Frame 1 (346 bytes on wire, 346 bytes captured) Arrival Time: Nov 29, 2006 14:23:57.477570000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 346 bytes Capture Length: 346 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x40eb (16619) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xb9ef [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.104 (165.227.249.104) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0xe5f3 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x75A6FAF5F3BB6574 Responder cookie: 0x0000000000000000 Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000000 Length: 304 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: Notification (41) 0... .... = Not critical Length: 36 Nonce Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: ISAKMP (1) SPI size: 0 Message type: NAT_DETECTION_SOURCE_IP (16388) Notification Data Notification payload Next payload: RESERVED (0) 0... .... = Not critical Length: 28 Protocol ID: ISAKMP (1) SPI size: 0 Message type: NAT_DETECTION_DESTINATION_IP (16389) Notification Data 0000 00 06 b1 33 80 5d 00 0c 29 96 e1 fa 08 00 45 00 ...3.]..).....E. 0010 01 4c 40 eb 00 00 80 11 b9 ef a5 e3 f9 96 a5 e3 .L@............. 0020 f9 68 01 f4 01 f4 01 38 e5 f3 75 a6 fa f5 f3 bb .h.....8..u..... 0030 65 74 00 00 00 00 00 00 00 00 21 20 22 08 00 00 et........! "... 0040 00 00 00 00 01 30 22 00 00 30 00 00 00 2c 01 01 .....0"..0...,.. 0050 00 04 03 00 00 08 04 00 00 02 03 00 00 08 02 00 ................ 0060 00 02 03 00 00 0c 01 00 00 0c 80 0e 00 80 00 00 ................ 0070 00 08 03 00 00 02 28 00 00 88 00 02 00 00 2a 08 ......(.......*. 0080 04 f7 f0 7b 3c ea 1f 1e d5 2c 13 fd a7 4a 97 68 ...{<....,...J.h 0090 58 59 90 03 d0 85 4e 35 94 f1 a9 1f 04 98 4b a3 XY....N5......K. 00a0 48 76 a1 ce 1c 9b 02 a0 4d db e5 a9 f4 71 8f c4 Hv......M....q.. 00b0 80 52 05 c3 80 cc e2 48 a5 59 0a 9e 7a 91 7f 2e .R.....H.Y..z... 00c0 7d 47 de a5 78 76 df 2e c3 cb 1b e8 bd 28 13 46 }G..xv.......(.F 00d0 5a 45 dc ec b9 d7 cc b3 13 c7 3a d7 0d a4 36 c0 ZE........:...6. 00e0 68 16 21 3f cb 46 95 8a 0e 60 6b db 9a ac 71 19 h.!?.F...`k...q. 00f0 31 81 93 07 01 fe e0 19 21 7f 52 b5 5a 47 29 00 1.......!.R.ZG). 0100 00 24 cf 18 dc 28 5c 05 70 46 80 6f 16 54 b4 95 .$...(\.pF.o.T.. 0110 50 b0 57 e6 44 17 1d 42 f3 d0 22 75 49 c4 d3 1e P.W.D..B.."uI... 0120 f2 ae 29 00 00 1c 01 00 40 04 2b 8f 0b 44 cb 0d ..).....@.+..D.. 0130 c6 24 62 f6 ba 7a 5b 49 bc 7c 01 c6 fe 41 00 00 .$b..z[I.|...A.. 0140 00 1c 01 00 40 05 b0 76 94 f9 86 5a 9f 55 fa 96 ....@..v...Z.U.. 0150 40 42 71 3a d2 88 e5 6c 2c e5 @Bq:...l,. Frame 2 (358 bytes on wire, 358 bytes captured) Arrival Time: Nov 29, 2006 14:23:57.808966000 Time delta from previous packet: 0.331396000 seconds Time since reference or first frame: 0.331396000 seconds Frame Number: 2 Packet Length: 358 bytes Capture Length: 358 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 344 Identification: 0x000b (11) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7bc3 [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 324 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x75A6FAF5F3BB6574 Responder cookie: 0x93CF0C08DDE52BEC Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000000 Length: 316 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: Notification (41) 0... .... = Not critical Length: 24 Nonce Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: RESERVED (0) SPI size: 0 Message type: NAT_DETECTION_SOURCE_IP (16388) Notification Data Notification payload Next payload: Vendor ID (43) 0... .... = Not critical Length: 28 Protocol ID: RESERVED (0) SPI size: 0 Message type: NAT_DETECTION_DESTINATION_IP (16389) Notification Data Vendor ID payload Next payload: RESERVED (0) 0... .... = Not critical Length: 24 Vendor ID: unknown vendor ID: 0x2A6775D0AD2AA7887C33FE1D68BAF308966F0001 0000 00 0c 29 96 e1 fa 00 06 b1 33 80 5d 08 00 45 00 ..)......3.]..E. 0010 01 58 00 0b 00 00 ff 11 7b c3 a5 e3 f9 68 a5 e3 .X......{....h.. 0020 f9 96 01 f4 01 f4 01 44 00 00 75 a6 fa f5 f3 bb .......D..u..... 0030 65 74 93 cf 0c 08 dd e5 2b ec 21 20 22 20 00 00 et......+.! " .. 0040 00 00 00 00 01 3c 22 00 00 30 00 00 00 2c 01 01 .....<"..0...,.. 0050 00 04 03 00 00 0c 01 00 00 0c 80 0e 00 80 03 00 ................ 0060 00 08 03 00 00 02 03 00 00 08 02 00 00 02 00 00 ................ 0070 00 08 04 00 00 02 28 00 00 88 00 02 00 00 df 9e ......(......... 0080 27 dc 54 cb 12 94 22 09 2f b6 d2 42 0e b1 78 b8 '.T..."./..B..x. 0090 91 fb ce 1b 25 22 b9 aa ba d1 d8 ce ed 54 af b9 ....%".......T.. 00a0 9c f6 cb 54 c0 95 ac 5d e2 b2 ea 4a 24 e7 7a 54 ...T...]...J$.zT 00b0 b6 f2 ba fa c5 78 a4 e6 cf 07 19 31 52 12 ca 45 .....x.....1R..E 00c0 34 7d 28 8b 9e eb 0f 69 d5 cd d7 0e 62 5c 8a 35 4}(....i....b\.5 00d0 c8 9f a8 75 d0 4b db 73 11 f4 1e 90 cc 8e 68 13 ...u.K.s......h. 00e0 b0 9e ec d0 3b 22 97 a2 fc 08 87 94 28 18 30 53 ....;"......(.0S 00f0 96 09 23 7a 04 a7 74 a5 26 1c e6 33 52 63 29 00 ..#z..t.&..3Rc). 0100 00 18 57 59 8d 87 21 d2 ef 35 af f0 61 77 d4 3e ..WY..!..5..aw.> 0110 57 40 7a 98 96 ce 29 00 00 1c 00 00 40 04 37 d8 W@z...).....@.7. 0120 45 2d fa b3 42 7a 7e 5e 64 df 69 80 91 18 70 9b E-..Bz~^d.i...p. 0130 79 ed 2b 00 00 1c 00 00 40 05 74 28 2c f6 3f c0 y.+.....@.t(,.?. 0140 dc 8d 7e b1 6d 98 7f 76 26 2f f4 a4 4d ba 00 00 ..~.m..v&/..M... 0150 00 18 2a 67 75 d0 ad 2a a7 88 7c 33 fe 1d 68 ba ..*gu..*..|3..h. 0160 f3 08 96 6f 00 01 ...o.. Frame 3 (262 bytes on wire, 262 bytes captured) Arrival Time: Nov 29, 2006 14:23:57.957846000 Time delta from previous packet: 0.148880000 seconds Time since reference or first frame: 0.480276000 seconds Frame Number: 3 Packet Length: 262 bytes Capture Length: 262 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x40ec (16620) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xba42 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.104 (165.227.249.104) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0xe44c [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x75A6FAF5F3BB6574 Responder cookie: 0x93CF0C08DDE52BEC Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000001 Length: 220 Encrypted payload Next payload: Identification - I (35) 0... .... = Not critical Length: 192 Initialization Vector: 0x5E63CD4E Encrypted Data 0000 00 06 b1 33 80 5d 00 0c 29 96 e1 fa 08 00 45 00 ...3.]..).....E. 0010 00 f8 40 ec 00 00 80 11 ba 42 a5 e3 f9 96 a5 e3 ..@......B...... 0020 f9 68 01 f4 01 f4 00 e4 e4 4c 75 a6 fa f5 f3 bb .h.......Lu..... 0030 65 74 93 cf 0c 08 dd e5 2b ec 2e 20 23 08 00 00 et......+.. #... 0040 00 01 00 00 00 dc 23 00 00 c0 5e 63 cd 4e 71 e7 ......#...^c.Nq. 0050 c1 73 25 23 80 8d b8 c4 2a 07 a3 c3 92 d7 db 51 .s%#....*......Q 0060 53 72 d4 69 6e a2 aa d9 26 4d 22 25 1d cf b9 ea Sr.in...&M"%.... 0070 f2 c0 ff 91 3e 38 1f 23 e3 10 a2 2b 3a fe ab e8 ....>8.#...+:... 0080 60 b4 23 0d fe 35 89 9c bc 56 c1 82 46 fc 67 c0 `.#..5...V..F.g. 0090 a1 f8 29 be 51 ea 8f c3 19 09 73 b0 6f 6d ac b9 ..).Q.....s.om.. 00a0 15 53 3f c4 16 52 6c cd 37 96 8d 21 13 f2 9d 11 .S?..Rl.7..!.... 00b0 b0 9f 65 9f 75 9c d0 83 5b a2 c6 50 9c f0 69 2f ..e.u...[..P..i/ 00c0 d2 e9 0a 0a 0a 41 04 81 a6 45 f9 76 fe e0 b3 0c .....A...E.v.... 00d0 2e 52 ad 8d a2 0f 8f cb 53 40 a1 e6 01 2c a4 5b .R......S@...,.[ 00e0 1f 7a 7a f1 0a 66 96 f2 6c ad 4c 22 a8 9e d9 4a .zz..f..l.L"...J 00f0 57 cd 35 cb b9 32 88 33 f3 0a 66 e8 79 1e b1 f6 W.5..2.3..f.y... 0100 57 bd 72 05 fc 3b W.r..; Frame 4 (246 bytes on wire, 246 bytes captured) Arrival Time: Nov 29, 2006 14:23:57.967215000 Time delta from previous packet: 0.009369000 seconds Time since reference or first frame: 0.489645000 seconds Frame Number: 4 Packet Length: 246 bytes Capture Length: 246 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 232 Identification: 0x000c (12) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7c32 [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 212 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x75A6FAF5F3BB6574 Responder cookie: 0x93CF0C08DDE52BEC Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000001 Length: 204 Encrypted payload Next payload: Identification - R (36) 0... .... = Not critical Length: 176 Initialization Vector: 0xDA52E4C1 Encrypted Data 0000 00 0c 29 96 e1 fa 00 06 b1 33 80 5d 08 00 45 00 ..)......3.]..E. 0010 00 e8 00 0c 00 00 ff 11 7c 32 a5 e3 f9 68 a5 e3 ........|2...h.. 0020 f9 96 01 f4 01 f4 00 d4 00 00 75 a6 fa f5 f3 bb ..........u..... 0030 65 74 93 cf 0c 08 dd e5 2b ec 2e 20 23 20 00 00 et......+.. # .. 0040 00 01 00 00 00 cc 24 00 00 b0 da 52 e4 c1 3f 50 ......$....R..?P 0050 61 f7 76 14 36 84 44 b0 29 27 d6 9d 3f 92 30 04 a.v.6.D.)'..?.0. 0060 70 49 64 72 89 2a b6 8a f9 e7 0a 39 67 b1 f2 10 pIdr.*.....9g... 0070 c2 67 54 e6 04 54 58 33 a0 c7 e4 f9 c0 35 82 f5 .gT..TX3.....5.. 0080 78 32 5d e4 4d 07 e0 a0 7c 94 29 13 24 a5 31 77 x2].M...|.).$.1w 0090 a1 39 84 e2 1d af db 5c cd c6 86 4f 62 7c ec 5d .9.....\...Ob|.] 00a0 a1 44 e7 0b 02 2a 4a 84 8e 9f 5b 06 a9 b1 80 e8 .D...*J...[..... 00b0 0e 2e 36 8b d2 fb 05 d2 9c 86 51 35 30 a4 c9 9e ..6.......Q50... 00c0 5c 5c e8 05 83 fd 87 d9 48 81 19 c6 65 cb 20 39 \\......H...e. 9 00d0 24 16 85 f4 50 75 b4 48 52 03 14 ec 8c 06 95 1e $...Pu.HR....... 00e0 c8 35 18 31 5c 2f 0e 8f 59 5d ef 16 4e c5 ec 96 .5.1\/..Y]..N... 00f0 e8 0c 80 da 64 ff ....d. Frame 5 (406 bytes on wire, 406 bytes captured) Arrival Time: Nov 29, 2006 14:24:04.055117000 Time delta from previous packet: 6.087902000 seconds Time since reference or first frame: 6.577547000 seconds Frame Number: 5 Packet Length: 406 bytes Capture Length: 406 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Destination: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.104 (165.227.249.104) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 392 Identification: 0x40ed (16621) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xb990 [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.104 (165.227.249.104) Encapsulating Security Payload SPI: 0x48d34805 Sequence: 1 Data (364 bytes) 0000 00 06 b1 33 80 5d 00 0c 29 96 e1 fa 08 00 45 00 ...3.]..).....E. 0010 01 88 40 ed 00 00 80 32 b9 90 a5 e3 f9 96 a5 e3 ..@....2........ 0020 f9 68 48 d3 48 05 00 00 00 01 e3 bd 21 57 1e 76 .hH.H.......!W.v 0030 a9 2e 8d 4f 08 76 70 42 0d 54 88 ca fb a7 2b 35 ...O.vpB.T....+5 0040 6d 5c 15 f0 06 e4 64 56 62 02 55 c3 cd 9e 45 e1 m\....dVb.U...E. 0050 fa 6a 15 f9 77 70 f1 4a dc 69 1e 07 05 72 03 fc .j..wp.J.i...r.. 0060 86 71 df 4b e3 6c 13 7a fd 04 3d 44 ce 54 19 98 .q.K.l.z..=D.T.. 0070 11 bf a7 1d c8 79 b7 8e 87 81 8d f0 0c 9a 81 98 .....y.......... 0080 ab 25 b3 28 f0 3d 89 a7 18 d6 b8 a7 16 2a 65 e1 .%.(.=.......*e. 0090 08 8e ca a0 dc 56 79 5f d6 6d f3 b3 6d 1d 0b 12 .....Vy_.m..m... 00a0 f6 a3 f2 c4 4d 7f fe 26 21 9b b3 72 9f 21 68 27 ....M..&!..r.!h' 00b0 78 5e cb 60 e6 13 d1 78 7d 80 34 bb 27 dd 02 18 x^.`...x}.4.'... 00c0 1e 96 e4 42 18 a6 bf 6a 7d af 68 63 a6 46 ea 6c ...B...j}.hc.F.l 00d0 ba dc a0 29 06 3d 61 63 b3 08 1a 75 3a ea 59 f4 ...).=ac...u:.Y. 00e0 ef 02 b5 58 be 36 0f 8a 29 f5 95 2e aa 83 86 42 ...X.6..)......B 00f0 19 f0 bb 5f 65 e1 40 25 d6 77 d7 de e8 87 8b 68 ..._e.@%.w.....h 0100 4f 16 19 1f 89 17 e4 b0 71 b5 bb 63 69 c3 6e 73 O.......q..ci.ns 0110 6f 7e 40 d6 71 dd 58 ca 51 cf 88 40 d3 05 08 40 o~@.q.X.Q..@...@ 0120 fc db fc 22 7a 02 7f 71 1f c4 58 79 06 3c 5f 5e ..."z..q..Xy.<_^ 0130 56 f7 1f 46 a4 02 9a 8b 91 75 c3 ae c9 0f 09 02 V..F.....u...... 0140 08 da 33 cd 3d 8f 44 83 0b 05 0b 11 61 5d 9e 6a ..3.=.D.....a].j 0150 bb 43 96 2d 23 06 2a 27 bf 5a d2 f9 9a 5c 77 71 .C.-#.*'.Z...\wq 0160 b0 a0 41 74 55 50 fe d7 f4 10 a5 db e9 2c b9 5a ..AtUP.......,.Z 0170 06 38 14 fb 68 40 ef 8e a2 17 a3 8e b1 52 bc 77 .8..h@.......R.w 0180 e4 90 03 8a 52 65 ce e0 77 0d 80 af d4 45 5b 14 ....Re..w....E[. 0190 fa 51 9c a0 9f 19 .Q.... Frame 6 (406 bytes on wire, 406 bytes captured) Arrival Time: Nov 29, 2006 14:24:04.059014000 Time delta from previous packet: 0.003897000 seconds Time since reference or first frame: 6.581444000 seconds Frame Number: 6 Packet Length: 406 bytes Capture Length: 406 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:06:b1:33:80:5d (00:06:b1:33:80:5d), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:06:b1:33:80:5d (00:06:b1:33:80:5d) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.104 (165.227.249.104), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 392 Identification: 0x0007 (7) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7b76 [correct] Good: True Bad : False Source: 165.227.249.104 (165.227.249.104) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload SPI: 0xf706da61 Sequence: 1 Data (364 bytes) 0000 00 0c 29 96 e1 fa 00 06 b1 33 80 5d 08 00 45 00 ..)......3.]..E. 0010 01 88 00 07 00 00 ff 32 7b 76 a5 e3 f9 68 a5 e3 .......2{v...h.. 0020 f9 96 f7 06 da 61 00 00 00 01 d9 ba ca af f4 97 .....a.......... 0030 a1 d4 fc d7 a1 50 0b 62 0c 79 1d 76 19 96 5a bf .....P.b.y.v..Z. 0040 53 e4 3b 99 c0 8b 85 b5 b5 d6 64 58 80 51 c6 6e S.;.......dX.Q.n 0050 43 1b 4e 44 f2 00 9d d9 3b 78 8c d6 02 45 ba 23 C.ND....;x...E.# 0060 86 48 fe 3c 47 1f e1 e6 af e3 ef ed 23 ea f9 ee .H.... 0180 0d fd 36 14 72 d8 ab 99 a2 26 c8 5f 8f ff ba a9 ..6.r....&._.... 0190 54 1f 1f 50 cb 9c T..P..