload Next payload: Identification - I (35) 0... .... = Not critical Length: 256 Initialization Vector: 0xE2393FD7 Encrypted Data 0000 00 06 b1 33 80 5d 00 0c 29 66 91 21 08 00 45 00 ...3.]..)f.!..E. 0010 01 38 13 33 00 00 80 11 e7 da a5 e3 f9 77 a5 e3 .8.3.........w.. 0020 f9 68 01 f4 01 f4 01 24 ff cc d1 00 26 74 1c 25 .h.....$....&t.% 0030 f5 b5 34 95 b9 ea 17 4d 5d 87 2e 20 23 08 00 00 ..4....M].. #... 0040 00 01 00 00 01 1c 23 00 01 00 e2 39 3f d7 f0 4c ......#....9?..L 0050 ac ad 1a fd 2e 8f 72 cc 51 55 0b 62 ec 8b 28 6d ......r.QU.b..(m 0060 fb de 53 63 9f 20 82 23 c2 01 e0 5e 17 a2 e5 a8 ..Sc. .#...^.... 0070 47 69 91 7f 04 cf 7d 96 02 5e 86 cd 09 ff 9e c3 Gi....}..^...... 0080 23 60 00 79 b4 96 e2 21 90 34 f3 3e 80 6f 70 0a #`.y...!.4.>.op. 0090 b9 d3 99 85 68 95 2c fd 93 91 25 5a e2 d5 dd b8 ....h.,...%Z.... 00a0 02 6f e2 cb a1 6e bd cd 0d f8 6e be 99 a7 23 81 .o...n....n...#. 00b0 c9 96 1b bb 6f 73 25 0c 94 43 46 87 93 c2 4e 42 ....os%..CF...NB 00c0 fe 9b 5c 37 a6 b0 3f 04 51 8e a2 f1 8c 8e da 6e ..\7..?.Q......n 00d0 93 5d 85 3a 23 39 61 c1 a1 75 14 0b 3a c8 c4 eb .].:#9a..u..:... 00e0 8f 4e 96 c4 e5 fc 54 87 99 41 1e e4 59 85 dc d4 .N....T..A..Y... 00f0 c2 dc a5 22 f5 f4 a5 c0 b2 e3 b3 9d b2 f0 62 22 ..."..........b" 0100 a6 b6 ab 8a 98 c4 6f bd e0 74 9d 4e 5b 51 cf 62 ......o..t.N[Q.b 0110 b5 f9 bf a3 13 07 2a 4d 9c 86 03 8f c6 88 90 c6 ......*M........ 0120 64 64 c9 87 94 d6 c9 08 25 22 97 f1 50 c3 59 88 dd......%"..P.Y. 0130 f5 26 96 63 5c 63 75 fe ae c0 86 ba 95 4a e4 16 .&.c\cu......J.. 0140 24 b8 73 45 05 4e $.sE.N Frame 4 (246 bytes on wire, 246 bytes captured) Arrival Time: Nov 29, 2006 14:21:02.115003000 Time delta from previous packet: 0.012828000 seconds Time since reference or first frame: 0.400133000 seconds Frame Number: 4 Packet Length: 246 bytes Capture Length: 246 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 232 Identification: 0x0002 (2) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7c5b [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.119 (165.227.249.119) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 212 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0xD10026741C25F5B5 Responder cookie: 0x3495B9EA174D5D87 Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000001 Length: 204 Encrypted payload Next payload: Identification - R (36) 0... .... = Not critical Length: 176 Initialization Vector: 0x637D5FAA Encrypted Data 0000 00 0c 29 66 91 21 00 06 b1 33 80 5d 08 00 45 00 ..)f.!...3.]..E. 0010 00 e8 00 02 00 00 ff 11 7c 5b a5 e3 f9 68 a5 e3 ........|[...h.. 0020 f9 77 01 f4 01 f4 00 d4 00 00 d1 00 26 74 1c 25 .w..........&t.% 0030 f5 b5 34 95 b9 ea 17 4d 5d 87 2e 20 23 20 00 00 ..4....M].. # .. 0040 00 01 00 00 00 cc 24 00 00 b0 63 7d 5f aa fd 66 ......$...c}_..f 0050 50 63 d9 c8 a4 53 e5 ba d5 91 1e 35 8f 30 32 25 Pc...S.....5.02% 0060 d2 43 95 b1 42 e3 c9 c1 46 a5 19 e9 06 82 51 19 .C..B...F.....Q. 0070 2b e5 2f f0 01 d0 ed 33 2e 1d bc 78 e2 0e e8 5c +./....3...x...\ 0080 15 61 48 94 bc 54 96 29 8c bd 76 a7 c8 61 16 d8 .aH..T.)..v..a.. 0090 ef 61 95 f7 fb de a2 bc 07 f5 9d 4b 4b c5 e5 89 .a.........KK... 00a0 a1 75 9b 0c c1 9e 72 26 66 a8 10 8c 0f df cb a8 .u....r&f....... 00b0 c7 e1 52 4c 1a d5 02 b9 1a dc 39 76 cf 5b fc 85 ..RL......9v.[.. 00c0 50 c7 41 cf 90 37 71 11 73 bf 63 29 1e 88 7b 25 P.A..7q.s.c)..{% 00d0 0e ce c9 b2 5f 22 83 3a 90 54 a2 d0 f6 c7 9b 2f ...._".:.T...../ 00e0 94 7f d5 8d e2 29 3e d0 3e 3a b2 ec 34 c2 0b 4b .....)>.>:..4..K 00f0 f7 90 9f a8 e6 df ...... Frame 5 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 14:21:02.444041000 Time delta from previous packet: 0.329038000 seconds Time since reference or first frame: 0.729171000 seconds Frame Number: 5 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x001e (30) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b8e [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.104 (165.227.249.104) Encapsulating Security Payload SPI: 0x2808ba39 Sequence: 1 Data (92 bytes) 0000 00 06 b1 33 80 5d 00 0c 29 66 91 21 08 00 45 00 ...3.]..)f.!..E. 0010 00 78 00 1e 00 00 f0 32 8b 8e a5 e3 f9 77 a5 e3 .x.....2.....w.. 0020 f9 68 28 08 ba 39 00 00 00 01 b5 2c 78 6d c5 d9 .h(..9.....,xm.. 0030 22 14 4e 2b a3 3f 41 1b 9a 33 5d 7c 1f 13 6e 90 ".N+.?A..3]|..n. 0040 2e 79 61 00 c2 6a d1 c8 c8 7b 52 10 85 d5 1b d8 .ya..j...{R..... 0050 73 33 8b bd 6b 1b 81 8b e4 67 11 be 14 8a 0b db s3..k....g...... 0060 ac 43 04 e4 59 f9 2b 59 80 30 22 fa ce 3f a8 03 .C..Y.+Y.0"..?.. 0070 47 28 3c 16 c9 9a 1a ee fd 10 b3 02 bd 91 85 3e G(<............> 0080 3d 57 d5 6b 36 07 =W.k6. Frame 6 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 14:21:02.448018000 Time delta from previous packet: 0.003977000 seconds Time since reference or first frame: 0.733148000 seconds Frame Number: 6 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7cac [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.119 (165.227.249.119) Encapsulating Security Payload SPI: 0x51d3beed Sequence: 1 Data (92 bytes) 0000 00 0c 29 66 91 21 00 06 b1 33 80 5d 08 00 45 00 ..)f.!...3.]..E. 0010 00 78 00 00 00 00 ff 32 7c ac a5 e3 f9 68 a5 e3 .x.....2|....h.. 0020 f9 77 51 d3 be ed 00 00 00 01 7d 43 40 24 d0 bc .wQ.......}C@$.. 0030 bd c9 c0 ac 29 7c ab e6 6b 7c 6b af da 90 74 c7 ....)|..k|k...t. 0040 2b 10 29 bf 50 06 25 ec 65 42 9c 68 23 3d c5 14 +.).P.%.eB.h#=.. 0050 e9 fd 2c 4b c2 02 96 7e 7d d2 ae 2a 1a 51 69 de ..,K...~}..*.Qi. 0060 66 67 2b 4d 6e 7e 67 7d 34 94 27 30 d6 08 d3 c7 fg+Mn~g}4.'0.... 0070 cb 94 bb 1d 7f e1 84 bf 59 fe a7 ef 1a 83 8b b8 ........Y....... 0080 b7 6d f5 fc 5f 54 .m.._T Frame 7 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 14:21:02.940573000 Time delta from previous packet: 0.492555000 seconds Time since reference or first frame: 1.225703000 seconds Frame Number: 7 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x001f (31) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b8d [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.104 (165.227.249.104) Encapsulating Security Payload SPI: 0x2808ba39 Sequence: 2 Data (92 bytes) 0000 00 06 b1 33 80 5d 00 0c 29 66 91 21 08 00 45 00 ...3.]..)f.!..E. 0010 00 78 00 1f 00 00 f0 32 8b 8d a5 e3 f9 77 a5 e3 .x.....2.....w.. 0020 f9 68 28 08 ba 39 00 00 00 02 c6 1f fa 41 16 6e .h(..9.......A.n 0030 04 fb 94 9a 77 a8 90 a1 b0 61 36 97 88 3e 77 48 ....w....a6..>wH 0040 05 82 f5 f8 f4 46 55 c5 30 1e 96 da df df 3b 77 .....FU.0.....;w 0050 c5 3a 68 d0 86 81 fb 92 82 da ab cd bd ce 21 4f .:h...........!O 0060 97 f6 0f 0d ec 6f 77 d7 e0 ef 9c 9a 25 c1 af e1 .....ow.....%... 0070 ba df e3 04 d7 27 85 55 af 5d d8 04 0c eb 87 f4 .....'.U.]...... 0080 27 ae a0 0e 9f bb '..... Frame 8 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 14:21:02.942591000 Time delta from previous packet: 0.002018000 seconds Time since reference or first frame: 1.227721000 seconds Frame Number: 8 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7cab [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.119 (165.227.249.119) Encapsulating Security Payload SPI: 0x51d3beed Sequence: 2 Data (92 bytes) 0000 00 0c 29 66 91 21 00 06 b1 33 80 5d 08 00 45 00 ..)f.!...3.]..E. 0010 00 78 00 01 00 00 ff 32 7c ab a5 e3 f9 68 a5 e3 .x.....2|....h.. 0020 f9 77 51 d3 be ed 00 00 00 02 9e 99 85 db d5 d1 .wQ............. 0030 c5 db 6a 2c 2a b0 7a ba bc 05 d7 96 51 04 b3 1b ..j,*.z.....Q... 0040 dd eb b6 49 9b 48 13 5b 84 f0 aa f0 de a8 90 c6 ...I.H.[........ 0050 4f 85 d7 e5 69 da 07 5a 69 4d f1 e6 1a 12 e3 c4 O...i..ZiM...... 0060 45 ee 6e 82 fd a8 cb 24 71 b5 be 1b 2c ee 11 80 E.n....$q...,... 0070 7b e4 97 e5 9a bd d6 02 0a 6b 70 d5 f7 2b ce d7 {........kp..+.. 0080 95 75 43 e1 43 ae .uC.C. Frame 9 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 14:21:03.969203000 Time delta from previous packet: 1.026612000 seconds Time since reference or first frame: 2.254333000 seconds Frame Number: 9 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0020 (32) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b8c [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.104 (165.227.249.104) Encapsulating Security Payload SPI: 0x2808ba39 Sequence: 3 Data (92 bytes) 0000 00 06 b1 33 80 5d 00 0c 29 66 91 21 08 00 45 00 ...3.]..)f.!..E. 0010 00 78 00 20 00 00 f0 32 8b 8c a5 e3 f9 77 a5 e3 .x. ...2.....w.. 0020 f9 68 28 08 ba 39 00 00 00 03 ce 97 fe f9 79 35 .h(..9........y5 0030 34 26 01 43 70 d0 bc c0 57 b1 2b 80 85 0d 70 17 4&.Cp...W.+...p. 0040 38 f5 41 37 da 87 9b 38 7d 08 ee 67 27 63 a1 6b 8.A7...8}..g'c.k 0050 6d ac e9 cc 97 0e 6f 1b bb 3f d8 84 57 8e 85 c8 m.....o..?..W... 0060 f1 c1 32 71 51 e1 f6 40 c0 be 62 ab d6 68 e5 1f ..2qQ..@..b..h.. 0070 8e f6 fd bc 82 bd 24 32 47 8a 29 d1 40 91 ee 27 ......$2G.).@..' 0080 50 3f 32 cd 95 9f P?2... Frame 10 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 14:21:03.970997000 Time delta from previous packet: 0.001794000 seconds Time since reference or first frame: 2.256127000 seconds Frame Number: 10 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0002 (2) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7caa [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.119 (165.227.249.119) Encapsulating Security Payload SPI: 0x51d3beed Sequence: 3 Data (92 bytes) 0000 00 0c 29 66 91 21 00 06 b1 33 80 5d 08 00 45 00 ..)f.!...3.]..E. 0010 00 78 00 02 00 00 ff 32 7c aa a5 e3 f9 68 a5 e3 .x.....2|....h.. 0020 f9 77 51 d3 be ed 00 00 00 03 93 64 0b 74 93 74 .wQ........d.t.t 0030 9b e1 f8 1f d1 f3 5d a2 2e 1c bd 95 05 f7 fa 75 ......]........u 0040 b1 b3 b3 cc 00 8e 1d 21 28 c3 00 fc 1a 98 8d d4 .......!(....... 0050 06 20 19 0f 72 06 21 60 11 a8 48 79 ec 99 88 8a . ..r.!`..Hy.... 0060 35 c9 ae 0d 09 30 65 8c 5a f5 8a 12 38 b3 79 d5 5....0e.Z...8.y. 0070 4d b6 14 5d 9f 29 1b b9 e4 77 a5 94 ec 45 2c 13 M..].)...w...E,. 0080 f5 e4 0c 9c 76 18 ....v. Frame 11 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 14:21:04.879421000 Time delta from previous packet: 0.908424000 seconds Time since reference or first frame: 3.164551000 seconds Frame Number: 11 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0021 (33) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b8b [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.104 (165.227.249.104) Encapsulating Security Payload SPI: 0x2808ba39 Sequence: 4 Data (92 bytes) 0000 00 06 b1 33 80 5d 00 0c 29 66 91 21 08 00 45 00 ...3.]..)f.!..E. 0010 00 78 00 21 00 00 f0 32 8b 8b a5 e3 f9 77 a5 e3 .x.!...2.....w.. 0020 f9 68 28 08 ba 39 00 00 00 04 46 64 80 cb a0 93 .h(..9....Fd.... 0030 30 9a f0 87 e8 a2 b7 b6 b8 a3 68 25 25 65 92 14 0.........h%%e.. 0040 26 e6 0e 3e 85 94 5e a2 e4 58 41 da 2e fc aa 2f &..>..^..XA..../ 0050 9c 17 b4 59 79 c6 68 b2 04 11 60 a6 98 6b d7 7e ...Yy.h...`..k.~ 0060 06 7d 23 8a 56 d2 23 b5 cc 7d b2 72 15 67 63 72 .}#.V.#..}.r.gcr 0070 1a 26 bd 51 d6 b0 cc da 22 d9 54 4a 1e 9b 8f 7e .&.Q....".TJ...~ 0080 b7 6a 28 98 4d de .j(.M. Frame 12 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 14:21:04.880996000 Time delta from previous packet: 0.001575000 seconds Time since reference or first frame: 3.166126000 seconds Frame Number: 12 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0003 (3) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7ca9 [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.119 (165.227.249.119) Encapsulating Security Payload SPI: 0x51d3beed Sequence: 4 Data (92 bytes) 0000 00 0c 29 66 91 21 00 06 b1 33 80 5d 08 00 45 00 ..)f.!...3.]..E. 0010 00 78 00 03 00 00 ff 32 7c a9 a5 e3 f9 68 a5 e3 .x.....2|....h.. 0020 f9 77 51 d3 be ed 00 00 00 04 83 c5 e0 ca ee ac .wQ............. 0030 a8 8a 5b 11 57 65 5b 43 c1 f3 02 3e 56 a1 ba d7 ..[.We[C...>V... 0040 25 42 94 80 48 39 13 e4 99 fa 46 24 e5 36 52 c8 %B..H9....F$.6R. 0050 c8 9f 52 ba 0d ff e8 bf 74 cc 4f 59 d0 d2 da 32 ..R.....t.OY...2 0060 0c df 4f a7 d6 e4 e6 28 7a 00 42 11 95 3c 64 85 ..O....(z.B..