Post-IPsec-process packet dump: Frame 1 (80 bytes on wire, 80 bytes captured) Arrival Time: Sep 19, 2003 12:30:16.219302000 Time delta from previous packet: 0.000000000 seconds Time relative to first packet: 0.000000000 seconds Frame Number: 1 Packet Length: 80 bytes Capture Length: 80 bytes Enc IPv4, SPI 0x3b4265a3, authentic, confidential Address Family: IPv4 (2) SPI: 0x3b4265a3 Flags: 0x00000c00 Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 68 Identification: 0x62a4 (25252) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 115 Protocol: IPIP (0x04) Header checksum: 0xc19e (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.134 (63.202.92.134) Internet Protocol, Src Addr: 192.168.101.253 (192.168.101.253), Dst Addr: 10.8.8.3 (10.8.8.3) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x62a4 (25252) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x5f73 (correct) Source: 192.168.101.253 (192.168.101.253) Destination: 10.8.8.3 (10.8.8.3) Transmission Control Protocol, Src Port: 2857 (2857), Dst Port: 80 (80), Seq: 16289750, Ack: 0, Len: 0 Source port: 2857 (2857) Destination port: 80 (80) Sequence number: 16289750 Header length: 28 bytes Flags: 0x0002 (SYN) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...0 .... = Acknowledgment: Not set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 8192 Checksum: 0x8e67 (correct) Options: (8 bytes) Maximum segment size: 1396 bytes NOP NOP SACK permitted 0000 02 00 00 00 3b 42 65 a3 00 0c 00 00 45 00 00 44 ....;Be.....E..D 0010 62 a4 00 00 73 04 c1 9e 41 dc 45 47 3f ca 5c 86 b...s...A.EG?.\. 0020 45 00 00 30 62 a4 40 00 80 06 5f 73 c0 a8 65 fd E..0b.@..._s..e. 0030 0a 08 08 03 0b 29 00 50 00 f8 8f d6 00 00 00 00 .....).P........ 0040 70 02 20 00 8e 67 00 00 02 04 05 74 01 01 04 02 p. ..g.....t.... Frame 2 (76 bytes on wire, 76 bytes captured) Arrival Time: Sep 19, 2003 12:30:16.220771000 Time delta from previous packet: 0.001469000 seconds Time relative to first packet: 0.001469000 seconds Frame Number: 2 Packet Length: 76 bytes Capture Length: 76 bytes Enc IPv4, SPI 0x68d353aa, authentic, confidential Address Family: IPv4 (2) SPI: 0x68d353aa Flags: 0x00000c00 Internet Protocol, Src Addr: 63.202.92.134 (63.202.92.134), Dst Addr: 65.220.69.71 (65.220.69.71) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 64 Identification: 0xeb2e (60206) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: IPIP (0x04) Header checksum: 0x0000 (incorrect, should be 0x2c18) Source: 63.202.92.134 (63.202.92.134) Destination: 65.220.69.71 (65.220.69.71) Internet Protocol, Src Addr: 10.8.8.3 (10.8.8.3), Dst Addr: 192.168.101.253 (192.168.101.253) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 44 Identification: 0x2796 (10134) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: TCP (0x06) Header checksum: 0xdb85 (correct) Source: 10.8.8.3 (10.8.8.3) Destination: 192.168.101.253 (192.168.101.253) Transmission Control Protocol, Src Port: 80 (80), Dst Port: 2857 (2857), Seq: 3088863159, Ack: 16289751, Len: 0 Source port: 80 (80) Destination port: 2857 (2857) Sequence number: 3088863159 Acknowledgement number: 16289751 Header length: 24 bytes Flags: 0x0012 (SYN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 57344 Checksum: 0xdb48 (correct) Options: (4 bytes) Maximum segment size: 1460 bytes 0000 02 00 00 00 68 d3 53 aa 00 0c 00 00 45 00 00 40 ....h.S.....E..@ 0010 eb 2e 40 00 40 04 00 00 3f ca 5c 86 41 dc 45 47 ..@.@...?.\.A.EG 0020 45 00 00 2c 27 96 40 00 3f 06 db 85 0a 08 08 03 E..,'.@.?....... 0030 c0 a8 65 fd 00 50 0b 29 b8 1c 4f b7 00 f8 8f d7 ..e..P.)..O..... 0040 60 12 e0 00 db 48 00 00 02 04 05 b4 `....H...... Frame 3 (72 bytes on wire, 72 bytes captured) Arrival Time: Sep 19, 2003 12:30:16.325335000 Time delta from previous packet: 0.104564000 seconds Time relative to first packet: 0.106033000 seconds Frame Number: 3 Packet Length: 72 bytes Capture Length: 72 bytes Enc IPv4, SPI 0x3b4265a3, authentic, confidential Address Family: IPv4 (2) SPI: 0x3b4265a3 Flags: 0x00000c00 Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x63a4 (25508) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 115 Protocol: IPIP (0x04) Header checksum: 0xc0a6 (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.134 (63.202.92.134) Internet Protocol, Src Addr: 192.168.101.253 (192.168.101.253), Dst Addr: 10.8.8.3 (10.8.8.3) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x63a4 (25508) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x5e7b (correct) Source: 192.168.101.253 (192.168.101.253) Destination: 10.8.8.3 (10.8.8.3) Transmission Control Protocol, Src Port: 2857 (2857), Dst Port: 80 (80), Seq: 16289751, Ack: 3088863160, Len: 0 Source port: 2857 (2857) Destination port: 80 (80) Sequence number: 16289751 Acknowledgement number: 3088863160 Header length: 20 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 8760 Checksum: 0xb0ce (correct) 0000 02 00 00 00 3b 42 65 a3 00 0c 00 00 45 00 00 3c ....;Be.....E..< 0010 63 a4 00 00 73 04 c0 a6 41 dc 45 47 3f ca 5c 86 c...s...A.EG?.\. 0020 45 00 00 28 63 a4 40 00 80 06 5e 7b c0 a8 65 fd E..(c.@...^{..e. 0030 0a 08 08 03 0b 29 00 50 00 f8 8f d7 b8 1c 4f b8 .....).P......O. 0040 50 10 22 38 b0 ce 00 00 P."8.... Frame 4 (437 bytes on wire, 437 bytes captured) Arrival Time: Sep 19, 2003 12:30:16.330520000 Time delta from previous packet: 0.005185000 seconds Time relative to first packet: 0.111218000 seconds Frame Number: 4 Packet Length: 437 bytes Capture Length: 437 bytes Enc IPv4, SPI 0x3b4265a3, authentic, confidential Address Family: IPv4 (2) SPI: 0x3b4265a3 Flags: 0x00000c00 Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 425 Identification: 0x64a4 (25764) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 115 Protocol: IPIP (0x04) Header checksum: 0xbe39 (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.134 (63.202.92.134) Internet Protocol, Src Addr: 192.168.101.253 (192.168.101.253), Dst Addr: 10.8.8.3 (10.8.8.3) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 405 Identification: 0x64a4 (25764) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x5c0e (correct) Source: 192.168.101.253 (192.168.101.253) Destination: 10.8.8.3 (10.8.8.3) Transmission Control Protocol, Src Port: 2857 (2857), Dst Port: 80 (80), Seq: 16289751, Ack: 3088863160, Len: 365 Source port: 2857 (2857) Destination port: 80 (80) Sequence number: 16289751 Next sequence number: 16290116 Acknowledgement number: 3088863160 Header length: 20 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 8760 Checksum: 0x817a (correct) Hypertext Transfer Protocol GET / HTTP/1.1\r\n Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel, application/msword, application/vnd.ms-powerpoint, application/pdf, application/x-shockwave-flash, */*\r\n Accept-Language: en-us\r\n Accept-Encoding: gzip, deflate\r\n User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n Host: 10.8.8.3\r\n Connection: Keep-Alive\r\n \r\n 0000 02 00 00 00 3b 42 65 a3 00 0c 00 00 45 00 01 a9 ....;Be.....E... 0010 64 a4 00 00 73 04 be 39 41 dc 45 47 3f ca 5c 86 d...s..9A.EG?.\. 0020 45 00 01 95 64 a4 40 00 80 06 5c 0e c0 a8 65 fd E...d.@...\...e. 0030 0a 08 08 03 0b 29 00 50 00 f8 8f d7 b8 1c 4f b8 .....).P......O. 0040 50 18 22 38 81 7a 00 00 47 45 54 20 2f 20 48 54 P."8.z..GET / HT 0050 54 50 2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 TP/1.1..Accept: 0060 69 6d 61 67 65 2f 67 69 66 2c 20 69 6d 61 67 65 image/gif, image 0070 2f 78 2d 78 62 69 74 6d 61 70 2c 20 69 6d 61 67 /x-xbitmap, imag 0080 65 2f 6a 70 65 67 2c 20 69 6d 61 67 65 2f 70 6a e/jpeg, image/pj 0090 70 65 67 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e peg, application 00a0 2f 76 6e 64 2e 6d 73 2d 65 78 63 65 6c 2c 20 61 /vnd.ms-excel, a 00b0 70 70 6c 69 63 61 74 69 6f 6e 2f 6d 73 77 6f 72 pplication/mswor 00c0 64 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 d, application/v 00d0 6e 64 2e 6d 73 2d 70 6f 77 65 72 70 6f 69 6e 74 nd.ms-powerpoint 00e0 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 70 64 , application/pd 00f0 66 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 f, application/x 0100 2d 73 68 6f 63 6b 77 61 76 65 2d 66 6c 61 73 68 -shockwave-flash 0110 2c 20 2a 2f 2a 0d 0a 41 63 63 65 70 74 2d 4c 61 , */*..Accept-La 0120 6e 67 75 61 67 65 3a 20 65 6e 2d 75 73 0d 0a 41 nguage: en-us..A 0130 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 ccept-Encoding: 0140 67 7a 69 70 2c 20 64 65 66 6c 61 74 65 0d 0a 55 gzip, deflate..U 0150 73 65 72 2d 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c ser-Agent: Mozil 0160 6c 61 2f 34 2e 30 20 28 63 6f 6d 70 61 74 69 62 la/4.0 (compatib 0170 6c 65 3b 20 4d 53 49 45 20 36 2e 30 3b 20 57 69 le; MSIE 6.0; Wi 0180 6e 64 6f 77 73 20 39 38 29 0d 0a 48 6f 73 74 3a ndows 98)..Host: 0190 20 31 30 2e 38 2e 38 2e 33 0d 0a 43 6f 6e 6e 65 10.8.8.3..Conne 01a0 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c 69 76 ction: Keep-Aliv 01b0 65 0d 0a 0d 0a e.... Frame 5 (907 bytes on wire, 907 bytes captured) Arrival Time: Sep 19, 2003 12:30:16.394578000 Time delta from previous packet: 0.064058000 seconds Time relative to first packet: 0.175276000 seconds Frame Number: 5 Packet Length: 907 bytes Capture Length: 907 bytes Enc IPv4, SPI 0x68d353aa, authentic, confidential Address Family: IPv4 (2) SPI: 0x68d353aa Flags: 0x00000c00 Internet Protocol, Src Addr: 63.202.92.134 (63.202.92.134), Dst Addr: 65.220.69.71 (65.220.69.71) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 895 Identification: 0xdcb1 (56497) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: IPIP (0x04) Header checksum: 0x0000 (incorrect, should be 0x3756) Source: 63.202.92.134 (63.202.92.134) Destination: 65.220.69.71 (65.220.69.71) Internet Protocol, Src Addr: 10.8.8.3 (10.8.8.3), Dst Addr: 192.168.101.253 (192.168.101.253) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 875 Identification: 0x2797 (10135) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: TCP (0x06) Header checksum: 0xd845 (correct) Source: 10.8.8.3 (10.8.8.3) Destination: 192.168.101.253 (192.168.101.253) Transmission Control Protocol, Src Port: 80 (80), Dst Port: 2857 (2857), Seq: 3088863160, Ack: 16290116, Len: 835 Source port: 80 (80) Destination port: 2857 (2857) Sequence number: 3088863160 Next sequence number: 3088863995 Acknowledgement number: 16290116 Header length: 20 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 58632 Checksum: 0xb549 (correct) Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n Date: Fri, 19 Sep 2003 18:45:26 GMT\r\n Server: Apache/2.0.44 (Unix)\r\n Keep-Alive: timeout=15, max=100\r\n Connection: Keep-Alive\r\n Transfer-Encoding: chunked\r\n Content-Type: text/html\r\n \r\n Data (639 bytes) 0000 02 00 00 00 68 d3 53 aa 00 0c 00 00 45 00 03 7f ....h.S.....E... 0010 dc b1 40 00 40 04 00 00 3f ca 5c 86 41 dc 45 47 ..@.@...?.\.A.EG 0020 45 00 03 6b 27 97 40 00 3f 06 d8 45 0a 08 08 03 E..k'.@.?..E.... 0030 c0 a8 65 fd 00 50 0b 29 b8 1c 4f b8 00 f8 91 44 ..e..P.)..O....D 0040 50 18 e5 08 b5 49 00 00 48 54 54 50 2f 31 2e 31 P....I..HTTP/1.1 0050 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 46 200 OK..Date: F 0060 72 69 2c 20 31 39 20 53 65 70 20 32 30 30 33 20 ri, 19 Sep 2003 0070 31 38 3a 34 35 3a 32 36 20 47 4d 54 0d 0a 53 65 18:45:26 GMT..Se 0080 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 30 rver: Apache/2.0 0090 2e 34 34 20 28 55 6e 69 78 29 0d 0a 4b 65 65 70 .44 (Unix)..Keep 00a0 2d 41 6c 69 76 65 3a 20 74 69 6d 65 6f 75 74 3d -Alive: timeout= 00b0 31 35 2c 20 6d 61 78 3d 31 30 30 0d 0a 43 6f 6e 15, max=100..Con 00c0 6e 65 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c nection: Keep-Al 00d0 69 76 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e ive..Transfer-En 00e0 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d coding: chunked. 00f0 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 .Content-Type: t 0100 65 78 74 2f 68 74 6d 6c 0d 0a 0d 0a 32 37 38 0d ext/html....278. 0110 0a 3c 68 74 6d 6c 3e 0a 3c 62 6f 64 79 3e 0a 3c ...< 0120 70 3e 0a 43 6f 6e 67 72 61 74 75 6c 61 74 69 6f p>.Congratulatio 0130 6e 73 2e 20 59 6f 75 20 67 6f 74 20 68 65 72 65 ns. You got here 0140 20 76 69 61 20 31 30 2e 38 2e 38 2e 33 21 20 54 via 10.8.8.3! T 0150 68 69 73 20 6d 65 61 6e 73 20 74 68 61 74 0a 79 his means that.y 0160 6f 75 20 77 65 6e 74 20 74 68 72 6f 75 67 68 20 ou went through 0170 74 68 65 20 74 65 73 74 2d 6f 70 65 6e 62 73 64 the test-openbsd 0180 20 49 50 73 65 63 20 67 61 74 65 77 61 79 2e 0a IPsec gateway.. 0190 3c 70 3e 0a 49 66 20 79 6f 75 20 68 61 76 65 20

.If you have 01a0 6a 75 73 74 20 63 6f 6d 70 6c 65 74 65 64 20 79 just completed y 01b0 6f 75 72 20 74 65 73 74 20 66 6f 72 20 61 20 6c our test for a l 01c0 6f 67 6f 2c 20 70 6c 65 61 73 65 0a 73 65 6e 64 ogo, please.send 01d0 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 69 the following i 01e0 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 0a 3c 61 nformation to.paul.hoffma 0220 6e 40 76 70 6e 63 2e 6f 72 67 3c 2f 61 3e 3a 0a n@vpnc.org:. 0230 3c 75 6c 3e 0a 3c 6c 69 3e 59 6f 75 72 20 63 6f

. 0380 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a .... Frame 6 (77 bytes on wire, 77 bytes captured) Arrival Time: Sep 19, 2003 12:30:16.395944000 Time delta from previous packet: 0.001366000 seconds Time relative to first packet: 0.176642000 seconds Frame Number: 6 Packet Length: 77 bytes Capture Length: 77 bytes Enc IPv4, SPI 0x68d353aa, authentic, confidential Address Family: IPv4 (2) SPI: 0x68d353aa Flags: 0x00000c00 Internet Protocol, Src Addr: 63.202.92.134 (63.202.92.134), Dst Addr: 65.220.69.71 (65.220.69.71) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 65 Identification: 0xf33d (62269) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: IPIP (0x04) Header checksum: 0x0000 (incorrect, should be 0x2408) Source: 63.202.92.134 (63.202.92.134) Destination: 65.220.69.71 (65.220.69.71) Internet Protocol, Src Addr: 10.8.8.3 (10.8.8.3), Dst Addr: 192.168.101.253 (192.168.101.253) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 45 Identification: 0x2798 (10136) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: TCP (0x06) Header checksum: 0xdb82 (correct) Source: 10.8.8.3 (10.8.8.3) Destination: 192.168.101.253 (192.168.101.253) Transmission Control Protocol, Src Port: 80 (80), Dst Port: 2857 (2857), Seq: 3088863995, Ack: 16290116, Len: 5 Source port: 80 (80) Destination port: 2857 (2857) Sequence number: 3088863995 Next sequence number: 3088864000 Acknowledgement number: 16290116 Header length: 20 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 58632 Checksum: 0xa526 (correct) Hypertext Transfer Protocol Data (5 bytes) 0000 02 00 00 00 68 d3 53 aa 00 0c 00 00 45 00 00 41 ....h.S.....E..A 0010 f3 3d 40 00 40 04 00 00 3f ca 5c 86 41 dc 45 47 .=@.@...?.\.A.EG 0020 45 00 00 2d 27 98 40 00 3f 06 db 82 0a 08 08 03 E..-'.@.?....... 0030 c0 a8 65 fd 00 50 0b 29 b8 1c 52 fb 00 f8 91 44 ..e..P.)..R....D 0040 50 18 e5 08 a5 26 00 00 30 0d 0a 0d 0a P....&..0.... Frame 7 (72 bytes on wire, 72 bytes captured) Arrival Time: Sep 19, 2003 12:30:16.565272000 Time delta from previous packet: 0.169328000 seconds Time relative to first packet: 0.345970000 seconds Frame Number: 7 Packet Length: 72 bytes Capture Length: 72 bytes Enc IPv4, SPI 0x3b4265a3, authentic, confidential Address Family: IPv4 (2) SPI: 0x3b4265a3 Flags: 0x00000c00 Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x66a4 (26276) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 115 Protocol: IPIP (0x04) Header checksum: 0xbda6 (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.134 (63.202.92.134) Internet Protocol, Src Addr: 192.168.101.253 (192.168.101.253), Dst Addr: 10.8.8.3 (10.8.8.3) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x66a4 (26276) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x5b7b (correct) Source: 192.168.101.253 (192.168.101.253) Destination: 10.8.8.3 (10.8.8.3) Transmission Control Protocol, Src Port: 2857 (2857), Dst Port: 80 (80), Seq: 16290116, Ack: 3088864000, Len: 0 Source port: 2857 (2857) Destination port: 80 (80) Sequence number: 16290116 Acknowledgement number: 3088864000 Header length: 20 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 7920 Checksum: 0xaf61 (correct) 0000 02 00 00 00 3b 42 65 a3 00 0c 00 00 45 00 00 3c ....;Be.....E..< 0010 66 a4 00 00 73 04 bd a6 41 dc 45 47 3f ca 5c 86 f...s...A.EG?.\. 0020 45 00 00 28 66 a4 40 00 80 06 5b 7b c0 a8 65 fd E..(f.@...[{..e. 0030 0a 08 08 03 0b 29 00 50 00 f8 91 44 b8 1c 53 00 .....).P...D..S. 0040 50 10 1e f0 af 61 00 00 P....a.. Frame 8 (72 bytes on wire, 72 bytes captured) Arrival Time: Sep 19, 2003 12:30:31.397863000 Time delta from previous packet: 14.832591000 seconds Time relative to first packet: 15.178561000 seconds Frame Number: 8 Packet Length: 72 bytes Capture Length: 72 bytes Enc IPv4, SPI 0x68d353aa, authentic, confidential Address Family: IPv4 (2) SPI: 0x68d353aa Flags: 0x00000c00 Internet Protocol, Src Addr: 63.202.92.134 (63.202.92.134), Dst Addr: 65.220.69.71 (65.220.69.71) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0xe9dd (59869) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: IPIP (0x04) Header checksum: 0x0000 (incorrect, should be 0x2d6d) Source: 63.202.92.134 (63.202.92.134) Destination: 65.220.69.71 (65.220.69.71) Internet Protocol, Src Addr: 10.8.8.3 (10.8.8.3), Dst Addr: 192.168.101.253 (192.168.101.253) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x2799 (10137) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: TCP (0x06) Header checksum: 0xdb86 (correct) Source: 10.8.8.3 (10.8.8.3) Destination: 192.168.101.253 (192.168.101.253) Transmission Control Protocol, Src Port: 80 (80), Dst Port: 2857 (2857), Seq: 3088864000, Ack: 16290116, Len: 0 Source port: 80 (80) Destination port: 2857 (2857) Sequence number: 3088864000 Acknowledgement number: 16290116 Header length: 20 bytes Flags: 0x0011 (FIN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...1 = Fin: Set Window size: 58632 Checksum: 0xe947 (correct) 0000 02 00 00 00 68 d3 53 aa 00 0c 00 00 45 00 00 3c ....h.S.....E..< 0010 e9 dd 40 00 40 04 00 00 3f ca 5c 86 41 dc 45 47 ..@.@...?.\.A.EG 0020 45 00 00 28 27 99 40 00 3f 06 db 86 0a 08 08 03 E..('.@.?....... 0030 c0 a8 65 fd 00 50 0b 29 b8 1c 53 00 00 f8 91 44 ..e..P.)..S....D 0040 50 11 e5 08 e9 47 00 00 P....G.. Frame 9 (72 bytes on wire, 72 bytes captured) Arrival Time: Sep 19, 2003 12:30:31.502616000 Time delta from previous packet: 0.104753000 seconds Time relative to first packet: 15.283314000 seconds Frame Number: 9 Packet Length: 72 bytes Capture Length: 72 bytes Enc IPv4, SPI 0x3b4265a3, authentic, confidential Address Family: IPv4 (2) SPI: 0x3b4265a3 Flags: 0x00000c00 Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x68a4 (26788) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 115 Protocol: IPIP (0x04) Header checksum: 0xbba6 (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.134 (63.202.92.134) Internet Protocol, Src Addr: 192.168.101.253 (192.168.101.253), Dst Addr: 10.8.8.3 (10.8.8.3) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x68a4 (26788) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x597b (correct) Source: 192.168.101.253 (192.168.101.253) Destination: 10.8.8.3 (10.8.8.3) Transmission Control Protocol, Src Port: 2857 (2857), Dst Port: 80 (80), Seq: 16290116, Ack: 3088864001, Len: 0 Source port: 2857 (2857) Destination port: 80 (80) Sequence number: 16290116 Acknowledgement number: 3088864001 Header length: 20 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 7920 Checksum: 0xaf60 (correct) 0000 02 00 00 00 3b 42 65 a3 00 0c 00 00 45 00 00 3c ....;Be.....E..< 0010 68 a4 00 00 73 04 bb a6 41 dc 45 47 3f ca 5c 86 h...s...A.EG?.\. 0020 45 00 00 28 68 a4 40 00 80 06 59 7b c0 a8 65 fd E..(h.@...Y{..e. 0030 0a 08 08 03 0b 29 00 50 00 f8 91 44 b8 1c 53 01 .....).P...D..S. 0040 50 10 1e f0 af 60 00 00 P....`.. Frame 10 (72 bytes on wire, 72 bytes captured) Arrival Time: Sep 19, 2003 12:30:33.080630000 Time delta from previous packet: 1.578014000 seconds Time relative to first packet: 16.861328000 seconds Frame Number: 10 Packet Length: 72 bytes Capture Length: 72 bytes Enc IPv4, SPI 0x3b4265a3, authentic, confidential Address Family: IPv4 (2) SPI: 0x3b4265a3 Flags: 0x00000c00 Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x69a4 (27044) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 115 Protocol: IPIP (0x04) Header checksum: 0xbaa6 (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.134 (63.202.92.134) Internet Protocol, Src Addr: 192.168.101.253 (192.168.101.253), Dst Addr: 10.8.8.3 (10.8.8.3) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x69a4 (27044) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x587b (correct) Source: 192.168.101.253 (192.168.101.253) Destination: 10.8.8.3 (10.8.8.3) Transmission Control Protocol, Src Port: 2857 (2857), Dst Port: 80 (80), Seq: 16290116, Ack: 3088864001, Len: 0 Source port: 2857 (2857) Destination port: 80 (80) Sequence number: 16290116 Header length: 20 bytes Flags: 0x0004 (RST) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...0 .... = Acknowledgment: Not set .... 0... = Push: Not set .... .1.. = Reset: Set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 0 Checksum: 0xce5c (correct) 0000 02 00 00 00 3b 42 65 a3 00 0c 00 00 45 00 00 3c ....;Be.....E..< 0010 69 a4 00 00 73 04 ba a6 41 dc 45 47 3f ca 5c 86 i...s...A.EG?.\. 0020 45 00 00 28 69 a4 40 00 80 06 58 7b c0 a8 65 fd E..(i.@...X{..e. 0030 0a 08 08 03 0b 29 00 50 00 f8 91 44 b8 1c 53 01 .....).P...D..S. 0040 50 04 00 00 ce 5c 00 00 P....\.. Frame 11 (80 bytes on wire, 80 bytes captured) Arrival Time: Sep 19, 2003 12:33:36.304847000 Time delta from previous packet: 183.224217000 seconds Time relative to first packet: 200.085545000 seconds Frame Number: 11 Packet Length: 80 bytes Capture Length: 80 bytes Enc IPv4, SPI 0x6788d0d2, authentic, confidential Address Family: IPv4 (2) SPI: 0x6788d0d2 Flags: 0x00000c00 Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 68 Identification: 0x9da4 (40356) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 115 Protocol: IPIP (0x04) Header checksum: 0x869e (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.134 (63.202.92.134) Internet Protocol, Src Addr: 192.168.101.253 (192.168.101.253), Dst Addr: 10.8.8.3 (10.8.8.3) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x9da4 (40356) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x2473 (correct) Source: 192.168.101.253 (192.168.101.253) Destination: 10.8.8.3 (10.8.8.3) Transmission Control Protocol, Src Port: 2865 (2865), Dst Port: 80 (80), Seq: 16489871, Ack: 0, Len: 0 Source port: 2865 (2865) Destination port: 80 (80) Sequence number: 16489871 Header length: 28 bytes Flags: 0x0002 (SYN) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...0 .... = Acknowledgment: Not set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 8192 Checksum: 0x80a3 (correct) Options: (8 bytes) Maximum segment size: 1396 bytes NOP NOP SACK permitted 0000 02 00 00 00 67 88 d0 d2 00 0c 00 00 45 00 00 44 ....g.......E..D 0010 9d a4 00 00 73 04 86 9e 41 dc 45 47 3f ca 5c 86 ....s...A.EG?.\. 0020 45 00 00 30 9d a4 40 00 80 06 24 73 c0 a8 65 fd E..0..@...$s..e. 0030 0a 08 08 03 0b 31 00 50 00 fb 9d 8f 00 00 00 00 .....1.P........ 0040 70 02 20 00 80 a3 00 00 02 04 05 74 01 01 04 02 p. ........t.... Frame 12 (76 bytes on wire, 76 bytes captured) Arrival Time: Sep 19, 2003 12:33:36.305902000 Time delta from previous packet: 0.001055000 seconds Time relative to first packet: 200.086600000 seconds Frame Number: 12 Packet Length: 76 bytes Capture Length: 76 bytes Enc IPv4, SPI 0x4ddf84bb, authentic, confidential Address Family: IPv4 (2) SPI: 0x4ddf84bb Flags: 0x00000c00 Internet Protocol, Src Addr: 63.202.92.134 (63.202.92.134), Dst Addr: 65.220.69.71 (65.220.69.71) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 64 Identification: 0x5c22 (23586) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: IPIP (0x04) Header checksum: 0x0000 (incorrect, should be 0xbb24) Source: 63.202.92.134 (63.202.92.134) Destination: 65.220.69.71 (65.220.69.71) Internet Protocol, Src Addr: 10.8.8.3 (10.8.8.3), Dst Addr: 192.168.101.253 (192.168.101.253) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 44 Identification: 0x279a (10138) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: TCP (0x06) Header checksum: 0xdb81 (correct) Source: 10.8.8.3 (10.8.8.3) Destination: 192.168.101.253 (192.168.101.253) Transmission Control Protocol, Src Port: 80 (80), Dst Port: 2865 (2865), Seq: 637704926, Ack: 16489872, Len: 0 Source port: 80 (80) Destination port: 2865 (2865) Sequence number: 637704926 Acknowledgement number: 16489872 Header length: 24 bytes Flags: 0x0012 (SYN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 57344 Checksum: 0x1478 (correct) Options: (4 bytes) Maximum segment size: 1460 bytes 0000 02 00 00 00 4d df 84 bb 00 0c 00 00 45 00 00 40 ....M.......E..@ 0010 5c 22 40 00 40 04 00 00 3f ca 5c 86 41 dc 45 47 \"@.@...?.\.A.EG 0020 45 00 00 2c 27 9a 40 00 3f 06 db 81 0a 08 08 03 E..,'.@.?....... 0030 c0 a8 65 fd 00 50 0b 31 26 02 9a de 00 fb 9d 90 ..e..P.1&....... 0040 60 12 e0 00 14 78 00 00 02 04 05 b4 `....x...... Frame 13 (72 bytes on wire, 72 bytes captured) Arrival Time: Sep 19, 2003 12:33:36.409817000 Time delta from previous packet: 0.103915000 seconds Time relative to first packet: 200.190515000 seconds Frame Number: 13 Packet Length: 72 bytes Capture Length: 72 bytes Enc IPv4, SPI 0x6788d0d2, authentic, confidential Address Family: IPv4 (2) SPI: 0x6788d0d2 Flags: 0x00000c00 Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x9fa4 (40868) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 115 Protocol: IPIP (0x04) Header checksum: 0x84a6 (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.134 (63.202.92.134) Internet Protocol, Src Addr: 192.168.101.253 (192.168.101.253), Dst Addr: 10.8.8.3 (10.8.8.3) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x9fa4 (40868) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x227b (correct) Source: 192.168.101.253 (192.168.101.253) Destination: 10.8.8.3 (10.8.8.3) Transmission Control Protocol, Src Port: 2865 (2865), Dst Port: 80 (80), Seq: 16489872, Ack: 637704927, Len: 0 Source port: 2865 (2865) Destination port: 80 (80) Sequence number: 16489872 Acknowledgement number: 637704927 Header length: 20 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 8760 Checksum: 0xe9fd (correct) 0000 02 00 00 00 67 88 d0 d2 00 0c 00 00 45 00 00 3c ....g.......E..< 0010 9f a4 00 00 73 04 84 a6 41 dc 45 47 3f ca 5c 86 ....s...A.EG?.\. 0020 45 00 00 28 9f a4 40 00 80 06 22 7b c0 a8 65 fd E..(..@..."{..e. 0030 0a 08 08 03 0b 31 00 50 00 fb 9d 90 26 02 9a df .....1.P....&... 0040 50 10 22 38 e9 fd 00 00 P."8.... Frame 14 (259 bytes on wire, 259 bytes captured) Arrival Time: Sep 19, 2003 12:33:36.413266000 Time delta from previous packet: 0.003449000 seconds Time relative to first packet: 200.193964000 seconds Frame Number: 14 Packet Length: 259 bytes Capture Length: 259 bytes Enc IPv4, SPI 0x6788d0d2, authentic, confidential Address Family: IPv4 (2) SPI: 0x6788d0d2 Flags: 0x00000c00 Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 247 Identification: 0xa0a4 (41124) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 115 Protocol: IPIP (0x04) Header checksum: 0x82eb (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.134 (63.202.92.134) Internet Protocol, Src Addr: 192.168.101.253 (192.168.101.253), Dst Addr: 10.8.8.3 (10.8.8.3) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 227 Identification: 0xa0a4 (41124) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x20c0 (correct) Source: 192.168.101.253 (192.168.101.253) Destination: 10.8.8.3 (10.8.8.3) Transmission Control Protocol, Src Port: 2865 (2865), Dst Port: 80 (80), Seq: 16489872, Ack: 637704927, Len: 187 Source port: 2865 (2865) Destination port: 80 (80) Sequence number: 16489872 Next sequence number: 16490059 Acknowledgement number: 637704927 Header length: 20 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 8760 Checksum: 0x4ec8 (correct) Hypertext Transfer Protocol GET / HTTP/1.1\r\n Accept: */*\r\n Accept-Language: en-us\r\n Accept-Encoding: gzip, deflate\r\n User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)\r\n Host: 10.8.8.3\r\n Connection: Keep-Alive\r\n \r\n 0000 02 00 00 00 67 88 d0 d2 00 0c 00 00 45 00 00 f7 ....g.......E... 0010 a0 a4 00 00 73 04 82 eb 41 dc 45 47 3f ca 5c 86 ....s...A.EG?.\. 0020 45 00 00 e3 a0 a4 40 00 80 06 20 c0 c0 a8 65 fd E.....@... ...e. 0030 0a 08 08 03 0b 31 00 50 00 fb 9d 90 26 02 9a df .....1.P....&... 0040 50 18 22 38 4e c8 00 00 47 45 54 20 2f 20 48 54 P."8N...GET / HT 0050 54 50 2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 TP/1.1..Accept: 0060 2a 2f 2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 */*..Accept-Lang 0070 75 61 67 65 3a 20 65 6e 2d 75 73 0d 0a 41 63 63 uage: en-us..Acc 0080 65 70 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a ept-Encoding: gz 0090 69 70 2c 20 64 65 66 6c 61 74 65 0d 0a 55 73 65 ip, deflate..Use 00a0 72 2d 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 r-Agent: Mozilla 00b0 2f 34 2e 30 20 28 63 6f 6d 70 61 74 69 62 6c 65 /4.0 (compatible 00c0 3b 20 4d 53 49 45 20 36 2e 30 3b 20 57 69 6e 64 ; MSIE 6.0; Wind 00d0 6f 77 73 20 39 38 29 0d 0a 48 6f 73 74 3a 20 31 ows 98)..Host: 1 00e0 30 2e 38 2e 38 2e 33 0d 0a 43 6f 6e 6e 65 63 74 0.8.8.3..Connect 00f0 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c 69 76 65 0d ion: Keep-Alive. 0100 0a 0d 0a ... Frame 15 (907 bytes on wire, 907 bytes captured) Arrival Time: Sep 19, 2003 12:33:36.435970000 Time delta from previous packet: 0.022704000 seconds Time relative to first packet: 200.216668000 seconds Frame Number: 15 Packet Length: 907 bytes Capture Length: 907 bytes Enc IPv4, SPI 0x4ddf84bb, authentic, confidential Address Family: IPv4 (2) SPI: 0x4ddf84bb Flags: 0x00000c00 Internet Protocol, Src Addr: 63.202.92.134 (63.202.92.134), Dst Addr: 65.220.69.71 (65.220.69.71) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 895 Identification: 0x1fa6 (8102) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: IPIP (0x04) Header checksum: 0x0000 (incorrect, should be 0xf461) Source: 63.202.92.134 (63.202.92.134) Destination: 65.220.69.71 (65.220.69.71) Internet Protocol, Src Addr: 10.8.8.3 (10.8.8.3), Dst Addr: 192.168.101.253 (192.168.101.253) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 875 Identification: 0x279b (10139) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: TCP (0x06) Header checksum: 0xd841 (correct) Source: 10.8.8.3 (10.8.8.3) Destination: 192.168.101.253 (192.168.101.253) Transmission Control Protocol, Src Port: 80 (80), Dst Port: 2865 (2865), Seq: 637704927, Ack: 16490059, Len: 835 Source port: 80 (80) Destination port: 2865 (2865) Sequence number: 637704927 Next sequence number: 637705762 Acknowledgement number: 16490059 Header length: 20 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 58632 Checksum: 0xea25 (correct) Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n Date: Fri, 19 Sep 2003 18:48:46 GMT\r\n Server: Apache/2.0.44 (Unix)\r\n Keep-Alive: timeout=15, max=100\r\n Connection: Keep-Alive\r\n Transfer-Encoding: chunked\r\n Content-Type: text/html\r\n \r\n Data (639 bytes) 0000 02 00 00 00 4d df 84 bb 00 0c 00 00 45 00 03 7f ....M.......E... 0010 1f a6 40 00 40 04 00 00 3f ca 5c 86 41 dc 45 47 ..@.@...?.\.A.EG 0020 45 00 03 6b 27 9b 40 00 3f 06 d8 41 0a 08 08 03 E..k'.@.?..A.... 0030 c0 a8 65 fd 00 50 0b 31 26 02 9a df 00 fb 9e 4b ..e..P.1&......K 0040 50 18 e5 08 ea 25 00 00 48 54 54 50 2f 31 2e 31 P....%..HTTP/1.1 0050 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 46 200 OK..Date: F 0060 72 69 2c 20 31 39 20 53 65 70 20 32 30 30 33 20 ri, 19 Sep 2003 0070 31 38 3a 34 38 3a 34 36 20 47 4d 54 0d 0a 53 65 18:48:46 GMT..Se 0080 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 30 rver: Apache/2.0 0090 2e 34 34 20 28 55 6e 69 78 29 0d 0a 4b 65 65 70 .44 (Unix)..Keep 00a0 2d 41 6c 69 76 65 3a 20 74 69 6d 65 6f 75 74 3d -Alive: timeout= 00b0 31 35 2c 20 6d 61 78 3d 31 30 30 0d 0a 43 6f 6e 15, max=100..Con 00c0 6e 65 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c nection: Keep-Al 00d0 69 76 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e ive..Transfer-En 00e0 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d coding: chunked. 00f0 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 .Content-Type: t 0100 65 78 74 2f 68 74 6d 6c 0d 0a 0d 0a 32 37 38 0d ext/html....278. 0110 0a 3c 68 74 6d 6c 3e 0a 3c 62 6f 64 79 3e 0a 3c ...< 0120 70 3e 0a 43 6f 6e 67 72 61 74 75 6c 61 74 69 6f p>.Congratulatio 0130 6e 73 2e 20 59 6f 75 20 67 6f 74 20 68 65 72 65 ns. You got here 0140 20 76 69 61 20 31 30 2e 38 2e 38 2e 33 21 20 54 via 10.8.8.3! T 0150 68 69 73 20 6d 65 61 6e 73 20 74 68 61 74 0a 79 his means that.y 0160 6f 75 20 77 65 6e 74 20 74 68 72 6f 75 67 68 20 ou went through 0170 74 68 65 20 74 65 73 74 2d 6f 70 65 6e 62 73 64 the test-openbsd 0180 20 49 50 73 65 63 20 67 61 74 65 77 61 79 2e 0a IPsec gateway.. 0190 3c 70 3e 0a 49 66 20 79 6f 75 20 68 61 76 65 20

.If you have 01a0 6a 75 73 74 20 63 6f 6d 70 6c 65 74 65 64 20 79 just completed y 01b0 6f 75 72 20 74 65 73 74 20 66 6f 72 20 61 20 6c our test for a l 01c0 6f 67 6f 2c 20 70 6c 65 61 73 65 0a 73 65 6e 64 ogo, please.send 01d0 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 69 the following i 01e0 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 0a 3c 61 nformation to.paul.hoffma 0220 6e 40 76 70 6e 63 2e 6f 72 67 3c 2f 61 3e 3a 0a n@vpnc.org:. 0230 3c 75 6c 3e 0a 3c 6c 69 3e 59 6f 75 72 20 63 6f

. 0380 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a .... Frame 16 (77 bytes on wire, 77 bytes captured) Arrival Time: Sep 19, 2003 12:33:36.437019000 Time delta from previous packet: 0.001049000 seconds Time relative to first packet: 200.217717000 seconds Frame Number: 16 Packet Length: 77 bytes Capture Length: 77 bytes Enc IPv4, SPI 0x4ddf84bb, authentic, confidential Address Family: IPv4 (2) SPI: 0x4ddf84bb Flags: 0x00000c00 Internet Protocol, Src Addr: 63.202.92.134 (63.202.92.134), Dst Addr: 65.220.69.71 (65.220.69.71) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 65 Identification: 0x00b0 (176) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: IPIP (0x04) Header checksum: 0x0000 (incorrect, should be 0x1696) Source: 63.202.92.134 (63.202.92.134) Destination: 65.220.69.71 (65.220.69.71) Internet Protocol, Src Addr: 10.8.8.3 (10.8.8.3), Dst Addr: 192.168.101.253 (192.168.101.253) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 45 Identification: 0x279c (10140) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: TCP (0x06) Header checksum: 0xdb7e (correct) Source: 10.8.8.3 (10.8.8.3) Destination: 192.168.101.253 (192.168.101.253) Transmission Control Protocol, Src Port: 80 (80), Dst Port: 2865 (2865), Seq: 637705762, Ack: 16490059, Len: 5 Source port: 80 (80) Destination port: 2865 (2865) Sequence number: 637705762 Next sequence number: 637705767 Acknowledgement number: 16490059 Header length: 20 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 58632 Checksum: 0xdf07 (correct) Hypertext Transfer Protocol Data (5 bytes) 0000 02 00 00 00 4d df 84 bb 00 0c 00 00 45 00 00 41 ....M.......E..A 0010 00 b0 40 00 40 04 00 00 3f ca 5c 86 41 dc 45 47 ..@.@...?.\.A.EG 0020 45 00 00 2d 27 9c 40 00 3f 06 db 7e 0a 08 08 03 E..-'.@.?..~.... 0030 c0 a8 65 fd 00 50 0b 31 26 02 9e 22 00 fb 9e 4b ..e..P.1&.."...K 0040 50 18 e5 08 df 07 00 00 30 0d 0a 0d 0a P.......0.... Frame 17 (72 bytes on wire, 72 bytes captured) Arrival Time: Sep 19, 2003 12:33:36.595419000 Time delta from previous packet: 0.158400000 seconds Time relative to first packet: 200.376117000 seconds Frame Number: 17 Packet Length: 72 bytes Capture Length: 72 bytes Enc IPv4, SPI 0x6788d0d2, authentic, confidential Address Family: IPv4 (2) SPI: 0x6788d0d2 Flags: 0x00000c00 Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0xa7a4 (42916) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 115 Protocol: IPIP (0x04) Header checksum: 0x7ca6 (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.134 (63.202.92.134) Internet Protocol, Src Addr: 192.168.101.253 (192.168.101.253), Dst Addr: 10.8.8.3 (10.8.8.3) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0xa7a4 (42916) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x1a7b (correct) Source: 192.168.101.253 (192.168.101.253) Destination: 10.8.8.3 (10.8.8.3) Transmission Control Protocol, Src Port: 2865 (2865), Dst Port: 80 (80), Seq: 16490059, Ack: 637705767, Len: 0 Source port: 2865 (2865) Destination port: 80 (80) Sequence number: 16490059 Acknowledgement number: 637705767 Header length: 20 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 7920 Checksum: 0xe942 (correct) 0000 02 00 00 00 67 88 d0 d2 00 0c 00 00 45 00 00 3c ....g.......E..< 0010 a7 a4 00 00 73 04 7c a6 41 dc 45 47 3f ca 5c 86 ....s.|.A.EG?.\. 0020 45 00 00 28 a7 a4 40 00 80 06 1a 7b c0 a8 65 fd E..(..@....{..e. 0030 0a 08 08 03 0b 31 00 50 00 fb 9e 4b 26 02 9e 27 .....1.P...K&..' 0040 50 10 1e f0 e9 42 00 00 P....B.. Frame 18 (72 bytes on wire, 72 bytes captured) Arrival Time: Sep 19, 2003 12:33:51.447205000 Time delta from previous packet: 14.851786000 seconds Time relative to first packet: 215.227903000 seconds Frame Number: 18 Packet Length: 72 bytes Capture Length: 72 bytes Enc IPv4, SPI 0x4ddf84bb, authentic, confidential Address Family: IPv4 (2) SPI: 0x4ddf84bb Flags: 0x00000c00 Internet Protocol, Src Addr: 63.202.92.134 (63.202.92.134), Dst Addr: 65.220.69.71 (65.220.69.71) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x38f0 (14576) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: IPIP (0x04) Header checksum: 0x0000 (incorrect, should be 0xde5a) Source: 63.202.92.134 (63.202.92.134) Destination: 65.220.69.71 (65.220.69.71) Internet Protocol, Src Addr: 10.8.8.3 (10.8.8.3), Dst Addr: 192.168.101.253 (192.168.101.253) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x279d (10141) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: TCP (0x06) Header checksum: 0xdb82 (correct) Source: 10.8.8.3 (10.8.8.3) Destination: 192.168.101.253 (192.168.101.253) Transmission Control Protocol, Src Port: 80 (80), Dst Port: 2865 (2865), Seq: 637705767, Ack: 16490059, Len: 0 Source port: 80 (80) Destination port: 2865 (2865) Sequence number: 637705767 Acknowledgement number: 16490059 Header length: 20 bytes Flags: 0x0011 (FIN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...1 = Fin: Set Window size: 58632 Checksum: 0x2329 (correct) 0000 02 00 00 00 4d df 84 bb 00 0c 00 00 45 00 00 3c ....M.......E..< 0010 38 f0 40 00 40 04 00 00 3f ca 5c 86 41 dc 45 47 8.@.@...?.\.A.EG 0020 45 00 00 28 27 9d 40 00 3f 06 db 82 0a 08 08 03 E..('.@.?....... 0030 c0 a8 65 fd 00 50 0b 31 26 02 9e 27 00 fb 9e 4b ..e..P.1&..'...K 0040 50 11 e5 08 23 29 00 00 P...#).. Frame 19 (72 bytes on wire, 72 bytes captured) Arrival Time: Sep 19, 2003 12:33:51.550643000 Time delta from previous packet: 0.103438000 seconds Time relative to first packet: 215.331341000 seconds Frame Number: 19 Packet Length: 72 bytes Capture Length: 72 bytes Enc IPv4, SPI 0x6788d0d2, authentic, confidential Address Family: IPv4 (2) SPI: 0x6788d0d2 Flags: 0x00000c00 Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0xa8a4 (43172) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 115 Protocol: IPIP (0x04) Header checksum: 0x7ba6 (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.134 (63.202.92.134) Internet Protocol, Src Addr: 192.168.101.253 (192.168.101.253), Dst Addr: 10.8.8.3 (10.8.8.3) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0xa8a4 (43172) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x197b (correct) Source: 192.168.101.253 (192.168.101.253) Destination: 10.8.8.3 (10.8.8.3) Transmission Control Protocol, Src Port: 2865 (2865), Dst Port: 80 (80), Seq: 16490059, Ack: 637705768, Len: 0 Source port: 2865 (2865) Destination port: 80 (80) Sequence number: 16490059 Acknowledgement number: 637705768 Header length: 20 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 7920 Checksum: 0xe941 (correct) 0000 02 00 00 00 67 88 d0 d2 00 0c 00 00 45 00 00 3c ....g.......E..< 0010 a8 a4 00 00 73 04 7b a6 41 dc 45 47 3f ca 5c 86 ....s.{.A.EG?.\. 0020 45 00 00 28 a8 a4 40 00 80 06 19 7b c0 a8 65 fd E..(..@....{..e. 0030 0a 08 08 03 0b 31 00 50 00 fb 9e 4b 26 02 9e 28 .....1.P...K&..( 0040 50 10 1e f0 e9 41 00 00 P....A.. Frame 20 (72 bytes on wire, 72 bytes captured) Arrival Time: Sep 19, 2003 12:33:53.143236000 Time delta from previous packet: 1.592593000 seconds Time relative to first packet: 216.923934000 seconds Frame Number: 20 Packet Length: 72 bytes Capture Length: 72 bytes Enc IPv4, SPI 0x6788d0d2, authentic, confidential Address Family: IPv4 (2) SPI: 0x6788d0d2 Flags: 0x00000c00 Internet Protocol, Src Addr: 65.220.69.71 (65.220.69.71), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0xa9a4 (43428) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 115 Protocol: IPIP (0x04) Header checksum: 0x7aa6 (correct) Source: 65.220.69.71 (65.220.69.71) Destination: 63.202.92.134 (63.202.92.134) Internet Protocol, Src Addr: 192.168.101.253 (192.168.101.253), Dst Addr: 10.8.8.3 (10.8.8.3) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0xa9a4 (43428) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x187b (correct) Source: 192.168.101.253 (192.168.101.253) Destination: 10.8.8.3 (10.8.8.3) Transmission Control Protocol, Src Port: 2865 (2865), Dst Port: 80 (80), Seq: 16490059, Ack: 637705768, Len: 0 Source port: 2865 (2865) Destination port: 80 (80) Sequence number: 16490059 Header length: 20 bytes Flags: 0x0004 (RST) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...0 .... = Acknowledgment: Not set .... 0... = Push: Not set .... .1.. = Reset: Set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 0 Checksum: 0x083e (correct) 0000 02 00 00 00 67 88 d0 d2 00 0c 00 00 45 00 00 3c ....g.......E..< 0010 a9 a4 00 00 73 04 7a a6 41 dc 45 47 3f ca 5c 86 ....s.z.A.EG?.\. 0020 45 00 00 28 a9 a4 40 00 80 06 18 7b c0 a8 65 fd E..(..@....{..e. 0030 0a 08 08 03 0b 31 00 50 00 fb 9e 4b 26 02 9e 28 .....1.P...K&..( 0040 50 04 00 00 08 3e 00 00 P....>..