Post-IPsec-process packet dump:
Frame 1 (42 bytes on wire, 42 bytes captured)
Arrival Time: Sep 19, 2003 16:19:11.777019000
Time delta from previous packet: 0.000000000 seconds
Time relative to first packet: 0.000000000 seconds
Frame Number: 1
Packet Length: 42 bytes
Capture Length: 42 bytes
Ethernet II, Src: 00:50:bf:94:c7:01, Dst: ff:ff:ff:ff:ff:ff
Destination: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff)
Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01)
Type: ARP (0x0806)
Address Resolution Protocol (request)
Hardware type: Ethernet (0x0001)
Protocol type: IP (0x0800)
Hardware size: 6
Protocol size: 4
Opcode: request (0x0001)
Sender MAC address: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01)
Sender IP address: 10.8.8.2 (10.8.8.2)
Target MAC address: 00:00:00:00:00:00 (00:00:00:00:00:00)
Target IP address: 10.8.8.7 (10.8.8.7)
0000 ff ff ff ff ff ff 00 50 bf 94 c7 01 08 06 00 01 .......P........
0010 08 00 06 04 00 01 00 50 bf 94 c7 01 0a 08 08 02 .......P........
0020 00 00 00 00 00 00 0a 08 08 07 ..........
Frame 2 (64 bytes on wire, 64 bytes captured)
Arrival Time: Sep 19, 2003 16:19:11.777102000
Time delta from previous packet: 0.000083000 seconds
Time relative to first packet: 0.000083000 seconds
Frame Number: 2
Packet Length: 64 bytes
Capture Length: 64 bytes
Ethernet II, Src: 00:e0:29:2e:1e:5b, Dst: 00:50:bf:94:c7:01
Destination: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01)
Source: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b)
Type: ARP (0x0806)
Trailer: 00000000000000000000000000000000...
Address Resolution Protocol (reply)
Hardware type: Ethernet (0x0001)
Protocol type: IP (0x0800)
Hardware size: 6
Protocol size: 4
Opcode: reply (0x0002)
Sender MAC address: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b)
Sender IP address: 10.8.8.7 (10.8.8.7)
Target MAC address: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01)
Target IP address: 10.8.8.2 (10.8.8.2)
0000 00 50 bf 94 c7 01 00 e0 29 2e 1e 5b 08 06 00 01 .P......)..[....
0010 08 00 06 04 00 02 00 e0 29 2e 1e 5b 0a 08 08 07 ........)..[....
0020 00 50 bf 94 c7 01 0a 08 08 02 00 00 00 00 00 00 .P..............
0030 00 00 00 00 00 00 00 00 00 00 00 00 2f a1 7c f2 ............/.|.
Frame 3 (62 bytes on wire, 62 bytes captured)
Arrival Time: Sep 19, 2003 16:19:11.777121000
Time delta from previous packet: 0.000019000 seconds
Time relative to first packet: 0.000102000 seconds
Frame Number: 3
Packet Length: 62 bytes
Capture Length: 62 bytes
Ethernet II, Src: 00:50:bf:94:c7:01, Dst: 00:e0:29:2e:1e:5b
Destination: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b)
Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01)
Type: IP (0x0800)
Internet Protocol, Src Addr: 192.168.101.253 (192.168.101.253), Dst Addr: 10.8.8.7 (10.8.8.7)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 48
Identification: 0x8f7a (36730)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: TCP (0x06)
Header checksum: 0x3399 (correct)
Source: 192.168.101.253 (192.168.101.253)
Destination: 10.8.8.7 (10.8.8.7)
Transmission Control Protocol, Src Port: 3691 (3691), Dst Port: 80 (80), Seq: 30101963, Ack: 0, Len: 0
Source port: 3691 (3691)
Destination port: 80 (80)
Sequence number: 30101963
Header length: 28 bytes
Flags: 0x0002 (SYN)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 8192
Checksum: 0xc859 (correct)
Options: (8 bytes)
Maximum segment size: 1396 bytes
NOP
NOP
SACK permitted
0000 00 e0 29 2e 1e 5b 00 50 bf 94 c7 01 08 00 45 00 ..)..[.P......E.
0010 00 30 8f 7a 40 00 7f 06 33 99 c0 a8 65 fd 0a 08 .0.z@...3...e...
0020 08 07 0e 6b 00 50 01 cb 51 cb 00 00 00 00 70 02 ...k.P..Q.....p.
0030 20 00 c8 59 00 00 02 04 05 74 01 01 04 02 ..Y.....t....
Frame 4 (64 bytes on wire, 64 bytes captured)
Arrival Time: Sep 19, 2003 16:19:11.777279000
Time delta from previous packet: 0.000158000 seconds
Time relative to first packet: 0.000260000 seconds
Frame Number: 4
Packet Length: 64 bytes
Capture Length: 64 bytes
Ethernet II, Src: 00:e0:29:2e:1e:5b, Dst: 00:50:bf:94:c7:01
Destination: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01)
Source: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b)
Type: IP (0x0800)
Trailer: 020468DD5831
Internet Protocol, Src Addr: 10.8.8.7 (10.8.8.7), Dst Addr: 192.168.101.253 (192.168.101.253)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 44
Identification: 0x1f09 (7945)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xe30e (correct)
Source: 10.8.8.7 (10.8.8.7)
Destination: 192.168.101.253 (192.168.101.253)
Transmission Control Protocol, Src Port: 80 (80), Dst Port: 3691 (3691), Seq: 916756971, Ack: 30101964, Len: 0
Source port: 80 (80)
Destination port: 3691 (3691)
Sequence number: 916756971
Acknowledgement number: 30101964
Header length: 24 bytes
Flags: 0x0012 (SYN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 57344
Checksum: 0x4c7f (correct)
Options: (4 bytes)
Maximum segment size: 1460 bytes
0000 00 50 bf 94 c7 01 00 e0 29 2e 1e 5b 08 00 45 00 .P......)..[..E.
0010 00 2c 1f 09 40 00 40 06 e3 0e 0a 08 08 07 c0 a8 .,..@.@.........
0020 65 fd 00 50 0e 6b 36 a4 99 eb 01 cb 51 cc 60 12 e..P.k6.....Q.`.
0030 e0 00 4c 7f 00 00 02 04 05 b4 02 04 68 dd 58 31 ..L.........h.X1
Frame 5 (54 bytes on wire, 54 bytes captured)
Arrival Time: Sep 19, 2003 16:19:11.878762000
Time delta from previous packet: 0.101483000 seconds
Time relative to first packet: 0.101743000 seconds
Frame Number: 5
Packet Length: 54 bytes
Capture Length: 54 bytes
Ethernet II, Src: 00:50:bf:94:c7:01, Dst: 00:e0:29:2e:1e:5b
Destination: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b)
Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01)
Type: IP (0x0800)
Internet Protocol, Src Addr: 192.168.101.253 (192.168.101.253), Dst Addr: 10.8.8.7 (10.8.8.7)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0x907a (36986)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: TCP (0x06)
Header checksum: 0x32a1 (correct)
Source: 192.168.101.253 (192.168.101.253)
Destination: 10.8.8.7 (10.8.8.7)
Transmission Control Protocol, Src Port: 3691 (3691), Dst Port: 80 (80), Seq: 30101964, Ack: 916756972, Len: 0
Source port: 3691 (3691)
Destination port: 80 (80)
Sequence number: 30101964
Acknowledgement number: 916756972
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 8760
Checksum: 0x2205 (correct)
0000 00 e0 29 2e 1e 5b 00 50 bf 94 c7 01 08 00 45 00 ..)..[.P......E.
0010 00 28 90 7a 40 00 7f 06 32 a1 c0 a8 65 fd 0a 08 .(.z@...2...e...
0020 08 07 0e 6b 00 50 01 cb 51 cc 36 a4 99 ec 50 10 ...k.P..Q.6...P.
0030 22 38 22 05 00 00 "8"...
Frame 6 (419 bytes on wire, 419 bytes captured)
Arrival Time: Sep 19, 2003 16:19:11.884915000
Time delta from previous packet: 0.006153000 seconds
Time relative to first packet: 0.107896000 seconds
Frame Number: 6
Packet Length: 419 bytes
Capture Length: 419 bytes
Ethernet II, Src: 00:50:bf:94:c7:01, Dst: 00:e0:29:2e:1e:5b
Destination: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b)
Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01)
Type: IP (0x0800)
Internet Protocol, Src Addr: 192.168.101.253 (192.168.101.253), Dst Addr: 10.8.8.7 (10.8.8.7)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 405
Identification: 0x917a (37242)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: TCP (0x06)
Header checksum: 0x3034 (correct)
Source: 192.168.101.253 (192.168.101.253)
Destination: 10.8.8.7 (10.8.8.7)
Transmission Control Protocol, Src Port: 3691 (3691), Dst Port: 80 (80), Seq: 30101964, Ack: 916756972, Len: 365
Source port: 3691 (3691)
Destination port: 80 (80)
Sequence number: 30101964
Next sequence number: 30102329
Acknowledgement number: 916756972
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 8760
Checksum: 0xeeb0 (correct)
Hypertext Transfer Protocol
GET / HTTP/1.1\r\n
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel, application/msword, application/vnd.ms-powerpoint, application/pdf, application/x-shockwave-flash, */*\r\n
Accept-Language: en-us\r\n
Accept-Encoding: gzip, deflate\r\n
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
Host: 10.8.8.7\r\n
Connection: Keep-Alive\r\n
\r\n
0000 00 e0 29 2e 1e 5b 00 50 bf 94 c7 01 08 00 45 00 ..)..[.P......E.
0010 01 95 91 7a 40 00 7f 06 30 34 c0 a8 65 fd 0a 08 ...z@...04..e...
0020 08 07 0e 6b 00 50 01 cb 51 cc 36 a4 99 ec 50 18 ...k.P..Q.6...P.
0030 22 38 ee b0 00 00 47 45 54 20 2f 20 48 54 54 50 "8....GET / HTTP
0040 2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 69 6d /1.1..Accept: im
0050 61 67 65 2f 67 69 66 2c 20 69 6d 61 67 65 2f 78 age/gif, image/x
0060 2d 78 62 69 74 6d 61 70 2c 20 69 6d 61 67 65 2f -xbitmap, image/
0070 6a 70 65 67 2c 20 69 6d 61 67 65 2f 70 6a 70 65 jpeg, image/pjpe
0080 67 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 g, application/v
0090 6e 64 2e 6d 73 2d 65 78 63 65 6c 2c 20 61 70 70 nd.ms-excel, app
00a0 6c 69 63 61 74 69 6f 6e 2f 6d 73 77 6f 72 64 2c lication/msword,
00b0 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 application/vnd
00c0 2e 6d 73 2d 70 6f 77 65 72 70 6f 69 6e 74 2c 20 .ms-powerpoint,
00d0 61 70 70 6c 69 63 61 74 69 6f 6e 2f 70 64 66 2c application/pdf,
00e0 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 73 application/x-s
00f0 68 6f 63 6b 77 61 76 65 2d 66 6c 61 73 68 2c 20 hockwave-flash,
0100 2a 2f 2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 */*..Accept-Lang
0110 75 61 67 65 3a 20 65 6e 2d 75 73 0d 0a 41 63 63 uage: en-us..Acc
0120 65 70 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a ept-Encoding: gz
0130 69 70 2c 20 64 65 66 6c 61 74 65 0d 0a 55 73 65 ip, deflate..Use
0140 72 2d 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 r-Agent: Mozilla
0150 2f 34 2e 30 20 28 63 6f 6d 70 61 74 69 62 6c 65 /4.0 (compatible
0160 3b 20 4d 53 49 45 20 36 2e 30 3b 20 57 69 6e 64 ; MSIE 6.0; Wind
0170 6f 77 73 20 39 38 29 0d 0a 48 6f 73 74 3a 20 31 ows 98)..Host: 1
0180 30 2e 38 2e 38 2e 37 0d 0a 43 6f 6e 6e 65 63 74 0.8.8.7..Connect
0190 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c 69 76 65 0d ion: Keep-Alive.
01a0 0a 0d 0a ...
Frame 7 (890 bytes on wire, 890 bytes captured)
Arrival Time: Sep 19, 2003 16:19:11.895983000
Time delta from previous packet: 0.011068000 seconds
Time relative to first packet: 0.118964000 seconds
Frame Number: 7
Packet Length: 890 bytes
Capture Length: 890 bytes
Ethernet II, Src: 00:e0:29:2e:1e:5b, Dst: 00:50:bf:94:c7:01
Destination: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01)
Source: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b)
Type: IP (0x0800)
Trailer: 19BC8F2E
Internet Protocol, Src Addr: 10.8.8.7 (10.8.8.7), Dst Addr: 192.168.101.253 (192.168.101.253)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 872
Identification: 0x1f0a (7946)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xdfd1 (correct)
Source: 10.8.8.7 (10.8.8.7)
Destination: 192.168.101.253 (192.168.101.253)
Transmission Control Protocol, Src Port: 80 (80), Dst Port: 3691 (3691), Seq: 916756972, Ack: 30102329, Len: 832
Source port: 80 (80)
Destination port: 3691 (3691)
Sequence number: 916756972
Next sequence number: 916757804
Acknowledgement number: 30102329
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 58632
Checksum: 0x05f7 (correct)
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Date: Fri, 19 Sep 2003 22:37:06 GMT\r\n
Server: Apache/2.0.46 (Unix)\r\n
Keep-Alive: timeout=15, max=100\r\n
Connection: Keep-Alive\r\n
Transfer-Encoding: chunked\r\n
Content-Type: text/html\r\n
\r\n
Data (636 bytes)
0000 00 50 bf 94 c7 01 00 e0 29 2e 1e 5b 08 00 45 00 .P......)..[..E.
0010 03 68 1f 0a 40 00 40 06 df d1 0a 08 08 07 c0 a8 .h..@.@.........
0020 65 fd 00 50 0e 6b 36 a4 99 ec 01 cb 53 39 50 18 e..P.k6.....S9P.
0030 e5 08 05 f7 00 00 48 54 54 50 2f 31 2e 31 20 32 ......HTTP/1.1 2
0040 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 46 72 69 00 OK..Date: Fri
0050 2c 20 31 39 20 53 65 70 20 32 30 30 33 20 32 32 , 19 Sep 2003 22
0060 3a 33 37 3a 30 36 20 47 4d 54 0d 0a 53 65 72 76 :37:06 GMT..Serv
0070 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 30 2e 34 er: Apache/2.0.4
0080 36 20 28 55 6e 69 78 29 0d 0a 4b 65 65 70 2d 41 6 (Unix)..Keep-A
0090 6c 69 76 65 3a 20 74 69 6d 65 6f 75 74 3d 31 35 live: timeout=15
00a0 2c 20 6d 61 78 3d 31 30 30 0d 0a 43 6f 6e 6e 65 , max=100..Conne
00b0 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c 69 76 ction: Keep-Aliv
00c0 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f e..Transfer-Enco
00d0 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 ding: chunked..C
00e0 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 ontent-Type: tex
00f0 74 2f 68 74 6d 6c 0d 0a 0d 0a 32 37 35 0d 0a 3c t/html....275..<
0100 68 74 6d 6c 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 3e html>..
0110 0a 43 6f 6e 67 72 61 74 75 6c 61 74 69 6f 6e 73 .Congratulations
0120 2e 20 59 6f 75 20 67 6f 74 20 68 65 72 65 20 76 . You got here v
0130 69 61 20 31 30 2e 38 2e 38 2e 32 21 20 54 68 69 ia 10.8.8.2! Thi
0140 73 20 6d 65 61 6e 73 20 74 68 61 74 0a 79 6f 75 s means that.you
0150 20 77 65 6e 74 20 74 68 72 6f 75 67 68 20 74 68 went through th
0160 65 20 74 65 73 74 2d 6b 61 6d 65 20 49 50 73 65 e test-kame IPse
0170 63 20 67 61 74 65 77 61 79 2e 0a 3c 70 3e 0a 49 c gateway..
.I
0180 66 20 79 6f 75 20 68 61 76 65 20 6a 75 73 74 20 f you have just
0190 63 6f 6d 70 6c 65 74 65 64 20 79 6f 75 72 20 74 completed your t
01a0 65 73 74 20 66 6f 72 20 61 20 6c 6f 67 6f 2c 20 est for a logo,
01b0 70 6c 65 61 73 65 0a 73 65 6e 64 20 74 68 65 20 please.send the
01c0 66 6f 6c 6c 6f 77 69 6e 67 20 69 6e 66 6f 72 6d following inform
01d0 61 74 69 6f 6e 20 74 6f 0a 3c 61 20 68 72 65 66 ation to.
0200 70 61 75 6c 2e 68 6f 66 66 6d 61 6e 40 76 70 6e paul.hoffman@vpn
0210 63 2e 6f 72 67 3c 2f 61 3e 3a 0a 3c 75 6c 3e 0a c.org:.
.
0220 3c 6c 69 3e 59 6f 75 72 20 63 6f 6d 70 61 6e 79 - Your company
0230 20 6e 61 6d 65 20 61 6e 64 20 69 64 65 6e 74 69 name and identi
0240 66 69 65 72 0a 3c 6c 69 3e 54 68 65 20 6e 61 6d fier.
- The nam
0250 65 20 6f 66 20 74 68 65 20 70 72 6f 64 75 63 74 e of the product
0260 20 6f 72 20 70 72 6f 64 75 63 74 20 6c 69 6e 65 or product line
0270 20 74 68 61 74 20 79 6f 75 20 74 65 73 74 65 64 that you tested
0280 0a 3c 6c 69 3e 54 68 65 20 61 64 64 72 65 73 73 .
- The address
0290 20 6f 66 20 79 6f 75 72 20 6c 6f 67 73 20 28 77 of your logs (w
02a0 68 69 63 68 20 77 61 73 20 67 69 76 65 6e 20 74 hich was given t
02b0 6f 20 79 6f 75 20 77 68 65 6e 0a 20 20 20 20 79 o you when. y
02c0 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 71 ou entered the q
02d0 75 65 75 65 29 0a 3c 6c 69 3e 54 68 65 20 63 75 ueue).
- The cu
02e0 72 72 65 6e 74 20 74 69 6d 65 20 28 77 68 69 63 rrent time (whic
02f0 68 20 69 73 20 46 72 69 20 53 65 70 20 31 39 20 h is Fri Sep 19
0300 31 35 3a 33 37 3a 30 36 20 32 30 30 33 29 0a 3c 15:37:06 2003).<
0310 6c 69 3e 54 68 65 20 49 50 20 61 64 64 72 65 73 li>The IP addres
0320 73 20 6f 66 20 79 6f 75 72 20 68 6f 73 74 20 62 s of your host b
0330 65 68 69 6e 64 20 79 6f 75 72 20 67 61 74 65 77 ehind your gatew
0340 61 79 20 28 77 68 69 63 68 20 69 73 20 31 39 32 ay (which is 192
0350 2e 31 36 38 2e 31 30 31 2e 32 35 33 29 0a 3c 2f .168.101.253)..........
Frame 8 (64 bytes on wire, 64 bytes captured)
Arrival Time: Sep 19, 2003 16:19:11.896624000
Time delta from previous packet: 0.000641000 seconds
Time relative to first packet: 0.119605000 seconds
Frame Number: 8
Packet Length: 64 bytes
Capture Length: 64 bytes
Ethernet II, Src: 00:e0:29:2e:1e:5b, Dst: 00:50:bf:94:c7:01
Destination: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01)
Source: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b)
Type: IP (0x0800)
Trailer: 0086DD7B62
Internet Protocol, Src Addr: 10.8.8.7 (10.8.8.7), Dst Addr: 192.168.101.253 (192.168.101.253)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 45
Identification: 0x1f0b (7947)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xe30b (correct)
Source: 10.8.8.7 (10.8.8.7)
Destination: 192.168.101.253 (192.168.101.253)
Transmission Control Protocol, Src Port: 80 (80), Dst Port: 3691 (3691), Seq: 916757804, Ack: 30102329, Len: 5
Source port: 80 (80)
Destination port: 3691 (3691)
Sequence number: 916757804
Next sequence number: 916757809
Acknowledgement number: 30102329
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 58632
Checksum: 0x1660 (correct)
Hypertext Transfer Protocol
Data (5 bytes)
0000 00 50 bf 94 c7 01 00 e0 29 2e 1e 5b 08 00 45 00 .P......)..[..E.
0010 00 2d 1f 0b 40 00 40 06 e3 0b 0a 08 08 07 c0 a8 .-..@.@.........
0020 65 fd 00 50 0e 6b 36 a4 9d 2c 01 cb 53 39 50 18 e..P.k6..,..S9P.
0030 e5 08 16 60 00 00 30 0d 0a 0d 0a 00 86 dd 7b 62 ...`..0.......{b
Frame 9 (54 bytes on wire, 54 bytes captured)
Arrival Time: Sep 19, 2003 16:19:12.053119000
Time delta from previous packet: 0.156495000 seconds
Time relative to first packet: 0.276100000 seconds
Frame Number: 9
Packet Length: 54 bytes
Capture Length: 54 bytes
Ethernet II, Src: 00:50:bf:94:c7:01, Dst: 00:e0:29:2e:1e:5b
Destination: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b)
Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01)
Type: IP (0x0800)
Internet Protocol, Src Addr: 192.168.101.253 (192.168.101.253), Dst Addr: 10.8.8.7 (10.8.8.7)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0x947a (38010)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: TCP (0x06)
Header checksum: 0x2ea1 (correct)
Source: 192.168.101.253 (192.168.101.253)
Destination: 10.8.8.7 (10.8.8.7)
Transmission Control Protocol, Src Port: 3691 (3691), Dst Port: 80 (80), Seq: 30102329, Ack: 916757809, Len: 0
Source port: 3691 (3691)
Destination port: 80 (80)
Sequence number: 30102329
Acknowledgement number: 916757809
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 7923
Checksum: 0x2098 (correct)
0000 00 e0 29 2e 1e 5b 00 50 bf 94 c7 01 08 00 45 00 ..)..[.P......E.
0010 00 28 94 7a 40 00 7f 06 2e a1 c0 a8 65 fd 0a 08 .(.z@.......e...
0020 08 07 0e 6b 00 50 01 cb 53 39 36 a4 9d 31 50 10 ...k.P..S96..1P.
0030 1e f3 20 98 00 00 .. ...
Frame 10 (64 bytes on wire, 64 bytes captured)
Arrival Time: Sep 19, 2003 16:19:26.898969000
Time delta from previous packet: 14.845850000 seconds
Time relative to first packet: 15.121950000 seconds
Frame Number: 10
Packet Length: 64 bytes
Capture Length: 64 bytes
Ethernet II, Src: 00:e0:29:2e:1e:5b, Dst: 00:50:bf:94:c7:01
Destination: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01)
Source: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b)
Type: IP (0x0800)
Trailer: 5A8100005A81F763160F
Internet Protocol, Src Addr: 10.8.8.7 (10.8.8.7), Dst Addr: 192.168.101.253 (192.168.101.253)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0x1f0c (7948)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xe30f (correct)
Source: 10.8.8.7 (10.8.8.7)
Destination: 192.168.101.253 (192.168.101.253)
Transmission Control Protocol, Src Port: 80 (80), Dst Port: 3691 (3691), Seq: 916757809, Ack: 30102329, Len: 0
Source port: 80 (80)
Destination port: 3691 (3691)
Sequence number: 916757809
Acknowledgement number: 30102329
Header length: 20 bytes
Flags: 0x0011 (FIN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...1 = Fin: Set
Window size: 58632
Checksum: 0x5a81 (correct)
0000 00 50 bf 94 c7 01 00 e0 29 2e 1e 5b 08 00 45 00 .P......)..[..E.
0010 00 28 1f 0c 40 00 40 06 e3 0f 0a 08 08 07 c0 a8 .(..@.@.........
0020 65 fd 00 50 0e 6b 36 a4 9d 31 01 cb 53 39 50 11 e..P.k6..1..S9P.
0030 e5 08 5a 81 00 00 5a 81 00 00 5a 81 f7 63 16 0f ..Z...Z...Z..c..
Frame 11 (54 bytes on wire, 54 bytes captured)
Arrival Time: Sep 19, 2003 16:19:27.002259000
Time delta from previous packet: 0.103290000 seconds
Time relative to first packet: 15.225240000 seconds
Frame Number: 11
Packet Length: 54 bytes
Capture Length: 54 bytes
Ethernet II, Src: 00:50:bf:94:c7:01, Dst: 00:e0:29:2e:1e:5b
Destination: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b)
Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01)
Type: IP (0x0800)
Internet Protocol, Src Addr: 192.168.101.253 (192.168.101.253), Dst Addr: 10.8.8.7 (10.8.8.7)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0x967a (38522)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: TCP (0x06)
Header checksum: 0x2ca1 (correct)
Source: 192.168.101.253 (192.168.101.253)
Destination: 10.8.8.7 (10.8.8.7)
Transmission Control Protocol, Src Port: 3691 (3691), Dst Port: 80 (80), Seq: 30102329, Ack: 916757810, Len: 0
Source port: 3691 (3691)
Destination port: 80 (80)
Sequence number: 30102329
Acknowledgement number: 916757810
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 7923
Checksum: 0x2097 (correct)
0000 00 e0 29 2e 1e 5b 00 50 bf 94 c7 01 08 00 45 00 ..)..[.P......E.
0010 00 28 96 7a 40 00 7f 06 2c a1 c0 a8 65 fd 0a 08 .(.z@...,...e...
0020 08 07 0e 6b 00 50 01 cb 53 39 36 a4 9d 32 50 10 ...k.P..S96..2P.
0030 1e f3 20 97 00 00 .. ...
Frame 12 (54 bytes on wire, 54 bytes captured)
Arrival Time: Sep 19, 2003 16:19:28.574792000
Time delta from previous packet: 1.572533000 seconds
Time relative to first packet: 16.797773000 seconds
Frame Number: 12
Packet Length: 54 bytes
Capture Length: 54 bytes
Ethernet II, Src: 00:50:bf:94:c7:01, Dst: 00:e0:29:2e:1e:5b
Destination: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b)
Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01)
Type: IP (0x0800)
Internet Protocol, Src Addr: 192.168.101.253 (192.168.101.253), Dst Addr: 10.8.8.7 (10.8.8.7)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0x987a (39034)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: TCP (0x06)
Header checksum: 0x2aa1 (correct)
Source: 192.168.101.253 (192.168.101.253)
Destination: 10.8.8.7 (10.8.8.7)
Transmission Control Protocol, Src Port: 3691 (3691), Dst Port: 80 (80), Seq: 30102329, Ack: 916757810, Len: 0
Source port: 3691 (3691)
Destination port: 80 (80)
Sequence number: 30102329
Header length: 20 bytes
Flags: 0x0004 (RST)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .1.. = Reset: Set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 0
Checksum: 0x3f96 (correct)
0000 00 e0 29 2e 1e 5b 00 50 bf 94 c7 01 08 00 45 00 ..)..[.P......E.
0010 00 28 98 7a 40 00 7f 06 2a a1 c0 a8 65 fd 0a 08 .(.z@...*...e...
0020 08 07 0e 6b 00 50 01 cb 53 39 36 a4 9d 32 50 04 ...k.P..S96..2P.
0030 00 00 3f 96 00 00 ..?...
Frame 13 (62 bytes on wire, 62 bytes captured)
Arrival Time: Sep 19, 2003 16:22:46.940270000
Time delta from previous packet: 198.365478000 seconds
Time relative to first packet: 215.163251000 seconds
Frame Number: 13
Packet Length: 62 bytes
Capture Length: 62 bytes
Ethernet II, Src: 00:50:bf:94:c7:01, Dst: 00:e0:29:2e:1e:5b
Destination: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b)
Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01)
Type: IP (0x0800)
Internet Protocol, Src Addr: 192.168.101.253 (192.168.101.253), Dst Addr: 10.8.8.7 (10.8.8.7)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 48
Identification: 0xcf7a (53114)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: TCP (0x06)
Header checksum: 0xf398 (correct)
Source: 192.168.101.253 (192.168.101.253)
Destination: 10.8.8.7 (10.8.8.7)
Transmission Control Protocol, Src Port: 3699 (3699), Dst Port: 80 (80), Seq: 30323199, Ack: 0, Len: 0
Source port: 3699 (3699)
Destination port: 80 (80)
Sequence number: 30323199
Header length: 28 bytes
Flags: 0x0002 (SYN)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 8192
Checksum: 0x681a (correct)
Options: (8 bytes)
Maximum segment size: 1396 bytes
NOP
NOP
SACK permitted
0000 00 e0 29 2e 1e 5b 00 50 bf 94 c7 01 08 00 45 00 ..)..[.P......E.
0010 00 30 cf 7a 40 00 7f 06 f3 98 c0 a8 65 fd 0a 08 .0.z@.......e...
0020 08 07 0e 73 00 50 01 ce b1 ff 00 00 00 00 70 02 ...s.P........p.
0030 20 00 68 1a 00 00 02 04 05 74 01 01 04 02 .h......t....
Frame 14 (64 bytes on wire, 64 bytes captured)
Arrival Time: Sep 19, 2003 16:22:46.940403000
Time delta from previous packet: 0.000133000 seconds
Time relative to first packet: 215.163384000 seconds
Frame Number: 14
Packet Length: 64 bytes
Capture Length: 64 bytes
Ethernet II, Src: 00:e0:29:2e:1e:5b, Dst: 00:50:bf:94:c7:01
Destination: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01)
Source: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b)
Type: IP (0x0800)
Trailer: 02042EFF2BF9
Internet Protocol, Src Addr: 10.8.8.7 (10.8.8.7), Dst Addr: 192.168.101.253 (192.168.101.253)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 44
Identification: 0x1f0d (7949)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xe30a (correct)
Source: 10.8.8.7 (10.8.8.7)
Destination: 192.168.101.253 (192.168.101.253)
Transmission Control Protocol, Src Port: 80 (80), Dst Port: 3699 (3699), Seq: 245251825, Ack: 30323200, Len: 0
Source port: 80 (80)
Destination port: 3699 (3699)
Sequence number: 245251825
Acknowledgement number: 30323200
Header length: 24 bytes
Flags: 0x0012 (SYN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Window size: 57344
Checksum: 0x6f40 (correct)
Options: (4 bytes)
Maximum segment size: 1460 bytes
0000 00 50 bf 94 c7 01 00 e0 29 2e 1e 5b 08 00 45 00 .P......)..[..E.
0010 00 2c 1f 0d 40 00 40 06 e3 0a 0a 08 08 07 c0 a8 .,..@.@.........
0020 65 fd 00 50 0e 73 0e 9e 3e f1 01 ce b2 00 60 12 e..P.s..>.....`.
0030 e0 00 6f 40 00 00 02 04 05 b4 02 04 2e ff 2b f9 ..o@..........+.
Frame 15 (54 bytes on wire, 54 bytes captured)
Arrival Time: Sep 19, 2003 16:22:47.043743000
Time delta from previous packet: 0.103340000 seconds
Time relative to first packet: 215.266724000 seconds
Frame Number: 15
Packet Length: 54 bytes
Capture Length: 54 bytes
Ethernet II, Src: 00:50:bf:94:c7:01, Dst: 00:e0:29:2e:1e:5b
Destination: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b)
Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01)
Type: IP (0x0800)
Internet Protocol, Src Addr: 192.168.101.253 (192.168.101.253), Dst Addr: 10.8.8.7 (10.8.8.7)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xd07a (53370)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: TCP (0x06)
Header checksum: 0xf2a0 (correct)
Source: 192.168.101.253 (192.168.101.253)
Destination: 10.8.8.7 (10.8.8.7)
Transmission Control Protocol, Src Port: 3699 (3699), Dst Port: 80 (80), Seq: 30323200, Ack: 245251826, Len: 0
Source port: 3699 (3699)
Destination port: 80 (80)
Sequence number: 30323200
Acknowledgement number: 245251826
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 8760
Checksum: 0x44c6 (correct)
0000 00 e0 29 2e 1e 5b 00 50 bf 94 c7 01 08 00 45 00 ..)..[.P......E.
0010 00 28 d0 7a 40 00 7f 06 f2 a0 c0 a8 65 fd 0a 08 .(.z@.......e...
0020 08 07 0e 73 00 50 01 ce b2 00 0e 9e 3e f2 50 10 ...s.P......>.P.
0030 22 38 44 c6 00 00 "8D...
Frame 16 (241 bytes on wire, 241 bytes captured)
Arrival Time: Sep 19, 2003 16:22:47.046824000
Time delta from previous packet: 0.003081000 seconds
Time relative to first packet: 215.269805000 seconds
Frame Number: 16
Packet Length: 241 bytes
Capture Length: 241 bytes
Ethernet II, Src: 00:50:bf:94:c7:01, Dst: 00:e0:29:2e:1e:5b
Destination: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b)
Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01)
Type: IP (0x0800)
Internet Protocol, Src Addr: 192.168.101.253 (192.168.101.253), Dst Addr: 10.8.8.7 (10.8.8.7)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 227
Identification: 0xd17a (53626)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: TCP (0x06)
Header checksum: 0xf0e5 (correct)
Source: 192.168.101.253 (192.168.101.253)
Destination: 10.8.8.7 (10.8.8.7)
Transmission Control Protocol, Src Port: 3699 (3699), Dst Port: 80 (80), Seq: 30323200, Ack: 245251826, Len: 187
Source port: 3699 (3699)
Destination port: 80 (80)
Sequence number: 30323200
Next sequence number: 30323387
Acknowledgement number: 245251826
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 8760
Checksum: 0xa590 (correct)
Hypertext Transfer Protocol
GET / HTTP/1.1\r\n
Accept: */*\r\n
Accept-Language: en-us\r\n
Accept-Encoding: gzip, deflate\r\n
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n
Host: 10.8.8.7\r\n
Connection: Keep-Alive\r\n
\r\n
0000 00 e0 29 2e 1e 5b 00 50 bf 94 c7 01 08 00 45 00 ..)..[.P......E.
0010 00 e3 d1 7a 40 00 7f 06 f0 e5 c0 a8 65 fd 0a 08 ...z@.......e...
0020 08 07 0e 73 00 50 01 ce b2 00 0e 9e 3e f2 50 18 ...s.P......>.P.
0030 22 38 a5 90 00 00 47 45 54 20 2f 20 48 54 54 50 "8....GET / HTTP
0040 2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 2a 2f /1.1..Accept: */
0050 2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 61 *..Accept-Langua
0060 67 65 3a 20 65 6e 2d 75 73 0d 0a 41 63 63 65 70 ge: en-us..Accep
0070 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70 t-Encoding: gzip
0080 2c 20 64 65 66 6c 61 74 65 0d 0a 55 73 65 72 2d , deflate..User-
0090 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 34 Agent: Mozilla/4
00a0 2e 30 20 28 63 6f 6d 70 61 74 69 62 6c 65 3b 20 .0 (compatible;
00b0 4d 53 49 45 20 36 2e 30 3b 20 57 69 6e 64 6f 77 MSIE 6.0; Window
00c0 73 20 39 38 29 0d 0a 48 6f 73 74 3a 20 31 30 2e s 98)..Host: 10.
00d0 38 2e 38 2e 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 8.8.7..Connectio
00e0 6e 3a 20 4b 65 65 70 2d 41 6c 69 76 65 0d 0a 0d n: Keep-Alive...
00f0 0a .
Frame 17 (890 bytes on wire, 890 bytes captured)
Arrival Time: Sep 19, 2003 16:22:47.057866000
Time delta from previous packet: 0.011042000 seconds
Time relative to first packet: 215.280847000 seconds
Frame Number: 17
Packet Length: 890 bytes
Capture Length: 890 bytes
Ethernet II, Src: 00:e0:29:2e:1e:5b, Dst: 00:50:bf:94:c7:01
Destination: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01)
Source: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b)
Type: IP (0x0800)
Trailer: 0FCCB680
Internet Protocol, Src Addr: 10.8.8.7 (10.8.8.7), Dst Addr: 192.168.101.253 (192.168.101.253)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 872
Identification: 0x1f0e (7950)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xdfcd (correct)
Source: 10.8.8.7 (10.8.8.7)
Destination: 192.168.101.253 (192.168.101.253)
Transmission Control Protocol, Src Port: 80 (80), Dst Port: 3699 (3699), Seq: 245251826, Ack: 30323387, Len: 832
Source port: 80 (80)
Destination port: 3699 (3699)
Sequence number: 245251826
Next sequence number: 245252658
Acknowledgement number: 30323387
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 58632
Checksum: 0x2f72 (correct)
Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Date: Fri, 19 Sep 2003 22:40:41 GMT\r\n
Server: Apache/2.0.46 (Unix)\r\n
Keep-Alive: timeout=15, max=100\r\n
Connection: Keep-Alive\r\n
Transfer-Encoding: chunked\r\n
Content-Type: text/html\r\n
\r\n
Data (636 bytes)
0000 00 50 bf 94 c7 01 00 e0 29 2e 1e 5b 08 00 45 00 .P......)..[..E.
0010 03 68 1f 0e 40 00 40 06 df cd 0a 08 08 07 c0 a8 .h..@.@.........
0020 65 fd 00 50 0e 73 0e 9e 3e f2 01 ce b2 bb 50 18 e..P.s..>.....P.
0030 e5 08 2f 72 00 00 48 54 54 50 2f 31 2e 31 20 32 ../r..HTTP/1.1 2
0040 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 46 72 69 00 OK..Date: Fri
0050 2c 20 31 39 20 53 65 70 20 32 30 30 33 20 32 32 , 19 Sep 2003 22
0060 3a 34 30 3a 34 31 20 47 4d 54 0d 0a 53 65 72 76 :40:41 GMT..Serv
0070 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 30 2e 34 er: Apache/2.0.4
0080 36 20 28 55 6e 69 78 29 0d 0a 4b 65 65 70 2d 41 6 (Unix)..Keep-A
0090 6c 69 76 65 3a 20 74 69 6d 65 6f 75 74 3d 31 35 live: timeout=15
00a0 2c 20 6d 61 78 3d 31 30 30 0d 0a 43 6f 6e 6e 65 , max=100..Conne
00b0 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c 69 76 ction: Keep-Aliv
00c0 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f e..Transfer-Enco
00d0 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 ding: chunked..C
00e0 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 ontent-Type: tex
00f0 74 2f 68 74 6d 6c 0d 0a 0d 0a 32 37 35 0d 0a 3c t/html....275..<
0100 68 74 6d 6c 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 3e html>..
0110 0a 43 6f 6e 67 72 61 74 75 6c 61 74 69 6f 6e 73 .Congratulations
0120 2e 20 59 6f 75 20 67 6f 74 20 68 65 72 65 20 76 . You got here v
0130 69 61 20 31 30 2e 38 2e 38 2e 32 21 20 54 68 69 ia 10.8.8.2! Thi
0140 73 20 6d 65 61 6e 73 20 74 68 61 74 0a 79 6f 75 s means that.you
0150 20 77 65 6e 74 20 74 68 72 6f 75 67 68 20 74 68 went through th
0160 65 20 74 65 73 74 2d 6b 61 6d 65 20 49 50 73 65 e test-kame IPse
0170 63 20 67 61 74 65 77 61 79 2e 0a 3c 70 3e 0a 49 c gateway..
.I
0180 66 20 79 6f 75 20 68 61 76 65 20 6a 75 73 74 20 f you have just
0190 63 6f 6d 70 6c 65 74 65 64 20 79 6f 75 72 20 74 completed your t
01a0 65 73 74 20 66 6f 72 20 61 20 6c 6f 67 6f 2c 20 est for a logo,
01b0 70 6c 65 61 73 65 0a 73 65 6e 64 20 74 68 65 20 please.send the
01c0 66 6f 6c 6c 6f 77 69 6e 67 20 69 6e 66 6f 72 6d following inform
01d0 61 74 69 6f 6e 20 74 6f 0a 3c 61 20 68 72 65 66 ation to.
0200 70 61 75 6c 2e 68 6f 66 66 6d 61 6e 40 76 70 6e paul.hoffman@vpn
0210 63 2e 6f 72 67 3c 2f 61 3e 3a 0a 3c 75 6c 3e 0a c.org:.
.
0220 3c 6c 69 3e 59 6f 75 72 20 63 6f 6d 70 61 6e 79 - Your company
0230 20 6e 61 6d 65 20 61 6e 64 20 69 64 65 6e 74 69 name and identi
0240 66 69 65 72 0a 3c 6c 69 3e 54 68 65 20 6e 61 6d fier.
- The nam
0250 65 20 6f 66 20 74 68 65 20 70 72 6f 64 75 63 74 e of the product
0260 20 6f 72 20 70 72 6f 64 75 63 74 20 6c 69 6e 65 or product line
0270 20 74 68 61 74 20 79 6f 75 20 74 65 73 74 65 64 that you tested
0280 0a 3c 6c 69 3e 54 68 65 20 61 64 64 72 65 73 73 .
- The address
0290 20 6f 66 20 79 6f 75 72 20 6c 6f 67 73 20 28 77 of your logs (w
02a0 68 69 63 68 20 77 61 73 20 67 69 76 65 6e 20 74 hich was given t
02b0 6f 20 79 6f 75 20 77 68 65 6e 0a 20 20 20 20 79 o you when. y
02c0 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 71 ou entered the q
02d0 75 65 75 65 29 0a 3c 6c 69 3e 54 68 65 20 63 75 ueue).
- The cu
02e0 72 72 65 6e 74 20 74 69 6d 65 20 28 77 68 69 63 rrent time (whic
02f0 68 20 69 73 20 46 72 69 20 53 65 70 20 31 39 20 h is Fri Sep 19
0300 31 35 3a 34 30 3a 34 31 20 32 30 30 33 29 0a 3c 15:40:41 2003).<
0310 6c 69 3e 54 68 65 20 49 50 20 61 64 64 72 65 73 li>The IP addres
0320 73 20 6f 66 20 79 6f 75 72 20 68 6f 73 74 20 62 s of your host b
0330 65 68 69 6e 64 20 79 6f 75 72 20 67 61 74 65 77 ehind your gatew
0340 61 79 20 28 77 68 69 63 68 20 69 73 20 31 39 32 ay (which is 192
0350 2e 31 36 38 2e 31 30 31 2e 32 35 33 29 0a 3c 2f .168.101.253)..........
Frame 18 (64 bytes on wire, 64 bytes captured)
Arrival Time: Sep 19, 2003 16:22:47.058490000
Time delta from previous packet: 0.000624000 seconds
Time relative to first packet: 215.281471000 seconds
Frame Number: 18
Packet Length: 64 bytes
Capture Length: 64 bytes
Ethernet II, Src: 00:e0:29:2e:1e:5b, Dst: 00:50:bf:94:c7:01
Destination: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01)
Source: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b)
Type: IP (0x0800)
Trailer: 388D334BC9
Internet Protocol, Src Addr: 10.8.8.7 (10.8.8.7), Dst Addr: 192.168.101.253 (192.168.101.253)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 45
Identification: 0x1f0f (7951)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xe307 (correct)
Source: 10.8.8.7 (10.8.8.7)
Destination: 192.168.101.253 (192.168.101.253)
Transmission Control Protocol, Src Port: 80 (80), Dst Port: 3699 (3699), Seq: 245252658, Ack: 30323387, Len: 5
Source port: 80 (80)
Destination port: 3699 (3699)
Sequence number: 245252658
Next sequence number: 245252663
Acknowledgement number: 30323387
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 58632
Checksum: 0x39d3 (correct)
Hypertext Transfer Protocol
Data (5 bytes)
0000 00 50 bf 94 c7 01 00 e0 29 2e 1e 5b 08 00 45 00 .P......)..[..E.
0010 00 2d 1f 0f 40 00 40 06 e3 07 0a 08 08 07 c0 a8 .-..@.@.........
0020 65 fd 00 50 0e 73 0e 9e 42 32 01 ce b2 bb 50 18 e..P.s..B2....P.
0030 e5 08 39 d3 00 00 30 0d 0a 0d 0a 38 8d 33 4b c9 ..9...0....8.3K.
Frame 19 (54 bytes on wire, 54 bytes captured)
Arrival Time: Sep 19, 2003 16:22:47.215860000
Time delta from previous packet: 0.157370000 seconds
Time relative to first packet: 215.438841000 seconds
Frame Number: 19
Packet Length: 54 bytes
Capture Length: 54 bytes
Ethernet II, Src: 00:50:bf:94:c7:01, Dst: 00:e0:29:2e:1e:5b
Destination: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b)
Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01)
Type: IP (0x0800)
Internet Protocol, Src Addr: 192.168.101.253 (192.168.101.253), Dst Addr: 10.8.8.7 (10.8.8.7)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xd37a (54138)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: TCP (0x06)
Header checksum: 0xefa0 (correct)
Source: 192.168.101.253 (192.168.101.253)
Destination: 10.8.8.7 (10.8.8.7)
Transmission Control Protocol, Src Port: 3699 (3699), Dst Port: 80 (80), Seq: 30323387, Ack: 245252663, Len: 0
Source port: 3699 (3699)
Destination port: 80 (80)
Sequence number: 30323387
Acknowledgement number: 245252663
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 7923
Checksum: 0x440b (correct)
0000 00 e0 29 2e 1e 5b 00 50 bf 94 c7 01 08 00 45 00 ..)..[.P......E.
0010 00 28 d3 7a 40 00 7f 06 ef a0 c0 a8 65 fd 0a 08 .(.z@.......e...
0020 08 07 0e 73 00 50 01 ce b2 bb 0e 9e 42 37 50 10 ...s.P......B7P.
0030 1e f3 44 0b 00 00 ..D...
Frame 20 (64 bytes on wire, 64 bytes captured)
Arrival Time: Sep 19, 2003 16:23:02.063970000
Time delta from previous packet: 14.848110000 seconds
Time relative to first packet: 230.286951000 seconds
Frame Number: 20
Packet Length: 64 bytes
Capture Length: 64 bytes
Ethernet II, Src: 00:e0:29:2e:1e:5b, Dst: 00:50:bf:94:c7:01
Destination: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01)
Source: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b)
Type: IP (0x0800)
Trailer: 7DF400007DF42D413022
Internet Protocol, Src Addr: 10.8.8.7 (10.8.8.7), Dst Addr: 192.168.101.253 (192.168.101.253)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0x1f10 (7952)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: TCP (0x06)
Header checksum: 0xe30b (correct)
Source: 10.8.8.7 (10.8.8.7)
Destination: 192.168.101.253 (192.168.101.253)
Transmission Control Protocol, Src Port: 80 (80), Dst Port: 3699 (3699), Seq: 245252663, Ack: 30323387, Len: 0
Source port: 80 (80)
Destination port: 3699 (3699)
Sequence number: 245252663
Acknowledgement number: 30323387
Header length: 20 bytes
Flags: 0x0011 (FIN, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...1 = Fin: Set
Window size: 58632
Checksum: 0x7df4 (correct)
0000 00 50 bf 94 c7 01 00 e0 29 2e 1e 5b 08 00 45 00 .P......)..[..E.
0010 00 28 1f 10 40 00 40 06 e3 0b 0a 08 08 07 c0 a8 .(..@.@.........
0020 65 fd 00 50 0e 73 0e 9e 42 37 01 ce b2 bb 50 11 e..P.s..B7....P.
0030 e5 08 7d f4 00 00 7d f4 00 00 7d f4 2d 41 30 22 ..}...}...}.-A0"
Frame 21 (54 bytes on wire, 54 bytes captured)
Arrival Time: Sep 19, 2003 16:23:02.167074000
Time delta from previous packet: 0.103104000 seconds
Time relative to first packet: 230.390055000 seconds
Frame Number: 21
Packet Length: 54 bytes
Capture Length: 54 bytes
Ethernet II, Src: 00:50:bf:94:c7:01, Dst: 00:e0:29:2e:1e:5b
Destination: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b)
Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01)
Type: IP (0x0800)
Internet Protocol, Src Addr: 192.168.101.253 (192.168.101.253), Dst Addr: 10.8.8.7 (10.8.8.7)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xd47a (54394)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: TCP (0x06)
Header checksum: 0xeea0 (correct)
Source: 192.168.101.253 (192.168.101.253)
Destination: 10.8.8.7 (10.8.8.7)
Transmission Control Protocol, Src Port: 3699 (3699), Dst Port: 80 (80), Seq: 30323387, Ack: 245252664, Len: 0
Source port: 3699 (3699)
Destination port: 80 (80)
Sequence number: 30323387
Acknowledgement number: 245252664
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 7923
Checksum: 0x440a (correct)
0000 00 e0 29 2e 1e 5b 00 50 bf 94 c7 01 08 00 45 00 ..)..[.P......E.
0010 00 28 d4 7a 40 00 7f 06 ee a0 c0 a8 65 fd 0a 08 .(.z@.......e...
0020 08 07 0e 73 00 50 01 ce b2 bb 0e 9e 42 38 50 10 ...s.P......B8P.
0030 1e f3 44 0a 00 00 ..D...
Frame 22 (54 bytes on wire, 54 bytes captured)
Arrival Time: Sep 19, 2003 16:23:03.713790000
Time delta from previous packet: 1.546716000 seconds
Time relative to first packet: 231.936771000 seconds
Frame Number: 22
Packet Length: 54 bytes
Capture Length: 54 bytes
Ethernet II, Src: 00:50:bf:94:c7:01, Dst: 00:e0:29:2e:1e:5b
Destination: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b)
Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01)
Type: IP (0x0800)
Internet Protocol, Src Addr: 192.168.101.253 (192.168.101.253), Dst Addr: 10.8.8.7 (10.8.8.7)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 40
Identification: 0xd57a (54650)
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: TCP (0x06)
Header checksum: 0xeda0 (correct)
Source: 192.168.101.253 (192.168.101.253)
Destination: 10.8.8.7 (10.8.8.7)
Transmission Control Protocol, Src Port: 3699 (3699), Dst Port: 80 (80), Seq: 30323387, Ack: 245252664, Len: 0
Source port: 3699 (3699)
Destination port: 80 (80)
Sequence number: 30323387
Header length: 20 bytes
Flags: 0x0004 (RST)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .1.. = Reset: Set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 0
Checksum: 0x6309 (correct)
0000 00 e0 29 2e 1e 5b 00 50 bf 94 c7 01 08 00 45 00 ..)..[.P......E.
0010 00 28 d5 7a 40 00 7f 06 ed a0 c0 a8 65 fd 0a 08 .(.z@.......e...
0020 08 07 0e 73 00 50 01 ce b2 bb 0e 9e 42 38 50 04 ...s.P......B8P.
0030 00 00 63 09 00 00 ..c...