Frame 1 (346 bytes on wire, 346 bytes captured) Arrival Time: Nov 29, 2006 11:39:22.703931000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 346 bytes Capture Length: 346 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x40e2 (16610) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xb9da [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0x50e3 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x03828F1A449B91FF Responder cookie: 0x0000000000000000 Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000000 Length: 304 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: Notification (41) 0... .... = Not critical Length: 36 Nonce Data Notification payload Next payload: Notification (41) 0... .... = Not critical Length: 28 Protocol ID: ISAKMP (1) SPI size: 0 Message type: NAT_DETECTION_SOURCE_IP (16388) Notification Data Notification payload Next payload: RESERVED (0) 0... .... = Not critical Length: 28 Protocol ID: ISAKMP (1) SPI size: 0 Message type: NAT_DETECTION_DESTINATION_IP (16389) Notification Data 0000 00 0c 29 96 d4 43 00 0c 29 96 e1 fa 08 00 45 00 ..)..C..).....E. 0010 01 4c 40 e2 00 00 80 11 b9 da a5 e3 f9 96 a5 e3 .L@............. 0020 f9 86 01 f4 01 f4 01 38 50 e3 03 82 8f 1a 44 9b .......8P.....D. 0030 91 ff 00 00 00 00 00 00 00 00 21 20 22 08 00 00 ..........! "... 0040 00 00 00 00 01 30 22 00 00 30 00 00 00 2c 01 01 .....0"..0...,.. 0050 00 04 03 00 00 08 04 00 00 02 03 00 00 08 02 00 ................ 0060 00 02 03 00 00 0c 01 00 00 0c 80 0e 00 80 00 00 ................ 0070 00 08 03 00 00 02 28 00 00 88 00 02 00 00 10 6d ......(........m 0080 cd 11 7b 63 1b f5 7a 9f 4e 85 d3 5b de bc 8c 67 ..{c..z.N..[...g 0090 15 bb b7 60 7e 91 d3 1e 64 76 1b dd 19 44 99 26 ...`~...dv...D.& 00a0 d2 3b 18 b8 43 ac a2 0e c1 17 ea 4f d1 51 89 3b .;..C......O.Q.; 00b0 d4 10 54 c2 c0 68 31 96 69 53 e6 29 2d 6c 62 4a ..T..h1.iS.)-lbJ 00c0 09 68 35 01 53 49 24 67 72 80 a7 f2 ac b6 15 54 .h5.SI$gr......T 00d0 58 82 d7 5f 3b 8d 70 22 3b 99 4b aa b8 5c cd b2 X.._;.p";.K..\.. 00e0 b0 60 be d7 55 bb 4a dc da 3a df c1 6f 70 d5 21 .`..U.J..:..op.! 00f0 c1 b1 f0 88 45 0f 47 a8 d1 e4 c1 4f 08 2d 29 00 ....E.G....O.-). 0100 00 24 d8 61 67 a1 8a c6 6a f7 77 0b c8 49 f0 8f .$.ag...j.w..I.. 0110 f2 18 c2 2a ac b1 25 3b bd 1a 9a 8e 7a a6 dd 79 ...*..%;....z..y 0120 04 ea 29 00 00 1c 01 00 40 04 60 ab f5 1a c0 2f ..).....@.`..../ 0130 eb d4 bc c2 6e 5c 04 c4 c8 72 d3 bd a2 fa 00 00 ....n\...r...... 0140 00 1c 01 00 40 05 91 e5 52 91 90 95 63 26 eb 28 ....@...R...c&.( 0150 54 7f ec dd b6 bc 4e b0 e9 be T.....N... Frame 2 (322 bytes on wire, 322 bytes captured) Arrival Time: Nov 29, 2006 11:39:22.840311000 Time delta from previous packet: 0.136380000 seconds Time since reference or first frame: 0.136380000 seconds Frame Number: 2 Packet Length: 322 bytes Capture Length: 322 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 308 Identification: 0x3b00 (15104) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xffd4 [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 288 Checksum: 0x481a [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x03828F1A449B91FF Responder cookie: 0x615BBA66C5B8F39F Next payload: Security Association (33) Version: 2.0 Exchange type: IKE_SA_INIT (34) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000000 Length: 280 Security Association payload Next payload: Key Exchange (34) 0... .... = Not critical Length: 48 Proposal payload # 1 Next payload: RESERVED (0) 0... .... = Not critical Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 4 Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 12 Transform type: Encryption Algorithm (ENCR) (1) Transform ID: ENCR_AES_CBC (12) PRIVATE USE (14): Key-Length (128) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Integrity Algorithm (INTEG) (3) Transform ID: AUTH_HMAC_SHA1_96 (2) Transform payload Next payload: Transform (3) 0... .... = Not critical Length: 8 Transform type: Pseudo-random Function (PRF) (2) Transform ID: PRF_HMAC_SHA1 (2) Transform payload Next payload: RESERVED (0) 0... .... = Not critical Length: 8 Transform type: Diffie-Hellman Group (D-H) (4) Transform ID: Group 2 - 1024 Bit MODP (2) Key Exchange payload Next payload: Nonce (40) 0... .... = Not critical Length: 136 DH Group #: 2 Key Exchange Data Nonce payload Next payload: RESERVED (0) 0... .... = Not critical Length: 68 Nonce Data 0000 00 0c 29 96 e1 fa 00 0c 29 96 d4 43 08 00 45 00 ..).....)..C..E. 0010 01 34 3b 00 00 00 40 11 ff d4 a5 e3 f9 86 a5 e3 .4;...@......... 0020 f9 96 01 f4 01 f4 01 20 48 1a 03 82 8f 1a 44 9b ....... H.....D. 0030 91 ff 61 5b ba 66 c5 b8 f3 9f 21 20 22 20 00 00 ..a[.f....! " .. 0040 00 00 00 00 01 18 22 00 00 30 00 00 00 2c 01 01 ......"..0...,.. 0050 00 04 03 00 00 0c 01 00 00 0c 80 0e 00 80 03 00 ................ 0060 00 08 03 00 00 02 03 00 00 08 02 00 00 02 00 00 ................ 0070 00 08 04 00 00 02 28 00 00 88 00 02 00 00 39 47 ......(.......9G 0080 35 1a cd b4 80 b9 c2 90 87 82 c3 87 7a 90 d7 ef 5...........z... 0090 d6 ad 78 59 cc 67 6e b9 14 1f 6f 72 e0 16 3c b6 ..xY.gn...or..<. 00a0 fd ba 86 6f 25 3f ea 4e ad f5 f1 26 db 17 7c 7b ...o%?.N...&..|{ 00b0 43 95 00 7f d9 a3 99 57 03 fa b2 af ea 8d 5c f7 C......W......\. 00c0 1f 4b a9 3d d1 f9 a1 33 c1 52 3e 43 97 63 c4 35 .K.=...3.R>C.c.5 00d0 bc 60 7a 5f f4 2d 1f 7c e8 63 eb df 91 b7 d1 7d .`z_.-.|.c.....} 00e0 9e 81 9f cf 00 ae 6b 5e ae ff a3 fd 4d b7 69 d4 ......k^....M.i. 00f0 79 cd 8b c8 33 20 8a ea ef a0 ea 0f fc df 00 00 y...3 .......... 0100 00 44 ae 1d 96 61 0c 56 6b 3b af 22 2e 93 97 04 .D...a.Vk;.".... 0110 68 76 6a 3a e6 4f 74 ed d7 af 46 4a 5a 8c 42 6e hvj:.Ot...FJZ.Bn 0120 76 44 9c 49 51 3d f6 88 4e 3e e3 66 e0 68 a5 17 vD.IQ=..N>.f.h.. 0130 b1 fd 88 fc 3e d6 f4 a1 d2 ce ef b5 13 d7 98 21 ....>..........! 0140 19 16 .. Frame 3 (262 bytes on wire, 262 bytes captured) Arrival Time: Nov 29, 2006 11:39:22.993631000 Time delta from previous packet: 0.153320000 seconds Time since reference or first frame: 0.289700000 seconds Frame Number: 3 Packet Length: 262 bytes Capture Length: 262 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0x40e3 (16611) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xba2d [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.134 (165.227.249.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x8c18 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x03828F1A449B91FF Responder cookie: 0x615BBA66C5B8F39F Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 1... = Initiator ...0 .... = ..0. .... = Request Message ID: 0x00000001 Length: 220 Encrypted payload Next payload: Identification - I (35) 0... .... = Not critical Length: 192 Initialization Vector: 0xF3F05E46 Encrypted Data 0000 00 0c 29 96 d4 43 00 0c 29 96 e1 fa 08 00 45 00 ..)..C..).....E. 0010 00 f8 40 e3 00 00 80 11 ba 2d a5 e3 f9 96 a5 e3 ..@......-...... 0020 f9 86 01 f4 01 f4 00 e4 8c 18 03 82 8f 1a 44 9b ..............D. 0030 91 ff 61 5b ba 66 c5 b8 f3 9f 2e 20 23 08 00 00 ..a[.f..... #... 0040 00 01 00 00 00 dc 23 00 00 c0 f3 f0 5e 46 02 e6 ......#.....^F.. 0050 ce 42 7a a0 d0 ff 51 5a 02 5f fc 6c 92 97 10 f4 .Bz...QZ._.l.... 0060 0e a9 12 c1 ad 15 82 60 cd b5 3a 66 6e 3a f4 6f .......`..:fn:.o 0070 b9 a9 6d 75 2f f8 08 c9 be 7b b4 fd 37 a6 59 2d ..mu/....{..7.Y- 0080 27 3f e5 9d e7 6a f4 37 77 ba 4b 63 10 61 34 0b '?...j.7w.Kc.a4. 0090 e4 79 59 1b 77 77 94 17 48 50 09 7f 52 ab 72 5c .yY.ww..HP..R.r\ 00a0 53 44 6b 64 99 c6 11 5d 95 0e 78 4d 19 93 83 2a SDkd...]..xM...* 00b0 5b 19 31 1f bc af 61 f3 36 be da 4b 88 dc 7e cc [.1...a.6..K..~. 00c0 0e 19 a1 07 c1 5f 2d 5a 1c cf 56 f2 5d 04 c6 21 ....._-Z..V.]..! 00d0 c1 2a 06 b5 c3 dc 1f 05 c7 39 6b 0e 15 7d c4 53 .*.......9k..}.S 00e0 6e 9b d7 75 16 5a 97 bf d3 92 0c 1c aa 1e 4a 6e n..u.Z........Jn 00f0 1e e1 33 a8 a5 50 5e 7b 74 95 f1 76 f1 9a 70 ab ..3..P^{t..v..p. 0100 36 94 49 16 7e d2 6.I.~. Frame 4 (246 bytes on wire, 246 bytes captured) Arrival Time: Nov 29, 2006 11:39:23.063601000 Time delta from previous packet: 0.069970000 seconds Time since reference or first frame: 0.359670000 seconds Frame Number: 4 Packet Length: 246 bytes Capture Length: 246 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 232 Identification: 0x3b00 (15104) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x0021 [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.150 (165.227.249.150) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 212 Checksum: 0x6904 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x03828F1A449B91FF Responder cookie: 0x615BBA66C5B8F39F Next payload: Encrypted (46) Version: 2.0 Exchange type: IKE_AUTH (35) Flags .... 0... = Responder ...0 .... = ..1. .... = Response Message ID: 0x00000001 Length: 204 Encrypted payload Next payload: Identification - R (36) 0... .... = Not critical Length: 176 Initialization Vector: 0x7E2511EA Encrypted Data 0000 00 0c 29 96 e1 fa 00 0c 29 96 d4 43 08 00 45 00 ..).....)..C..E. 0010 00 e8 3b 00 00 00 40 11 00 21 a5 e3 f9 86 a5 e3 ..;...@..!...... 0020 f9 96 01 f4 01 f4 00 d4 69 04 03 82 8f 1a 44 9b ........i.....D. 0030 91 ff 61 5b ba 66 c5 b8 f3 9f 2e 20 23 20 00 00 ..a[.f..... # .. 0040 00 01 00 00 00 cc 24 00 00 b0 7e 25 11 ea 80 f0 ......$...~%.... 0050 ae 63 49 80 19 22 2c fb 7b 25 2c 42 53 6d 42 1a .cI..",.{%,BSmB. 0060 a7 b2 11 48 6b 49 89 e2 2d 72 20 23 da d3 23 32 ...HkI..-r #..#2 0070 ee 92 83 a7 b4 89 a5 27 af dc d7 4f 93 8f 28 97 .......'...O..(. 0080 2a 27 66 bd 08 4e 35 3c cf 70 1e 44 0f 87 79 f5 *'f..N5<.p.D..y. 0090 7a 33 6c 6f 02 b8 a9 b9 b6 da bb 23 6e 69 6c e8 z3lo.......#nil. 00a0 f9 f5 03 d0 72 96 3f e3 c4 90 9c b1 a3 ba db 94 ....r.?......... 00b0 86 10 31 86 08 20 3b 29 f6 1a 6a c4 6f 98 40 fc ..1.. ;)..j.o.@. 00c0 f7 f2 db a1 27 b2 35 39 54 b5 33 c1 15 f6 f3 7c ....'.59T.3....| 00d0 6f b8 75 83 75 c6 3d 5f 70 83 14 21 22 c5 05 ca o.u.u.=_p..!"... 00e0 92 f2 9c 55 b6 48 31 c7 7d a5 90 85 a4 e7 cc 53 ...U.H1.}......S 00f0 58 b0 cb a4 82 36 X....6 Frame 5 (406 bytes on wire, 406 bytes captured) Arrival Time: Nov 29, 2006 11:39:26.647548000 Time delta from previous packet: 3.583947000 seconds Time since reference or first frame: 3.943617000 seconds Frame Number: 5 Packet Length: 406 bytes Capture Length: 406 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa), Dst: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Destination: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Source: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.150 (165.227.249.150), Dst: 165.227.249.134 (165.227.249.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 392 Identification: 0x40e4 (16612) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xb97b [correct] Good: True Bad : False Source: 165.227.249.150 (165.227.249.150) Destination: 165.227.249.134 (165.227.249.134) Encapsulating Security Payload SPI: 0x240dc0a6 Sequence: 1 Data (364 bytes) 0000 00 0c 29 96 d4 43 00 0c 29 96 e1 fa 08 00 45 00 ..)..C..).....E. 0010 01 88 40 e4 00 00 80 32 b9 7b a5 e3 f9 96 a5 e3 ..@....2.{...... 0020 f9 86 24 0d c0 a6 00 00 00 01 1f 72 2c c0 cb 02 ..$........r,... 0030 34 d1 5b 76 68 f0 54 80 59 d6 e1 31 ae 83 79 39 4.[vh.T.Y..1..y9 0040 6e 3c 33 c4 7c 06 d7 4f 10 51 37 2a 23 a7 6b 4c n<3.|..O.Q7*#.kL 0050 ca 02 88 e5 b5 86 0d 73 66 4f 6e a6 2a 77 32 e2 .......sfOn.*w2. 0060 c1 be 9d 20 16 e4 96 0b 7f 1d 7f 1e 84 2b 81 93 ... .........+.. 0070 4a 17 10 56 09 33 97 88 03 b9 75 8b 6c 9d 52 50 J..V.3....u.l.RP 0080 5e 83 8d b8 01 d0 15 97 b5 a9 1a d6 60 c3 af 0d ^...........`... 0090 66 90 d3 92 fa a9 d0 54 d6 72 c0 22 83 ab 31 c9 f......T.r."..1. 00a0 a6 93 da 03 ba bb 6f 2c 98 e9 c7 41 74 02 22 51 ......o,...At."Q 00b0 48 1a 34 e2 49 21 eb 38 cd 86 69 73 3b 31 f1 bd H.4.I!.8..is;1.. 00c0 21 7b 2a 0e 83 66 18 c3 7a 2b b6 8e 55 b3 1d a4 !{*..f..z+..U... 00d0 c6 75 04 f3 cf 79 d1 38 55 34 b6 37 d1 90 53 f0 .u...y.8U4.7..S. 00e0 c9 87 a6 c8 a3 b9 a4 ae bc aa d6 cb 51 0f ca e6 ............Q... 00f0 87 c4 12 d1 49 2f 34 a6 ca 66 86 19 62 4d 55 74 ....I/4..f..bMUt 0100 9b 19 56 ff ad 0d 97 b0 b2 b5 03 0c bb f4 aa af ..V............. 0110 14 cf 29 34 20 ad 29 42 a4 ba aa d7 fa 0a 4c 6b ..)4 .)B......Lk 0120 96 53 c7 92 d3 56 f5 38 a5 ba 89 37 ea 0e f8 37 .S...V.8...7...7 0130 a9 6e 7c 6d 44 66 c0 a0 48 14 13 50 29 ec c9 2d .n|mDf..H..P)..- 0140 7c 2b a4 8a d1 bd 6b 14 8d 8f e6 5d 4d 46 8c b2 |+....k....]MF.. 0150 e3 0f 1f f9 28 48 7d 18 d8 bc 99 e7 e7 63 b0 20 ....(H}......c. 0160 c5 4b 41 30 09 f9 52 ec 74 ee fb a3 56 5d e0 98 .KA0..R.t...V].. 0170 2f f6 60 53 71 1e b5 32 fa fd ec 38 cf dc 64 04 /.`Sq..2...8..d. 0180 57 91 44 a8 d6 4e 14 92 1a 48 38 36 e3 1f 23 85 W.D..N...H86..#. 0190 9d 50 07 4e c7 98 .P.N.. Frame 6 (406 bytes on wire, 406 bytes captured) Arrival Time: Nov 29, 2006 11:39:26.651592000 Time delta from previous packet: 0.004044000 seconds Time since reference or first frame: 3.947661000 seconds Frame Number: 6 Packet Length: 406 bytes Capture Length: 406 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43), Dst: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Destination: 00:0c:29:96:e1:fa (00:0c:29:96:e1:fa) Source: 00:0c:29:96:d4:43 (00:0c:29:96:d4:43) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.134 (165.227.249.134), Dst: 165.227.249.150 (165.227.249.150) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 392 Identification: 0x3e00 (15872) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 127 Protocol: ESP (0x32) Header checksum: 0xbd5f [correct] Good: True Bad : False Source: 165.227.249.134 (165.227.249.134) Destination: 165.227.249.150 (165.227.249.150) Encapsulating Security Payload SPI: 0x3bac0153 Sequence: 1 Data (364 bytes) 0000 00 0c 29 96 e1 fa 00 0c 29 96 d4 43 08 00 45 00 ..).....)..C..E. 0010 01 88 3e 00 00 00 7f 32 bd 5f a5 e3 f9 86 a5 e3 ..>....2._...... 0020 f9 96 3b ac 01 53 00 00 00 01 b7 92 5c 9d 0a 46 ..;..S......\..F 0030 20 94 a6 bc b4 b1 9b 04 30 50 2a c9 66 f0 e6 ae .......0P*.f... 0040 a8 c4 4e aa 4c 03 14 df 55 5a fd f5 01 9e 02 e2 ..N.L...UZ...... 0050 85 9c 49 69 df e8 ba 9c df 3d 71 81 78 81 d6 aa ..Ii.....=q.x... 0060 58 89 51 b1 7f 16 9e f7 38 4a 9f 3c 9c 29 ee ec X.Q.....8J.<.).. 0070 42 ee 96 ef 8e b9 57 77 51 05 15 b7 e2 65 9a 5e B.....WwQ....e.^ 0080 3e 9b bb bf da d1 08 97 87 59 e2 ac 91 d1 00 38 >........Y.....8 0090 aa da 6a 1c 24 44 65 0e a5 06 97 e6 ac 34 fe 3a ..j.$De......4.: 00a0 34 42 2d c2 77 1f 6a 54 7e 46 b2 9e c0 1b 65 17 4B-.w.jT~F....e. 00b0 ea 45 76 d5 4d 22 af b4 70 05 64 28 22 01 2d 79 .Ev.M"..p.d(".-y 00c0 cf f5 37 d5 33 a2 48 fb ab 51 ff ed 51 c8 3e 56 ..7.3.H..Q..Q.>V 00d0 59 63 4a b0 c1 76 f7 c3 c9 63 68 6e 60 79 8b 76 YcJ..v...chn`y.v 00e0 ea c7 6f 18 0b 09 81 ec a7 a3 46 b1 e3 1d fe 9d ..o.......F..... 00f0 09 37 17 5e 66 3b be 66 62 3b c3 aa b5 17 4b 65 .7.^f;.fb;....Ke 0100 6b 08 43 d6 2b 21 d9 89 bb 19 b8 5d 31 8a 3e 91 k.C.+!.....]1.>. 0110 7b b1 d7 cb 64 d2 ab f0 19 b4 21 60 32 ac 46 ce {...d.....!`2.F. 0120 5a 6b 48 73 96 4d 78 4e b7 48 40 b7 ff 82 4f b2 ZkHs.MxN.H@...O. 0130 6f 07 e5 80 c9 70 eb c8 9d 6e 68 0c 07 05 2d 05 o....p...nh...-. 0140 07 64 8e f4 52 36 5d b5 74 31 5c 65 29 ee 35 9e .d..R6].t1\e).5. 0150 16 f6 53 8c 0c 3a ad 80 3a 9b e1 75 31 61 07 55 ..S..:..:..u1a.U 0160 00 70 03 0b 34 00 a4 42 83 ef c5 3f cb f5 cd 28 .p..4..B...?...( 0170 68 a4 fe 85 56 d5 1c 76 69 62 2e 8a 03 a9 72 5c h...V..vib....r\ 0180 66 5a f0 02 ec dd 23 bf 75 5c b8 ea 5d fa d6 7e fZ....#.u\..]..~ 0190 87 0c eb 0d 39 28 ....9(