Frame 1 (322 bytes on wire, 322 bytes captured) Arrival Time: Nov 29, 2006 11:31:17.080377000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 322 bytes Capture Length: 322 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 308 Identification: 0x7000 (28672) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xcb02 [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.104 (165.227.249.104) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 288 Checksum: 0x017b [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xDAE996E3AA379B93 Responder cookie: 0x0000000000000000 Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000000 Length: 280 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: RESERVED (0) 0... .... = Not critical Length: 68 Nonce Data 0000 00 06 b1 33 80 5d 00 0c 29 96 d4 43 08 00 45 00 ...3.]..)..C..E. 0010 01 34 70 00 00 00 40 11 cb 02 a5 e3 f9 86 a5 e3 .4p...@......... 0020 f9 68 01 f4 01 f4 01 20 01 7b da e9 96 e3 aa 37 .h..... .{.....7 0030 9b 93 00 00 00 00 00 00 00 00 21 20 22 08 00 00 ..........! "... 0040 00 00 00 00 01 18 22 00 00 30 00 00 00 2c 01 01 ......"..0...,.. 0050 00 04 03 00 00 08 04 00 00 02 03 00 00 08 02 00 ................ 0060 00 02 03 00 00 0c 01 00 00 0c 80 0e 00 80 00 00 ................ 0070 00 08 03 00 00 02 28 00 00 88 00 02 00 00 c6 06 ......(......... 0080 eb 4d 36 69 7b e5 0e 35 66 58 d0 92 5b 33 fe 66 .M6i{..5fX..[3.f 0090 11 f4 d3 8e e1 df 5e bc 6e 18 1c d5 62 d5 1f d0 ......^.n...b... 00a0 bf 8c 32 87 36 ca a1 cf 42 b1 9a ae 9c 50 ff 06 ..2.6...B....P.. 00b0 38 37 15 87 b1 24 86 df ac 9d d8 ee 36 c0 65 2c 87...$......6.e, 00c0 1f b6 b9 e5 55 50 13 98 00 3b 14 68 ad 9c 02 43 ....UP...;.h...C 00d0 ac e4 b0 a6 d9 bf 03 a1 64 e3 9c 5a 18 20 0a ef ........d..Z. .. 00e0 b1 a4 c2 5f c2 f1 46 61 85 87 c7 3b cd de 4f 60 ..._..Fa...;..O` 00f0 c3 ee e2 8e 3c 0a bc 64 94 1c b5 8b 12 b1 00 00 ....<..d........ 0100 00 44 2f af 7a b3 af bc 89 b4 b5 bf 7c a8 0f bb .D/.z.......|... 0110 41 2b e3 d6 a6 e9 cf 1b c9 a3 88 fd 0f 90 26 e4 A+............&. 0120 49 e3 f8 6c f1 f2 44 11 1a 50 a9 3f 55 cc 68 fd I..l..D..P.?U.h. 0130 1f 53 81 c9 7b 0d 84 1c 96 3c 8c ce 35 ef df c8 .S..{....<..5... 0140 56 6a Vj Frame 2 (358 bytes on wire, 358 bytes captured) Arrival Time: Nov 29, 2006 11:31:17.302130000 Time delta from previous packet: 0.221753000 seconds Time since reference or first frame: 0.221753000 seconds Frame Number: 2 Packet Length: 358 bytes Capture Length: 358 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 344 Identification: 0x0001 (1) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7bdd [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 324 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0xDAE996E3AA379B93 Responder cookie: 0x910D3B2416C0FC45 Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000000 Length: 316 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: Notification (41) 0... .... = Not critical Length: 24 Nonce Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: RESERVED (0) SPI size: 0 Message type: NAT_DETECTION_SOURCE_IP (16388) Notification Data Notification payload Next payload: Vendor ID (43) 0... .... = Not critical Length: 28 Protocol ID: RESERVED (0) SPI size: 0 Message type: NAT_DETECTION_DESTINATION_IP (16389) Notification Data Vendor ID payload Next payload: RESERVED (0) 0... .... = Not critical Length: 24 Vendor ID: unknown vendor ID: 0x2A6775D0AD2AA7887C33FE1D68BAF308966F0001 0000 00 0c 29 96 d4 43 00 06 b1 33 80 5d 08 00 45 00 ..)..C...3.]..E. 0010 01 58 00 01 00 00 ff 11 7b dd a5 e3 f9 68 a5 e3 .X......{....h.. 0020 f9 86 01 f4 01 f4 01 44 00 00 da e9 96 e3 aa 37 .......D.......7 0030 9b 93 91 0d 3b 24 16 c0 fc 45 21 20 22 20 00 00 ....;$...E! " .. 0040 00 00 00 00 01 3c 22 00 00 30 00 00 00 2c 01 01 .....<"..0...,.. 0050 00 04 03 00 00 0c 01 00 00 0c 80 0e 00 80 03 00 ................ 0060 00 08 03 00 00 02 03 00 00 08 02 00 00 02 00 00 ................ 0070 00 08 04 00 00 02 28 00 00 88 00 02 00 00 b5 f5 ......(......... 0080 c9 7d c8 2b dc 90 8a 0e d9 2d 54 e7 8b a9 01 89 .}.+.....-T..... 0090 40 ed bd bb 4d 2f 7f 97 64 86 3a 6c 05 f0 7e 4d @...M/..d.:l..~M 00a0 8a 2b 3e 64 15 42 66 09 ea a9 8d a9 0f bc 5b 33 .+>d.Bf.......[3 00b0 82 b8 bc b2 5d f3 44 a5 1a 4b 2c 25 8a 6a 71 76 ....].D..K,%.jqv 00c0 e3 2c 12 9e ff 7e a4 1a d9 3f d2 1f e8 cb 60 1e .,...~...?....`. 00d0 00 c9 33 64 00 4f 44 8c e0 cf 71 d0 bd 6f 98 7d ..3d.OD...q..o.} 00e0 df cc 4a 9b 3a 73 4c 88 ac 9e 45 f8 67 6c 28 16 ..J.:sL...E.gl(. 00f0 40 d9 ba 31 5c 1f 49 6b 6b c5 8f 8b 57 f3 29 00 @..1\.Ikk...W.). 0100 00 18 ab ee e0 26 de 5e f2 68 2d 9d 23 27 2f 41 .....&.^.h-.#'/A 0110 31 57 1f 48 de a1 29 00 00 1c 00 00 40 04 7b 25 1W.H..).....@.{% 0120 89 9b 3e e4 06 7d 60 94 16 8f fe f8 d0 5e 50 fb ..>..}`......^P. 0130 bc 68 2b 00 00 1c 00 00 40 05 4d 22 52 c2 b8 e3 .h+.....@.M"R... 0140 b0 a1 61 a1 9f dd 1d f9 cc 8f 03 61 68 89 00 00 ..a........ah... 0150 00 18 2a 67 75 d0 ad 2a a7 88 7c 33 fe 1d 68 ba ..*gu..*..|3..h. 0160 f3 08 96 6f 00 01 ...o.. Frame 3 (246 bytes on wire, 246 bytes captured) Arrival Time: Nov 29, 2006 11:31:17.369330000 Time delta from previous packet: 0.067200000 seconds Time since reference or first frame: 0.288953000 seconds Frame Number: 3 Packet Length: 246 bytes Capture Length: 246 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 232 Identification: 0x7000 (28672) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xcb4e [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.104 (165.227.249.104) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 212 Checksum: 0x8f99 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xDAE996E3AA379B93 Responder cookie: 0x910D3B2416C0FC45 Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000001 Length: 204 Encrypted payload Next payload: Identification - I (35) 0... .... = Not critical Length: 176 Initialization Vector: 0xF83CF792 Encrypted Data 0000 00 06 b1 33 80 5d 00 0c 29 96 d4 43 08 00 45 00 ...3.]..)..C..E. 0010 00 e8 70 00 00 00 40 11 cb 4e a5 e3 f9 86 a5 e3 ..p...@..N...... 0020 f9 68 01 f4 01 f4 00 d4 8f 99 da e9 96 e3 aa 37 .h.............7 0030 9b 93 91 0d 3b 24 16 c0 fc 45 2e 20 23 08 00 00 ....;$...E. #... 0040 00 01 00 00 00 cc 23 00 00 b0 f8 3c f7 92 80 f8 ......#....<.... 0050 75 17 d5 c9 12 d9 e6 65 d5 cd f7 cc 02 b5 f3 5f u......e......._ 0060 e6 56 65 0a f2 52 63 2b 29 85 d1 53 80 7d a4 28 .Ve..Rc+)..S.}.( 0070 c0 ba 94 ba 2e 18 fd 70 a8 80 63 f3 ae 0c 86 f9 .......p..c..... 0080 77 57 fb 70 4d 18 9c a5 6d 2c 2f 50 3e de 70 b2 wW.pM...m,/P>.p. 0090 43 47 f1 9c c7 54 2a aa a4 91 c3 a4 32 bc 0a 58 CG...T*.....2..X 00a0 d3 de 4f ec 24 7e 3d f1 cf f2 08 c6 f0 d0 8b b4 ..O.$~=......... 00b0 88 ff f5 b3 f4 c8 f4 0b 6e 56 99 8a 80 ec 43 ce ........nV....C. 00c0 1a 21 63 40 9a 5a c4 27 de 17 23 f9 8c 9a a4 60 .!c@.Z.'..#....` 00d0 8f a1 38 ee 59 7a 4b f3 df d9 9a 3f ce 09 b5 67 ..8.YzK....?...g 00e0 25 7e 87 fd 63 8d 56 01 c7 84 f1 bd 16 c0 80 32 %~..c.V........2 00f0 6f f8 79 e0 84 38 o.y..8 Frame 4 (246 bytes on wire, 246 bytes captured) Arrival Time: Nov 29, 2006 11:31:17.385625000 Time delta from previous packet: 0.016295000 seconds Time since reference or first frame: 0.305248000 seconds Frame Number: 4 Packet Length: 246 bytes Capture Length: 246 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 232 Identification: 0x0002 (2) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7c4c [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 212 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0xDAE996E3AA379B93 Responder cookie: 0x910D3B2416C0FC45 Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000001 Length: 204 Encrypted payload Next payload: Identification - R (36) 0... .... = Not critical Length: 176 Initialization Vector: 0xAD4000DD Encrypted Data 0000 00 0c 29 96 d4 43 00 06 b1 33 80 5d 08 00 45 00 ..)..C...3.]..E. 0010 00 e8 00 02 00 00 ff 11 7c 4c a5 e3 f9 68 a5 e3 ........|L...h.. 0020 f9 86 01 f4 01 f4 00 d4 00 00 da e9 96 e3 aa 37 ...............7 0030 9b 93 91 0d 3b 24 16 c0 fc 45 2e 20 23 20 00 00 ....;$...E. # .. 0040 00 01 00 00 00 cc 24 00 00 b0 ad 40 00 dd 96 2c ......$....@..., 0050 a3 a2 0e 2e 10 3f 4f 7b b0 6c f9 fa ca ba 08 e3 .....?O{.l...... 0060 63 41 d3 06 0f 4d 8e 57 a2 f1 1f 21 68 02 cd e9 cA...M.W...!h... 0070 17 d9 83 ed 04 65 60 cd 85 32 12 25 c0 ad 31 df .....e`..2.%..1. 0080 74 5e 4a be 1c 17 e2 b0 cf bf 1c d7 c4 65 db e8 t^J..........e.. 0090 d0 51 ad cc e4 37 52 3f f6 6a ad 1c 8d f9 3f fd .Q...7R?.j....?. 00a0 60 77 3e b5 2a 21 7f 30 03 84 1b d5 aa d4 b7 05 `w>.*!.0........ 00b0 d4 4f 9c 05 8a 51 64 2c d8 1e 42 06 be 85 18 16 .O...Qd,..B..... 00c0 da 75 b1 e9 50 cd 88 a6 92 1e 61 8b 41 26 b3 a0 .u..P.....a.A&.. 00d0 9e c5 9c 6e b4 c9 07 87 c5 36 01 91 fa aa 50 62 ...n.....6....Pb 00e0 b5 8b a1 16 8b f3 ac f0 82 53 9b d3 32 b9 fa a3 .........S..2... 00f0 57 76 24 58 22 30 Wv$X"0 Frame 5 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:31:20.472611000 Time delta from previous packet: 3.086986000 seconds Time since reference or first frame: 3.392234000 seconds Frame Number: 5 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x7200 (29184) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0x8a9d [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.104 (165.227.249.104) Encapsulating Security Payload SPI: 0xc029cfaa Sequence: 1 Data (92 bytes) 0000 00 06 b1 33 80 5d 00 0c 29 96 d4 43 08 00 45 00 ...3.]..)..C..E. 0010 00 78 72 00 00 00 7f 32 8a 9d a5 e3 f9 86 a5 e3 .xr....2........ 0020 f9 68 c0 29 cf aa 00 00 00 01 5b 8d bc 88 31 5c .h.)......[...1\ 0030 e8 21 18 96 5f 5a fc a5 95 01 81 54 a3 a3 5e 75 .!.._Z.....T..^u 0040 e6 55 25 8e e7 4f 4d 3f 56 86 8c f1 85 6e 40 18 .U%..OM?V....n@. 0050 99 d2 82 b3 b0 66 d7 a2 ba 60 f7 77 70 f8 72 57 .....f...`.wp.rW 0060 47 06 0e 9a 91 f7 5c 1b 4b 65 e9 51 3a 86 eb 9e G.....\.Ke.Q:... 0070 ff 22 77 4a 0f 5b 6a 4b e7 b6 82 b1 81 ff 68 68 ."wJ.[jK......hh 0080 34 5a 1c 5a 0d 69 4Z.Z.i Frame 6 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:31:20.478670000 Time delta from previous packet: 0.006059000 seconds Time since reference or first frame: 3.398293000 seconds Frame Number: 6 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c9d [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x7cb35868 Sequence: 1 Data (92 bytes) 0000 00 0c 29 96 d4 43 00 06 b1 33 80 5d 08 00 45 00 ..)..C...3.]..E. 0010 00 78 00 00 00 00 ff 32 7c 9d a5 e3 f9 68 a5 e3 .x.....2|....h.. 0020 f9 86 7c b3 58 68 00 00 00 01 fe 4f c5 ef 93 f9 ..|.Xh.....O.... 0030 0c cb 48 94 b3 34 68 06 fa 10 64 64 d9 2a e4 01 ..H..4h...dd.*.. 0040 ad a6 73 59 cd 0e 9c 80 83 3a 1c af ba 72 73 ed ..sY.....:...rs. 0050 75 fd fb 31 ae 3c 3c fe bc 44 b6 80 34 66 f9 b1 u..1.<<..D..4f.. 0060 e9 1a 37 64 a0 2f e5 17 ac 8d 53 fa c4 88 4c c3 ..7d./....S...L. 0070 ae 40 97 8f 7b f7 d3 a4 7b 07 0a b1 c3 48 8f 91 .@..{...{....H.. 0080 6c de ce 70 17 26 l..p.& Frame 7 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:31:21.106952000 Time delta from previous packet: 0.628282000 seconds Time since reference or first frame: 4.026575000 seconds Frame Number: 7 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x7500 (29952) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0x879d [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.104 (165.227.249.104) Encapsulating Security Payload SPI: 0xc029cfaa Sequence: 2 Data (92 bytes) 0000 00 06 b1 33 80 5d 00 0c 29 96 d4 43 08 00 45 00 ...3.]..)..C..E. 0010 00 78 75 00 00 00 7f 32 87 9d a5 e3 f9 86 a5 e3 .xu....2........ 0020 f9 68 c0 29 cf aa 00 00 00 02 5b 8d bc 88 31 5c .h.)......[...1\ 0030 e8 21 18 96 5f 5a fc a5 95 01 50 c0 04 56 dd 6a .!.._Z....P..V.j 0040 ac 7c e9 ff 8a 95 67 f6 66 3b 4e f6 be 37 df ac .|....g.f;N..7.. 0050 65 de f5 60 0f 6a d3 fe a1 94 2d c9 b9 e9 3a 2d e..`.j....-...:- 0060 db ec 1c 93 d1 2e 51 27 71 86 60 2e 19 b4 f9 5a ......Q'q.`....Z 0070 e1 b6 28 ac bb f1 6d ce 7b d2 17 ce a6 de f6 a6 ..(...m.{....... 0080 2a 0a 7e 87 6b 6b *.~.kk Frame 8 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:31:21.111538000 Time delta from previous packet: 0.004586000 seconds Time since reference or first frame: 4.031161000 seconds Frame Number: 8 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c9c [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x7cb35868 Sequence: 2 Data (92 bytes) 0000 00 0c 29 96 d4 43 00 06 b1 33 80 5d 08 00 45 00 ..)..C...3.]..E. 0010 00 78 00 01 00 00 ff 32 7c 9c a5 e3 f9 68 a5 e3 .x.....2|....h.. 0020 f9 86 7c b3 58 68 00 00 00 02 4a 4f 98 58 6e dc ..|.Xh....JO.Xn. 0030 f5 ee 07 f8 f5 ee f8 07 0b 35 6a b5 3d 99 f9 1c .........5j.=... 0040 2e e8 cd bd f5 c3 2a ca ff d9 e4 31 7c 76 64 d2 ......*....1|vd. 0050 9c 2f 69 48 8e 11 af de ea 11 9a 44 9c 53 4c fa ./iH.......D.SL. 0060 7c e1 35 6e c5 17 f4 8b b0 e3 57 80 9b 69 37 14 |.5n......W..i7. 0070 90 ad 95 c4 1d 9c e5 16 ab 7c 84 1b dc ec 03 34 .........|.....4 0080 b2 38 bb 39 aa 2c .8.9., Frame 9 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:31:21.771022000 Time delta from previous packet: 0.659484000 seconds Time since reference or first frame: 4.690645000 seconds Frame Number: 9 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x7700 (30464) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0x859d [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.104 (165.227.249.104) Encapsulating Security Payload SPI: 0xc029cfaa Sequence: 3 Data (92 bytes) 0000 00 06 b1 33 80 5d 00 0c 29 96 d4 43 08 00 45 00 ...3.]..)..C..E. 0010 00 78 77 00 00 00 7f 32 85 9d a5 e3 f9 86 a5 e3 .xw....2........ 0020 f9 68 c0 29 cf aa 00 00 00 03 5b 8d bc 88 31 5c .h.)......[...1\ 0030 e8 21 18 96 5f 5a fc a5 95 01 5e f1 c3 43 5e 90 .!.._Z....^..C^. 0040 d4 4e 38 63 b8 90 d6 f2 60 d8 2f 4a f2 24 d1 51 .N8c....`./J.$.Q 0050 94 17 71 5b 77 42 8c a3 d0 13 09 1b dd f2 c0 61 ..q[wB.........a 0060 00 cd 23 c9 e0 21 9b f9 76 39 56 de 1c 56 49 d1 ..#..!..v9V..VI. 0070 2d 52 75 b7 99 ab 4f 94 dd 4f 5c 35 7d 0b 70 cd -Ru...O..O\5}.p. 0080 36 1e 2d 9b 86 24 6.-..$ Frame 10 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:31:21.775416000 Time delta from previous packet: 0.004394000 seconds Time since reference or first frame: 4.695039000 seconds Frame Number: 10 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0002 (2) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c9b [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x7cb35868 Sequence: 3 Data (92 bytes) 0000 00 0c 29 96 d4 43 00 06 b1 33 80 5d 08 00 45 00 ..)..C...3.]..E. 0010 00 78 00 02 00 00 ff 32 7c 9b a5 e3 f9 68 a5 e3 .x.....2|....h.. 0020 f9 86 7c b3 58 68 00 00 00 03 d4 8e 2b a7 d4 9c ..|.Xh......+... 0030 60 ca 46 d4 60 ca b9 2b 9f 7c f7 16 a0 01 ea 83 `.F.`..+.|...... 0040 38 c8 a7 0f bb 0e 5f 30 ac ab d7 d5 97 be f7 a0 8....._0........ 0050 2c 92 57 66 77 8b d9 57 bd ce 50 63 51 55 80 5e ,.Wfw..W..PcQU.^ 0060 ab f5 71 c7 34 45 85 a1 41 03 3a 5d 58 5f 3a df ..q.4E..A.:]X_:. 0070 b6 f3 69 9a 75 ee b3 e8 e5 ea a2 77 98 3f 8e c6 ..i.u......w.?.. 0080 14 57 e7 b5 de 22 .W..."