16:44:38.669214 IP 192.168.1.138.34762 > ns2.huligan.net.1723: Flags , seq 2043632284, win 14600, options [mss 1460,sackOK,TS val 31026200 ecr 0,nop,wscale 4], length 0
16:44:38.821321 IP ns2.huligan.net.1723 > 192.168.1.138.34762: Flags [S.], seq 2713587358, ack 2043632285, win 5792, options [mss 1320,sackOK,TS val 20141383 ecr 31026200,nop,wscale 7], length 0
16:44:38.821352 IP 192.168.1.138.34762 > ns2.huligan.net.1723: Flags [.], ack 1, win 913, options [nop,nop,TS val 31026238 ecr 20141383], length 0
16:44:38.821733 IP 192.168.1.138.34762 > ns2.huligan.net.1723: Flags [P.], seq 1:157, ack 1, win 913, options [nop,nop,TS val 31026238 ecr 20141383], length 156: pptp CTRL_MSGTYPE=SCCRQ PROTO_VER(1.0) FRAME_CAP(AS) BEARER_CAP(DA) MAX_CHAN(65535) FIRM_REV(1) HOSTNAME(local) VENDOR(cananian)
16:44:38.973868 IP ns2.huligan.net.1723 > 192.168.1.138.34762: Flags [.], ack 157, win 54, options [nop,nop,TS val 20141535 ecr 31026238], length 0
16:44:38.974919 IP ns2.huligan.net.1723 > 192.168.1.138.34762: Flags [P.], seq 1:157, ack 157, win 54, options [nop,nop,TS val 20141536 ecr 31026238], length 156: pptp CTRL_MSGTYPE=SCCRP PROTO_VER(1.0) RESULT_CODE(1) ERR_CODE(0) FRAME_CAP() BEARER_CAP() MAX_CHAN(1) FIRM_REV(1) HOSTNAME(local) VENDOR(linux)
16:44:38.974931 IP 192.168.1.138.34762 > ns2.huligan.net.1723: Flags [.], ack 157, win 980, options [nop,nop,TS val 31026276 ecr 20141536], length 0
16:44:39.821880 IP 192.168.1.138.34762 > ns2.huligan.net.1723: Flags [P.], seq 157:325, ack 157, win 980, options [nop,nop,TS val 31026488 ecr 20141536], length 168: pptp CTRL_MSGTYPE=OCRQ CALL_ID(0) CALL_SER_NUM(0) MIN_BPS(2400) MAX_BPS(10000000) BEARER_TYPE(Any) FRAME_TYPE(E) RECV_WIN(3) PROC_DELAY(0) PHONE_NO_LEN(0) PHONE_NO() SUB_ADDR()
16:44:39.974645 IP ns2.huligan.net.1723 > 192.168.1.138.34762: Flags [P.], seq 157:189, ack 325, win 62, options [nop,nop,TS val 20142536 ecr 31026488], length 32: pptp CTRL_MSGTYPE=OCRP CALL_ID(56192) PEER_CALL_ID(0) RESULT_CODE(1) ERR_CODE(0) CAUSE_CODE(0) CONN_SPEED(10000000) RECV_WIN(3) PROC_DELAY(0) PHY_CHAN_ID(0)
16:44:39.974706 IP 192.168.1.138.34762 > ns2.huligan.net.1723: Flags [.], ack 189, win 980, options [nop,nop,TS val 31026526 ecr 20142536], length 0
16:44:39.975024 IP 192.168.1.138 > ns2.huligan.net: GREv1, call 56192, seq 1, length 36: LCP, Conf-Request (0x01), id 1, length 22
16:44:39.997047 IP ns2.huligan.net > 192.168.1.138: GREv1, call 0, seq 0, length 41: LCP, Conf-Request (0x01), id 1, length 27
16:44:39.997216 IP 192.168.1.138 > ns2.huligan.net: GREv1, call 56192, seq 2, length 41: LCP, Conf-Ack (0x02), id 1, length 27
16:44:42.665172 IP 192.168.1.138 > ns2.huligan.net: GREv1, call 56192, seq 3, length 36: LCP, Conf-Request (0x01), id 1, length 22
16:44:42.813691 IP ns2.huligan.net > 192.168.1.138: GREv1, call 0, seq 1, ack 3, length 40: LCP, Conf-Ack (0x02), id 1, length 22
16:44:42.817584 IP ns2.huligan.net > 192.168.1.138: GREv1, call 0, seq 2, length 40: CHAP, Challenge (0x01), id 34, Value 3dbc9970ae6f03282403877634cf0fbe, Name pptpd
16:44:42.817604 IP ns2.huligan.net > 192.168.1.138: GREv1, call 0, seq 3, length 41: LCP, Conf-Request (0x01), id 2, length 27
16:44:42.817609 IP ns2.huligan.net > 192.168.1.138: GREv1, call 0, seq 4, length 36: LCP, Conf-Ack (0x02), id 1, length 22
16:44:42.817814 IP 192.168.1.138 > ns2.huligan.net: GREv1, call 56192, ack 4, no-payload, length 12
16:44:42.819436 IP 192.168.1.138 > ns2.huligan.net: GREv1, call 56192, seq 4, length 73: CHAP, Response (0x02), id 34, Value 1635eaeede149b929b52ab0bea1256fb000000000000000005ded54fdf173e6a8015a0ba83fa2a9fd8645e1f3534a7b900, Name free
16:44:42.819449 IP 192.168.1.138 > ns2.huligan.net: GREv1, call 56192, seq 5, length 36: LCP, Conf-Request (0x01), id 2, length 22
16:44:42.819455 IP 192.168.1.138 > ns2.huligan.net: GREv1, call 56192, seq 6, length 41: LCP, Conf-Ack (0x02), id 2, length 27
16:44:42.967901 IP ns2.huligan.net > 192.168.1.138: GREv1, call 0, seq 5, ack 5, length 40: LCP, Conf-Ack (0x02), id 2, length 22
16:44:42.967917 IP ns2.huligan.net > 192.168.1.138: GREv1, call 0, seq 6, ack 6, length 44: CHAP, Challenge (0x01), id 120, Value d035f517c05ef90886bbe7bf0a7fa570, Name pptpd
16:44:42.968055 IP 192.168.1.138 > ns2.huligan.net: GREv1, call 56192, ack 6, no-payload, length 12
16:44:42.968782 IP 192.168.1.138 > ns2.huligan.net: GREv1, call 56192, seq 7, length 73: CHAP, Response (0x02), id 120, Value 0a83b4fd725e720b6ce229cc9c42a0a00000000000000000f3637315615b95f0f3bea5694017e3d393de2a5fcadcaaab00, Name free
16:44:43.117599 IP ns2.huligan.net > 192.168.1.138: GREv1, call 0, seq 7, ack 7, length 22: CHAP, Fail (0x04), id 120, Msg
16:44:43.117964 IP 192.168.1.138 > ns2.huligan.net: GREv1, call 56192, seq 8, ack 7, length 64: LCP, Term-Request (0x05), id 3, length 46
16:44:43.121978 IP ns2.huligan.net > 192.168.1.138: GREv1, call 0, seq 8, length 41: LCP, Term-Request (0x05), id 3, length 27
16:44:43.122112 IP 192.168.1.138 > ns2.huligan.net: GREv1, call 56192, seq 9, ack 8, length 24: LCP, Term-Ack (0x06), id 3, length 6
16:44:43.265986 IP ns2.huligan.net > 192.168.1.138: GREv1, call 0, seq 9, ack 8, length 24: LCP, Term-Ack (0x06), id 3, length 6
16:44:43.292487 IP ns2.huligan.net.1723 > 192.168.1.138.34762: Flags [F.], seq 189, ack 325, win 62, options [nop,nop,TS val 20145854 ecr 31026526], length 0
16:44:43.292642 IP 192.168.1.138.34762 > ns2.huligan.net.1723: Flags [P.], seq 325:341, ack 190, win 980, options [nop,nop,TS val 31027355 ecr 20145854], length 16: pptp CTRL_MSGTYPE=CCRQ CALL_ID(0)
16:44:43.292768 IP 192.168.1.138.34762 > ns2.huligan.net.1723: Flags [F.], seq 341, ack 190, win 980, options [nop,nop,TS val 31027355 ecr 20145854], length 0
16:44:43.444859 IP ns2.huligan.net.1723 > 192.168.1.138.34762: Flags [R], seq 2713587548, win 0, length 0
16:44:43.444884 IP ns2.huligan.net.1723 > 192.168.1.138.34762: Flags [R], seq 2713587548, win 0, length 0