Frame 1 (322 bytes on wire, 322 bytes captured) Arrival Time: Nov 29, 2006 11:47:36.675295000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 322 bytes Capture Length: 322 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 308 Identification: 0x6800 (26624) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xd2f6 [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.116 (165.227.249.116) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 288 Checksum: 0x144f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5B821D52121DDC24 Responder cookie: 0x0000000000000000 Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000000 Length: 280 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: RESERVED (0) 0... .... = Not critical Length: 68 Nonce Data 0000 00 30 48 41 4f 4b 00 0c 29 96 d4 43 08 00 45 00 .0HAOK..)..C..E. 0010 01 34 68 00 00 00 40 11 d2 f6 a5 e3 f9 86 a5 e3 .4h...@......... 0020 f9 74 01 f4 01 f4 01 20 14 4f 5b 82 1d 52 12 1d .t..... .O[..R.. 0030 dc 24 00 00 00 00 00 00 00 00 21 20 22 08 00 00 .$........! "... 0040 00 00 00 00 01 18 22 00 00 30 00 00 00 2c 01 01 ......"..0...,.. 0050 00 04 03 00 00 08 04 00 00 02 03 00 00 08 02 00 ................ 0060 00 02 03 00 00 0c 01 00 00 0c 80 0e 00 80 00 00 ................ 0070 00 08 03 00 00 02 28 00 00 88 00 02 00 00 8c 0f ......(......... 0080 7f 09 31 4b 41 16 3f 00 56 53 4e a9 ca f7 a4 0c ..1KA.?.VSN..... 0090 c9 34 80 73 01 c4 ce 09 46 b3 2d a5 18 d8 18 f1 .4.s....F.-..... 00a0 5c 7e dc 1f 14 0b 15 39 5f ae 37 13 93 30 52 33 \~.....9_.7..0R3 00b0 52 3a 12 1f c3 06 2e af 29 f0 9e 3e 0e 90 62 3f R:......)..>..b? 00c0 2c 72 7e 7a d7 b1 5b 1c f9 9e c3 22 f2 8d d5 75 ,r~z..[...."...u 00d0 0c ae ea 31 df 88 08 85 15 17 5d bc a8 f2 c6 ad ...1......]..... 00e0 c1 14 27 5c cc b2 22 f1 22 0a b1 a9 b2 cf d5 58 ..'\.."."......X 00f0 3b eb b2 1f 72 7c 3c 2b 41 2d a8 2e b4 2f 00 00 ;...r|<+A-.../.. 0100 00 44 c4 2d e9 d2 89 11 b2 a0 b6 fa 45 05 ea 4d .D.-........E..M 0110 3d b1 bb da de 73 2b 65 f0 eb de b1 12 76 37 7f =....s+e.....v7. 0120 10 4f 3f c8 27 fb 1f f4 c6 ce 29 b3 ae 9a 9e 6f .O?.'.....)....o 0130 be aa 73 09 64 ca 6d 6a 0a 08 81 d5 11 a5 4b 6d ..s.d.mj......Km 0140 dc ca .. Frame 2 (476 bytes on wire, 476 bytes captured) Arrival Time: Nov 29, 2006 11:47:36.687111000 Time delta from previous packet: 0.011816000 seconds Time since reference or first frame: 0.011816000 seconds Frame Number: 2 Packet Length: 476 bytes Capture Length: 476 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 462 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa5c [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 442 Checksum: 0xc59f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5B821D52121DDC24 Responder cookie: 0x73F340FF0298D7A7 Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000000 Length: 434 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: Notification (41) 0... .... = Not critical Length: 166 Nonce Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: ISAKMP (1) SPI size: 0 Message type: NAT_DETECTION_DESTINATION_IP (16389) Notification Data Notification payload Next payload: RESERVED (0) 0... .... = Not critical Length: 28 Protocol ID: ISAKMP (1) SPI size: 0 Message type: NAT_DETECTION_SOURCE_IP (16388) Notification Data 0000 00 0c 29 96 d4 43 00 30 48 41 4f 4b 08 00 45 00 ..)..C.0HAOK..E. 0010 01 ce 00 00 40 00 40 11 fa 5c a5 e3 f9 74 a5 e3 ....@.@..\...t.. 0020 f9 86 01 f4 01 f4 01 ba c5 9f 5b 82 1d 52 12 1d ..........[..R.. 0030 dc 24 73 f3 40 ff 02 98 d7 a7 21 20 22 20 00 00 .$s.@.....! " .. 0040 00 00 00 00 01 b2 22 00 00 30 00 00 00 2c 01 01 ......"..0...,.. 0050 00 04 03 00 00 0c 01 00 00 0c 80 0e 00 80 03 00 ................ 0060 00 08 03 00 00 02 03 00 00 08 02 00 00 02 00 00 ................ 0070 00 08 04 00 00 02 28 00 00 88 00 02 00 00 54 54 ......(.......TT 0080 2e 13 07 e1 6e 0f 08 0f 80 7e 03 0a 49 b5 8a a7 ....n....~..I... 0090 44 29 ab 30 0e 37 14 11 79 70 7e e6 79 6b 8b 4d D).0.7..yp~.yk.M 00a0 22 51 bb 61 e8 fc 86 38 68 e8 82 38 0d 7d 8f 45 "Q.a...8h..8.}.E 00b0 6f 7a 30 8b 1f ee 60 2b da 90 b6 68 d3 e9 78 46 oz0...`+...h..xF 00c0 5d 37 bc 3a 4a 7b 29 d7 4e f4 b2 b3 a5 1c 13 55 ]7.:J{).N......U 00d0 8e 89 10 91 5e fd e1 99 c7 a0 03 c1 79 2b ec e2 ....^.......y+.. 00e0 55 3b ce 7f a1 44 12 23 36 1a 67 22 d2 f7 6a 80 U;...D.#6.g"..j. 00f0 b9 5e ee 7f 51 af 44 26 08 02 67 80 85 72 29 00 .^..Q.D&..g..r). 0100 00 a6 81 ea d0 49 d4 f1 59 83 1c 84 d2 4a 24 3e .....I..Y....J$> 0110 9a 10 9c af a6 c2 94 2b 67 12 f4 1b 98 ef d7 a8 .......+g....... 0120 75 89 ba 44 06 53 03 55 ba b3 32 18 24 ba fc 81 u..D.S.U..2.$... 0130 f3 c2 71 92 20 07 a6 54 b4 c4 ed d6 51 f7 50 d1 ..q. ..T....Q.P. 0140 ec 33 45 b1 b4 da 0a 51 1e f9 4f 13 14 fd e7 e6 .3E....Q..O..... 0150 e0 f3 5c 3c b1 d1 c7 0d 8f 37 ad a3 88 70 ad 41 ..\<.....7...p.A 0160 14 67 94 28 5d 31 26 20 45 be 7f ee 0d b1 39 cb .g.(]1& E.....9. 0170 cf a7 01 86 d4 a6 1d 31 83 99 22 f2 f5 d8 be 0a .......1.."..... 0180 62 1d be 10 de 78 c5 de eb 8b ee 7c 95 bd c6 8d b....x.....|.... 0190 43 c4 9f 8c cb e6 fa f0 34 31 31 b5 0f cb c5 dd C.......411..... 01a0 b3 34 7e 64 29 00 00 1c 01 00 40 05 20 80 c4 f3 .4~d).....@. ... 01b0 7f cf 7c 30 76 5a e1 be 89 38 ed bc 37 ac 61 da ..|0vZ...8..7.a. 01c0 00 00 00 1c 01 00 40 04 2e 5f 09 09 94 14 ef 29 ......@.._.....) 01d0 5d b7 41 f3 a3 39 23 ab a0 1d 0b 63 ].A..9#....c Frame 3 (246 bytes on wire, 246 bytes captured) Arrival Time: Nov 29, 2006 11:47:36.783798000 Time delta from previous packet: 0.096687000 seconds Time since reference or first frame: 0.108503000 seconds Frame Number: 3 Packet Length: 246 bytes Capture Length: 246 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 232 Identification: 0x6800 (26624) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xd342 [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.116 (165.227.249.116) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 212 Checksum: 0x9102 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5B821D52121DDC24 Responder cookie: 0x73F340FF0298D7A7 Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000001 Length: 204 Encrypted payload Next payload: Identification - I (35) 0... .... = Not critical Length: 176 Initialization Vector: 0xE88802E1 Encrypted Data 0000 00 30 48 41 4f 4b 00 0c 29 96 d4 43 08 00 45 00 .0HAOK..)..C..E. 0010 00 e8 68 00 00 00 40 11 d3 42 a5 e3 f9 86 a5 e3 ..h...@..B...... 0020 f9 74 01 f4 01 f4 00 d4 91 02 5b 82 1d 52 12 1d .t........[..R.. 0030 dc 24 73 f3 40 ff 02 98 d7 a7 2e 20 23 08 00 00 .$s.@...... #... 0040 00 01 00 00 00 cc 23 00 00 b0 e8 88 02 e1 60 e4 ......#.......`. 0050 b9 54 ee d0 d1 c1 65 74 c6 d8 bf aa 90 7b ad 47 .T....et.....{.G 0060 a9 21 28 cc 64 d7 25 09 d3 24 51 2b 17 f1 87 88 .!(.d.%..$Q+.... 0070 6e 2d 5c 68 83 43 9a 91 5c 6b 59 78 9e fe 72 89 n-\h.C..\kYx..r. 0080 66 15 53 24 3a 23 3e eb 41 e8 25 ca 6a 0b de f5 f.S$:#>.A.%.j... 0090 9e 2c 66 f8 72 00 9a f5 6e 12 b5 29 19 80 39 79 .,f.r...n..)..9y 00a0 8d 4b eb 7c a4 c3 d8 c3 33 2f 0d fe 7d f0 b2 a7 .K.|....3/..}... 00b0 f1 c7 94 7c 30 49 12 f6 e0 0b 92 c0 0c 1d 5b 2e ...|0I........[. 00c0 63 5e 31 b9 89 55 e5 8b 59 9a e3 5c 24 de 7c 5d c^1..U..Y..\$.|] 00d0 0c f9 19 3d 0d d3 31 5f 63 35 a3 7d 87 56 6e af ...=..1_c5.}.Vn. 00e0 45 10 e1 5b de 69 21 f6 78 8a 2f 28 e5 7f 7a 0f E..[.i!.x./(..z. 00f0 46 8e 68 a6 66 bd F.h.f. Frame 4 (262 bytes on wire, 262 bytes captured) Arrival Time: Nov 29, 2006 11:47:36.822983000 Time delta from previous packet: 0.039185000 seconds Time since reference or first frame: 0.147688000 seconds Frame Number: 4 Packet Length: 262 bytes Capture Length: 262 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb32 [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0xe9de [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x5B821D52121DDC24 Responder cookie: 0x73F340FF0298D7A7 Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000001 Length: 220 Encrypted payload Next payload: Identification - R (36) 0... .... = Not critical Length: 192 Initialization Vector: 0xCEB2B74F Encrypted Data 0000 00 0c 29 96 d4 43 00 30 48 41 4f 4b 08 00 45 00 ..)..C.0HAOK..E. 0010 00 f8 00 00 40 00 40 11 fb 32 a5 e3 f9 74 a5 e3 ....@.@..2...t.. 0020 f9 86 01 f4 01 f4 00 e4 e9 de 5b 82 1d 52 12 1d ..........[..R.. 0030 dc 24 73 f3 40 ff 02 98 d7 a7 2e 20 23 20 00 00 .$s.@...... # .. 0040 00 01 00 00 00 dc 24 00 00 c0 ce b2 b7 4f ca 85 ......$......O.. 0050 f3 9f 3a 4d d1 ea 6a 3c 24 fe ab 68 3e e8 e0 d2 ..:M..j<$..h>... 0060 df 29 d8 9e 5a 6e 07 f7 2a 76 6f 54 d7 e0 4d 19 .)..Zn..*voT..M. 0070 dc 32 6b 99 33 c8 65 5e bd b8 dd 1f 7a 59 f8 21 .2k.3.e^....zY.! 0080 0c ce 75 08 b5 88 06 cb 64 a5 c9 f1 e7 e1 10 e4 ..u.....d....... 0090 eb fb ca c4 cf b0 cc 8e 58 6e 14 36 75 7c e2 55 ........Xn.6u|.U 00a0 a9 6f 69 bd 51 78 f2 15 01 9d 92 73 b9 0f 48 38 .oi.Qx.....s..H8 00b0 1e 10 6f 43 7f 32 3c 47 a6 26 c1 38 1f e9 a0 8f ..oC.2..3`...; 00d0 b6 df e3 27 c6 a6 04 d2 02 43 e3 53 3c 54 d3 b9 ...'.....C.S. 0070 2f fd f5 48 17 23 39 f2 a8 39 5d 64 5e 21 da 12 /..H.#9..9]d^!.. 0080 97 c1 79 51 f1 50 ..yQ.P Frame 6 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:47:39.777809000 Time delta from previous packet: 0.010115000 seconds Time since reference or first frame: 3.102514000 seconds Frame Number: 6 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0003 (3) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1d8f [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x28b1c32a Sequence: 1 Data (92 bytes) 0000 00 0c 29 96 d4 43 00 30 48 41 4f 4b 08 00 45 00 ..)..C.0HAOK..E. 0010 00 78 00 03 40 00 1e 32 1d 8f a5 e3 f9 74 a5 e3 .x..@..2.....t.. 0020 f9 86 28 b1 c3 2a 00 00 00 01 8b fa 55 d7 f1 e6 ..(..*......U... 0030 aa 03 f1 96 41 d6 f5 40 44 fb 51 90 e7 ea ca 97 ....A..@D.Q..... 0040 54 57 30 34 77 2c ab d6 00 72 02 0e d7 66 e1 c5 TW04w,...r...f.. 0050 3f ae 45 5b 7c f3 03 33 7b 28 49 02 3e 90 48 fb ?.E[|..3{(I.>.H. 0060 2c 94 b5 ac 4d a3 d3 5d 32 ca e3 d4 ff 1a 04 90 ,...M..]2....... 0070 a9 76 57 1b 4c 00 ed 3b b5 4e d1 4a cb f5 63 69 .vW.L..;.N.J..ci 0080 7e 87 f2 f6 d1 a0 ~..... Frame 7 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:47:40.431120000 Time delta from previous packet: 0.653311000 seconds Time since reference or first frame: 3.755825000 seconds Frame Number: 7 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x6d00 (27904) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0x8f91 [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.116 (165.227.249.116) Encapsulating Security Payload SPI: 0x995adda2 Sequence: 2 Data (92 bytes) 0000 00 30 48 41 4f 4b 00 0c 29 96 d4 43 08 00 45 00 .0HAOK..)..C..E. 0010 00 78 6d 00 00 00 7f 32 8f 91 a5 e3 f9 86 a5 e3 .xm....2........ 0020 f9 74 99 5a dd a2 00 00 00 02 c4 e2 27 65 dd 45 .t.Z........'e.E 0030 e1 36 54 26 65 9c f9 c3 f9 a7 6d 12 62 16 19 5d .6T&e.....m.b..] 0040 28 d0 22 12 48 32 a0 ed a7 25 3b a4 70 19 96 c8 (.".H2...%;.p... 0050 19 de ad f1 5b 90 43 1d 93 cd 0c aa 7a 50 55 84 ....[.C.....zPU. 0060 f0 7a 58 b2 0d ec 7d 74 a2 f8 0e 2d d4 fa 21 24 .zX...}t...-..!$ 0070 00 b7 db 74 ce 53 f3 5c 84 19 e2 d8 a1 5c 53 82 ...t.S.\.....\S. 0080 a7 17 93 e4 1e bd ...... Frame 8 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:47:40.432796000 Time delta from previous packet: 0.001676000 seconds Time since reference or first frame: 3.757501000 seconds Frame Number: 8 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0004 (4) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1d8e [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x28b1c32a Sequence: 2 Data (92 bytes) 0000 00 0c 29 96 d4 43 00 30 48 41 4f 4b 08 00 45 00 ..)..C.0HAOK..E. 0010 00 78 00 04 40 00 1e 32 1d 8e a5 e3 f9 74 a5 e3 .x..@..2.....t.. 0020 f9 86 28 b1 c3 2a 00 00 00 02 d7 b7 b9 df 1f 05 ..(..*.......... 0030 4d d2 ef 6f e8 c9 6a b4 c5 c9 25 85 3b 1e c7 bd M..o..j...%.;... 0040 d0 90 f3 c0 73 3c 17 d0 b2 07 b3 a4 e5 60 71 95 ....s<.......`q. 0050 e4 d0 85 d6 f0 8d 43 44 7c 96 ec 92 1d ea 48 cc ......CD|.....H. 0060 0b d8 a6 b7 20 3a e1 05 f4 30 dc 64 b4 0e cf 7e .... :...0.d...~ 0070 c7 56 b1 59 ba 5c 39 c5 ab d4 e1 35 a6 8d 27 ff .V.Y.\9....5..'. 0080 61 75 59 76 d9 4b auYv.K