Frame 1 (410 bytes on wire, 410 bytes captured) Arrival Time: Nov 24, 2006 14:00:58.559129000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 410 bytes Capture Length: 410 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 396 Identification: 0x0ffd (4093) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xeab0 [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.116 (165.227.249.116) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 376 Checksum: 0xa0ff [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xAD8EC25250E43CAB Responder cookie: 0x0000000000000000 Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000000 Length: 368 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 72 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 68 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 6 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (192) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (256) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: Notification (41) 0... .... = Not critical Length: 36 Nonce Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: RESERVED (0) SPI size: 0 Message type: NAT_DETECTION_SOURCE_IP (16388) Notification Data Notification payload Next payload: Vendor ID (43) 0... .... = Not critical Length: 28 Protocol ID: RESERVED (0) SPI size: 0 Message type: NAT_DETECTION_DESTINATION_IP (16389) Notification Data Vendor ID payload Next payload: Vendor ID (43) 0... .... = Not critical Length: 20 Vendor ID: unknown vendor ID: 0xF758F22668750F03B08DF6EBE1D00300 Vendor ID payload Next payload: RESERVED (0) 0... .... = Not critical Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F 0000 00 30 48 41 4f 4b 00 0c 29 66 91 21 08 00 45 00 .0HAOK..)f.!..E. 0010 01 8c 0f fd 00 00 80 11 ea b0 a5 e3 f9 77 a5 e3 .............w.. 0020 f9 74 01 f4 01 f4 01 78 a0 ff ad 8e c2 52 50 e4 .t.....x.....RP. 0030 3c ab 00 00 00 00 00 00 00 00 21 20 22 08 00 00 <.........! "... 0040 00 00 00 00 01 70 22 00 00 48 00 00 00 44 01 01 .....p"..H...D.. 0050 00 06 03 00 00 0c 01 00 00 0c 80 0e 00 80 03 00 ................ 0060 00 0c 01 00 00 0c 80 0e 00 c0 03 00 00 0c 01 00 ................ 0070 00 0c 80 0e 01 00 03 00 00 08 02 00 00 02 03 00 ................ 0080 00 08 03 00 00 02 00 00 00 08 04 00 00 02 28 00 ..............(. 0090 00 88 00 02 00 00 f1 d0 5c 7e bb a2 de 9d da 1b ........\~...... 00a0 60 c8 7a 7a bc 4a 27 d6 3c 26 57 1a 35 0b 4d fe `.zz.J'.<&W.5.M. 00b0 f3 c1 e2 03 92 ac 9b ee 32 c7 6e bd d4 7d 32 d6 ........2.n..}2. 00c0 22 4d 5c 13 37 ea 59 60 45 a6 11 5f c8 45 db 91 "M\.7.Y`E.._.E.. 00d0 c9 af 8a 29 4d 63 1b 20 73 28 30 ab 6e c8 1b 08 ...)Mc. s(0.n... 00e0 12 49 5d 94 66 d3 e2 e0 52 7f ac e5 de c6 16 f2 .I].f...R....... 00f0 26 d3 25 f4 6b 36 f2 a0 4f 0c c5 75 09 db d3 27 &.%.k6..O..u...' 0100 60 d3 c7 0e 2f 79 aa cb 58 46 7c 8b 06 c0 c3 a8 `.../y..XF|..... 0110 d6 01 6a c4 84 d3 29 00 00 24 2a f8 fc b2 c4 53 ..j...)..$*....S 0120 3b 70 03 f3 3c 7d 33 6f 40 2f 93 19 32 34 c5 f1 ;p..<}3o@/..24.. 0130 72 c6 9e 90 c9 15 8f a6 a5 d6 29 00 00 1c 00 00 r.........)..... 0140 40 04 86 cc 53 8e b9 65 fe 87 f9 95 8e 70 23 b2 @...S..e.....p#. 0150 f3 79 c1 b0 f5 47 2b 00 00 1c 00 00 40 05 9a a7 .y...G+.....@... 0160 af 65 32 8a b7 35 e7 0e a1 ba 7f 10 21 5b ae 77 .e2..5......![.w 0170 e2 2e 2b 00 00 14 f7 58 f2 26 68 75 0f 03 b0 8d ..+....X.&hu.... 0180 f6 eb e1 d0 03 00 00 00 00 14 4a 13 1c 81 07 03 ..........J..... 0190 58 45 5c 57 28 f2 0e 95 45 2f XE\W(...E/ Frame 2 (526 bytes on wire, 526 bytes captured) Arrival Time: Nov 24, 2006 14:00:58.571897000 Time delta from previous packet: 0.012768000 seconds Time since reference or first frame: 0.012768000 seconds Frame Number: 2 Packet Length: 526 bytes Capture Length: 526 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 512 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa39 [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.119 (165.227.249.119) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 492 Checksum: 0x3ea1 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xAD8EC25250E43CAB Responder cookie: 0x4F5B44658CB6E4A2 Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000000 Length: 484 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: Notification (41) 0... .... = Not critical Length: 216 Nonce Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: ISAKMP (1) SPI size: 0 Message type: NAT_DETECTION_DESTINATION_IP (16389) Notification Data Notification payload Next payload: RESERVED (0) 0... .... = Not critical Length: 28 Protocol ID: ISAKMP (1) SPI size: 0 Message type: NAT_DETECTION_SOURCE_IP (16388) Notification Data 0000 00 0c 29 66 91 21 00 30 48 41 4f 4b 08 00 45 00 ..)f.!.0HAOK..E. 0010 02 00 00 00 40 00 40 11 fa 39 a5 e3 f9 74 a5 e3 ....@.@..9...t.. 0020 f9 77 01 f4 01 f4 01 ec 3e a1 ad 8e c2 52 50 e4 .w......>....RP. 0030 3c ab 4f 5b 44 65 8c b6 e4 a2 21 20 22 20 00 00 <.O[De....! " .. 0040 00 00 00 00 01 e4 22 00 00 30 00 00 00 2c 01 01 ......"..0...,.. 0050 00 04 03 00 00 0c 01 00 00 0c 80 0e 00 80 03 00 ................ 0060 00 08 03 00 00 02 03 00 00 08 02 00 00 02 00 00 ................ 0070 00 08 04 00 00 02 28 00 00 88 00 02 00 00 58 4c ......(.......XL 0080 1a af fd a6 b5 42 30 4c d3 13 f1 a7 19 bf e3 b4 .....B0L........ 0090 b2 49 0a 60 d3 fb 24 dd aa 64 e2 e0 8d d3 01 10 .I.`..$..d...... 00a0 d5 d5 5b b5 b8 fb 71 40 2a 6a 61 7a 7a 5e 80 70 ..[...q@*jazz^.p 00b0 e7 c7 2f 05 ba bd 90 a3 e9 bc 9e 78 2e ad 89 44 ../........x...D 00c0 9f c1 37 9e 87 cd 6a 71 9a c0 27 fc 63 8b c5 6c ..7...jq..'.c..l 00d0 77 ab b6 6b 91 57 06 1f 45 61 19 33 47 8f ff cb w..k.W..Ea.3G... 00e0 92 c0 d3 96 a8 82 24 d1 c9 45 dd 83 82 3c b1 35 ......$..E...<.5 00f0 3b 7d 91 ce 5c a0 64 4d a8 3e fd 13 f2 fb 29 00 ;}..\.dM.>....). 0100 00 d8 30 02 fc 66 fb 50 07 ce be f5 b9 54 b3 23 ..0..f.P.....T.# 0110 ac 03 13 87 a1 66 c7 34 9b 9a fa 07 49 92 fa 66 .....f.4....I..f 0120 4f f5 f0 59 68 7b b8 05 0d 0e c8 42 ae 03 4b a0 O..Yh{.....B..K. 0130 87 ce 7d 96 a7 c8 5d b6 09 a0 66 8b 68 80 3e 54 ..}...]...f.h.>T 0140 4c 0b 5d 2b cb b7 99 ea 93 58 d7 f1 47 01 c0 55 L.]+.....X..G..U 0150 69 a4 c8 d9 b3 9e d7 02 87 ee dc ad 5e 96 cd 4c i...........^..L 0160 80 0e 3d e6 38 27 ea 32 9a 00 c6 6a 72 3a 61 33 ..=.8'.2...jr:a3 0170 06 ef b9 a1 a8 fa 64 52 47 ed eb 06 fe d9 8a e6 ......dRG....... 0180 6b 00 20 1f 1e 11 c0 fa 61 10 b3 6d 8a 1f 7f b7 k. .....a..m.... 0190 40 e7 8b 68 e2 8b ea 0d 99 45 bd 36 53 57 c6 37 @..h.....E.6SW.7 01a0 00 02 5a 18 e2 1a 16 f0 27 7c c9 a7 33 f6 fb d4 ..Z.....'|..3... 01b0 7f ac a9 0e b6 b6 1b ed 1e 6b a8 32 43 86 3d cf .........k.2C.=. 01c0 05 bc af f7 54 69 05 4f e7 27 a4 56 42 4d dc 54 ....Ti.O.'.VBM.T 01d0 6b af 34 ae 9e 6f 29 00 00 1c 01 00 40 05 df 53 k.4..o).....@..S 01e0 b9 a0 a5 d9 4e c6 52 a6 ef 65 37 aa 20 15 00 b0 ....N.R..e7. ... 01f0 6a 9d 00 00 00 1c 01 00 40 04 fe dc 15 bd 93 43 j.......@......C 0200 8b 2b 5a 39 63 b4 1b a8 b4 75 8e a7 7a 6c .+Z9c....u..zl Frame 3 (326 bytes on wire, 326 bytes captured) Arrival Time: Nov 24, 2006 14:00:58.585507000 Time delta from previous packet: 0.013610000 seconds Time since reference or first frame: 0.026378000 seconds Frame Number: 3 Packet Length: 326 bytes Capture Length: 326 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0ffe (4094) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xeb03 [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.116 (165.227.249.116) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0xb5a4 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xAD8EC25250E43CAB Responder cookie: 0x4F5B44658CB6E4A2 Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000001 Length: 284 Encrypted payload Next payload: Identification - I (35) 0... .... = Not critical Length: 256 Initialization Vector: 0x344E9416 Encrypted Data 0000 00 30 48 41 4f 4b 00 0c 29 66 91 21 08 00 45 00 .0HAOK..)f.!..E. 0010 01 38 0f fe 00 00 80 11 eb 03 a5 e3 f9 77 a5 e3 .8...........w.. 0020 f9 74 01 f4 01 f4 01 24 b5 a4 ad 8e c2 52 50 e4 .t.....$.....RP. 0030 3c ab 4f 5b 44 65 8c b6 e4 a2 2e 20 23 08 00 00 <.O[De..... #... 0040 00 01 00 00 01 1c 23 00 01 00 34 4e 94 16 31 62 ......#...4N..1b 0050 7e ca 53 95 59 91 59 c3 b8 70 9f 07 82 22 e0 b1 ~.S.Y.Y..p...".. 0060 6e 53 e8 c9 b8 39 b0 b1 6a 6f f8 7c 66 c5 82 2b nS...9..jo.|f..+ 0070 54 84 72 d8 50 be 44 ee fa 84 a5 8d 4c 13 d5 ee T.r.P.D.....L... 0080 2e e9 43 0f fb 52 46 85 7b 05 7b 67 cb 82 e1 31 ..C..RF.{.{g...1 0090 ff 61 95 52 e7 d4 12 f4 64 a9 dc 95 4c 3a e5 1c .a.R....d...L:.. 00a0 70 d9 b5 88 b6 d2 1f 62 09 98 18 e8 91 8b 50 d5 p......b......P. 00b0 5a d6 b4 9a 86 88 e2 dc a8 d5 a4 53 6a 2e 94 40 Z..........Sj..@ 00c0 12 71 fa 82 42 42 31 15 d9 41 45 b4 50 77 7c 43 .q..BB1..AE.Pw|C 00d0 ca ea 15 15 af f2 6d 08 75 aa 63 11 85 16 cc 96 ......m.u.c..... 00e0 f3 d5 30 ab 6c 3e 64 02 13 27 f1 9b a0 95 b9 3b ..0.l>d..'.....; 00f0 eb 3b e1 a9 67 fe a5 97 73 91 b9 a0 79 8a cc 3b .;..g...s...y..; 0100 a1 bd 68 1a c5 98 10 61 44 22 6c 6b 23 a6 6c 93 ..h....aD"lk#.l. 0110 ac 25 a1 04 e8 9e c4 d9 52 e5 37 16 d5 7a 4b ef .%......R.7..zK. 0120 dc 6d ce 5d da 08 32 95 c2 53 9d 57 1d 2e ab 38 .m.]..2..S.W...8 0130 bb 47 d7 87 49 88 1c d2 09 b0 b4 89 4a 8f 54 10 .G..I.......J.T. 0140 fb bd 5f 59 7d 78 .._Y}x Frame 4 (310 bytes on wire, 310 bytes captured) Arrival Time: Nov 24, 2006 14:00:58.647038000 Time delta from previous packet: 0.061531000 seconds Time since reference or first frame: 0.087909000 seconds Frame Number: 4 Packet Length: 310 bytes Capture Length: 310 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 296 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb11 [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.119 (165.227.249.119) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 276 Checksum: 0x3859 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xAD8EC25250E43CAB Responder cookie: 0x4F5B44658CB6E4A2 Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000001 Length: 268 Encrypted payload Next payload: Identification - R (36) 0... .... = Not critical Length: 240 Initialization Vector: 0xD6F64EDB Encrypted Data 0000 00 0c 29 66 91 21 00 30 48 41 4f 4b 08 00 45 00 ..)f.!.0HAOK..E. 0010 01 28 00 00 40 00 40 11 fb 11 a5 e3 f9 74 a5 e3 .(..@.@......t.. 0020 f9 77 01 f4 01 f4 01 14 38 59 ad 8e c2 52 50 e4 .w......8Y...RP. 0030 3c ab 4f 5b 44 65 8c b6 e4 a2 2e 20 23 20 00 00 <.O[De..... # .. 0040 00 01 00 00 01 0c 24 00 00 f0 d6 f6 4e db f8 44 ......$.....N..D 0050 48 58 3e 92 6c 71 53 27 28 f0 81 a7 73 b1 74 d9 HX>.lqS'(...s.t. 0060 e9 f4 74 71 f6 51 52 4d 1b a1 af 3b fb fd 4a 47 ..tq.QRM...;..JG 0070 bf 5e 0e e5 0f f6 6e 3b e9 8d dc bd 78 06 07 73 .^....n;....x..s 0080 1e 97 1e 7d 2c b2 ee 3a 00 28 d2 44 82 aa c1 97 ...},..:.(.D.... 0090 eb 4b f1 36 5f 9e b6 20 b2 f1 52 7b bc b4 ed f4 .K.6_.. ..R{.... 00a0 46 6e 0f d3 14 fd 9f c6 a0 38 bb 9e 1b 27 c6 0d Fn.......8...'.. 00b0 9c 40 a4 0c 36 1f 02 f6 12 69 b3 00 3c da fd 76 .@..6....i..<..v 00c0 12 81 51 fc b3 07 64 9a 5b 00 e7 33 97 64 53 0f ..Q...d.[..3.dS. 00d0 27 15 6b 5e 94 e0 c7 23 69 e9 49 47 f7 87 94 47 '.k^...#i.IG...G 00e0 30 3b ad a2 74 32 e0 3f 05 f1 0c 44 4f 76 81 b1 0;..t2.?...DOv.. 00f0 74 b6 0d d5 fe a9 c8 14 16 b2 67 e0 fb 74 0e d8 t.........g..t.. 0100 35 d3 45 9b 53 57 45 98 20 de 36 f0 c0 6d 02 9c 5.E.SWE. .6..m.. 0110 63 1b e7 82 2d e7 27 9d 15 72 03 33 53 18 a1 ab c...-.'..r.3S... 0120 1b 6c 47 98 73 68 87 00 3c ab b1 29 ce 34 88 8b .lG.sh..<..).4.. 0130 0b 5d 83 15 29 64 .]..)d Frame 5 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 24, 2006 14:00:58.998313000 Time delta from previous packet: 0.351275000 seconds Time since reference or first frame: 0.439184000 seconds Frame Number: 5 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8ba0 [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.116 (165.227.249.116) Encapsulating Security Payload SPI: 0x206a71b0 Sequence: 1 Data (92 bytes) 0000 00 30 48 41 4f 4b 00 0c 29 66 91 21 08 00 45 00 .0HAOK..)f.!..E. 0010 00 78 00 00 00 00 f0 32 8b a0 a5 e3 f9 77 a5 e3 .x.....2.....w.. 0020 f9 74 20 6a 71 b0 00 00 00 01 b2 85 0f 10 f9 1e .t jq........... 0030 da ed 40 27 58 8f a5 ec 3f 21 3d 6c 60 64 2e 69 ..@'X...?!=l`d.i 0040 95 a9 b7 ea 87 19 35 ca 7a a1 6b 42 e5 3a 36 2b ......5.z.kB.:6+ 0050 77 73 f1 e4 1e f7 d4 5d 08 e7 a4 c1 15 00 27 62 ws.....]......'b 0060 a0 48 be 6b a1 8b d5 ac a0 90 1b dc bf 0c af 60 .H.k...........` 0070 d7 30 ee 62 32 62 48 ec ad 7a 51 29 69 f5 08 34 .0.b2bH..zQ)i..4 0080 c7 a8 21 e7 ab 4b ..!..K Frame 6 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 24, 2006 14:00:59.000395000 Time delta from previous packet: 0.002082000 seconds Time since reference or first frame: 0.441266000 seconds Frame Number: 6 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0003 (3) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1d9e [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.119 (165.227.249.119) Encapsulating Security Payload SPI: 0xfa6fdcab Sequence: 1 Data (92 bytes) 0000 00 0c 29 66 91 21 00 30 48 41 4f 4b 08 00 45 00 ..)f.!.0HAOK..E. 0010 00 78 00 03 40 00 1e 32 1d 9e a5 e3 f9 74 a5 e3 .x..@..2.....t.. 0020 f9 77 fa 6f dc ab 00 00 00 01 b7 00 1e 47 12 4e .w.o.........G.N 0030 69 9b c4 8a d5 76 9f 07 08 e1 dc 33 7c 7b d4 ae i....v.....3|{.. 0040 e3 2a 8c 60 7e cc 4b 42 84 64 c8 14 c7 7a 52 eb .*.`~.KB.d...zR. 0050 d6 aa 1e ea eb 57 0b 1b 8a d7 06 80 b2 26 e6 16 .....W.......&.. 0060 e6 80 54 53 76 14 fc 79 35 7a 86 4b c5 cd 85 ec ..TSv..y5z.K.... 0070 85 58 65 5f af 16 25 57 d0 5e f7 49 5c 43 21 59 .Xe_..%W.^.I\C!Y 0080 6c 2f 17 bb e1 51 l/...Q Frame 7 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 24, 2006 14:00:59.636874000 Time delta from previous packet: 0.636479000 seconds Time since reference or first frame: 1.077745000 seconds Frame Number: 7 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b9f [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.116 (165.227.249.116) Encapsulating Security Payload SPI: 0x206a71b0 Sequence: 2 Data (92 bytes) 0000 00 30 48 41 4f 4b 00 0c 29 66 91 21 08 00 45 00 .0HAOK..)f.!..E. 0010 00 78 00 01 00 00 f0 32 8b 9f a5 e3 f9 77 a5 e3 .x.....2.....w.. 0020 f9 74 20 6a 71 b0 00 00 00 02 8d 5b 36 b2 5e 2f .t jq......[6.^/ 0030 30 49 80 af 9f 72 19 42 9d d2 77 9c dd 23 26 56 0I...r.B..w..#&V 0040 46 b0 9c 91 99 0b 2d fb 71 84 fa 24 a2 ec 88 50 F.....-.q..$...P 0050 40 6a f7 cf 7a 83 bb 80 2f 96 b7 b4 d0 21 b4 64 @j..z.../....!.d 0060 1e cc 11 7b e7 f8 ef 48 35 e5 c4 6b 3d 11 20 cb ...{...H5..k=. . 0070 20 17 66 fd 1e c5 8b d9 7e 23 da 0d 0a d5 22 73 .f.....~#...."s 0080 77 b4 7a 6a 3f b7 w.zj?. Frame 8 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 24, 2006 14:00:59.637923000 Time delta from previous packet: 0.001049000 seconds Time since reference or first frame: 1.078794000 seconds Frame Number: 8 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0004 (4) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1d9d [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.119 (165.227.249.119) Encapsulating Security Payload SPI: 0xfa6fdcab Sequence: 2 Data (92 bytes) 0000 00 0c 29 66 91 21 00 30 48 41 4f 4b 08 00 45 00 ..)f.!.0HAOK..E. 0010 00 78 00 04 40 00 1e 32 1d 9d a5 e3 f9 74 a5 e3 .x..@..2.....t.. 0020 f9 77 fa 6f dc ab 00 00 00 02 96 f9 aa 03 b6 1f .w.o............ 0030 36 20 fd fe dd 3c fd 4d ce 6e d0 71 8c 6e ac 40 6 ...<.M.n.q.n.@ 0040 d4 02 98 e3 dc 9f cd 19 6d 24 3a a4 a8 f1 6f bd ........m$:...o. 0050 60 50 99 bd 9b 61 0b ed ca bf 53 7b 6b 1f 2b 7d `P...a....S{k.+} 0060 f4 ea dc fd f6 91 75 e5 b3 28 50 2e f9 3d 05 87 ......u..(P..=.. 0070 d8 60 cc f4 a0 ed 62 f0 35 3b 05 a9 72 01 25 3a .`....b.5;..r.%: 0080 50 2f 65 af 4e 6a P/e.Nj Frame 9 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 24, 2006 14:01:00.661812000 Time delta from previous packet: 1.023889000 seconds Time since reference or first frame: 2.102683000 seconds Frame Number: 9 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0002 (2) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b9e [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.116 (165.227.249.116) Encapsulating Security Payload SPI: 0x206a71b0 Sequence: 3 Data (92 bytes) 0000 00 30 48 41 4f 4b 00 0c 29 66 91 21 08 00 45 00 .0HAOK..)f.!..E. 0010 00 78 00 02 00 00 f0 32 8b 9e a5 e3 f9 77 a5 e3 .x.....2.....w.. 0020 f9 74 20 6a 71 b0 00 00 00 03 76 df a9 06 d8 b3 .t jq.....v..... 0030 8e 6b d9 fe fe f3 09 4d 29 b6 34 bd 5a 13 41 a9 .k.....M).4.Z.A. 0040 98 a2 5a 4b bd 60 b8 73 5b 31 08 af 57 a9 30 dd ..ZK.`.s[1..W.0. 0050 1b 40 07 87 90 a9 8b ac a3 9c 65 a1 6f 2a 1d 65 .@........e.o*.e 0060 58 9a 61 b0 3d 24 f2 e5 c8 9f ba 33 e1 0e 01 24 X.a.=$.....3...$ 0070 a4 bc 3b e7 3c fa af 70 11 fd 1d 4e a3 f7 9b 21 ..;.<..p...N...! 0080 f1 0b 3f 54 34 2a ..?T4* Frame 10 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 24, 2006 14:01:00.663860000 Time delta from previous packet: 0.002048000 seconds Time since reference or first frame: 2.104731000 seconds Frame Number: 10 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0005 (5) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1d9c [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.119 (165.227.249.119) Encapsulating Security Payload SPI: 0xfa6fdcab Sequence: 3 Data (92 bytes) 0000 00 0c 29 66 91 21 00 30 48 41 4f 4b 08 00 45 00 ..)f.!.0HAOK..E. 0010 00 78 00 05 40 00 1e 32 1d 9c a5 e3 f9 74 a5 e3 .x..@..2.....t.. 0020 f9 77 fa 6f dc ab 00 00 00 03 8d 4c 1a 30 17 0e .w.o.......L.0.. 0030 3a 4d e4 b4 d9 0f ac e7 d6 16 fc dc 3c 35 57 88 :M..........<5W. 0040 ff d2 2d f1 1b be 31 59 b1 f9 1d 3b 0d af ee d2 ..-...1Y...;.... 0050 70 7c 88 e7 11 ca 75 3e ac 9f b4 1c b4 a5 fa 99 p|....u>........ 0060 84 e1 67 aa 5b d8 52 d1 c2 d1 34 a6 31 ca af f9 ..g.[.R...4.1... 0070 65 af 2d af 0e 26 3e 2b 10 8d 7f 85 31 9a ee 0e e.-..&>+....1... 0080 d7 c2 c2 13 77 9d ....w. Frame 11 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 24, 2006 14:01:01.622599000 Time delta from previous packet: 0.958739000 seconds Time since reference or first frame: 3.063470000 seconds Frame Number: 11 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0003 (3) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b9d [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.116 (165.227.249.116) Encapsulating Security Payload SPI: 0x206a71b0 Sequence: 4 Data (92 bytes) 0000 00 30 48 41 4f 4b 00 0c 29 66 91 21 08 00 45 00 .0HAOK..)f.!..E. 0010 00 78 00 03 00 00 f0 32 8b 9d a5 e3 f9 77 a5 e3 .x.....2.....w.. 0020 f9 74 20 6a 71 b0 00 00 00 04 54 98 a2 67 66 2d .t jq.....T..gf- 0030 4b bc bb 1b ec 45 49 d0 b8 bc f3 c4 fa 29 7b e1 K....EI......){. 0040 d9 5a 1c 64 f6 3f 4d 95 76 ba 5f 33 29 6e 18 40 .Z.d.?M.v._3)n.@ 0050 46 65 1c e2 fb 75 73 af 63 e2 65 a0 da 48 5d 5b Fe...us.c.e..H][ 0060 9a 53 20 a5 fe e4 1c 7b af d3 0a 7f 8c ce b7 19 .S ....{........ 0070 fb 16 d8 42 c5 ac f5 c4 e8 ee ba 00 f3 f2 0b 30 ...B...........0 0080 ec 4a a2 d3 1d 09 .J.... Frame 12 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 24, 2006 14:01:01.623578000 Time delta from previous packet: 0.000979000 seconds Time since reference or first frame: 3.064449000 seconds Frame Number: 12 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0006 (6) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1d9b [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.119 (165.227.249.119) Encapsulating Security Payload SPI: 0xfa6fdcab Sequence: 4 Data (92 bytes) 0000 00 0c 29 66 91 21 00 30 48 41 4f 4b 08 00 45 00 ..)f.!.0HAOK..E. 0010 00 78 00 06 40 00 1e 32 1d 9b a5 e3 f9 74 a5 e3 .x..@..2.....t.. 0020 f9 77 fa 6f dc ab 00 00 00 04 fc 09 15 3a 92 16 .w.o.........:.. 0030 9e d1 d6 65 71 83 b0 8b 9d a2 a4 04 cf a0 cd b1 ...eq........... 0040 bd 48 a3 02 19 61 1f 88 db 07 3f 78 99 94 ed df .H...a....?x.... 0050 9e ff 4d 43 3c 9f e0 3f 1e be b0 1c 2d ce ea a8 ..MC<..?....-... 0060 65 25 a4 f9 68 fd 84 26 c4 e6 2a 9c c1 7c 0d e7 e%..h..&..*..|.. 0070 06 f9 21 ff 05 7c 27 e8 b9 e1 20 cb c0 e4 4d 0e ..!..|'... ...M. 0080 60 dc 3d 0c 5f a3 `.=._.