Frame 1 (346 bytes on wire, 346 bytes captured) Arrival Time: Nov 24, 2006 15:04:47.054000000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 346 bytes Capture Length: 346 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x4033 (16435) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xba9b [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.116 (165.227.249.116) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0xdf3f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x4902D486CDA75113 Responder cookie: 0x0000000000000000 Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000000 Length: 304 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: Notification (41) 0... .... = Not critical Length: 36 Nonce Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: ISAKMP (1) SPI size: 0 Message type: NAT_DETECTION_SOURCE_IP (16388) Notification Data Notification payload Next payload: RESERVED (0) 0... .... = Not critical Length: 28 Protocol ID: ISAKMP (1) SPI size: 0 Message type: NAT_DETECTION_DESTINATION_IP (16389) Notification Data 0000 00 30 48 41 4f 4b 00 0c 29 96 e1 fa 08 00 45 00 .0HAOK..).....E. 0010 01 4c 40 33 00 00 80 11 ba 9b a5 e3 f9 96 a5 e3 .L@3............ 0020 f9 74 01 f4 01 f4 01 38 df 3f 49 02 d4 86 cd a7 .t.....8.?I..... 0030 51 13 00 00 00 00 00 00 00 00 21 20 22 08 00 00 Q.........! "... 0040 00 00 00 00 01 30 22 00 00 30 00 00 00 2c 01 01 .....0"..0...,.. 0050 00 04 03 00 00 08 04 00 00 02 03 00 00 08 02 00 ................ 0060 00 02 03 00 00 0c 01 00 00 0c 80 0e 00 80 00 00 ................ 0070 00 08 03 00 00 02 28 00 00 88 00 02 00 00 ee 5b ......(........[ 0080 77 58 67 44 3a 9e 83 87 d7 44 9c 2d 8d 5f d0 12 wXgD:....D.-._.. 0090 b7 2e 96 b7 42 c4 26 9a d8 1d 55 38 bf 15 d6 06 ....B.&...U8.... 00a0 b9 3f 18 b0 41 77 37 52 61 40 58 20 19 ee 94 ea .?..Aw7Ra@X .... 00b0 2d 7e a7 d9 e1 9b 8d 83 64 ba f1 e9 92 db 18 dc -~......d....... 00c0 b2 52 20 3e 99 b8 4b 78 65 1d d6 ac 2d 01 5c ed .R >..Kxe...-.\. 00d0 7f 5d 4e 5e d0 5a 32 88 9d a5 7a 87 95 fa 4c 42 .]N^.Z2...z...LB 00e0 c0 4f 9a c8 77 71 e1 c1 29 a5 fa 51 94 d6 59 8d .O..wq..)..Q..Y. 00f0 a7 66 5d e1 0a 22 2d 44 84 b1 f6 fa 69 1c 29 00 .f].."-D....i.). 0100 00 24 dc 59 72 15 29 fe 32 32 81 03 e9 1c f7 e6 .$.Yr.).22...... 0110 b9 bf d7 c5 b9 62 3f 7e 5a 46 7d 48 df f3 83 76 .....b?~ZF}H...v 0120 76 97 29 00 00 1c 01 00 40 04 4b d5 80 6f e8 18 v.).....@.K..o.. 0130 32 c3 17 b3 96 05 e0 8b ad 48 02 2a bb 85 00 00 2........H.*.... 0140 00 1c 01 00 40 05 95 0f 3a 92 a0 7c 75 69 f1 c3 ....@...:..|ui.. 0150 ff 51 d3 b5 8d da 8e 8f b6 f5 .Q........ Frame 2 (520 bytes on wire, 520 bytes captured) Arrival Time: Nov 24, 2006 15:04:47.062904000 Time delta from previous packet: 0.008904000 seconds Time since reference or first frame: 0.008904000 seconds Frame Number: 2 Packet Length: 520 bytes Capture Length: 520 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 506 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa20 [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 486 Checksum: 0x2250 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x4902D486CDA75113 Responder cookie: 0x578E50F2FA5DEF3D Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000000 Length: 478 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: Notification (41) 0... .... = Not critical Length: 210 Nonce Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: ISAKMP (1) SPI size: 0 Message type: NAT_DETECTION_DESTINATION_IP (16389) Notification Data Notification payload Next payload: RESERVED (0) 0... .... = Not critical Length: 28 Protocol ID: ISAKMP (1) SPI size: 0 Message type: NAT_DETECTION_SOURCE_IP (16388) Notification Data 0000 00 0c 29 96 e1 fa 00 30 48 41 4f 4b 08 00 45 00 ..)....0HAOK..E. 0010 01 fa 00 00 40 00 40 11 fa 20 a5 e3 f9 74 a5 e3 ....@.@.. ...t.. 0020 f9 96 01 f4 01 f4 01 e6 22 50 49 02 d4 86 cd a7 ........"PI..... 0030 51 13 57 8e 50 f2 fa 5d ef 3d 21 20 22 20 00 00 Q.W.P..].=! " .. 0040 00 00 00 00 01 de 22 00 00 30 00 00 00 2c 01 01 ......"..0...,.. 0050 00 04 03 00 00 0c 01 00 00 0c 80 0e 00 80 03 00 ................ 0060 00 08 03 00 00 02 03 00 00 08 02 00 00 02 00 00 ................ 0070 00 08 04 00 00 02 28 00 00 88 00 02 00 00 0e 57 ......(........W 0080 a6 96 dc bb 6f 36 84 47 8c 6c 96 9a ed 32 4e 49 ....o6.G.l...2NI 0090 bc 9f 4d 38 c1 c4 0e 4f 57 57 cd 6e d9 2a cb d8 ..M8...OWW.n.*.. 00a0 2a e4 6b 1a ea ef 4b c8 ed 4e 0f ca fc 7f a2 27 *.k...K..N.....' 00b0 60 9a 20 24 91 da 48 cb 90 1c 3d 4b 08 26 0b 3b `. $..H...=K.&.; 00c0 cf 7c 0b a3 f6 48 0e ab 55 df b4 31 27 99 76 a9 .|...H..U..1'.v. 00d0 f2 e9 7c b8 be 6c 87 af d5 57 a2 5d de fc 99 9e ..|..l...W.].... 00e0 85 dd 0f 28 b3 be 16 8d 15 cc d1 f3 45 80 d9 e2 ...(........E... 00f0 d7 fd 02 90 e4 61 6b 2e c5 00 6f 24 06 88 29 00 .....ak...o$..). 0100 00 d2 6f af 4a af 8d 04 f3 b2 2e af 4b 8f 9c 99 ..o.J.......K... 0110 72 dd 09 27 f6 c6 0c 66 6c a0 ef 51 6c 2d d7 9a r..'...fl..Ql-.. 0120 54 ef d5 b1 fe bd d4 fa 9e f8 cc fa fa da 0a af T............... 0130 9c a9 c3 58 83 f9 88 87 09 be 2a 68 fa 56 e4 b2 ...X......*h.V.. 0140 70 a2 91 d4 8d 2b 7c 71 4d 72 4e 4d 1a f9 17 20 p....+|qMrNM... 0150 d8 c9 60 b5 f3 d9 09 d1 13 e1 eb 13 1e e2 06 d3 ..`............. 0160 7b bf f2 e8 e8 6a b3 28 31 bc 5c f7 85 01 2d e3 {....j.(1.\...-. 0170 1a a5 ed 87 99 f4 53 a9 7e 1c e0 e4 b0 04 9b 36 ......S.~......6 0180 0f 94 05 bb 5a fe 44 e0 3c 5b 1c 9c b6 58 c2 50 ....Z.D.<[...X.P 0190 b4 23 cb b2 81 89 83 63 d9 85 e1 23 fd ea 25 b6 .#.....c...#..%. 01a0 77 d8 af 68 b6 de 1c d3 65 a5 27 e4 11 02 8d 57 w..h....e.'....W 01b0 1d 17 39 94 ae b2 01 bc 25 18 e4 b5 45 a0 64 5d ..9.....%...E.d] 01c0 f3 15 cd ff a6 dc a0 c2 dd 75 e8 a4 01 b4 d5 d0 .........u...... 01d0 29 00 00 1c 01 00 40 05 ba ab 6a 37 3f 91 d1 9f ).....@...j7?... 01e0 ef b7 26 82 9f af cf 7a 5b d1 53 90 00 00 00 1c ..&....z[.S..... 01f0 01 00 40 04 48 09 53 60 09 92 67 4f e3 8e 64 73 ..@.H.S`..gO..ds 0200 ff df a5 7f 42 15 0e 8c ....B... Frame 3 (262 bytes on wire, 262 bytes captured) Arrival Time: Nov 24, 2006 15:04:47.207157000 Time delta from previous packet: 0.144253000 seconds Time since reference or first frame: 0.153157000 seconds Frame Number: 3 Packet Length: 262 bytes Capture Length: 262 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x4034 (16436) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xbaee [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.116 (165.227.249.116) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x556c [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x4902D486CDA75113 Responder cookie: 0x578E50F2FA5DEF3D Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000001 Length: 220 Encrypted payload Next payload: Identification - I (35) 0... .... = Not critical Length: 192 Initialization Vector: 0x8483DE82 Encrypted Data 0000 00 30 48 41 4f 4b 00 0c 29 96 e1 fa 08 00 45 00 .0HAOK..).....E. 0010 00 f8 40 34 00 00 80 11 ba ee a5 e3 f9 96 a5 e3 ..@4............ 0020 f9 74 01 f4 01 f4 00 e4 55 6c 49 02 d4 86 cd a7 .t......UlI..... 0030 51 13 57 8e 50 f2 fa 5d ef 3d 2e 20 23 08 00 00 Q.W.P..].=. #... 0040 00 01 00 00 00 dc 23 00 00 c0 84 83 de 82 b9 d5 ......#......... 0050 e1 5c 18 b1 c5 42 ff 3a a2 2c a8 39 a5 a3 bf f6 .\...B.:.,.9.... 0060 10 69 d4 70 ea 86 1e 08 3f 51 47 7c 01 ee d3 2f .i.p....?QG|.../ 0070 b0 1e 64 7e e1 d6 cb 0c cb a2 03 32 38 43 d9 a1 ..d~.......28C.. 0080 c5 02 2e 32 e5 b2 85 94 f0 df 44 ec 09 ca 78 c4 ...2......D...x. 0090 58 1b f8 02 91 0e 7b 42 4a 7e b5 56 d2 93 36 73 X.....{BJ~.V..6s 00a0 6f 51 20 61 70 e7 28 82 07 e8 c3 ed 08 08 6c bf oQ ap.(.......l. 00b0 03 90 4d 4f 9e 17 4b 33 15 ec 51 00 05 3f 79 09 ..MO..K3..Q..?y. 00c0 06 ec 98 82 4e f9 84 12 6c f6 77 e5 2b c1 3e ae ....N...l.w.+.>. 00d0 63 28 c1 d1 bf d8 78 af 1e 37 33 26 d4 a3 77 34 c(....x..73&..w4 00e0 c3 3e ec fa 3f 09 1b bc 03 03 3c f5 a5 71 fc fe .>..?.....<..q.. 00f0 80 d2 2d a7 10 22 4e 75 2d 69 cc 7f 75 e6 d6 a0 ..-.."Nu-i..u... 0100 45 59 4f c1 13 25 EYO..% Frame 4 (278 bytes on wire, 278 bytes captured) Arrival Time: Nov 24, 2006 15:04:47.237752000 Time delta from previous packet: 0.030595000 seconds Time since reference or first frame: 0.183752000 seconds Frame Number: 4 Packet Length: 278 bytes Capture Length: 278 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 264 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb12 [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 244 Checksum: 0x52a5 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x4902D486CDA75113 Responder cookie: 0x578E50F2FA5DEF3D Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000001 Length: 236 Encrypted payload Next payload: Identification - R (36) 0... .... = Not critical Length: 208 Initialization Vector: 0x01865C25 Encrypted Data 0000 00 0c 29 96 e1 fa 00 30 48 41 4f 4b 08 00 45 00 ..)....0HAOK..E. 0010 01 08 00 00 40 00 40 11 fb 12 a5 e3 f9 74 a5 e3 ....@.@......t.. 0020 f9 96 01 f4 01 f4 00 f4 52 a5 49 02 d4 86 cd a7 ........R.I..... 0030 51 13 57 8e 50 f2 fa 5d ef 3d 2e 20 23 20 00 00 Q.W.P..].=. # .. 0040 00 01 00 00 00 ec 24 00 00 d0 01 86 5c 25 f9 5e ......$.....\%.^ 0050 8f db fc f4 40 3a 46 61 91 9c af 2d 0d fc 56 94 ....@:Fa...-..V. 0060 c9 f7 1d bc 1c 61 9e 56 df 9b 15 bb 1b 9c f4 06 .....a.V........ 0070 cf a8 fd 26 e6 b2 ed e3 50 5f 17 0e fc ee 57 ca ...&....P_....W. 0080 ae 30 63 34 01 ff 94 96 68 99 e9 e9 ae 3d 9e 42 .0c4....h....=.B 0090 97 e4 e4 13 98 e2 c5 11 0e a6 30 04 3f 5b 27 b6 ..........0.?['. 00a0 50 81 cb 7d 24 5a 86 ad 25 11 30 70 df 7b 4a 84 P..}$Z..%.0p.{J. 00b0 48 7b 24 8c 7e 56 33 d4 40 d6 ad fb 4f 7e 71 3f H{$.~V3.@...O~q? 00c0 2e 16 e2 80 1f 5e a5 2f 9d 8a e0 4a de f1 6e 05 .....^./...J..n. 00d0 eb 2b ac 39 d4 64 ff 7d c0 90 80 b3 4c 9a 72 93 .+.9.d.}....L.r. 00e0 92 6a fe 8e d6 1f b0 8a 56 5c ab 1c 88 7f ac 08 .j......V\...... 00f0 0d 4d d4 75 1e e5 8c b1 60 25 c2 2e bb fc f6 4b .M.u....`%.....K 0100 e7 af 53 1b dc 9b ee 60 87 a0 56 ce 72 10 97 63 ..S....`..V.r..c 0110 8f d3 fa f7 fe d4 ...... Frame 5 (406 bytes on wire, 406 bytes captured) Arrival Time: Nov 24, 2006 15:04:56.624807000 Time delta from previous packet: 9.387055000 seconds Time since reference or first frame: 9.570807000 seconds Frame Number: 5 Packet Length: 406 bytes Capture Length: 406 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Destination: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.116 (165.227.249.116) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 392 Identification: 0x4035 (16437) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xba3c [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.116 (165.227.249.116) Encapsulating Security Payload SPI: 0x185341f4 Sequence: 1 Data (364 bytes) 0000 00 30 48 41 4f 4b 00 0c 29 96 e1 fa 08 00 45 00 .0HAOK..).....E. 0010 01 88 40 35 00 00 80 32 ba 3c a5 e3 f9 96 a5 e3 ..@5...2.<...... 0020 f9 74 18 53 41 f4 00 00 00 01 18 75 6d f8 3e 02 .t.SA......um.>. 0030 d8 65 18 a3 c0 89 88 44 2c e3 53 43 78 a8 b1 2d .e.....D,.SCx..- 0040 48 15 04 88 a7 64 ea 76 48 09 18 ea 88 ba 20 fc H....d.vH..... . 0050 6d 27 46 3e a3 b7 a6 10 7d 57 79 c8 4f 80 eb 41 m'F>....}Wy.O..A 0060 70 7a 89 c6 70 f6 cb 2f 2d 80 b5 b0 3a 7e 4b 89 pz..p../-...:~K. 0070 4d 58 ca 2f 8f fb a6 2c 5f a8 f9 e8 46 48 a1 55 MX./...,_...FH.U 0080 9c d2 85 f5 d0 ea 72 14 15 f3 e6 ef 32 79 a5 78 ......r.....2y.x 0090 c8 e6 47 eb 1a 78 d8 38 77 93 4a 9c 12 7a 6f fe ..G..x.8w.J..zo. 00a0 8d fc 83 61 97 60 99 49 d1 cc 2b 4c 5e 3a cb db ...a.`.I..+L^:.. 00b0 1f 6c 31 14 be 9c e4 08 2b 2f dc da 89 2c 64 c9 .l1.....+/...,d. 00c0 ec 35 cd 66 f4 0a e4 b2 56 40 b0 21 48 4a 64 7b .5.f....V@.!HJd{ 00d0 d6 f7 43 c4 06 50 d0 46 0e 2c 7e 80 18 93 ea 02 ..C..P.F.,~..... 00e0 4b e2 89 ed f4 0b 04 f7 e0 1d 26 2d eb bf ec a8 K.........&-.... 00f0 96 15 37 52 48 05 02 07 96 62 6f 03 5c ee c9 39 ..7RH....bo.\..9 0100 60 24 c2 7c b6 c0 e3 e0 46 90 eb 42 37 fe 2d 6c `$.|....F..B7.-l 0110 b5 d6 31 ff 31 3a d0 20 4a c8 53 a2 e0 8e 9d 92 ..1.1:. J.S..... 0120 b9 16 56 f0 ea 12 e1 b5 3c 1f 80 df 2b 52 9a 05 ..V.....<...+R.. 0130 2f a4 f1 14 c7 07 7b b2 07 8b 8a 92 a2 0c 08 f6 /.....{......... 0140 d4 3d 18 fe b2 ae 99 a7 d9 fe a3 25 20 10 93 0e .=.........% ... 0150 b4 06 83 fd 5d c6 58 ff e0 e9 b0 96 82 a9 36 a9 ....].X.......6. 0160 58 dc 66 24 5a 9a 64 a4 22 cb 14 96 36 d8 2c b3 X.f$Z.d."...6.,. 0170 b1 c0 61 e5 14 b0 a1 1f 0c 18 45 c6 4e c1 c7 9a ..a.......E.N... 0180 a2 6f 39 69 8e 2d 93 e0 71 ff 8d d9 22 4e b8 29 .o9i.-..q..."N.) 0190 18 e7 1e c0 68 13 ....h. Frame 6 (406 bytes on wire, 406 bytes captured) Arrival Time: Nov 24, 2006 15:04:56.633113000 Time delta from previous packet: 0.008306000 seconds Time since reference or first frame: 9.579113000 seconds Frame Number: 6 Packet Length: 406 bytes Capture Length: 406 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:30:48:41:4f:4b (00:30:48:41:4f:4b), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:30:48:41:4f:4b (00:30:48:41:4f:4b) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.116 (165.227.249.116), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 392 Identification: 0x001b (27) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0x1c57 [correct] Good: True Bad : False Source: 165.227.249.116 (165.227.249.116) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload SPI: 0x63d21920 Sequence: 1 Data (364 bytes) 0000 00 0c 29 96 e1 fa 00 30 48 41 4f 4b 08 00 45 00 ..)....0HAOK..E. 0010 01 88 00 1b 40 00 1e 32 1c 57 a5 e3 f9 74 a5 e3 ....@..2.W...t.. 0020 f9 96 63 d2 19 20 00 00 00 01 8b 45 7a dc 5a b0 ..c.. .....Ez.Z. 0030 12 cd 90 99 c4 5a b6 d6 ed 71 bb 72 7e ef 15 52 .....Z...q.r~..R 0040 a3 fe 0f 5f 85 38 5b db e8 2a f7 15 48 d7 6c c2 ..._.8[..*..H.l. 0050 37 06 c7 58 18 b0 5f 95 58 b7 66 81 42 49 9b 71 7..X.._.X.f.BI.q 0060 91 d5 af 05 df c1 7e df f5 ee df 04 8d e1 7b bd ......~.......{. 0070 77 d5 7d c4 83 14 d8 13 43 21 45 bd 80 0d aa 38 w.}.....C!E....8 0080 6d 8b 6a 11 ba e3 ed 03 ed 8d b6 87 95 74 f9 82 m.j..........t.. 0090 53 01 94 6c c5 f2 78 87 d1 70 a7 11 6f aa c4 48 S..l..x..p..o..H 00a0 70 69 c1 5a 6c 2b cf c0 bf 7b d6 ea 01 ad 75 d4 pi.Zl+...{....u. 00b0 97 a1 c9 07 5e 01 45 4e ac d1 16 9a 0d b2 8b 0e ....^.EN........ 00c0 32 b1 da 5b 5f e8 cc a5 78 82 82 70 e6 09 87 1a 2..[_...x..p.... 00d0 3b e5 b4 30 0c 36 1e e2 75 da 1e de 8f 29 78 1a ;..0.6..u....)x. 00e0 be 10 2d d5 0b 08 0d d4 6a fc be 4c 6b 86 11 61 ..-.....j..Lk..a 00f0 f5 d7 7c 22 bc d2 5d 24 1f e1 68 8f 95 a8 9b ba ..|"..]$..h..... 0100 65 63 29 09 92 b3 32 72 f8 0e 73 e8 ba b2 f8 35 ec)...2r..s....5 0110 b7 95 56 e6 68 9d d8 d1 d9 12 8e 08 ca 6a 46 3b ..V.h........jF; 0120 63 c0 d2 0d f4 bf f2 93 45 3c da f6 9a e3 a7 33 c.......E<.....3 0130 be 74 f4 73 a2 81 4a 13 ae ca 9f e6 ce a5 96 de .t.s..J......... 0140 ac 84 53 d3 64 85 54 cb 4e e8 3e 11 b8 ec 19 9a ..S.d.T.N.>..... 0150 00 96 c7 0b 11 52 be 72 a5 bf 6d f6 33 94 7d 5f .....R.r..m.3.}_ 0160 d1 00 3e 40 95 6e bf 7a 31 e7 03 c5 e5 b0 ad 78 ..>@.n.z1......x 0170 c9 fd 83 3b 37 cb b6 66 0f 3e 9b 02 28 6b 16 cb ...;7..f.>..(k.. 0180 3e 9d 6a 2d 62 4c 90 7e c7 ba 0c a8 c5 f2 48 c9 >.j-bL.~......H. 0190 f3 7f d8 98 6b 07 ....k.