Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    NAT port forwarding with additional interfaces

    Scheduled Pinned Locked Moved NAT
    13 Posts 2 Posters 1.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DerelictD
      Derelict LAYER 8 Netgate
      last edited by

      https://doc.pfsense.org/index.php/Why_do_my_logs_show_%22blocked%22_for_traffic_from_a_legitimate_connection

      Chattanooga, Tennessee, USA
      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
      Do Not Chat For Help! NO_WAN_EGRESS(TM)

      1 Reply Last reply Reply Quote 0
      • A
        AceStrider1
        last edited by

        I will read the link you sent me.  I thought I would paste the State Logs.

        For Setup 1:

        States while successfully Accessing DVR using Private IP within IPsec via DVR monitoring software
        Interface Protocol Source (Original Source) -> Destination (Original Destination) State Packets Bytes
        IPsec tcp 10.4.12.119:56348 -> 10.23.30.18:37777 ESTABLISHED:ESTABLISHED 108/47 8 KiB / 10 KiB
        LAN2 tcp 10.4.12.119:56348 -> 10.23.30.18:37777 ESTABLISHED:ESTABLISHED 155/47 11 KiB / 10 KiB
        LAN2 udp 10.23.30.18:52488 -> 255.255.255.255:5050 NO_TRAFFIC:SINGLE 1/0 60 B / 0 B
        LAN2 udp 10.23.30.18:46097 -> 255.255.255.255:5050 NO_TRAFFIC:SINGLE 1/0 60 B / 0 B

        States while trying to Accessing DVR using WAN Public IP via DVR monitoring software
        Interface Protocol Source (Original Source) -> Destination (Original Destination) State Packets Bytes
        WAN tcp my.public.ip.107:53590 -> 10.23.30.18:37777 (wan.public.ip.82:37777) SYN_SENT:ESTABLISHED 1/3 52 B / 156 B
        LAN2 tcp my.public.ip.107:53590 -> 10.23.30.18:37777 ESTABLISHED:SYN_SENT 1/3 52 B / 156 B
        WAN tcp my.public.ip.107:9429 -> 10.23.30.18:37777 (wan.public.ip.82:37777) SYN_SENT:ESTABLISHED 1/3 52 B / 156 B
        LAN2 tcp my.public.ip.107:9429 -> 10.23.30.18:37777 ESTABLISHED:SYN_SENT 1/3 52 B / 156 B
        WAN tcp my.public.ip.107:41905 -> 10.23.30.18:37777 (wan.public.ip.82:37777) SYN_SENT:ESTABLISHED 1/2 52 B / 104 B
        LAN2 tcp my.public.ip.107:41905 -> 10.23.30.18:37777 ESTABLISHED:SYN_SENT 1/2 52 B / 104 B
        WAN tcp my.public.ip.107:65404 -> 10.23.30.18:37777 (wan.public.ip.82:37777) SYN_SENT:ESTABLISHED 1/2 52 B / 104 B
        LAN2 tcp my.public.ip.107:65404 -> 10.23.30.18:37777 ESTABLISHED:SYN_SENT 1/2 52 B / 104 B
        WAN tcp my.public.ip.107:30858 -> 10.23.30.18:37777 (wan.public.ip.82:37777) SYN_SENT:ESTABLISHED 1/1 52 B / 52 B
        LAN2 tcp my.public.ip.107:30858 -> 10.23.30.18:37777 ESTABLISHED:SYN_SENT 1/1 52 B / 52 B

        For Setup2:

        States while trying to access DVR using WAN1 Public IP via DVR monitoring software
        Interface Protocol Source (Original Source) -> Destination (Original Destination) State Packets Bytes
        WAN1 tcp my.public.ip.107:58631 -> 10.105.15.18:37777 (wan1.public.ip.2:37777) SYN_SENT:ESTABLISHED 1/3 52 B / 156 B
        LAN tcp my.public.ip.107:58631 -> 10.105.15.18:37777 ESTABLISHED:SYN_SENT 1/3 52 B / 156 B
        LAN udp 10.105.15.18:50319 -> 54.165.39.206:8802 MULTIPLE:MULTIPLE 3/3 684 B / 366 B
        WAN1 udp wan1.public.ip.2:47926 (10.105.15.18:50319) -> 54.165.39.206:8802 MULTIPLE:MULTIPLE 3/3 684 B / 366 B
        LAN udp 10.105.15.18:55068 -> 54.165.39.206:8800 SINGLE:MULTIPLE 1/1 300 B / 239 B
        WAN1 udp wan1.public.ip.2:22011 (10.105.15.18:55068) -> 54.165.39.206:8800 MULTIPLE:SINGLE 1/1 300 B / 239 B
        LAN udp 10.105.15.18:51964 -> 54.165.39.206:8800 NO_TRAFFIC:SINGLE 1/0 300 B / 0 B
        WAN1 udp wan1.public.ip.2:6715 (10.105.15.18:51964) -> 54.165.39.206:8800 SINGLE:NO_TRAFFIC 1/0 300 B / 0 B
        LAN udp 10.105.15.18:35132 -> 54.165.39.206:8800 SINGLE:MULTIPLE 1/1 300 B / 143 B
        WAN1 udp wan1.public.ip.2:16551 (10.105.15.18:35132) -> 54.165.39.206:8800 MULTIPLE:SINGLE 1/1 300 B / 143 B

        States while Successfully Accessing DVR using WAN2 Public IP via DVR monitoring software
        Interface Protocol Source (Original Source) -> Destination (Original Destination) State Packets Bytes
        LAN udp 10.105.15.18:50319 -> 54.165.39.206:8802 MULTIPLE:MULTIPLE 3/3 684 B / 366 B
        WAN1 udp wan1.public.ip.2:23586 (10.105.15.18:50319) -> 54.165.39.206:8802 MULTIPLE:MULTIPLE 3/3 684 B / 366 B
        LAN udp 10.105.15.18:34603 -> 54.165.39.206:8800 SINGLE:MULTIPLE 2/1 602 B / 238 B
        WAN1 udp wan1.public.ip.2:31170 (10.105.15.18:34603) -> 54.165.39.206:8800 MULTIPLE:SINGLE 2/1 602 B / 238 B
        LAN udp 10.105.15.18:36106 -> 54.165.39.206:8800 NO_TRAFFIC:SINGLE 1/0 301 B / 0 B
        WAN1 udp wan1.public.ip.2:22646 (10.105.15.18:36106) -> 54.165.39.206:8800 SINGLE:NO_TRAFFIC 1/0 301 B / 0 B
        LAN udp 10.105.15.18:42065 -> 54.165.39.206:8800 SINGLE:MULTIPLE 1/1 301 B / 142 B
        WAN1 udp wan1.public.ip.2:27724 (10.105.15.18:42065) -> 54.165.39.206:8800 MULTIPLE:SINGLE 1/1 301 B / 142 B
        LAN udp 10.105.15.18:42187 -> 255.255.255.255:5050 NO_TRAFFIC:SINGLE 1/0 60 B / 0 B
        LAN udp 10.105.15.18:49863 -> 255.255.255.255:5050 NO_TRAFFIC:SINGLE 1/0 60 B / 0 B
        WAN1 tcp my.public.ip.107:63011 -> 10.105.15.18:37777 (wan1.public.ip.2:37777) SYN_SENT:ESTABLISHED 1/4 52 B / 208 B
        LAN tcp my.public.ip.107:63011 -> 10.105.15.18:37777 ESTABLISHED:SYN_SENT 1/4 52 B / 208 B
        WAN2 tcp my.public.ip.107:30218 -> 10.105.15.18:37777 (wan2.public.ip.121:37777) ESTABLISHED:ESTABLISHED 111/136 10 KiB / 16 KiB
        LAN tcp my.public.ip.107:30218 -> 10.105.15.18:37777 ESTABLISHED:ESTABLISHED 111/136 10 KiB / 16 KiB

        I am reading to find out what all this means.  Thanks for the replies Derelict.

        1 Reply Last reply Reply Quote 0
        • A
          AceStrider1
          last edited by

          So I read a little more on this.  What is pointed out as the culprit is asymmetric routing or clustering and load balancing.  Since I do not have the later, I thought I would read more on what asymmetric routing means.

          I found the following link:

          https://doc.pfsense.org/index.php/Asymmetric_Routing_and_Firewall_Rules

          and I tried the suggestions but they did not help.  In either case I do not have asymmetric routing on the first setup, as I only have one WAN.

          The second setup does appear to want to send data out via the WAN1, but I am still thinking it's not related to asymmetric routing as, when I do access the DVR successfully via WAN2, it does send some data over WAN1.

          Interestingly enough WAN1 is actually the default gateway for now.  I was going to setup fail over eventually but only after I got this issue resolved.

          I am still trying to figure this out.

          1 Reply Last reply Reply Quote 0
          • DerelictD
            Derelict LAYER 8 Netgate
            last edited by

            Please copy and paste the entire output of Status > Interfaces. PM if you like since it will contain lots of public addresses, etc. I'd rather see it without it being sanitized first.

            Thanks.

            Chattanooga, Tennessee, USA
            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            1 Reply Last reply Reply Quote 0
            • DerelictD
              Derelict LAYER 8 Netgate
              last edited by

              Thanks. Was hoping you had somehow managed to create that WAN with no gateway set on it but that all looked fine.

              Chattanooga, Tennessee, USA
              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
              Do Not Chat For Help! NO_WAN_EGRESS(TM)

              1 Reply Last reply Reply Quote 0
              • DerelictD
                Derelict LAYER 8 Netgate
                last edited by

                The next thing I would do is probably packet capture on the inside interface filtering on host my.public.ip.107 and attempting a connection.

                Then do the same thing capturing on WAN1 with the same filter.

                set level of detail to full and hit view capture. Feel free to PM those too.

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                1 Reply Last reply Reply Quote 0
                • A
                  AceStrider1
                  last edited by

                  I am actually connected to Site 2 remotely via an IPsec tunnel on the WAN_SPECTRUM interface, so there is probably some unnecessary info from my.public.ip in regards to esp.  But I am not certain what all this means.

                  I PM'd a link for a longer and unsanitized text as well the individual capture files themselves.

                  Packet Capture on WAN1 for an Unsucessfull Login via WAN_SPECTRUM
                  21:48:01.573138 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 59362, offset 0, flags , proto ESP (50), length 192)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32bf), length 172
                  21:48:01.607341 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 870: (tos 0x0, ttl 64, id 56377, offset 0, flags , proto ESP (50), length 856)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32c0), length 836
                  21:48:01.624434 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 11063, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e46), length 76
                  21:48:01.624505 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 5467, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e47), length 76
                  21:48:01.902374 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
                      SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.32393: Flags [S.], cksum 0x62c1 (correct), seq 4061187708, ack 868671390, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
                  21:48:01.918075 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 12367, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e48), length 76
                  21:48:01.918113 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 5445, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e49), length 76
                  21:48:02.062160 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 1129, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e4a), length 500
                  21:48:02.062209 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 40595, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e4b), length 500
                  21:48:02.062271 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 17643, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32c1), length 76
                  21:48:02.062297 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 32858, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32c2), length 76
                  21:48:02.062914 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 44681, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e4c), length 500
                  21:48:02.062960 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 41335, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32c3), length 76
                  21:48:02.083563 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 63165, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32c4), length 748
                  21:48:02.083744 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 2190, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32c5), length 748
                  21:48:02.103987 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 3920, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32c6), length 748
                  21:48:02.353930 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 49983, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e4d), length 76
                  21:48:02.415826 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 14842, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e4e), length 76
                  21:48:02.415891 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 11060, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e4f), length 76
                  21:48:02.588850 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 18726, offset 0, flags , proto ESP (50), length 192)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32c7), length 172
                  21:48:02.849218 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 43535, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e50), length 76
                  21:48:02.933555 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 53125, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e51), length 500
                  21:48:02.933637 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 33979, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32c8), length 76
                  21:48:02.952636 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 60771, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e52), length 500
                  21:48:02.952680 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 35784, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32c9), length 76
                  21:48:02.954582 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 3244, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32ca), length 748
                  21:48:02.974871 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 36488, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32cb), length 748
                  21:48:02.975936 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 42486, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e53), length 500
                  21:48:02.976013 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 8173, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32cc), length 76
                  21:48:02.996443 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 24293, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32cd), length 748
                  21:48:03.212866 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 24516, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e54), length 76
                  21:48:03.240896 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 46698, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e55), length 76
                  21:48:03.245666 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 17859, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e56), length 76
                  21:48:03.588811 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 48578, offset 0, flags , proto ESP (50), length 192)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32ce), length 172
                  21:48:03.695190 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 30879, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e57), length 76
                  21:48:03.848473 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 50340, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e58), length 76
                  21:48:03.902356 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
                      SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.32393: Flags [S.], cksum 0x62c1 (correct), seq 4061187708, ack 868671390, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
                  21:48:03.939479 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 116, id 29948, offset 0, flags , proto TCP (6), length 40)
                      my.public.ip.107.32393 > SPECTRUM.WAN2.IP.2.37777: Flags [R.], cksum 0xdc77 (correct), seq 33, ack 1, win 0, length 0
                  21:48:04.048163 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 4116, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e59), length 500
                  21:48:04.048207 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 57764, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e5a), length 500
                  21:48:04.048260 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 27186, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e5b), length 500
                  21:48:04.048286 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 55162, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32cf), length 76
                  21:48:04.048311 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 15264, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32d0), length 76
                  21:48:04.048326 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 2134, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32d1), length 76
                  21:48:04.069246 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 32303, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32d2), length 748
                  21:48:04.089518 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 774: (tos 0x0, ttl 64, id 28301, offset 0, flags , proto ESP (50), length 760)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32d3), length 740
                  21:48:04.102656 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
                      SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.15111: Flags [S.], cksum 0x767c (correct), seq 315265685, ack 124081909, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
                  21:48:04.102664 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
                      SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.30465: Flags [S.], cksum 0x2ed2 (correct), seq 1094344914, ack 2207705542, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
                  21:48:04.109813 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 3530, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32d4), length 748
                  21:48:04.302344 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
                      SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.10651: Flags [S.], cksum 0x1c10 (correct), seq 2309270649, ack 2765198498, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
                  21:48:04.451786 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 58690, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e5c), length 76
                  21:48:04.451851 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 50076, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e5d), length 76
                  21:48:04.451918 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 10562, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e5e), length 76
                  21:48:04.589509 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 116, id 29974, offset 0, flags , proto TCP (6), length 52)
                      my.public.ip.107.18862 > SPECTRUM.WAN2.IP.2.37777: Flags , cksum 0xa374 (correct), seq 1861784227, win 65535, options [mss 1360,nop,wscale 2,nop,nop,sackOK], length 0
                  21:48:04.598329 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
                      SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.18862: Flags [S.], cksum 0xacb4 (correct), seq 2858095330, ack 1861784228, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
                  21:48:04.604422 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 34589, offset 0, flags , proto ESP (50), length 192)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32d5), length 172
                  21:48:04.874196 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 14171, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e5f), length 76
                  21:48:05.017026 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 56861, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e60), length 500
                  21:48:05.017066 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 56964, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e61), length 500
                  21:48:05.017119 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 3827, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e62), length 500
                  21:48:05.017138 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 1474, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32d6), length 76
                  21:48:05.017155 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 41012, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32d7), length 76
                  21:48:05.017172 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 7387, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32d8), length 76
                  21:48:05.037843 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 61377, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32d9), length 748
                  21:48:05.058494 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 41484, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32da), length 748
                  21:48:05.078670 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 774: (tos 0x0, ttl 64, id 9913, offset 0, flags , proto ESP (50), length 760)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32db), length 740
                  21:48:05.319178 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 42334, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e63), length 76
                  21:48:05.344921 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 52335, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e64), length 76
                  21:48:05.400953 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 41641, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e65), length 76
                  21:48:05.604441 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 7314, offset 0, flags , proto ESP (50), length 192)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32dc), length 172
                  21:48:05.902295 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
                      SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.18862: Flags [S.], cksum 0xacb4 (correct), seq 2858095330, ack 1861784228, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
                  21:48:05.925129 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 55265, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e66), length 76
                  21:48:05.943879 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 36743, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e67), length 500
                  21:48:05.943949 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 2848, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32dd), length 76
                  21:48:05.964514 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 774: (tos 0x0, ttl 64, id 16873, offset 0, flags , proto ESP (50), length 760)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32de), length 740
                  21:48:06.047883 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 37735, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e68), length 500
                  21:48:06.047926 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 26141, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e69), length 500
                  21:48:06.047981 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 57630, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32df), length 76
                  21:48:06.047996 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 21489, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32e0), length 76
                  21:48:06.068826 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 52487, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32e1), length 748
                  21:48:06.089086 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 17202, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32e2), length 748
                  21:48:06.224572 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 56305, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e6a), length 76
                  21:48:06.334393 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 2127, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e6b), length 76
                  21:48:06.352966 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 32537, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e6c), length 76
                  21:48:06.604606 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 32978, offset 0, flags , proto ESP (50), length 192)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32e3), length 172
                  21:48:06.868750 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 65326, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e6d), length 76
                  21:48:06.939562 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 64749, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e6e), length 500
                  21:48:06.939630 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 14906, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32e4), length 76
                  21:48:06.949949 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 32458, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e6f), length 500
                  21:48:06.949984 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 63458, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32e5), length 76
                  21:48:06.960108 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 774: (tos 0x0, ttl 64, id 50780, offset 0, flags , proto ESP (50), length 760)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32e6), length 740
                  21:48:06.973332 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 17862, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e70), length 500
                  21:48:06.973371 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 5211, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32e7), length 76
                  21:48:06.980463 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 31768, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32e8), length 748
                  21:48:07.000910 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 46310, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32e9), length 748
                  21:48:07.230656 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 1026, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e71), length 76
                  21:48:07.238087 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 17207, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e72), length 76
                  21:48:07.265137 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 46927, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e73), length 76
                  21:48:07.620302 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 35834, offset 0, flags , proto ESP (50), length 192)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32ea), length 172
                  21:48:07.881804 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 41899, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e74), length 76
                  21:48:07.902307 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
                      SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.18862: Flags [S.], cksum 0xacb4 (correct), seq 2858095330, ack 1861784228, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
                  21:48:07.902322 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
                      SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.32393: Flags [S.], cksum 0x62c1 (correct), seq 4061187708, ack 868671390, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
                  21:48:07.902333 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
                      SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.53054: Flags [S.], cksum 0xca96 (correct), seq 4131104112, ack 458515559, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
                  21:48:07.928492 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 34523, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e75), length 500
                  21:48:07.928560 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 63085, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32eb), length 76
                  21:48:07.928620 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 116, id 30081, offset 0, flags , proto TCP (6), length 40)
                      my.public.ip.107.18862 > SPECTRUM.WAN2.IP.2.37777: Flags [R.], cksum 0x266b (correct), seq 33, ack 1, win 0, length 0
                  21:48:07.949045 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 47049, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32ec), length 748
                  21:48:07.955502 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 16968, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e76), length 500
                  21:48:07.955578 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 55006, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32ed), length 76
                  21:48:07.964079 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 13401, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e77), length 500
                  21:48:07.964113 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 53738, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32ee), length 76
                  21:48:07.976025 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 19951, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32ef), length 748
                  21:48:07.996370 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 21820, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32f0), length 748
                  21:48:08.102305 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
                      SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.61690: Flags [S.], cksum 0x883d (correct), seq 3079661535, ack 897148700, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
                  21:48:08.300273 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 462: (tos 0x0, ttl 53, id 5058, offset 0, flags , proto ESP (50), length 448)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e78), length 428
                  21:48:08.300355 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 42227, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32f1), length 76
                  21:48:08.300982 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 39544, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e79), length 76
                  21:48:08.301026 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 62708, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e7a), length 76
                  21:48:08.588577 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 116, id 30110, offset 0, flags , proto TCP (6), length 52)
                      my.public.ip.107.33861 > SPECTRUM.WAN2.IP.2.37777: Flags , cksum 0xc119 (correct), seq 3733899984, win 65535, options [mss 1360,nop,wscale 2,nop,nop,sackOK], length 0
                  21:48:08.597402 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
                      SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.33861: Flags [S.], cksum 0xfba2 (correct), seq 2172193403, ack 3733899985, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
                  21:48:08.620198 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 7825, offset 0, flags , proto ESP (50), length 192)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32f2), length 172
                  21:48:08.879996 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 1424, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e7b), length 76
                  21:48:09.024080 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 41692, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e7c), length 500
                  21:48:09.024127 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 54163, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e7d), length 500
                  21:48:09.024177 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 64996, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e7e), length 500
                  21:48:09.024196 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 52418, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32f3), length 76
                  21:48:09.024214 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 7270, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32f4), length 76
                  21:48:09.024231 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 30711, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32f5), length 76
                  21:48:09.048622 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 42212, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32f6), length 748
                  21:48:09.069110 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 50331, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32f7), length 748
                  21:48:09.089807 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 774: (tos 0x0, ttl 64, id 6097, offset 0, flags , proto ESP (50), length 760)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32f8), length 740
                  21:48:09.317553 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 34123, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e7f), length 76
                  21:48:09.333496 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 35172, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e80), length 76
                  21:48:09.346400 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 17610, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e81), length 76
                  21:48:09.481787 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 870: (tos 0x0, ttl 64, id 52347, offset 0, flags , proto ESP (50), length 856)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32f9), length 836
                  21:48:09.588976 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 48943, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32fa), length 76
                  21:48:09.620244 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 16149, offset 0, flags , proto ESP (50), length 192)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32fb), length 172
                  21:48:09.702186 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
                      SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.33861: Flags [S.], cksum 0xfba2 (correct), seq 2172193403, ack 3733899985, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
                  21:48:09.757907 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 11447, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e82), length 76
                  21:48:09.773184 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 45400, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e83), length 76
                  21:48:09.979312 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 38855, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e84), length 76
                  21:48:09.979380 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 58601, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e85), length 500
                  21:48:09.979432 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 9092, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e86), length 500
                  21:48:09.979473 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 913, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32fc), length 76
                  21:48:09.979494 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 37020, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32fd), length 76
                  21:48:09.979528 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 60565, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e87), length 500
                  21:48:09.979562 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 39074, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32fe), length 76
                  21:48:10.000548 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 65225, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x32ff), length 748
                  21:48:10.020949 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 22139, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3300), length 748
                  21:48:10.041310 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 13801, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3301), length 748
                  21:48:10.258848 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 3446, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e88), length 76
                  21:48:10.278817 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 53694, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e89), length 76
                  21:48:10.284236 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 1131, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e8a), length 76
                  21:48:10.467319 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 462: (tos 0x0, ttl 53, id 6548, offset 0, flags , proto ESP (50), length 448)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e8b), length 428
                  21:48:10.467385 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 32209, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3302), length 76
                  21:48:10.579946 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 462: (tos 0x0, ttl 53, id 1628, offset 0, flags , proto ESP (50), length 448)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e8c), length 428
                  21:48:10.580029 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 37569, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3303), length 76
                  21:48:10.636030 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 52015, offset 0, flags , proto ESP (50), length 192)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3304), length 172
                  21:48:10.903408 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 34339, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e8d), length 76
                  21:48:10.944470 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 759, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e8e), length 500
                  21:48:10.944553 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 39576, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3305), length 76
                  21:48:10.955645 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 34574, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e8f), length 500
                  21:48:10.955713 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 698, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3306), length 76
                  21:48:10.975971 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 118: (tos 0x0, ttl 53, id 24470, offset 0, flags , proto ESP (50), length 104)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e90), length 84
                  21:48:10.976044 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 118: (tos 0x0, ttl 64, id 3944, offset 0, flags , proto ESP (50), length 104)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3307), length 84
                  21:48:11.117586 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 27348, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e91), length 76
                  21:48:11.117648 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 61755, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e92), length 500
                  21:48:11.117694 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 53643, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3308), length 76
                  21:48:11.339091 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 49027, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3309), length 76
                  21:48:11.611107 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 33290, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x330a), length 748
                  21:48:11.635899 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 34517, offset 0, flags , proto ESP (50), length 192)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x330b), length 172
                  21:48:11.639759 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 878: (tos 0x0, ttl 64, id 2552, offset 0, flags , proto ESP (50), length 864)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x330c), length 844
                  21:48:11.642272 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 14980, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x330d), length 748
                  21:48:11.660617 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 50763, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x330e), length 748
                  21:48:11.702116 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
                      SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.33861: Flags [S.], cksum 0xfba2 (correct), seq 2172193403, ack 3733899985, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
                  21:48:11.717696 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 878: (tos 0x0, ttl 64, id 58676, offset 0, flags , proto ESP (50), length 864)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x330f), length 844
                  21:48:11.874805 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 12635, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e93), length 76
                  21:48:11.893440 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 11862, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e94), length 76
                  21:48:11.893487 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 56114, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e95), length 76
                  21:48:11.895724 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 19146, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e96), length 76
                  21:48:11.902075 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
                      SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.18862: Flags [S.], cksum 0xacb4 (correct), seq 2858095330, ack 1861784228, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
                  21:48:11.923456 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 136, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e97), length 76
                  21:48:11.923566 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 116, id 30200, offset 0, flags , proto TCP (6), length 40)
                      my.public.ip.107.33861 > SPECTRUM.WAN2.IP.2.37777: Flags [R.], cksum 0x7559 (correct), seq 33, ack 1, win 0, length 0
                  21:48:11.939150 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 19069, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e98), length 500
                  21:48:11.939218 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 51930, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3310), length 76
                  21:48:11.960040 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 25949, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3311), length 748
                  21:48:11.961153 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 11552, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e99), length 500
                  21:48:11.961242 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 41334, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3312), length 76
                  21:48:11.981644 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 3814, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3313), length 748
                  21:48:12.044681 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 56281, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e9a), length 500
                  21:48:12.044779 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 59962, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3314), length 76
                  21:48:12.065219 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 2022, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3315), length 748
                  21:48:12.102196 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
                      SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.30465: Flags [S.], cksum 0x2ed2 (correct), seq 1094344914, ack 2207705542, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
                  21:48:12.102211 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
                      SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.26440: Flags [S.], cksum 0x3227 (correct), seq 243013139, ack 2774094309, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
                  21:48:12.326283 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 57505, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e9b), length 76
                  21:48:12.326365 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 11087, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e9c), length 76
                  21:48:12.327835 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 53005, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e9d), length 76
                  21:48:12.635879 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 46103, offset 0, flags , proto ESP (50), length 192)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3316), length 172
                  21:48:12.774743 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 116, id 30226, offset 0, flags , proto TCP (6), length 52)
                      my.public.ip.107.29126 > SPECTRUM.WAN2.IP.2.37777: Flags , cksum 0x0af7 (correct), seq 20017360, win 65535, options [mss 1360,nop,wscale 2,nop,nop,sackOK], length 0
                  21:48:12.783555 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
                      SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.29126: Flags [S.], cksum 0xcff7 (correct), seq 4239393996, ack 20017361, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
                  21:48:12.930120 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 32147, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e9e), length 76
                  21:48:12.935764 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 405, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2e9f), length 500
                  21:48:12.935838 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 57014, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3317), length 76
                  21:48:12.955404 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 55279, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2ea0), length 500
                  21:48:12.955455 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 46879, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3318), length 76
                  21:48:12.956836 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 60685, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3319), length 748
                  21:48:12.968938 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 4500, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2ea1), length 500
                  21:48:12.968987 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 34403, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x331a), length 76
                  21:48:12.976225 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 41656, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x331b), length 748
                  21:48:12.989483 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 31076, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x331c), length 748
                  21:48:13.222349 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 41230, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2ea2), length 76
                  21:48:13.240758 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 24996, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2ea3), length 76
                  21:48:13.256271 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 6140, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2ea4), length 76
                  21:48:13.635929 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 206: (tos 0x0, ttl 64, id 15397, offset 0, flags , proto ESP (50), length 192)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x331d), length 172
                  21:48:13.890693 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 29861, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2ea5), length 76
                  21:48:13.943751 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 45368, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2ea6), length 500
                  21:48:13.943827 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 25746, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x331e), length 76
                  21:48:13.957049 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 64932, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2ea7), length 500
                  21:48:13.957099 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 42449, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x331f), length 76
                  21:48:13.964811 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 53407, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3320), length 748
                  21:48:13.977005 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 534: (tos 0x0, ttl 53, id 3865, offset 0, flags , proto ESP (50), length 520)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2ea8), length 500
                  21:48:13.977052 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 64, id 4605, offset 0, flags , proto ESP (50), length 96)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3321), length 76
                  21:48:13.985269 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 47378, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3322), length 748
                  21:48:14.005593 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 782: (tos 0x0, ttl 64, id 45714, offset 0, flags , proto ESP (50), length 768)
                      SPECTRUM.WAN2.IP.2 > my.public.ip.107: ESP(spi=0xcc6b00af,seq=0x3323), length 748
                  21:48:14.101993 a0:36:9f:49:02:3c > 48:00:33:c0:74:08, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 63, id 0, offset 0, flags , proto TCP (6), length 52)
                      SPECTRUM.WAN2.IP.2.37777 > my.public.ip.107.29126: Flags [S.], cksum 0xcff7 (correct), seq 4239393996, ack 20017361, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
                  21:48:14.252037 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 1987, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2ea9), length 76
                  21:48:14.252098 48:00:33:c0:74:08 > a0:36:9f:49:02:3c, ethertype IPv4 (0x0800), length 110: (tos 0x0, ttl 53, id 62225, offset 0, flags , proto ESP (50), length 96)
                      my.public.ip.107 > SPECTRUM.WAN2.IP.2: ESP(spi=0xcb5ce0cc,seq=0x2eaa), length 76
                  21:48:14.265471 48:00:33:c0:74:08 > a0:36:9f:49:02

                  1 Reply Last reply Reply Quote 0
                  • DerelictD
                    Derelict LAYER 8 Netgate
                    last edited by

                    I do not see that there is anything else to do. The failing pcap on WAN1 shows that everything that should be being done is being done.

                    SYN received, port forwarded, SYN,ACK received on LAN, sent out WAN1, then nothing.

                    This looks like something with the WAN1 circuit or upstream of it. Not sure what.

                    Sorry.

                    The money is in this packet capture: Packet Capture on WAN1 for an Unsucessfull Login via WAN_SPECTRUM.cap

                    Wireshark filter: !(esp) && (tcp.port == 18862)

                    Packet 54, 55, 71, 101, 106

                    The SYN,ACK is being returned and then nothing is coming back. SYN,ACK retransmitted a couple times, then the stack gives up.

                    Compare with this pcap: Packet Capture on WAN2 for a Sucessfull Login via WAN_ATT.cap

                    Wireshark filter: !(esp) && (tcp.port == 60272)

                    Note how the SYN and SYN,ACK are the same (that means the port forward is doing the same thing as on the other WAN), but it is immediately followed by an ACK, then the stream proceeds to transfer data….

                    pfSense is doing everything it is supposed to be doing on WAN1. I really have nothing to recommend there except maybe going to Spectrum and asking whassup or looking upstream there to see what might be causing it to fail.

                    ![Screen Shot 2017-07-18 at 1.59.01 AM.png](/public/imported_attachments/1/Screen Shot 2017-07-18 at 1.59.01 AM.png)
                    ![Screen Shot 2017-07-18 at 1.59.01 AM.png_thumb](/public/imported_attachments/1/Screen Shot 2017-07-18 at 1.59.01 AM.png_thumb)
                    ![Screen Shot 2017-07-18 at 2.02.01 AM.png](/public/imported_attachments/1/Screen Shot 2017-07-18 at 2.02.01 AM.png)
                    ![Screen Shot 2017-07-18 at 2.02.01 AM.png_thumb](/public/imported_attachments/1/Screen Shot 2017-07-18 at 2.02.01 AM.png_thumb)

                    Chattanooga, Tennessee, USA
                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                    1 Reply Last reply Reply Quote 0
                    • A
                      AceStrider1
                      last edited by

                      Derelict,

                      I see exactly what you mean.

                      I called Spectrum Business Internet (866-892-4249) and they denied there being any sort of firewall at first, but then they said the modem was not configured properly.  After a while the person whom I spoke with said he was re-configuring the modem (turning off the firewall on the modem) and restarting it.  After this it worked.  It turns out site one's WAN was also on Spectrum and the modem there was also "ill configured".  Anyways after they turned off the firewalls on those modems everything worked as expected.

                      Thanks again for all your help and suggestions.  I certainly got some good troubleshooting experience.

                      1 Reply Last reply Reply Quote 0
                      • DerelictD
                        Derelict LAYER 8 Netgate
                        last edited by

                        I received an email about Spectrum the other day. It was auto-corrected to Rectum.

                        Glad you managed to complete the nearly-impossible task of getting an ISP to fix something.

                        Chattanooga, Tennessee, USA
                        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                        Do Not Chat For Help! NO_WAN_EGRESS(TM)

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.