Frame Number: 1

• geninfo General information
  • num Number
  • len Frame Length
  • caplen Captured Length
  • timestamp Captured Time
• frame Frame 1: 286 bytes on wire (2288 bits), 286 bytes captured (2288 bits) on interface 0
  • frame.interface_id Interface id: 0
  • frame.encap_type Encapsulation type: Ethernet (1)
  • frame.time Arrival Time: Nov 26, 2008 15:05:47.290097000 Eastern Standard Time
  • frame.offset_shift Time shift for this packet: 0.000000000 seconds
  • frame.time_epoch Epoch Time: 1227729947.290097000 seconds
  • frame.time_delta Time delta from previous captured frame: 0.000000000 seconds
  • frame.time_delta_displayed Time delta from previous displayed frame: 0.000000000 seconds
  • frame.time_relative Time since reference or first frame: 0.000000000 seconds
  • frame.number Frame Number: 1
  • frame.len Frame Length: 286 bytes (2288 bits)
  • frame.cap_len Capture Length: 286 bytes (2288 bits)
  • frame.marked Frame is marked: False
  • frame.ignored Frame is ignored: False
  • frame.protocols Protocols in frame: eth:ip:udp:isakmp
• eth Ethernet II, Src: Private_00:00:01 (00:01:01:00:00:01), Dst: Private_00:00:02 (00:01:01:00:00:02)
  • eth.dst Destination: Private_00:00:02 (00:01:01:00:00:02)
    • eth.addr Address: Private_00:00:02 (00:01:01:00:00:02)
    • eth.lg .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    • eth.ig .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  • eth.src Source: Private_00:00:01 (00:01:01:00:00:01)
    • eth.addr Address: Private_00:00:01 (00:01:01:00:00:01)
    • eth.lg .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    • eth.ig .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  • eth.type Type: IP (0x0800)
• ip Internet Protocol Version 4, Src: 127.0.0.1 (127.0.0.1), Dst: 127.0.0.1 (127.0.0.1)
  • ip.version Version: 4
  • ip.hdr_len Header length: 20 bytes
  • ip.dsfield Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
    • ip.dsfield.dscp 0000 00.. = Differentiated Services Codepoint: Default (0x00)
    • ip.dsfield.ecn .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
  • ip.len Total Length: 272
  • ip.id Identification: 0x0001 (1)
  • ip.flags Flags: 0x00
    • ip.flags.rb 0... .... = Reserved bit: Not set
    • ip.flags.df .0.. .... = Don't fragment: Not set
    • ip.flags.mf ..0. .... = More fragments: Not set
  • ip.frag_offset Fragment offset: 0
  • ip.ttl Time to live: 64
  • ip.proto Protocol: UDP (17)
  • ip.checksum Header checksum: 0x7bda [validation disabled]
    • ip.checksum_good Good: False
    • ip.checksum_bad Bad: False
  • ip.src Source: 127.0.0.1 (127.0.0.1)
  • ip.addr Source or Destination Address: 127.0.0.1 (127.0.0.1)
  • ip.src_host Source Host: 127.0.0.1
  • ip.host Source or Destination Host: 127.0.0.1
  • ip.dst Destination: 127.0.0.1 (127.0.0.1)
  • ip.addr Source or Destination Address: 127.0.0.1 (127.0.0.1)
  • ip.dst_host Destination Host: 127.0.0.1
  • ip.host Source or Destination Host: 127.0.0.1
  • Source GeoIP: Unknown
  • Destination GeoIP: Unknown
• udp User Datagram Protocol, Src Port: isakmp (500), Dst Port: isakmp (500)
  • udp.srcport Source port: isakmp (500)
  • udp.dstport Destination port: isakmp (500)
  • udp.port Source or Destination Port: 500
  • udp.port Source or Destination Port: 500
  • udp.length Length: 252
  • udp.checksum_coverage Checksum coverage: 252
  • udp.checksum Checksum: 0x3d64 [validation disabled]
    • udp.checksum_good Good Checksum: False
    • udp.checksum_bad Bad Checksum: False
• isakmp Internet Security Association and Key Management Protocol
  • isakmp.icookie Initiator cookie: dde890db1f62ef70
  • isakmp.rcookie Responder cookie: 0000000000000000
  • isakmp.nextpayload Next payload: Security Association (33)
  • isakmp.version Version: 2.0
  • isakmp.exchangetype Exchange type: IKE_SA_INIT (34)
  • isakmp.flags Flags: 0x08
    • isakmp.flag_i .... 1... = Initiator: Initiator
    • isakmp.flag_v ...0 .... = Version: No higher version
    • isakmp.flag_r ..0. .... = Response: Request
  • isakmp.messageid Message ID: 0x00000000
  • isakmp.length Length: 244
  • isakmp.typepayload Type Payload: Security Association (33)
    • isakmp.nextpayload Next payload: Key Exchange (34)
    • isakmp.criticalpayload 0... .... = Critical Bit: Not Critical
    • isakmp.payloadlength Payload length: 44
    • isakmp.typepayload Type Payload: Proposal (2) # 1
      • isakmp.nextpayload Next payload: NONE / No Next Payload (0)
      • isakmp.criticalpayload 0... .... = Critical Bit: Not Critical
      • isakmp.payloadlength Payload length: 40
      • isakmp.prop.number Proposal number: 1
      • isakmp.prop.protoid Protocol ID: IKE (1)
      • isakmp.spisize SPI Size: 0
      • isakmp.prop.transforms Proposal transforms: 4
      • isakmp.typepayload Type Payload: Transform (3)
        • isakmp.nextpayload Next payload: Transform (3)
        • isakmp.criticalpayload 0... .... = Critical Bit: Not Critical
        • isakmp.payloadlength Payload length: 8
        • isakmp.tf.type Transform Type: Encryption Algorithm (ENCR) (1)
        • isakmp.tf.id.encr Transform ID (ENCR): ENCR_3DES (3)
      • isakmp.typepayload Type Payload: Transform (3)
        • isakmp.nextpayload Next payload: Transform (3)
        • isakmp.criticalpayload 0... .... = Critical Bit: Not Critical
        • isakmp.payloadlength Payload length: 8
        • isakmp.tf.type Transform Type: Pseudo-random Function (PRF) (2)
        • isakmp.tf.id.prf Transform ID (PRF): PRF_HMAC_MD5 (1)
      • isakmp.typepayload Type Payload: Transform (3)
        • isakmp.nextpayload Next payload: Transform (3)
        • isakmp.criticalpayload 0... .... = Critical Bit: Not Critical
        • isakmp.payloadlength Payload length: 8
        • isakmp.tf.type Transform Type: Integrity Algorithm (INTEG) (3)
        • isakmp.tf.id.integ Transform ID (INTEG): AUTH_HMAC_MD5_96 (1)
      • isakmp.typepayload Type Payload: Transform (3)
        • isakmp.nextpayload Next payload: NONE / No Next Payload (0)
        • isakmp.criticalpayload 0... .... = Critical Bit: Not Critical
        • isakmp.payloadlength Payload length: 8
        • isakmp.tf.type Transform Type: Diffie-Hellman Group (D-H) (4)
        • isakmp.tf.id.dh Transform ID (D-H): Alternate 1024-bit MODP group (2)
  • isakmp.typepayload Type Payload: Key Exchange (34)
    • isakmp.nextpayload Next payload: Nonce (40)
    • isakmp.criticalpayload 0... .... = Critical Bit: Not Critical
    • isakmp.payloadlength Payload length: 136
    • isakmp.key_exchange.dh_group DH Group #: Alternate 1024-bit MODP group (2)
    • isakmp.key_exchange.data Key Exchange Data: 000000000000000000000000000000000000000000000000...
  • isakmp.typepayload Type Payload: Nonce (40)
    • isakmp.nextpayload Next payload: NONE / No Next Payload (0)
    • isakmp.criticalpayload 0... .... = Critical Bit: Not Critical
    • isakmp.payloadlength Payload length: 36
    • isakmp.nonce Nonce DATA: 9f5f1641c068641495579adfb00b9468bb492fe3ccf9ef31...