Frame 1 (322 bytes on wire, 322 bytes captured) Arrival Time: Nov 29, 2006 11:23:45.377781000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 322 bytes Capture Length: 322 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 308 Identification: 0x3100 (12544) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x09f4 [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.119 (165.227.249.119) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 288 Checksum: 0xb0d7 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x94A85EDD281F4AC9 Responder cookie: 0x0000000000000000 Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000000 Length: 280 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: RESERVED (0) 0... .... = Not critical Length: 68 Nonce Data 0000 00 0c 29 66 91 21 00 0c 29 96 d4 43 08 00 45 00 ..)f.!..)..C..E. 0010 01 34 31 00 00 00 40 11 09 f4 a5 e3 f9 86 a5 e3 .41...@......... 0020 f9 77 01 f4 01 f4 01 20 b0 d7 94 a8 5e dd 28 1f .w..... ....^.(. 0030 4a c9 00 00 00 00 00 00 00 00 21 20 22 08 00 00 J.........! "... 0040 00 00 00 00 01 18 22 00 00 30 00 00 00 2c 01 01 ......"..0...,.. 0050 00 04 03 00 00 08 04 00 00 02 03 00 00 08 02 00 ................ 0060 00 02 03 00 00 0c 01 00 00 0c 80 0e 00 80 00 00 ................ 0070 00 08 03 00 00 02 28 00 00 88 00 02 00 00 9c 6f ......(........o 0080 1a dd 8a 0e 9d 7a f8 9a 7b 5a 27 93 8a a6 16 86 .....z..{Z'..... 0090 ae 21 e0 a2 06 94 19 6a 86 d0 fd a3 da 8c e1 8b .!.....j........ 00a0 af 80 2b 16 ff d4 1f 1a fa 26 f9 96 35 27 98 8d ..+......&..5'.. 00b0 e5 5c f4 00 de 79 d0 18 47 03 01 0a 5e 38 ad e6 .\...y..G...^8.. 00c0 27 5d 08 a0 d6 6e e8 15 85 f2 d5 4c 24 05 a5 48 ']...n.....L$..H 00d0 4b 02 60 38 83 10 19 32 36 67 fe b2 ff db 7d 45 K.`8...26g....}E 00e0 c8 e2 a5 ae 71 5e 91 b2 30 95 cd b5 8e 4c 30 23 ....q^..0....L0# 00f0 32 67 8d f8 91 e2 bc 31 db 34 52 29 cd de 00 00 2g.....1.4R).... 0100 00 44 2d d0 1d fd 60 31 c7 df 0a 4d 70 40 84 28 .D-...`1...Mp@.( 0110 9a 99 7b b5 e9 d4 73 f9 2d d5 bc 64 66 12 68 7b ..{...s.-..df.h{ 0120 4d 35 ca 0b c5 da f7 5a 41 53 6f cb 93 7b 28 86 M5.....ZASo..{(. 0130 9a e1 7e 5c 8f 41 90 25 88 7b 7f db 57 f7 55 e4 ..~\.A.%.{..W.U. 0140 c8 d6 .. Frame 2 (394 bytes on wire, 394 bytes captured) Arrival Time: Nov 29, 2006 11:23:45.381674000 Time delta from previous packet: 0.003893000 seconds Time since reference or first frame: 0.003893000 seconds Frame Number: 2 Packet Length: 394 bytes Capture Length: 394 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 380 Identification: 0x131f (4895) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xe78c [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 360 Checksum: 0xae4f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x94A85EDD281F4AC9 Responder cookie: 0x72734830C199293C Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000000 Length: 352 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: Notification (41) 0... .... = Not critical Length: 36 Nonce Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: RESERVED (0) SPI size: 0 Message type: NAT_DETECTION_SOURCE_IP (16388) Notification Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: RESERVED (0) SPI size: 0 Message type: NAT_DETECTION_DESTINATION_IP (16389) Notification Data Notification payload Next payload: Vendor ID (43) 0... .... = Not critical Length: 8 Protocol ID: ISAKMP (1) SPI size: 0 Message type: HTTP_CERT_LOOKUP_SUPPORTED (16392) Vendor ID payload Next payload: Vendor ID (43) 0... .... = Not critical Length: 20 Vendor ID: unknown vendor ID: 0xF758F22668750F03B08DF6EBE1D00300 Vendor ID payload Next payload: RESERVED (0) 0... .... = Not critical Length: 20 Vendor ID: unknown vendor ID: 0x4A131C81070358455C5728F20E95452F 0000 00 0c 29 96 d4 43 00 0c 29 66 91 21 08 00 45 00 ..)..C..)f.!..E. 0010 01 7c 13 1f 00 00 80 11 e7 8c a5 e3 f9 77 a5 e3 .|...........w.. 0020 f9 86 01 f4 01 f4 01 68 ae 4f 94 a8 5e dd 28 1f .......h.O..^.(. 0030 4a c9 72 73 48 30 c1 99 29 3c 21 20 22 20 00 00 J.rsH0..)>. 0090 d3 f1 10 1e 8d 8d a8 ed 32 fd 2a ad 6e 18 94 c4 ........2.*.n... 00a0 42 31 1a be 00 ad 0d f6 b1 a4 14 bf 1e 2b a1 ff B1...........+.. 00b0 6c 38 de bd 92 55 47 0e 6b b5 e8 ae f5 fd 42 c4 l8...UG.k.....B. 00c0 83 f4 23 16 b8 37 f2 f4 a0 46 c7 63 ba c1 35 fe ..#..7...F.c..5. 00d0 a9 49 1e 76 21 dd ff d3 50 f7 56 30 3d e2 b1 ea .I.v!...P.V0=... 00e0 c8 76 e3 e0 dd a8 ff 47 2e 09 25 46 82 46 38 61 .v.....G..%F.F8a 00f0 55 35 3b 31 fb 55 d6 1e 22 6a ef c8 9c 3e 29 00 U5;1.U.."j...>). 0100 00 24 6d 9f fc 75 ae 09 ff f2 64 fa 4f 59 48 7d .$m..u....d.OYH} 0110 eb 5e fc 4a 23 34 fd db 10 54 51 d7 65 52 11 89 .^.J#4...TQ.eR.. 0120 21 49 29 00 00 1c 00 00 40 04 a6 0f 18 25 af d3 !I).....@....%.. 0130 d0 01 27 9d 71 fe 15 8e 65 85 e9 53 94 3a 29 00 ..'.q...e..S.:). 0140 00 1c 00 00 40 05 03 3f bc 4d 57 b2 c9 64 e1 7f ....@..?.MW..d.. 0150 2e 60 a7 d6 a2 9c 26 55 47 bb 2b 00 00 08 01 00 .`....&UG.+..... 0160 40 08 2b 00 00 14 f7 58 f2 26 68 75 0f 03 b0 8d @.+....X.&hu.... 0170 f6 eb e1 d0 03 00 00 00 00 14 4a 13 1c 81 07 03 ..........J..... 0180 58 45 5c 57 28 f2 0e 95 45 2f XE\W(...E/ Frame 3 (246 bytes on wire, 246 bytes captured) Arrival Time: Nov 29, 2006 11:23:45.526213000 Time delta from previous packet: 0.144539000 seconds Time since reference or first frame: 0.148432000 seconds Frame Number: 3 Packet Length: 246 bytes Capture Length: 246 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 232 Identification: 0x3100 (12544) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x0a40 [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.119 (165.227.249.119) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 212 Checksum: 0x7916 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x94A85EDD281F4AC9 Responder cookie: 0x72734830C199293C Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000001 Length: 204 Encrypted payload Next payload: Identification - I (35) 0... .... = Not critical Length: 176 Initialization Vector: 0xB3595EA6 Encrypted Data 0000 00 0c 29 66 91 21 00 0c 29 96 d4 43 08 00 45 00 ..)f.!..)..C..E. 0010 00 e8 31 00 00 00 40 11 0a 40 a5 e3 f9 86 a5 e3 ..1...@..@...... 0020 f9 77 01 f4 01 f4 00 d4 79 16 94 a8 5e dd 28 1f .w......y...^.(. 0030 4a c9 72 73 48 30 c1 99 29 3c 2e 20 23 08 00 00 J.rsH0..)<. #... 0040 00 01 00 00 00 cc 23 00 00 b0 b3 59 5e a6 8f f3 ......#....Y^... 0050 fb c3 34 ae e5 52 7f 0c 5d fc 9d 27 8b bd e3 87 ..4..R..]..'.... 0060 3a 93 22 74 e4 18 ed 85 cd 6b 20 ea 75 37 fd cc :."t.....k .u7.. 0070 6d aa 18 c3 c3 c8 dc 65 e4 c4 60 1b 4c 68 f1 3b m......e..`.Lh.; 0080 ee da e7 a5 a1 c5 88 10 e5 39 2e e2 44 0c b2 65 .........9..D..e 0090 8a 58 1e b4 7b 6e c1 fd 1c c5 6f 2c 53 f9 d0 09 .X..{n....o,S... 00a0 1f 94 aa 64 e7 19 02 8e f0 fc a9 4c df 6f 24 9a ...d.......L.o$. 00b0 ef 9e 1e 78 a7 f3 b4 c1 36 f8 5f 7a 9f f0 9a c4 ...x....6._z.... 00c0 58 21 64 3d 96 d6 d5 32 1f f6 93 3b 49 65 e1 91 X!d=...2...;Ie.. 00d0 79 95 fe 1f 4a 89 f7 d6 5b 89 bf 5c 36 4b 82 63 y...J...[..\6K.c 00e0 e0 a5 a3 c1 0c cc ba 07 ae d9 c1 76 ab 50 06 00 ...........v.P.. 00f0 6d 1b ad 9f 9b 96 m..... Frame 4 (262 bytes on wire, 262 bytes captured) Arrival Time: Nov 29, 2006 11:23:45.557637000 Time delta from previous packet: 0.031424000 seconds Time since reference or first frame: 0.179856000 seconds Frame Number: 4 Packet Length: 262 bytes Capture Length: 262 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x1320 (4896) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xe80f [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x3b7c [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x94A85EDD281F4AC9 Responder cookie: 0x72734830C199293C Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000001 Length: 220 Encrypted payload Next payload: Identification - R (36) 0... .... = Not critical Length: 192 Initialization Vector: 0x241DF3E0 Encrypted Data 0000 00 0c 29 96 d4 43 00 0c 29 66 91 21 08 00 45 00 ..)..C..)f.!..E. 0010 00 f8 13 20 00 00 80 11 e8 0f a5 e3 f9 77 a5 e3 ... .........w.. 0020 f9 86 01 f4 01 f4 00 e4 3b 7c 94 a8 5e dd 28 1f ........;|..^.(. 0030 4a c9 72 73 48 30 c1 99 29 3c 2e 20 23 20 00 00 J.rsH0..)<. # .. 0040 00 01 00 00 00 dc 24 00 00 c0 24 1d f3 e0 f4 58 ......$...$....X 0050 03 1c 6d 54 03 98 b7 30 7a c4 f9 c1 8d 48 9d c9 ..mT...0z....H.. 0060 3f 30 b9 88 12 c7 b0 94 db 56 3e f2 25 e7 36 8f ?0.......V>.%.6. 0070 0f 10 4b 33 7f b0 b4 75 c6 05 4f 48 5b 8e df d0 ..K3...u..OH[... 0080 b7 50 78 88 83 b5 43 0d 85 ce e5 0f a3 17 d7 31 .Px...C........1 0090 fe 1a 7b 2e 64 dc 31 c0 c7 b0 14 b5 0c d9 a6 ce ..{.d.1......... 00a0 3f 8d 81 2b 4a d0 2b 38 5a 3c 8e 34 0f a3 f1 f7 ?..+J.+8Z<.4.... 00b0 a8 9b 8d 7d f5 43 a2 ee f1 b4 cf 3b 80 4a 4e 6e ...}.C.....;.JNn 00c0 27 c3 2c 1e ab b0 c7 ec 3f ee d6 2d 78 d5 e5 2b '.,.....?..-x..+ 00d0 7a 68 d6 c2 79 93 a4 8e f0 bf 2f f2 4b 65 a7 e3 zh..y...../.Ke.. 00e0 5c a7 ac fd 33 03 de 8e 84 70 35 4e 8f a3 76 45 \...3....p5N..vE 00f0 4c 64 6b 99 f8 fa 7c 01 ed 15 8c bd e9 f1 cf 37 Ldk...|........7 0100 82 df 6e 14 2e fa ..n... Frame 5 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:23:48.820472000 Time delta from previous packet: 3.262835000 seconds Time since reference or first frame: 3.442691000 seconds Frame Number: 5 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x3300 (13056) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0xc98e [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.119 (165.227.249.119) Encapsulating Security Payload SPI: 0xb4cb4241 Sequence: 1 Data (92 bytes) 0000 00 0c 29 66 91 21 00 0c 29 96 d4 43 08 00 45 00 ..)f.!..)..C..E. 0010 00 78 33 00 00 00 7f 32 c9 8e a5 e3 f9 86 a5 e3 .x3....2........ 0020 f9 77 b4 cb 42 41 00 00 00 01 ed c1 2f 27 90 88 .w..BA....../'.. 0030 6b f7 4e fe 68 07 52 0c 0a 9d a7 9d 9a 1d 39 d5 k.N.h.R.......9. 0040 bd fa bb 40 cb 45 58 4e 4a 2e ef e8 c2 e3 93 00 ...@.EXNJ....... 0050 f1 50 95 55 91 39 eb 5d ce 68 26 2c cd d4 fb 19 .P.U.9.].h&,.... 0060 44 3f c7 88 be 98 47 fe dc ec fc fe 61 f5 fc f2 D?....G.....a... 0070 d8 14 6a be 43 04 8d c2 1b 60 41 34 fe d1 8d 3f ..j.C....`A4...? 0080 cd a9 89 c4 e1 d7 ...... Frame 6 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:23:48.820474000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 3.442693000 seconds Frame Number: 6 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0017 (23) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b77 [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0xbf7ddd2a Sequence: 1 Data (92 bytes) 0000 00 0c 29 96 d4 43 00 0c 29 66 91 21 08 00 45 00 ..)..C..)f.!..E. 0010 00 78 00 17 00 00 f0 32 8b 77 a5 e3 f9 77 a5 e3 .x.....2.w...w.. 0020 f9 86 bf 7d dd 2a 00 00 00 01 6e 14 24 42 16 5a ...}.*....n.$B.Z 0030 d7 e0 7f 02 12 b2 2a 00 83 f3 d7 55 a8 ef 1e 59 ......*....U...Y 0040 38 fa d6 a2 e5 b1 48 db ec 55 98 e6 fb 41 bb 44 8.....H..U...A.D 0050 d6 34 0f 72 de 68 62 26 de 68 7d 94 cf 88 20 77 .4.r.hb&.h}... w 0060 bf 9a 56 84 42 6f ad 75 ab 84 2a 80 a9 ee ba af ..V.Bo.u..*..... 0070 60 6b e8 3e 45 d8 b8 56 4e 17 af da 98 87 61 c2 `k.>E..VN.....a. 0080 b8 fa 39 17 b4 91 ..9... Frame 7 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:23:49.359983000 Time delta from previous packet: 0.539509000 seconds Time since reference or first frame: 3.982202000 seconds Frame Number: 7 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x3600 (13824) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0xc68e [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.119 (165.227.249.119) Encapsulating Security Payload SPI: 0xb4cb4241 Sequence: 2 Data (92 bytes) 0000 00 0c 29 66 91 21 00 0c 29 96 d4 43 08 00 45 00 ..)f.!..)..C..E. 0010 00 78 36 00 00 00 7f 32 c6 8e a5 e3 f9 86 a5 e3 .x6....2........ 0020 f9 77 b4 cb 42 41 00 00 00 02 ed c1 2f 27 90 88 .w..BA....../'.. 0030 6b f7 4e fe 68 07 52 0c 0a 9d 33 f3 27 af 05 77 k.N.h.R...3.'..w 0040 a7 fb 3d f4 35 40 1a 0e 69 c2 3e 19 69 bd f5 cf ..=.5@..i.>.i... 0050 32 ce b4 1e c3 09 c9 05 30 a0 22 69 7d 8b 83 bf 2.......0."i}... 0060 94 3b 87 c3 05 32 37 77 37 0d 55 c9 c6 31 33 92 .;...27w7.U..13. 0070 ef 4a 81 78 68 7a 92 9c 58 2f 7f 22 b9 b5 1f b0 .J.xhz..X/.".... 0080 c0 86 c5 80 50 45 ....PE Frame 8 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:23:49.362537000 Time delta from previous packet: 0.002554000 seconds Time since reference or first frame: 3.984756000 seconds Frame Number: 8 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0018 (24) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b76 [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0xbf7ddd2a Sequence: 2 Data (92 bytes) 0000 00 0c 29 96 d4 43 00 0c 29 66 91 21 08 00 45 00 ..)..C..)f.!..E. 0010 00 78 00 18 00 00 f0 32 8b 76 a5 e3 f9 77 a5 e3 .x.....2.v...w.. 0020 f9 86 bf 7d dd 2a 00 00 00 02 44 5e 9f 1f ac ed ...}.*....D^.... 0030 1f 27 1d ac af 11 a2 79 f3 3c 1f 4d 3c eb 8f 9c .'.....y.<.M<... 0040 80 51 98 aa 15 a5 6b 67 74 eb 47 19 4e db 67 db .Q....kgt.G.N.g. 0050 ff 1e 09 b7 65 ec 1c 1c 71 99 16 77 61 d8 c4 b5 ....e...q..wa... 0060 48 2c a3 8b c3 b4 36 79 c9 fe f5 bc 20 c1 82 c8 H,....6y.... ... 0070 51 02 b9 f4 d4 d6 0a fb 79 3a 96 50 2f 93 8a 04 Q.......y:.P/... 0080 3b d3 6a 29 7e 4f ;.j)~O Frame 9 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:23:49.908610000 Time delta from previous packet: 0.546073000 seconds Time since reference or first frame: 4.530829000 seconds Frame Number: 9 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43), Dst: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Destination: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Source: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.119 (165.227.249.119) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x3800 (14336) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0xc48e [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.119 (165.227.249.119) Encapsulating Security Payload SPI: 0xb4cb4241 Sequence: 3 Data (92 bytes) 0000 00 0c 29 66 91 21 00 0c 29 96 d4 43 08 00 45 00 ..)f.!..)..C..E. 0010 00 78 38 00 00 00 7f 32 c4 8e a5 e3 f9 86 a5 e3 .x8....2........ 0020 f9 77 b4 cb 42 41 00 00 00 03 ed c1 2f 27 90 88 .w..BA....../'.. 0030 6b f7 4e fe 68 07 52 0c 0a 9d 80 7b 34 43 ee ad k.N.h.R....{4C.. 0040 1e 25 2b c9 b5 4b c8 62 dd 15 85 6a d6 dc 4a d4 .%+..K.b...j..J. 0050 31 56 7d 12 68 71 54 f9 ec 95 19 19 28 6a b1 f1 1V}.hqT.....(j.. 0060 40 f9 a6 53 37 c0 67 b2 65 e6 d3 c2 0e 04 e7 f0 @..S7.g.e....... 0070 aa 65 28 e0 5f 53 48 8a 3b d2 51 4f 3e ca fe 69 .e(._SH.;.QO>..i 0080 2f 49 4b 6b c2 f2 /IKk.. Frame 10 (134 bytes on wire, 134 bytes captured) Arrival Time: Nov 29, 2006 11:23:49.909474000 Time delta from previous packet: 0.000864000 seconds Time since reference or first frame: 4.531693000 seconds Frame Number: 10 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:66:91:21 (00:0c:29:66:91:21), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:0c:29:66:91:21 (00:0c:29:66:91:21) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.119 (165.227.249.119), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0019 (25) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b75 [correct] Good: True Bad : False Source: 165.227.249.119 (165.227.249.119) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0xbf7ddd2a Sequence: 3 Data (92 bytes) 0000 00 0c 29 96 d4 43 00 0c 29 66 91 21 08 00 45 00 ..)..C..)f.!..E. 0010 00 78 00 19 00 00 f0 32 8b 75 a5 e3 f9 77 a5 e3 .x.....2.u...w.. 0020 f9 86 bf 7d dd 2a 00 00 00 03 66 6e 47 25 b7 87 ...}.*....fnG%.. 0030 0b 96 5f 33 37 f7 ce 64 ba 3b 13 c4 6f ef 03 55 .._37..d.;..o..U 0040 dd 53 a7 b2 7e 57 20 42 d2 4c e0 b0 05 24 4a 77 .S..~W B.L...$Jw 0050 c6 77 bd 90 d4 46 67 f6 9c 4f f3 ae d1 d6 5c c6 .w...Fg..O....\. 0060 1f 6a fe 3e 9e d5 40 1f 7c c3 9e 66 79 3c b3 28 .j.>..@.|..fy<.( 0070 62 28 80 c9 27 cb 6e 6b 0b bb ea b9 73 55 a0 59 b(..'.nk....sU.Y 0080 6e f5 f6 5c 11 22 n..\."