Post-IPsec-process packet dump: Frame 1 (42 bytes on wire, 42 bytes captured) Arrival Time: Sep 30, 2003 13:41:58.599089000 Time delta from previous packet: 0.000000000 seconds Time relative to first packet: 0.000000000 seconds Frame Number: 1 Packet Length: 42 bytes Capture Length: 42 bytes Ethernet II, Src: 00:50:bf:94:c7:01, Dst: ff:ff:ff:ff:ff:ff Destination: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff) Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Type: ARP (0x0806) Address Resolution Protocol (request) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: request (0x0001) Sender MAC address: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Sender IP address: 10.8.8.2 (10.8.8.2) Target MAC address: 00:00:00:00:00:00 (00:00:00:00:00:00) Target IP address: 10.8.8.7 (10.8.8.7) 0000 ff ff ff ff ff ff 00 50 bf 94 c7 01 08 06 00 01 .......P........ 0010 08 00 06 04 00 01 00 50 bf 94 c7 01 0a 08 08 02 .......P........ 0020 00 00 00 00 00 00 0a 08 08 07 .......... Frame 2 (64 bytes on wire, 64 bytes captured) Arrival Time: Sep 30, 2003 13:41:58.599169000 Time delta from previous packet: 0.000080000 seconds Time relative to first packet: 0.000080000 seconds Frame Number: 2 Packet Length: 64 bytes Capture Length: 64 bytes Ethernet II, Src: 00:e0:29:2e:1e:5b, Dst: 00:50:bf:94:c7:01 Destination: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Source: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Type: ARP (0x0806) Trailer: 00000000000000000000000000000000... Address Resolution Protocol (reply) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: reply (0x0002) Sender MAC address: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Sender IP address: 10.8.8.7 (10.8.8.7) Target MAC address: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Target IP address: 10.8.8.2 (10.8.8.2) 0000 00 50 bf 94 c7 01 00 e0 29 2e 1e 5b 08 06 00 01 .P......)..[.... 0010 08 00 06 04 00 02 00 e0 29 2e 1e 5b 0a 08 08 07 ........)..[.... 0020 00 50 bf 94 c7 01 0a 08 08 02 00 00 00 00 00 00 .P.............. 0030 00 00 00 00 00 00 00 00 00 00 00 00 2f a1 7c f2 ............/.|. Frame 3 (62 bytes on wire, 62 bytes captured) Arrival Time: Sep 30, 2003 13:41:58.599193000 Time delta from previous packet: 0.000024000 seconds Time relative to first packet: 0.000104000 seconds Frame Number: 3 Packet Length: 62 bytes Capture Length: 62 bytes Ethernet II, Src: 00:50:bf:94:c7:01, Dst: 00:e0:29:2e:1e:5b Destination: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Type: IP (0x0800) Internet Protocol, Src Addr: 172.30.22.1 (172.30.22.1), Dst Addr: 10.8.8.7 (10.8.8.7) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 48 Identification: 0x0144 (324) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 126 Protocol: TCP (0x06) Header checksum: 0x2756 (correct) Source: 172.30.22.1 (172.30.22.1) Destination: 10.8.8.7 (10.8.8.7) Transmission Control Protocol, Src Port: 1055 (1055), Dst Port: 80 (80), Seq: 3560436180, Ack: 0, Len: 0 Source port: 1055 (1055) Destination port: 80 (80) Sequence number: 3560436180 Header length: 28 bytes Flags: 0x0002 (SYN) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...0 .... = Acknowledgment: Not set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 16384 Checksum: 0xa4ab (correct) Options: (8 bytes) Maximum segment size: 1406 bytes NOP NOP SACK permitted 0000 00 e0 29 2e 1e 5b 00 50 bf 94 c7 01 08 00 45 00 ..)..[.P......E. 0010 00 30 01 44 40 00 7e 06 27 56 ac 1e 16 01 0a 08 .0.D@.~.'V...... 0020 08 07 04 1f 00 50 d4 37 f1 d4 00 00 00 00 70 02 .....P.7......p. 0030 40 00 a4 ab 00 00 02 04 05 7e 01 01 04 02 @........~.... Frame 4 (64 bytes on wire, 64 bytes captured) Arrival Time: Sep 30, 2003 13:41:58.599334000 Time delta from previous packet: 0.000141000 seconds Time relative to first packet: 0.000245000 seconds Frame Number: 4 Packet Length: 64 bytes Capture Length: 64 bytes Ethernet II, Src: 00:e0:29:2e:1e:5b, Dst: 00:50:bf:94:c7:01 Destination: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Source: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Type: IP (0x0800) Trailer: 02047E04DA65 Internet Protocol, Src Addr: 10.8.8.7 (10.8.8.7), Dst Addr: 172.30.22.1 (172.30.22.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 44 Identification: 0x22b7 (8887) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x43e7 (correct) Source: 10.8.8.7 (10.8.8.7) Destination: 172.30.22.1 (172.30.22.1) Transmission Control Protocol, Src Port: 80 (80), Dst Port: 1055 (1055), Seq: 1518255052, Ack: 3560436181, Len: 0 Source port: 80 (80) Destination port: 1055 (1055) Sequence number: 1518255052 Acknowledgement number: 3560436181 Header length: 24 bytes Flags: 0x0012 (SYN, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..1. = Syn: Set .... ...0 = Fin: Not set Window size: 57344 Checksum: 0x0320 (correct) Options: (4 bytes) Maximum segment size: 1460 bytes 0000 00 50 bf 94 c7 01 00 e0 29 2e 1e 5b 08 00 45 00 .P......)..[..E. 0010 00 2c 22 b7 40 00 40 06 43 e7 0a 08 08 07 ac 1e .,".@.@.C....... 0020 16 01 00 50 04 1f 5a 7e bb cc d4 37 f1 d5 60 12 ...P..Z~...7..`. 0030 e0 00 03 20 00 00 02 04 05 b4 02 04 7e 04 da 65 ... ........~..e Frame 5 (54 bytes on wire, 54 bytes captured) Arrival Time: Sep 30, 2003 13:41:58.710582000 Time delta from previous packet: 0.111248000 seconds Time relative to first packet: 0.111493000 seconds Frame Number: 5 Packet Length: 54 bytes Capture Length: 54 bytes Ethernet II, Src: 00:50:bf:94:c7:01, Dst: 00:e0:29:2e:1e:5b Destination: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Type: IP (0x0800) Internet Protocol, Src Addr: 172.30.22.1 (172.30.22.1), Dst Addr: 10.8.8.7 (10.8.8.7) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 40 Identification: 0x0146 (326) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 125 Protocol: TCP (0x06) Header checksum: 0x285c (correct) Source: 172.30.22.1 (172.30.22.1) Destination: 10.8.8.7 (10.8.8.7) Transmission Control Protocol, Src Port: 1055 (1055), Dst Port: 80 (80), Seq: 3560436181, Ack: 1518255053, Len: 0 Source port: 1055 (1055) Destination port: 80 (80) Sequence number: 3560436181 Acknowledgement number: 1518255053 Header length: 20 bytes Flags: 0x0010 (ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 0... = Push: Not set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 16872 Checksum: 0xb8f5 (correct) 0000 00 e0 29 2e 1e 5b 00 50 bf 94 c7 01 08 00 45 00 ..)..[.P......E. 0010 00 28 01 46 40 00 7d 06 28 5c ac 1e 16 01 0a 08 .(.F@.}.(\...... 0020 08 07 04 1f 00 50 d4 37 f1 d5 5a 7e bb cd 50 10 .....P.7..Z~..P. 0030 41 e8 b8 f5 00 00 A..... Frame 6 (407 bytes on wire, 407 bytes captured) Arrival Time: Sep 30, 2003 13:41:58.716489000 Time delta from previous packet: 0.005907000 seconds Time relative to first packet: 0.117400000 seconds Frame Number: 6 Packet Length: 407 bytes Capture Length: 407 bytes Ethernet II, Src: 00:50:bf:94:c7:01, Dst: 00:e0:29:2e:1e:5b Destination: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Source: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Type: IP (0x0800) Internet Protocol, Src Addr: 172.30.22.1 (172.30.22.1), Dst Addr: 10.8.8.7 (10.8.8.7) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 393 Identification: 0x0147 (327) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 125 Protocol: TCP (0x06) Header checksum: 0x26fa (correct) Source: 172.30.22.1 (172.30.22.1) Destination: 10.8.8.7 (10.8.8.7) Transmission Control Protocol, Src Port: 1055 (1055), Dst Port: 80 (80), Seq: 3560436181, Ack: 1518255053, Len: 353 Source port: 1055 (1055) Destination port: 80 (80) Sequence number: 3560436181 Next sequence number: 3560436534 Acknowledgement number: 1518255053 Header length: 20 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 16872 Checksum: 0xa4c8 (correct) Hypertext Transfer Protocol GET / HTTP/1.1\r\n Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-shockwave-flash, */*\r\n Accept-Language: en-us\r\n Accept-Encoding: gzip, deflate\r\n User-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)\r\n Host: 10.8.8.7\r\n Connection: Keep-Alive\r\n \r\n 0000 00 e0 29 2e 1e 5b 00 50 bf 94 c7 01 08 00 45 00 ..)..[.P......E. 0010 01 89 01 47 40 00 7d 06 26 fa ac 1e 16 01 0a 08 ...G@.}.&....... 0020 08 07 04 1f 00 50 d4 37 f1 d5 5a 7e bb cd 50 18 .....P.7..Z~..P. 0030 41 e8 a4 c8 00 00 47 45 54 20 2f 20 48 54 54 50 A.....GET / HTTP 0040 2f 31 2e 31 0d 0a 41 63 63 65 70 74 3a 20 69 6d /1.1..Accept: im 0050 61 67 65 2f 67 69 66 2c 20 69 6d 61 67 65 2f 78 age/gif, image/x 0060 2d 78 62 69 74 6d 61 70 2c 20 69 6d 61 67 65 2f -xbitmap, image/ 0070 6a 70 65 67 2c 20 69 6d 61 67 65 2f 70 6a 70 65 jpeg, image/pjpe 0080 67 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 g, application/v 0090 6e 64 2e 6d 73 2d 65 78 63 65 6c 2c 20 61 70 70 nd.ms-excel, app 00a0 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 6d 73 2d lication/vnd.ms- 00b0 70 6f 77 65 72 70 6f 69 6e 74 2c 20 61 70 70 6c powerpoint, appl 00c0 69 63 61 74 69 6f 6e 2f 6d 73 77 6f 72 64 2c 20 ication/msword, 00d0 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 73 68 application/x-sh 00e0 6f 63 6b 77 61 76 65 2d 66 6c 61 73 68 2c 20 2a ockwave-flash, * 00f0 2f 2a 0d 0a 41 63 63 65 70 74 2d 4c 61 6e 67 75 /*..Accept-Langu 0100 61 67 65 3a 20 65 6e 2d 75 73 0d 0a 41 63 63 65 age: en-us..Acce 0110 70 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 pt-Encoding: gzi 0120 70 2c 20 64 65 66 6c 61 74 65 0d 0a 55 73 65 72 p, deflate..User 0130 2d 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f -Agent: Mozilla/ 0140 34 2e 30 20 28 63 6f 6d 70 61 74 69 62 6c 65 3b 4.0 (compatible; 0150 20 4d 53 49 45 20 35 2e 30 31 3b 20 57 69 6e 64 MSIE 5.01; Wind 0160 6f 77 73 20 4e 54 20 35 2e 30 29 0d 0a 48 6f 73 ows NT 5.0)..Hos 0170 74 3a 20 31 30 2e 38 2e 38 2e 37 0d 0a 43 6f 6e t: 10.8.8.7..Con 0180 6e 65 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c nection: Keep-Al 0190 69 76 65 0d 0a 0d 0a ive.... Frame 7 (886 bytes on wire, 886 bytes captured) Arrival Time: Sep 30, 2003 13:41:58.750366000 Time delta from previous packet: 0.033877000 seconds Time relative to first packet: 0.151277000 seconds Frame Number: 7 Packet Length: 886 bytes Capture Length: 886 bytes Ethernet II, Src: 00:e0:29:2e:1e:5b, Dst: 00:50:bf:94:c7:01 Destination: 00:50:bf:94:c7:01 (00:50:bf:94:c7:01) Source: 00:e0:29:2e:1e:5b (00:e0:29:2e:1e:5b) Type: IP (0x0800) Trailer: 5AAA4B6B Internet Protocol, Src Addr: 10.8.8.7 (10.8.8.7), Dst Addr: 172.30.22.1 (172.30.22.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 868 Identification: 0x22b8 (8888) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (0x06) Header checksum: 0x40ae (correct) Source: 10.8.8.7 (10.8.8.7) Destination: 172.30.22.1 (172.30.22.1) Transmission Control Protocol, Src Port: 80 (80), Dst Port: 1055 (1055), Seq: 1518255053, Ack: 3560436534, Len: 828 Source port: 80 (80) Destination port: 1055 (1055) Sequence number: 1518255053 Next sequence number: 1518255881 Acknowledgement number: 3560436534 Header length: 20 bytes Flags: 0x0018 (PSH, ACK) 0... .... = Congestion Window Reduced (CWR): Not set .0.. .... = ECN-Echo: Not set ..0. .... = Urgent: Not set ...1 .... = Acknowledgment: Set .... 1... = Push: Set .... .0.. = Reset: Not set .... ..0. = Syn: Not set .... ...0 = Fin: Not set Window size: 57646 Checksum: 0x38ea (correct) Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n Date: Tue, 30 Sep 2003 20:01:16 GMT\r\n Server: Apache/2.0.46 (Unix)\r\n Keep-Alive: timeout=15, max=100\r\n Connection: Keep-Alive\r\n Transfer-Encoding: chunked\r\n Content-Type: text/html\r\n \r\n Data (632 bytes) 0000 00 50 bf 94 c7 01 00 e0 29 2e 1e 5b 08 00 45 00 .P......)..[..E. 0010 03 64 22 b8 40 00 40 06 40 ae 0a 08 08 07 ac 1e .d".@.@.@....... 0020 16 01 00 50 04 1f 5a 7e bb cd d4 37 f3 36 50 18 ...P..Z~...7.6P. 0030 e1 2e 38 ea 00 00 48 54 54 50 2f 31 2e 31 20 32 ..8...HTTP/1.1 2 0040 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65 00 OK..Date: Tue 0050 2c 20 33 30 20 53 65 70 20 32 30 30 33 20 32 30 , 30 Sep 2003 20 0060 3a 30 31 3a 31 36 20 47 4d 54 0d 0a 53 65 72 76 :01:16 GMT..Serv 0070 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 30 2e 34 er: Apache/2.0.4 0080 36 20 28 55 6e 69 78 29 0d 0a 4b 65 65 70 2d 41 6 (Unix)..Keep-A 0090 6c 69 76 65 3a 20 74 69 6d 65 6f 75 74 3d 31 35 live: timeout=15 00a0 2c 20 6d 61 78 3d 31 30 30 0d 0a 43 6f 6e 6e 65 , max=100..Conne 00b0 63 74 69 6f 6e 3a 20 4b 65 65 70 2d 41 6c 69 76 ction: Keep-Aliv 00c0 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f e..Transfer-Enco 00d0 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 ding: chunked..C 00e0 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 ontent-Type: tex 00f0 74 2f 68 74 6d 6c 0d 0a 0d 0a 32 37 31 0d 0a 3c t/html....271..< 0100 68 74 6d 6c 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 3e html>.
.0110 0a 43 6f 6e 67 72 61 74 75 6c 61 74 69 6f 6e 73 .Congratulations 0120 2e 20 59 6f 75 20 67 6f 74 20 68 65 72 65 20 76 . You got here v 0130 69 61 20 31 30 2e 38 2e 38 2e 32 21 20 54 68 69 ia 10.8.8.2! Thi 0140 73 20 6d 65 61 6e 73 20 74 68 61 74 0a 79 6f 75 s means that.you 0150 20 77 65 6e 74 20 74 68 72 6f 75 67 68 20 74 68 went through th 0160 65 20 74 65 73 74 2d 6b 61 6d 65 20 49 50 73 65 e test-kame IPse 0170 63 20 67 61 74 65 77 61 79 2e 0a 3c 70 3e 0a 49 c gateway..
.I 0180 66 20 79 6f 75 20 68 61 76 65 20 6a 75 73 74 20 f you have just 0190 63 6f 6d 70 6c 65 74 65 64 20 79 6f 75 72 20 74 completed your t 01a0 65 73 74 20 66 6f 72 20 61 20 6c 6f 67 6f 2c 20 est for a logo, 01b0 70 6c 65 61 73 65 0a 73 65 6e 64 20 74 68 65 20 please.send the 01c0 66 6f 6c 6c 6f 77 69 6e 67 20 69 6e 66 6f 72 6d following inform 01d0 61 74 69 6f 6e 20 74 6f 0a 3c 61 20 68 72 65 66 ation to. 0200 70 61 75 6c 2e 68 6f 66 66 6d 61 6e 40 76 70 6e paul.hoffman@vpn 0210 63 2e 6f 72 67 3c 2f 61 3e 3a 0a 3c 75 6c 3e 0a c.org:.