IKE and IPsec packets sent/received: Frame 1 (518 bytes on wire, 128 bytes captured) Arrival Time: Jun 3, 2003 11:05:35.308278000 Time delta from previous packet: 0.000000000 seconds Time relative to first packet: 0.000000000 seconds Frame Number: 1 Packet Length: 518 bytes Capture Length: 128 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 68.130.113.183 (68.130.113.183), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 500 Identification: 0x0756 (1878) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 116 Protocol: UDP (0x11) Header checksum: 0xeb1a (correct) Source: 68.130.113.183 (68.130.113.183) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 480 Checksum: 0xaf50 Internet Security Association and Key Management Protocol Initiator cookie: 0xD8AEA8BC7201733B Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 472 Security Association payload Next payload: Vendor ID (13) Length: 412 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 400 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 8 Number of transforms: 12 SPI: D8AEA8BC7201733B Transform payload # 0 Next payload: Transform (3) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) [Short Frame: ISAKMP] 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 01 f4 07 56 00 00 74 11 eb 1a 44 82 71 b7 3f ca ...V..t...D.q.?. 0020 5c 85 01 f4 01 f4 01 e0 af 50 d8 ae a8 bc 72 01 \........P....r. 0030 73 3b 00 00 00 00 00 00 00 00 01 10 02 00 00 00 s;.............. 0040 00 00 00 00 01 d8 0d 00 01 9c 00 00 00 01 00 00 ................ 0050 00 01 00 00 01 90 00 01 08 0c d8 ae a8 bc 72 01 ..............r. 0060 73 3b 03 00 00 20 00 01 00 00 80 01 00 05 80 02 s;... .......... 0070 00 02 80 03 00 01 80 04 00 02 80 0b 00 01 80 0c ................ Frame 2 (150 bytes on wire, 128 bytes captured) Arrival Time: Jun 3, 2003 11:05:35.355763000 Time delta from previous packet: 0.047485000 seconds Time relative to first packet: 0.047485000 seconds Frame Number: 2 Packet Length: 150 bytes Capture Length: 128 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 68.130.113.183 (68.130.113.183) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x45b7 (17847) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe225 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 68.130.113.183 (68.130.113.183) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 116 Checksum: 0x3c63 Internet Security Association and Key Management Protocol Initiator cookie: 0xD8AEA8BC7201733B Responder cookie: 0x9F982C65AEC97027 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 108 Security Association payload Next payload: Vendor ID (13) Length: 60 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 48 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 8 Number of transforms: 1 SPI: 0000000000000000 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) [Short Frame: ISAKMP] 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 88 45 b7 00 00 40 11 e2 25 3f ca 5c 85 44 82 ..E...@..%?.\.D. 0020 71 b7 01 f4 01 f4 00 74 3c 63 d8 ae a8 bc 72 01 q......t........5.. Frame 18 (114 bytes on wire, 114 bytes captured) Arrival Time: Jun 3, 2003 11:05:45.909891000 Time delta from previous packet: 0.481365000 seconds Time relative to first packet: 10.601613000 seconds Frame Number: 18 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: AA7A03C7 Internet Protocol, Src Addr: 68.130.113.183 (68.130.113.183), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0015 (21) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 228 Protocol: ESP (0x32) Header checksum: 0x43ce (correct) Source: 68.130.113.183 (68.130.113.183) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x06c9083f Sequence: 0x00000004 Data (68 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 00 15 40 00 e4 32 43 ce 44 82 71 b7 3f ca .`..@..2C.D.q.?. 0020 5c 85 06 c9 08 3f 00 00 00 04 a3 67 d8 1f 8c f6 \....?.....g.... 0030 a1 79 fa 96 b4 60 1b bb bd c9 38 06 8d 22 8e 04 .y...`....8..".. 0040 be 57 e0 e5 dc 9e 7d 89 81 43 40 10 7d 40 68 ef .W....}..C@.}@h. 0050 0a e0 dc 1e 9f c5 40 cb df cd cb 02 20 78 07 62 ......@..... x.b 0060 22 dc eb 3c c3 82 f7 a8 09 63 a1 d1 b5 93 aa 7a "..<.....c.....z 0070 03 c7 .. Frame 19 (110 bytes on wire, 110 bytes captured) Arrival Time: Jun 3, 2003 11:05:45.910602000 Time delta from previous packet: 0.000711000 seconds Time relative to first packet: 10.602324000 seconds Frame Number: 19 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 68.130.113.183 (68.130.113.183) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x45c3 (17859) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xe220 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 68.130.113.183 (68.130.113.183) Encapsulating Security Payload SPI: 0x0889740d Sequence: 0x00000005 Data (68 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 45 c3 00 00 40 32 e2 20 3f ca 5c 85 44 82 .`E...@2. ?.\.D. 0020 71 b7 08 89 74 0d 00 00 00 05 25 1f 0c e8 33 e5 q...t.....%...3. 0030 40 88 6e 28 91 1f ba 2b f4 5f cf f7 2c c7 6b 19 @.n(...+._..,.k. 0040 65 0f 56 0f 72 20 e9 c9 c7 be c0 12 70 4b af 1c e.V.r ......pK.. 0050 e8 47 56 6d 54 b1 49 d3 ad 1d c2 50 13 35 ef da .GVmT.I....P.5.. 0060 f7 41 b4 4d 40 75 64 67 0b ff 51 b5 72 e1 .A.M@udg..Q.r. Frame 20 (114 bytes on wire, 114 bytes captured) Arrival Time: Jun 3, 2003 11:05:45.916478000 Time delta from previous packet: 0.005876000 seconds Time relative to first packet: 10.608200000 seconds Frame Number: 20 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: A51C94B7 Internet Protocol, Src Addr: 68.130.113.183 (68.130.113.183), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0016 (22) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 228 Protocol: ESP (0x32) Header checksum: 0x43cd (correct) Source: 68.130.113.183 (68.130.113.183) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x06c9083f Sequence: 0x00000005 Data (68 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 00 16 40 00 e4 32 43 cd 44 82 71 b7 3f ca .`..@..2C.D.q.?. 0020 5c 85 06 c9 08 3f 00 00 00 05 5e b1 32 9a 40 b9 \....?....^.2.@. 0030 a1 14 af 73 a8 a8 d9 c0 2e 43 05 6e 63 59 68 f7 ...s.....C.ncYh. 0040 ca 77 e9 a7 4c 94 b1 c9 e4 17 c8 54 76 f8 cf a1 .w..L......Tv... 0050 f9 ca 58 77 17 78 73 fc b4 b4 7f 15 23 86 ea 8a ..Xw.xs.....#... 0060 a0 00 b3 ef 83 5c c1 0a 45 3f 25 e9 5a e4 a5 1c .....\..E?%.Z... 0070 94 b7 .. Frame 21 (450 bytes on wire, 128 bytes captured) Arrival Time: Jun 3, 2003 11:08:01.527017000 Time delta from previous packet: 135.610539000 seconds Time relative to first packet: 146.218739000 seconds Frame Number: 21 Packet Length: 450 bytes Capture Length: 128 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 68.130.113.183 (68.130.113.183), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 432 Identification: 0x0763 (1891) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 116 Protocol: UDP (0x11) Header checksum: 0xeb51 (correct) Source: 68.130.113.183 (68.130.113.183) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 412 Checksum: 0xfdd5 Internet Security Association and Key Management Protocol Initiator cookie: 0xD8AEA8BC7201733B Responder cookie: 0x9F982C65AEC97027 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB5D47C27 Length: 404 Encrypted payload (376 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 01 b0 07 63 00 00 74 11 eb 51 44 82 71 b7 3f ca ...c..t..QD.q.?. 0020 5c 85 01 f4 01 f4 01 9c fd d5 d8 ae a8 bc 72 01 \.............r. 0030 73 3b 9f 98 2c 65 ae c9 70 27 08 10 20 01 b5 d4 s;..,e..p'.. ... 0040 7c 27 00 00 01 94 51 bb 12 a4 e3 6a 5a 80 2d 95 |'....Q....jZ.-. 0050 e0 e8 5d 8e 23 d8 a8 16 ef 02 54 0d 3b 3c d8 55 ..].#.....T.;<.U 0060 c0 48 05 9b 02 68 9a 70 6a eb e5 7f 2f 46 3a 2a .H...h.pj.../F:* 0070 d6 c4 99 53 2c 6a 5a 50 7f e4 d1 12 cc 20 18 17 ...S,jZP..... .. Frame 22 (326 bytes on wire, 128 bytes captured) Arrival Time: Jun 3, 2003 11:08:01.609022000 Time delta from previous packet: 0.082005000 seconds Time relative to first packet: 146.300744000 seconds Frame Number: 22 Packet Length: 326 bytes Capture Length: 128 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 68.130.113.183 (68.130.113.183) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x45c9 (17865) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe163 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 68.130.113.183 (68.130.113.183) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x51ce Internet Security Association and Key Management Protocol Initiator cookie: 0xD8AEA8BC7201733B Responder cookie: 0x9F982C65AEC97027 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB5D47C27 Length: 284 Encrypted payload (256 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 01 38 45 c9 00 00 40 11 e1 63 3f ca 5c 85 44 82 .8E...@..c?.\.D. 0020 71 b7 01 f4 01 f4 01 24 51 ce d8 ae a8 bc 72 01 q......$Q.....r. 0030 73 3b 9f 98 2c 65 ae c9 70 27 08 10 20 01 b5 d4 s;..,e..p'.. ... 0040 7c 27 00 00 01 1c c0 4a c5 95 c7 98 f6 bf 40 1d |'.....J......@. 0050 43 b1 39 ea 0d d3 4a 28 89 fd 43 b9 6e fd 43 6a C.9...J(..C.n.Cj 0060 e2 db d2 04 71 9b da a3 83 66 77 04 a1 55 df 62 ....q....fw..U.b 0070 29 29 31 2c 8c 6d ad 23 41 f0 03 d7 5b f1 46 1c ))1,.m.#A...[.F. Frame 23 (98 bytes on wire, 98 bytes captured) Arrival Time: Jun 3, 2003 11:08:02.245208000 Time delta from previous packet: 0.636186000 seconds Time relative to first packet: 146.936930000 seconds Frame Number: 23 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 9EA6774B Internet Protocol, Src Addr: 68.130.113.183 (68.130.113.183), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0764 (1892) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 116 Protocol: UDP (0x11) Header checksum: 0xecb0 (correct) Source: 68.130.113.183 (68.130.113.183) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x722d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD8AEA8BC7201733B Responder cookie: 0x9F982C65AEC97027 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xB5D47C27 Length: 52 Encrypted payload (24 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 50 07 64 00 00 74 11 ec b0 44 82 71 b7 3f ca .P.d..t...D.q.?. 0020 5c 85 01 f4 01 f4 00 3c 72 2d d8 ae a8 bc 72 01 \........... 0050 14 ed 91 63 a6 48 ff ee 48 51 35 0f 7e ef 6d 7f ...c.H..HQ5.~.m. 0060 c0 dd 96 24 66 5f 00 46 47 86 e6 bf b3 05 69 b0 ...$f_.FG.....i. 0070 17 48 .H Frame 25 (114 bytes on wire, 114 bytes captured) Arrival Time: Jun 3, 2003 11:11:01.299327000 Time delta from previous packet: 144.956115000 seconds Time relative to first packet: 325.991049000 seconds Frame Number: 25 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 9DF33963 Internet Protocol, Src Addr: 68.130.113.183 (68.130.113.183), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0769 (1897) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 116 Protocol: UDP (0x11) Header checksum: 0xec9b (correct) Source: 68.130.113.183 (68.130.113.183) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x8469 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD8AEA8BC7201733B Responder cookie: 0x9F982C65AEC97027 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xBCB05B26 Length: 68 Encrypted payload (40 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 07 69 00 00 74 11 ec 9b 44 82 71 b7 3f ca .`.i..t...D.q.?. 0020 5c 85 01 f4 01 f4 00 4c 84 69 d8 ae a8 bc 72 01 \......L.i....r. 0030 73 3b 9f 98 2c 65 ae c9 70 27 08 10 05 01 bc b0 s;..,e..p'...... 0040 5b 26 00 00 00 44 e3 bd 66 72 82 96 f7 00 7b 01 [&...D..fr....{. 0050 4a 48 c0 c7 60 c5 8f d0 d9 aa e4 44 c4 dd a7 80 JH..`......D.... 0060 bc 9a 2c d4 51 e2 39 60 b7 e5 d2 32 4a 31 9d f3 ..,.Q.9`...2J1.. 0070 39 63 9c Frame 26 (450 bytes on wire, 128 bytes captured) Arrival Time: Jun 3, 2003 11:14:58.749836000 Time delta from previous packet: 237.450509000 seconds Time relative to first packet: 563.441558000 seconds Frame Number: 26 Packet Length: 450 bytes Capture Length: 128 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 68.130.113.183 (68.130.113.183), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 432 Identification: 0x076c (1900) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 116 Protocol: UDP (0x11) Header checksum: 0xeb48 (correct) Source: 68.130.113.183 (68.130.113.183) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 412 Checksum: 0xa3b1 Internet Security Association and Key Management Protocol Initiator cookie: 0xD8AEA8BC7201733B Responder cookie: 0x9F982C65AEC97027 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xA3CEE359 Length: 404 Encrypted payload (376 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 01 b0 07 6c 00 00 74 11 eb 48 44 82 71 b7 3f ca ...l..t..HD.q.?. 0020 5c 85 01 f4 01 f4 01 9c a3 b1 d8 ae a8 bc 72 01 \.............r. 0030 73 3b 9f 98 2c 65 ae c9 70 27 08 10 20 01 a3 ce s;..,e..p'.. ... 0040 e3 59 00 00 01 94 ef 9f 35 06 b0 7e e8 43 c9 a7 .Y......5..~.C.. 0050 d3 ea 83 38 01 92 ac 1a 8d 50 c5 84 79 21 83 d3 ...8.....P..y!.. 0060 d5 82 ef 50 ea d7 e9 a2 35 e7 e0 4d 5b 23 1a 03 ...P....5..M[#.. 0070 61 49 c6 c0 78 46 78 f6 87 46 2a 68 02 b8 b5 e1 aI..xFx..F*h.... Frame 27 (326 bytes on wire, 128 bytes captured) Arrival Time: Jun 3, 2003 11:14:58.833639000 Time delta from previous packet: 0.083803000 seconds Time relative to first packet: 563.525361000 seconds Frame Number: 27 Packet Length: 326 bytes Capture Length: 128 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 68.130.113.183 (68.130.113.183) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x45d2 (17874) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe15a (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 68.130.113.183 (68.130.113.183) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x3944 Internet Security Association and Key Management Protocol Initiator cookie: 0xD8AEA8BC7201733B Responder cookie: 0x9F982C65AEC97027 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xA3CEE359 Length: 284 Encrypted payload (256 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 01 38 45 d2 00 00 40 11 e1 5a 3f ca 5c 85 44 82 .8E...@..Z?.\.D. 0020 71 b7 01 f4 01 f4 01 24 39 44 d8 ae a8 bc 72 01 q......$9D....r. 0030 73 3b 9f 98 2c 65 ae c9 70 27 08 10 20 01 a3 ce s;..,e..p'.. ... 0040 e3 59 00 00 01 1c 1d 95 8a 97 6b da 3c 66 20 63 .Y........k.....c.. Frame 28 (98 bytes on wire, 98 bytes captured) Arrival Time: Jun 3, 2003 11:14:59.299817000 Time delta from previous packet: 0.466178000 seconds Time relative to first packet: 563.991539000 seconds Frame Number: 28 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 643A2516 Internet Protocol, Src Addr: 68.130.113.183 (68.130.113.183), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x076d (1901) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 116 Protocol: UDP (0x11) Header checksum: 0xeca7 (correct) Source: 68.130.113.183 (68.130.113.183) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x9ec0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD8AEA8BC7201733B Responder cookie: 0x9F982C65AEC97027 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xA3CEE359 Length: 52 Encrypted payload (24 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 50 07 6d 00 00 74 11 ec a7 44 82 71 b7 3f ca .P.m..t...D.q.?. 0020 5c 85 01 f4 01 f4 00 3c 9e c0 d8 ae a8 bc 72 01 \......<......r. 0030 73 3b 9f 98 2c 65 ae c9 70 27 08 10 20 01 a3 ce s;..,e..p'.. ... 0040 e3 59 00 00 00 34 f5 9e 70 e4 98 fb 99 ff 3a 56 .Y...4..p.....:V 0050 b1 61 68 68 e5 f2 fa 3e 79 ec 9f 75 22 0d 64 3a .ahh...>y..u".d: 0060 25 16 %. Frame 29 (122 bytes on wire, 122 bytes captured) Arrival Time: Jun 3, 2003 11:14:59.677805000 Time delta from previous packet: 0.377988000 seconds Time relative to first packet: 564.369527000 seconds Frame Number: 29 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 182290E2 Internet Protocol, Src Addr: 68.130.113.183 (68.130.113.183), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0017 (23) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 228 Protocol: ESP (0x32) Header checksum: 0x43c4 (correct) Source: 68.130.113.183 (68.130.113.183) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x07e69c39 Sequence: 0x00000001 Data (76 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 68 00 17 40 00 e4 32 43 c4 44 82 71 b7 3f ca .h..@..2C.D.q.?. 0020 5c 85 07 e6 9c 39 00 00 00 01 6a 8b cc 71 1e c9 \....9....j..q.. 0030 17 1b 7b 46 a0 26 bc 7a ec af e8 1e 31 52 a4 33 ..{F.&.z....1R.3 0040 5d ec e0 15 99 71 72 3e 93 82 7c a6 66 6e 87 93 ]....qr>..|.fn.. 0050 ed d7 06 4a ae 8a fd 73 95 a9 23 28 bc d7 60 73 ...J...s..#(..`s 0060 21 9f a9 d0 99 56 ed d4 de 73 91 14 74 3a 7e ab !....V...s..t:~. 0070 f8 f3 3d 63 f0 22 18 22 90 e2 ..=c.".".. Frame 30 (110 bytes on wire, 110 bytes captured) Arrival Time: Jun 3, 2003 11:14:59.678564000 Time delta from previous packet: 0.000759000 seconds Time relative to first packet: 564.370286000 seconds Frame Number: 30 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 68.130.113.183 (68.130.113.183) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x45d3 (17875) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xe210 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 68.130.113.183 (68.130.113.183) Encapsulating Security Payload SPI: 0xb22c5f17 Sequence: 0x00000001 Data (68 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 45 d3 00 00 40 32 e2 10 3f ca 5c 85 44 82 .`E...@2..?.\.D. 0020 71 b7 b2 2c 5f 17 00 00 00 01 68 34 ba 2f f1 c0 q..,_.....h4./.. 0030 ff 52 94 a5 9e c8 f6 34 8c d8 ea 8c 45 a0 15 29 .R.....4....E..) 0040 6d 45 bd b2 22 5b 01 6f df e4 8c 95 14 31 c3 9e mE.."[.o.....1.. 0050 96 fe c8 cd 40 f7 3c e5 96 05 2b b8 fa 56 5b 68 ....@.<...+..V[h 0060 66 55 a7 95 1d 54 c7 24 3a 6f 28 09 19 cf fU...T.$:o(... Frame 31 (114 bytes on wire, 114 bytes captured) Arrival Time: Jun 3, 2003 11:14:59.901739000 Time delta from previous packet: 0.223175000 seconds Time relative to first packet: 564.593461000 seconds Frame Number: 31 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 0DA6C4EE Internet Protocol, Src Addr: 68.130.113.183 (68.130.113.183), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0018 (24) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 228 Protocol: ESP (0x32) Header checksum: 0x43cb (correct) Source: 68.130.113.183 (68.130.113.183) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x07e69c39 Sequence: 0x00000002 Data (68 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 00 18 40 00 e4 32 43 cb 44 82 71 b7 3f ca .`..@..2C.D.q.?. 0020 5c 85 07 e6 9c 39 00 00 00 02 75 9d f9 55 29 a8 \....9....u..U). 0030 00 58 4a 94 98 a6 2f 47 2a 95 7f 78 54 ab a7 80 .XJ.../G*..xT... 0040 2f ff d8 35 a7 c1 4a cc 24 49 68 00 56 36 cc ee /..5..J.$Ih.V6.. 0050 23 b1 a2 df 24 fa 9a 2c 08 6b 77 96 ff fb 11 34 #...$..,.kw....4 0060 f5 66 5f a4 5d 69 bf c3 17 ae 4e 66 49 42 0d a6 .f_.]i....NfIB.. 0070 c4 ee .. Frame 32 (314 bytes on wire, 128 bytes captured) Arrival Time: Jun 3, 2003 11:15:00.002013000 Time delta from previous packet: 0.100274000 seconds Time relative to first packet: 564.693735000 seconds Frame Number: 32 Packet Length: 314 bytes Capture Length: 128 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 68.130.113.183 (68.130.113.183), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 296 Identification: 0x0019 (25) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 228 Protocol: ESP (0x32) Header checksum: 0x4302 (correct) Source: 68.130.113.183 (68.130.113.183) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x07e69c39 Sequence: 0x00000003 Data (86 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 01 28 00 19 40 00 e4 32 43 02 44 82 71 b7 3f ca .(..@..2C.D.q.?. 0020 5c 85 07 e6 9c 39 00 00 00 03 fb 66 6f 38 45 18 \....9.....fo8E. 0030 a2 2c 76 5c ca 78 71 0e 92 c7 5a 8c df f3 e1 64 .,v\.xq...Z....d 0040 e9 85 ea 4c 12 9b 93 9e 83 2c 71 b3 e4 5e 9c 34 ...L.....,q..^.4 0050 ac 02 42 78 85 7e 0d 1e 2f e8 81 82 31 e0 72 47 ..Bx.~../...1.rG 0060 dc b5 c1 62 a1 bb 4e ad 66 e8 e9 82 bd 2f 6f 27 ...b..N.f..../o' 0070 96 72 74 9f 01 e5 48 f2 7f e9 91 9d 1b 8a b5 8b .rt...H......... Frame 33 (982 bytes on wire, 128 bytes captured) Arrival Time: Jun 3, 2003 11:15:00.021117000 Time delta from previous packet: 0.019104000 seconds Time relative to first packet: 564.712839000 seconds Frame Number: 33 Packet Length: 982 bytes Capture Length: 128 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 68.130.113.183 (68.130.113.183) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 968 Identification: 0x45d4 (17876) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xdea7 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 68.130.113.183 (68.130.113.183) Encapsulating Security Payload SPI: 0xb22c5f17 Sequence: 0x00000002 Data (86 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 03 c8 45 d4 00 00 40 32 de a7 3f ca 5c 85 44 82 ..E...@2..?.\.D. 0020 71 b7 b2 2c 5f 17 00 00 00 02 72 c3 38 af d1 81 q..,_.....r.8... 0030 62 79 d4 52 dc 34 c4 2e a0 94 86 ee ab 79 cf ce by.R.4.......y.. 0040 c6 dd fe 73 64 50 31 19 5c b1 2b 8a 6c 01 cd 89 ...sdP1.\.+.l... 0050 fe f1 0c 1b d3 05 7a 25 ca 10 41 90 a0 67 ff 4d ......z%..A..g.M 0060 38 78 cc 18 36 cd e6 35 3e 6b 3a bc 21 91 9d 00 8x..6..5>k:.!... 0070 22 cd da a1 9a 76 a1 5e 56 46 db 99 aa 62 58 91 "....v.^VF...bX. Frame 34 (110 bytes on wire, 110 bytes captured) Arrival Time: Jun 3, 2003 11:15:00.021255000 Time delta from previous packet: 0.000138000 seconds Time relative to first packet: 564.712977000 seconds Frame Number: 34 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 68.130.113.183 (68.130.113.183) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x45d5 (17877) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xe20e (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 68.130.113.183 (68.130.113.183) Encapsulating Security Payload SPI: 0xb22c5f17 Sequence: 0x00000003 Data (68 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 45 d5 00 00 40 32 e2 0e 3f ca 5c 85 44 82 .`E...@2..?.\.D. 0020 71 b7 b2 2c 5f 17 00 00 00 03 5f c6 93 47 6d 98 q..,_....._..Gm. 0030 01 c7 ed 31 a6 82 90 c4 95 0c 2b 44 56 9a d7 cd ...1......+DV... 0040 fc 34 9e 28 ff de eb 66 cd 0f 63 f3 84 e1 3e 04 .4.(...f..c...>. 0050 bf 2e 97 59 5a f4 50 a0 71 d9 e4 96 09 f3 d4 5b ...YZ.P.q......[ 0060 19 df b9 e3 88 8f 51 68 30 63 7c bc 98 da ......Qh0c|... Frame 35 (114 bytes on wire, 114 bytes captured) Arrival Time: Jun 3, 2003 11:15:00.461962000 Time delta from previous packet: 0.440707000 seconds Time relative to first packet: 565.153684000 seconds Frame Number: 35 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: B22A6432 Internet Protocol, Src Addr: 68.130.113.183 (68.130.113.183), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x001a (26) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 228 Protocol: ESP (0x32) Header checksum: 0x43c9 (correct) Source: 68.130.113.183 (68.130.113.183) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x07e69c39 Sequence: 0x00000004 Data (68 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 00 1a 40 00 e4 32 43 c9 44 82 71 b7 3f ca .`..@..2C.D.q.?. 0020 5c 85 07 e6 9c 39 00 00 00 04 75 55 84 49 e3 d4 \....9....uU.I.. 0030 07 fb 7d 35 85 f5 d2 27 db 4b 2b dc a9 2e 5a 1f ..}5...'.K+...Z. 0040 ae 5f 87 48 63 7d 02 cf c6 04 85 14 43 97 c5 59 ._.Hc}......C..Y 0050 f1 e0 c6 c3 6b 54 0e 90 03 79 e8 43 a5 b7 b0 2b ....kT...y.C...+ 0060 a0 7d 58 2a 71 17 8b 64 8e 65 ae 78 6c dc b2 2a .}X*q..d.e.xl..* 0070 64 32 d2 Frame 36 (110 bytes on wire, 110 bytes captured) Arrival Time: Jun 3, 2003 11:15:00.462475000 Time delta from previous packet: 0.000513000 seconds Time relative to first packet: 565.154197000 seconds Frame Number: 36 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 68.130.113.183 (68.130.113.183) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x45d6 (17878) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xe20d (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 68.130.113.183 (68.130.113.183) Encapsulating Security Payload SPI: 0xb22c5f17 Sequence: 0x00000004 Data (68 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 45 d6 00 00 40 32 e2 0d 3f ca 5c 85 44 82 .`E...@2..?.\.D. 0020 71 b7 b2 2c 5f 17 00 00 00 04 6c d6 a2 35 00 a4 q..,_.....l..5.. 0030 d8 41 30 77 6f b2 55 c1 06 6b 9a a3 70 d3 80 56 .A0wo.U..k..p..V 0040 34 bd 35 fa 59 9e fa 01 7b a2 1b 25 59 18 83 73 4.5.Y...{..%Y..s 0050 29 33 91 df 33 c1 f4 14 8e da d8 16 7a 4c cb 94 )3..3.......zL.. 0060 f9 e7 51 6d e6 43 de 9e 32 3d 0e 4b 28 96 ..Qm.C..2=.K(. Frame 37 (114 bytes on wire, 114 bytes captured) Arrival Time: Jun 3, 2003 11:15:00.490795000 Time delta from previous packet: 0.028320000 seconds Time relative to first packet: 565.182517000 seconds Frame Number: 37 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 3C61DEA5 Internet Protocol, Src Addr: 68.130.113.183 (68.130.113.183), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x001b (27) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 228 Protocol: ESP (0x32) Header checksum: 0x43c8 (correct) Source: 68.130.113.183 (68.130.113.183) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x07e69c39 Sequence: 0x00000005 Data (68 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 00 1b 40 00 e4 32 43 c8 44 82 71 b7 3f ca .`..@..2C.D.q.?. 0020 5c 85 07 e6 9c 39 00 00 00 05 c2 12 e7 fe 91 8b \....9.......... 0030 4e 36 81 2b 92 69 3b 01 4a e6 a4 83 0b ef 94 82 N6.+.i;.J....... 0040 88 86 d6 92 11 e6 ee 22 17 a7 4d d2 a1 b2 6c db ......."..M...l. 0050 55 95 b3 10 51 1f 21 92 15 94 56 e9 4c 8b b3 15 U...Q.!...V.L... 0060 ee b1 d1 1c f5 42 39 26 d4 06 15 a3 88 7b 3c 61 .....B9&.....{