IKE and IPsec packets sent/received: Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Sep 30, 2003 12:39:37.801992000 Time delta from previous packet: 0.000000000 seconds Time relative to first packet: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: AFBF8EF0 Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0xefad (61357) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 39 Protocol: UDP (0x11) Header checksum: 0x942e (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x18E051F94121F0A5 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (10800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x5DE9BC4C3560AA16CB2DF25E7950F160 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x27BAB5DC01EA0760EA4E3190AC27C0D0 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x6105C422E76847E43F9684801292AECD Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4485152D18B6BBCD0BE8A8469579DDCC Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0xCD60464335DF21F87CFDB2FC68B6A448 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x90CB80913EBB696E086381B5EC427B1F Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 f8 ef ad 00 00 27 11 94 2e 40 5e 32 6c 3f ca ......'...@^2l?. 0020 5c 85 01 f4 01 f4 00 e4 00 00 18 e0 51 f9 41 21 \...........Q.A! 0030 f0 a5 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 2a 30 0d 00 00 14 5d e9 ........*0....]. 0080 bc 4c 35 60 aa 16 cb 2d f2 5e 79 50 f1 60 0d 00 .L5`...-.^yP.`.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 af bf 8e f0 ...R.V.... Frame 2 (142 bytes on wire, 142 bytes captured) Arrival Time: Sep 30, 2003 12:39:37.830299000 Time delta from previous packet: 0.028307000 seconds Time relative to first packet: 0.028307000 seconds Frame Number: 2 Packet Length: 142 bytes Capture Length: 142 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 64.94.50.108 (64.94.50.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 128 Identification: 0xa8c6 (43206) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc28d (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 64.94.50.108 (64.94.50.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 108 Checksum: 0xf47e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x18E051F94121F0A5 Responder cookie: 0x7AFB98EABEA359C8 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 100 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (10800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 80 a8 c6 00 00 40 11 c2 8d 3f ca 5c 85 40 5e ......@...?.\.@^ 0020 32 6c 01 f4 01 f4 00 6c f4 7e 18 e0 51 f9 41 21 2l.....l.~..Q.A! 0030 f0 a5 7a fb 98 ea be a3 59 c8 01 10 02 00 00 00 ..z.....Y....... 0040 00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00 .....d...4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 2a 30 00 00 00 14 70 03 ........*0....p. 0080 cb c1 09 7d be 9c 26 00 ba 69 83 bc 8b 35 ...}..&..i...5 Frame 3 (226 bytes on wire, 226 bytes captured) Arrival Time: Sep 30, 2003 12:39:37.970328000 Time delta from previous packet: 0.140029000 seconds Time relative to first packet: 0.168336000 seconds Frame Number: 3 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 14C9FD52 Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0xadd8 (44504) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 39 Protocol: UDP (0x11) Header checksum: 0xd62b (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x18E051F94121F0A5 Responder cookie: 0x7AFB98EABEA359C8 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 d0 ad d8 00 00 27 11 d6 2b 40 5e 32 6c 3f ca ......'..+@^2l?. 0020 5c 85 01 f4 01 f4 00 bc 00 00 18 e0 51 f9 41 21 \...........Q.A! 0030 f0 a5 7a fb 98 ea be a3 59 c8 04 10 02 00 00 00 ..z.....Y....... 0040 00 00 00 00 00 b4 0a 00 00 84 82 96 18 13 b6 20 ............... 0050 cb e2 48 85 f1 00 d3 7a cb a1 63 46 9e 59 44 e2 ..H....z..cF.YD. 0060 99 a6 d7 8c 9c cd 28 36 e8 cf bb a5 a5 78 2b 91 ......(6.....x+. 0070 58 33 46 2b eb 28 d8 cb 17 88 c0 a4 5a ba 1f 43 X3F+.(......Z..C 0080 9a 2c 1c ac ec 01 2f 9f 04 e7 71 82 ad 64 b8 cd .,..../...q..d.. 0090 a9 54 24 46 21 be ee 8d 47 d2 51 aa da b6 f5 1f .T$F!...G.Q..... 00a0 ec 5f d5 7c 0d 0c fa 9d 1e fd 0d 6a 4c bf 54 21 ._.|.......jL.T! 00b0 70 6d 62 43 1b f0 41 24 99 a5 ce 48 fd 88 cc f4 pmbC..A$...H.... 00c0 3e 04 b4 df 4d 01 6b c3 5c 94 00 00 00 14 6d 37 >...M.k.\.....m7 00d0 23 31 49 da db 89 b6 d1 fe 64 e2 49 f0 46 14 c9 #1I......d.I.F.. 00e0 fd 52 .R Frame 4 (242 bytes on wire, 242 bytes captured) Arrival Time: Sep 30, 2003 12:39:38.023252000 Time delta from previous packet: 0.052924000 seconds Time relative to first packet: 0.221260000 seconds Frame Number: 4 Packet Length: 242 bytes Capture Length: 242 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 64.94.50.108 (64.94.50.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 228 Identification: 0xa8c7 (43207) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc228 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 64.94.50.108 (64.94.50.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 208 Checksum: 0x1cdf (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x18E051F94121F0A5 Responder cookie: 0x7AFB98EABEA359C8 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 200 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 20 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 e4 a8 c7 00 00 40 11 c2 28 3f ca 5c 85 40 5e ......@..(?.\.@^ 0020 32 6c 01 f4 01 f4 00 d0 1c df 18 e0 51 f9 41 21 2l..........Q.A! 0030 f0 a5 7a fb 98 ea be a3 59 c8 04 10 02 00 00 00 ..z.....Y....... 0040 00 00 00 00 00 c8 0a 00 00 84 ea cd 73 5b 6f 95 ............s[o. 0050 06 57 ae b1 3f 97 01 49 1c 6a 19 22 b6 9c 38 bd .W..?..I.j."..8. 0060 cd 61 ae 03 9b ee 28 a3 d6 2f c0 3d 50 75 d1 b2 .a....(../.=Pu.. 0070 d0 01 4d 28 d2 ca 97 60 13 5d 54 3b c6 97 1d 88 ..M(...`.]T;.... 0080 84 81 63 36 bb c5 c3 49 26 38 84 6d 89 fe bb b2 ..c6...I&8.m.... 0090 8a 74 80 61 84 28 b8 32 20 25 a0 52 c9 8d 8f b1 .t.a.(.2 %.R.... 00a0 84 f0 f2 c5 f6 41 9e 7b 7f 22 e8 4d da ad b4 1d .....A.{.".M.... 00b0 ff 60 7d 82 c6 7b e8 33 ee ee 99 06 4e 19 0d 13 .`}..{.3....N... 00c0 0e 43 01 36 a1 c7 08 c1 21 97 0d 00 00 14 e0 db .C.6....!....... 00d0 43 0e b9 14 65 97 44 cc 6f 7a 53 82 50 2f 00 00 C...e.D.ozS.P/.. 00e0 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 00f0 8b 35 .5 Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Sep 30, 2003 12:39:38.155955000 Time delta from previous packet: 0.132703000 seconds Time relative to first packet: 0.353963000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: E45406DB Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x9d03 (40195) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 39 Protocol: UDP (0x11) Header checksum: 0xe768 (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x18E051F94121F0A5 Responder cookie: 0x7AFB98EABEA359C8 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 68 9d 03 00 00 27 11 e7 68 40 5e 32 6c 3f ca .h....'..h@^2l?. 0020 5c 85 01 f4 01 f4 00 54 00 00 18 e0 51 f9 41 21 \......T....Q.A! 0030 f0 a5 7a fb 98 ea be a3 59 c8 05 10 02 01 00 00 ..z.....Y....... 0040 00 00 00 00 00 4c ac 1b 29 16 ab 9f 94 ce 47 08 .....L..).....G. 0050 dd 72 d2 5a c0 df b7 fc 06 6d 48 1a 00 60 8a 0c .r.Z.....mH..`.. 0060 55 31 8d 19 af b2 d8 9c b2 03 6f 4f ef 88 34 0c U1........oO..4. 0070 cb a3 5d 7b 19 c0 e4 54 06 db ..]{...T.. Frame 6 (110 bytes on wire, 110 bytes captured) Arrival Time: Sep 30, 2003 12:39:38.208382000 Time delta from previous packet: 0.052427000 seconds Time relative to first packet: 0.406390000 seconds Frame Number: 6 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 64.94.50.108 (64.94.50.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0xa8c8 (43208) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc2ab (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 64.94.50.108 (64.94.50.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x4d37 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x18E051F94121F0A5 Responder cookie: 0x7AFB98EABEA359C8 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 a8 c8 00 00 40 11 c2 ab 3f ca 5c 85 40 5e .`....@...?.\.@^ 0020 32 6c 01 f4 01 f4 00 4c 4d 37 18 e0 51 f9 41 21 2l.....LM7..Q.A! 0030 f0 a5 7a fb 98 ea be a3 59 c8 05 10 02 01 00 00 ..z.....Y....... 0040 00 00 00 00 00 44 4b 83 4a d9 72 ee 29 c9 41 25 .....DK.J.r.).A% 0050 23 05 b5 a5 eb e7 ae 2c e1 b2 55 1b ed 94 98 59 #......,..U....Y 0060 24 fb ca a4 8d f5 91 33 be 7f 4e 43 0f 94 $......3..NC.. Frame 7 (126 bytes on wire, 126 bytes captured) Arrival Time: Sep 30, 2003 12:39:38.213159000 Time delta from previous packet: 0.004777000 seconds Time relative to first packet: 0.411167000 seconds Frame Number: 7 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 64.94.50.108 (64.94.50.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xa8c9 (43209) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc29a (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 64.94.50.108 (64.94.50.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x51a7 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x18E051F94121F0A5 Responder cookie: 0x7AFB98EABEA359C8 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x78CC9E41 Length: 84 Encrypted payload (56 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 70 a8 c9 00 00 40 11 c2 9a 3f ca 5c 85 40 5e .p....@...?.\.@^ 0020 32 6c 01 f4 01 f4 00 5c 51 a7 18 e0 51 f9 41 21 2l.....\Q...Q.A! 0030 f0 a5 7a fb 98 ea be a3 59 c8 08 10 05 01 78 cc ..z.....Y.....x. 0040 9e 41 00 00 00 54 e1 21 32 a4 7c 0a 7e 55 f6 dd .A...T.!2.|.~U.. 0050 28 4b 56 83 f2 80 8e 4c 34 17 ec 7d 8a 18 66 c0 (KV....L4..}..f. 0060 12 1e 93 c6 36 04 e6 bd 18 1a 75 b3 d1 dc 68 b6 ....6.....u...h. 0070 10 c9 f4 f1 84 72 0b 6c 2f 14 ff a8 47 bb .....r.l/...G. Frame 8 (194 bytes on wire, 194 bytes captured) Arrival Time: Sep 30, 2003 12:39:38.315893000 Time delta from previous packet: 0.102734000 seconds Time relative to first packet: 0.513901000 seconds Frame Number: 8 Packet Length: 194 bytes Capture Length: 194 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 0BE14F4A Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 176 Identification: 0x9ad6 (39638) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 39 Protocol: UDP (0x11) Header checksum: 0xe94d (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 156 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x18E051F94121F0A5 Responder cookie: 0x7AFB98EABEA359C8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5CE1BD76 Length: 148 Encrypted payload (120 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 b0 9a d6 00 00 27 11 e9 4d 40 5e 32 6c 3f ca ......'..M@^2l?. 0020 5c 85 01 f4 01 f4 00 9c 00 00 18 e0 51 f9 41 21 \...........Q.A! 0030 f0 a5 7a fb 98 ea be a3 59 c8 08 10 20 01 5c e1 ..z.....Y... .\. 0040 bd 76 00 00 00 94 fe c7 a8 4d cd 1f ec 37 87 93 .v.......M...7.. 0050 e2 94 27 be e8 af 27 6b e9 0b 03 4e be 7d fe 66 ..'...'k...N.}.f 0060 7e c5 ca eb 21 46 09 2c 08 8e db 74 c1 1f dd f2 ~...!F.,...t.... 0070 88 cb 61 04 48 f8 3a 2e ce 3f b4 01 11 3f 8e da ..a.H.:..?...?.. 0080 e2 3d 77 bf fb fc 17 80 be 7d 08 85 3d 74 a5 20 .=w......}..=t. 0090 62 ba 2a 96 f2 21 dc bc ef ee ef 77 c3 fc 5c 5e b.*..!.....w..\^ 00a0 c0 1c 13 3b fa 2d 0c dd ba 91 18 b5 bf 51 14 7a ...;.-.......Q.z 00b0 fa 08 11 87 a9 d2 34 74 ef 67 8f 95 5c c9 0b e1 ......4t.g..\... 00c0 4f 4a OJ Frame 9 (190 bytes on wire, 190 bytes captured) Arrival Time: Sep 30, 2003 12:39:38.339494000 Time delta from previous packet: 0.023601000 seconds Time relative to first packet: 0.537502000 seconds Frame Number: 9 Packet Length: 190 bytes Capture Length: 190 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 64.94.50.108 (64.94.50.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 176 Identification: 0xa8ca (43210) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc259 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 64.94.50.108 (64.94.50.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 156 Checksum: 0x49cb (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x18E051F94121F0A5 Responder cookie: 0x7AFB98EABEA359C8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5CE1BD76 Length: 148 Encrypted payload (120 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 b0 a8 ca 00 00 40 11 c2 59 3f ca 5c 85 40 5e ......@..Y?.\.@^ 0020 32 6c 01 f4 01 f4 00 9c 49 cb 18 e0 51 f9 41 21 2l......I...Q.A! 0030 f0 a5 7a fb 98 ea be a3 59 c8 08 10 20 01 5c e1 ..z.....Y... .\. 0040 bd 76 00 00 00 94 45 ec 91 83 92 46 fc 8d a1 ce .v....E....F.... 0050 79 9d 3e f4 d0 21 94 44 6e cc bc bc 40 a9 6e 6c y.>..!.Dn...@.nl 0060 05 f9 6d 30 da c5 f7 a5 68 66 2e af 91 7f cb 8f ..m0....hf...... 0070 a8 af 9c 0b 5e 99 4a ec b1 65 7d d2 fe ec 7b 30 ....^.J..e}...{0 0080 ac 1a 97 99 e7 70 20 a9 8f 77 34 62 f2 86 a1 69 .....p ..w4b...i 0090 8c b7 b1 36 a8 b4 13 f3 3e 0d 2f 97 92 5f 14 93 ...6....>./.._.. 00a0 1e 6f 11 3a 94 16 5e e1 50 5f 06 fe df 89 b2 1d .o.:..^.P_...... 00b0 1e 57 cb 05 08 63 f2 31 b8 85 6f f7 fa 23 .W...c.1..o..# Frame 10 (98 bytes on wire, 98 bytes captured) Arrival Time: Sep 30, 2003 12:39:38.458587000 Time delta from previous packet: 0.119093000 seconds Time relative to first packet: 0.656595000 seconds Frame Number: 10 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 7C5C2B56 Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0xd798 (55192) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 39 Protocol: UDP (0x11) Header checksum: 0xaceb (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x18E051F94121F0A5 Responder cookie: 0x7AFB98EABEA359C8 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5CE1BD76 Length: 52 Encrypted payload (24 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 50 d7 98 00 00 27 11 ac eb 40 5e 32 6c 3f ca .P....'...@^2l?. 0020 5c 85 01 f4 01 f4 00 3c 00 00 18 e0 51 f9 41 21 \......<....Q.A! 0030 f0 a5 7a fb 98 ea be a3 59 c8 08 10 20 01 5c e1 ..z.....Y... .\. 0040 bd 76 00 00 00 34 41 2a 67 f6 eb f3 b7 9b 0c 46 .v...4A*g......F 0050 6f 2c b1 e0 82 6b 29 c8 f2 70 df cc b4 ff 7c 5c o,...k)..p....|\ 0060 2b 56 +V Frame 11 (122 bytes on wire, 122 bytes captured) Arrival Time: Sep 30, 2003 12:39:38.800454000 Time delta from previous packet: 0.341867000 seconds Time relative to first packet: 0.998462000 seconds Frame Number: 11 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: E72AAF8E Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0006 (6) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 215 Protocol: ESP (0x32) Header checksum: 0x9444 (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x0af88df9 Sequence: 0x00000001 Data (76 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 68 00 06 40 00 d7 32 94 44 40 5e 32 6c 3f ca .h..@..2.D@^2l?. 0020 5c 85 0a f8 8d f9 00 00 00 01 6b de 13 0a 09 ec \.........k..... 0030 86 e9 b8 17 da 01 21 7f 83 f1 3b 70 72 40 8f 39 ......!...;pr@.9 0040 44 dc bb d4 50 9f 24 d0 19 83 0e 6e 2b 93 04 05 D...P.$....n+... 0050 90 38 11 dc d8 05 3f 40 be 5c 04 f3 99 29 13 41 .8....?@.\...).A 0060 db 55 fe f2 7e 35 fa 79 96 2b ca 32 2c dc 5b c0 .U..~5.y.+.2,.[. 0070 fd 67 e4 d9 95 15 e7 2a af 8e .g.....*.. Frame 12 (110 bytes on wire, 110 bytes captured) Arrival Time: Sep 30, 2003 12:39:38.801176000 Time delta from previous packet: 0.000722000 seconds Time relative to first packet: 0.999184000 seconds Frame Number: 12 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 64.94.50.108 (64.94.50.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0xa8cb (43211) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xc287 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 64.94.50.108 (64.94.50.108) Encapsulating Security Payload SPI: 0x2c28c6fe Sequence: 0x00000001 Data (68 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 a8 cb 00 00 40 32 c2 87 3f ca 5c 85 40 5e .`....@2..?.\.@^ 0020 32 6c 2c 28 c6 fe 00 00 00 01 6b a1 c8 00 70 4e 2l,(......k...pN 0030 c8 c5 34 86 84 ac 23 b5 e7 bb 36 ee d9 5c f4 c6 ..4...#...6..\.. 0040 4b 8e ad a5 a6 25 c5 42 ce ef e2 3a ed f8 21 17 K....%.B...:..!. 0050 44 65 ae a3 ef b4 03 10 80 b5 04 23 20 94 47 9f De.........# .G. 0060 c1 99 b7 f6 08 01 1a 16 ea 37 33 f0 c1 8c .........73... Frame 13 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 30, 2003 12:39:38.908273000 Time delta from previous packet: 0.107097000 seconds Time relative to first packet: 1.106281000 seconds Frame Number: 13 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 6FE8C94C Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0007 (7) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 215 Protocol: ESP (0x32) Header checksum: 0x944b (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x0af88df9 Sequence: 0x00000002 Data (68 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 00 07 40 00 d7 32 94 4b 40 5e 32 6c 3f ca .`..@..2.K@^2l?. 0020 5c 85 0a f8 8d f9 00 00 00 02 4d ef 55 49 fc 81 \.........M.UI.. 0030 59 89 bc e0 c7 3e 1b aa 7f 0a 67 60 fb 5e e1 9b Y....>....g`.^.. 0040 e4 12 0f aa db 5e 09 29 62 ff c6 16 87 09 dc a0 .....^.)b....... 0050 50 a9 cc f4 da a6 77 b6 5b eb cd c5 17 91 7d 6f P.....w.[.....}o 0060 58 3f d0 2f 80 b9 eb d5 81 f5 c5 d9 aa 6a 6f e8 X?./.........jo. 0070 c9 4c .L Frame 14 (466 bytes on wire, 466 bytes captured) Arrival Time: Sep 30, 2003 12:39:38.913746000 Time delta from previous packet: 0.005473000 seconds Time relative to first packet: 1.111754000 seconds Frame Number: 14 Packet Length: 466 bytes Capture Length: 466 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 50523057 Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 448 Identification: 0x0008 (8) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 215 Protocol: ESP (0x32) Header checksum: 0x92ea (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x0af88df9 Sequence: 0x00000003 Data (420 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 01 c0 00 08 40 00 d7 32 92 ea 40 5e 32 6c 3f ca ....@..2..@^2l?. 0020 5c 85 0a f8 8d f9 00 00 00 03 6f c2 4c 2e e0 22 \.........o.L.." 0030 af 35 ae ca 95 2d 56 cd 50 1b 5f 7e 5c 82 dd d8 .5...-V.P._~\... 0040 20 52 7e 8b 50 aa 63 b6 d4 9a 64 1e 37 c1 4d bc R~.P.c...d.7.M. 0050 1f 0a 3c 98 76 23 e7 51 27 75 4b 42 b4 d3 61 b9 ..<.v#.Q'uKB..a. 0060 e9 4d d8 a1 c7 38 ee 91 f2 c3 8f 8a e5 25 bb 67 .M...8.......%.g 0070 d1 6e fe 0d 27 55 00 cf 8c 67 ca c1 e7 52 76 4f .n..'U...g...RvO 0080 5c 85 03 45 53 92 e7 0e 89 4d 4e 37 a6 f6 c4 9a \..ES....MN7.... 0090 be 93 11 02 57 bb 45 5e 32 f5 94 f9 b0 84 55 69 ....W.E^2.....Ui 00a0 61 8c fd 01 7c 81 4c a6 93 7f 7a 10 44 d3 c9 f2 a...|.L...z.D... 00b0 47 d9 64 3d 32 bd 56 08 43 e6 89 00 29 25 80 4e G.d=2.V.C...)%.N 00c0 c1 87 3d a2 97 d7 d9 64 bf db af 29 4a 5b 64 fd ..=....d...)J[d. 00d0 e3 88 8a 2d 19 81 53 09 54 0e 9e 70 fa cb 00 3b ...-..S.T..p...; 00e0 85 bc e5 0c 01 88 dc 44 59 47 7f e9 c2 ff 2b 68 .......DYG....+h 00f0 54 92 da 02 94 ea 9e 34 90 4a da bf ae 4e da bf T......4.J...N.. 0100 a7 b7 61 53 60 16 ac fe 13 08 31 bc cf 3e 89 0c ..aS`.....1..>.. 0110 48 ea 13 56 6b 31 5f be 7c 0e c2 2c ba d1 26 0a H..Vk1_.|..,..&. 0120 cd 5a 04 fa f8 62 f7 dc 4e 89 26 b3 26 8a ed 61 .Z...b..N.&.&..a 0130 5f cf f2 80 28 7c 58 fd 1d 33 8e 08 14 e2 49 bb _...(|X..3....I. 0140 36 e0 a2 bf 19 06 a4 b4 f6 c2 09 db fd f0 e7 73 6..............s 0150 b3 5e 85 ae 32 8c dc 44 ef ad 9a 44 ff ba 6e a5 .^..2..D...D..n. 0160 27 ae 39 6d b0 23 1d d9 83 9d 9e 95 d1 0a bb 56 '.9m.#.........V 0170 83 92 b6 41 5c b7 b6 53 eb 7b 36 95 83 a8 ed f1 ...A\..S.{6..... 0180 26 28 a6 cf b9 cd fb c1 80 6f fc 63 3a a0 a5 7d &(.......o.c:..} 0190 cb 9c ad f9 57 4c 8f c1 44 f8 d3 f2 63 37 cc 1a ....WL..D...c7.. 01a0 e3 f7 14 28 a3 5c b6 14 a2 e0 aa 72 8c 9d 33 29 ...(.\.....r..3) 01b0 78 fa 35 4c 28 ee 69 95 d7 59 13 61 4a f3 b9 cf x.5L(.i..Y.aJ... 01c0 3c ba 58 88 13 5a dc d5 da f2 a4 42 d5 80 50 52 <.X..Z.....B..PR 01d0 30 57 0W Frame 15 (934 bytes on wire, 934 bytes captured) Arrival Time: Sep 30, 2003 12:39:38.975740000 Time delta from previous packet: 0.061994000 seconds Time relative to first packet: 1.173748000 seconds Frame Number: 15 Packet Length: 934 bytes Capture Length: 934 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 64.94.50.108 (64.94.50.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 920 Identification: 0xa8cc (43212) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xbf4e (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 64.94.50.108 (64.94.50.108) Encapsulating Security Payload SPI: 0x2c28c6fe Sequence: 0x00000002 Data (892 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 03 98 a8 cc 00 00 40 32 bf 4e 3f ca 5c 85 40 5e ......@2.N?.\.@^ 0020 32 6c 2c 28 c6 fe 00 00 00 02 8a 22 e9 1d 3f c8 2l,(......."..?. 0030 18 07 fa 36 c4 76 0c d9 f2 2d 90 b2 2e 9a 7d f0 ...6.v...-....}. 0040 82 c0 e5 a6 04 15 1f 4b a9 11 f7 a1 9c fa 36 ff .......K......6. 0050 c9 bd c5 13 73 c2 6d 69 a9 c2 48 62 af 7f c0 90 ....s.mi..Hb.... 0060 ad 6a 15 e1 70 2b ad 10 f5 76 e5 63 54 35 20 d4 .j..p+...v.cT5 . 0070 0a 7f a0 cc 94 28 7a f5 2c 14 98 d8 d9 30 4f 14 .....(z.,....0O. 0080 cf 39 12 c0 bb d6 e4 60 fa f4 73 73 6f 3e df d1 .9.....`..sso>.. 0090 52 b6 93 7c ef 92 88 13 9b e3 64 35 fe e4 8d 12 R..|......d5.... 00a0 cd d6 54 a6 ea af 48 92 db 69 73 e0 b9 99 23 54 ..T...H..is...#T 00b0 c4 5a 5e 34 f2 52 88 f1 27 46 4b ba 73 99 03 55 .Z^4.R..'FK.s..U 00c0 df 6e 05 6b 74 6a 60 e0 0d c8 d4 3b 1f eb c0 bc .n.ktj`....;.... 00d0 35 50 63 9e e5 11 f3 d3 30 45 7f 48 70 6b ac 24 5Pc.....0E.Hpk.$ 00e0 7e 53 97 1f 2d 33 03 8d 3a 34 f8 8b 17 2d 0b b9 ~S..-3..:4...-.. 00f0 e3 b4 f8 89 40 c4 d7 04 01 f6 86 f2 37 c1 0b 45 ....@.......7..E 0100 47 e3 3e 31 a9 5c 59 c3 ee 61 b0 19 63 f7 ef 7e G.>1.\Y..a..c..~ 0110 e0 08 29 b7 6c c2 df 40 f7 b8 22 f5 4d 58 21 c6 ..).l..@..".MX!. 0120 7a 6e aa 48 2c 02 d0 a4 46 1e 24 cb e8 f7 fd 6b zn.H,...F.$....k 0130 7c f8 2d 5d 0f 6d 71 7e fa 51 aa e2 e3 3a 9f a7 |.-].mq~.Q...:.. 0140 ea e4 69 0f d1 75 32 71 67 e0 e3 e0 a4 07 9a de ..i..u2qg....... 0150 54 93 83 ec 6b 38 bc 48 91 56 a2 cc d4 ad 6f 6f T...k8.H.V....oo 0160 bc 96 79 37 a9 e1 f8 86 d5 1a 84 91 cd 4d 45 23 ..y7.........ME# 0170 fb 1d 56 0f a7 59 81 d3 40 13 35 fd 4c bf 31 dc ..V..Y..@.5.L.1. 0180 35 dc 25 a1 93 e4 5c 5f 2b 38 d6 d2 b5 d3 36 f2 5.%...\_+8....6. 0190 b8 79 39 61 2f fc c0 6f 54 5e f0 08 1d 79 d6 c4 .y9a/..oT^...y.. 01a0 a4 a1 2b 99 4c fe 7c 5f b0 4f 9e f3 b2 54 6b 72 ..+.L.|_.O...Tkr 01b0 d0 e9 5a ff fe 65 b8 fa e7 50 00 2c 5d e0 3c 5f ..Z..e...P.,].<_ 01c0 0f 98 99 3a 8c 08 ca 76 d9 15 30 38 60 f1 e3 05 ...:...v..08`... 01d0 8f 18 e0 7b 38 cd f7 84 e7 ae 91 3b 1e 78 ed 50 ...{8......;.x.P 01e0 89 46 af 98 11 5f 63 96 ae eb 2e 61 15 e3 7c fb .F..._c....a..|. 01f0 44 c8 51 84 0f d1 bc 73 bc 2a 37 2c 59 ad bd 14 D.Q....s.*7,Y... 0200 41 8b 33 8f 8c d5 b0 63 71 c4 41 ab 8b 35 a4 15 A.3....cq.A..5.. 0210 c5 75 9d a2 60 02 97 41 c6 0a 3d 41 a5 20 61 05 .u..`..A..=A. a. 0220 8d 64 e8 3f 23 65 b4 9e 7a cc b4 0d 75 6c 2d e9 .d.?#e..z...ul-. 0230 a2 d8 44 1d 9a 3f 43 08 9b bb ca c0 b3 43 a6 60 ..D..?C......C.` 0240 0b e1 19 8e e0 0f 42 d8 30 a7 6d 0d 00 89 c8 48 ......B.0.m....H 0250 fe 6d 40 ec 6b 89 28 38 cf cb d7 3f 5c d5 32 72 .m@.k.(8...?\.2r 0260 ea a7 33 fe 37 41 39 ab 34 5b f8 47 b4 4f 8a 8f ..3.7A9.4[.G.O.. 0270 92 06 a2 27 d8 e1 ab 22 46 31 3a 0a 25 e1 b4 19 ...'..."F1:.%... 0280 d3 3c 50 88 5d 57 46 ea cc 33 4d 77 ca 58 fa 25 ... 0350 5a b6 10 36 66 ea d2 2e 41 db de 0d 14 83 dd 4f Z..6f...A......O 0360 93 e9 63 55 97 af dd e7 c7 c8 4f 71 0a 8b af 59 ..cU......Oq...Y 0370 c3 c8 d2 84 b0 ec af 17 20 71 5f bd 18 d9 cc 64 ........ q_....d 0380 9f 24 86 0d ac d9 a1 2e 7a 54 bd 8d 27 38 f6 9e .$......zT..'8.. 0390 70 97 66 42 83 58 09 92 1d f7 29 53 c3 a6 25 87 p.fB.X....)S..%. 03a0 d4 28 43 6b 9d 80 .(Ck.. Frame 16 (110 bytes on wire, 110 bytes captured) Arrival Time: Sep 30, 2003 12:39:38.975933000 Time delta from previous packet: 0.000193000 seconds Time relative to first packet: 1.173941000 seconds Frame Number: 16 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 64.94.50.108 (64.94.50.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0xa8cd (43213) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xc285 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 64.94.50.108 (64.94.50.108) Encapsulating Security Payload SPI: 0x2c28c6fe Sequence: 0x00000003 Data (68 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 a8 cd 00 00 40 32 c2 85 3f ca 5c 85 40 5e .`....@2..?.\.@^ 0020 32 6c 2c 28 c6 fe 00 00 00 03 e5 9a 3a 52 87 1d 2l,(........:R.. 0030 d3 c4 f4 23 c2 c9 f0 ef e5 25 af 3e f4 17 7e 1c ...#.....%.>..~. 0040 b0 65 86 7b a9 b6 f5 f6 2f 32 e3 84 58 1b 6f 48 .e.{..../2..X.oH 0050 45 1a 6c 10 a7 53 64 45 9a 56 ab 47 f9 8a 4e 5f E.l..SdE.V.G..N_ 0060 6c 73 cd 16 b2 91 bf 0a a2 ac 14 a4 21 58 ls..........!X Frame 17 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 30, 2003 12:39:39.138213000 Time delta from previous packet: 0.162280000 seconds Time relative to first packet: 1.336221000 seconds Frame Number: 17 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: B8505837 Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0009 (9) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 215 Protocol: ESP (0x32) Header checksum: 0x9449 (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x0af88df9 Sequence: 0x00000004 Data (68 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 00 09 40 00 d7 32 94 49 40 5e 32 6c 3f ca .`..@..2.I@^2l?. 0020 5c 85 0a f8 8d f9 00 00 00 04 f2 f3 aa 7c 1e 60 \............|.` 0030 06 ee 02 51 f9 e0 ec 0a 05 d7 68 48 26 73 8b 18 ...Q......hH&s.. 0040 94 60 b6 13 34 30 f1 5b 6b de 4c 45 19 68 33 fa .`..40.[k.LE.h3. 0050 5f 35 22 8a b4 63 c4 bd 0c f7 12 52 f9 03 6a 6a _5"..c.....R..jj 0060 44 4f 88 2d 87 38 1e 29 20 07 d6 10 56 fc b8 50 DO.-.8.) ...V..P 0070 58 37 X7 Frame 18 (110 bytes on wire, 110 bytes captured) Arrival Time: Sep 30, 2003 12:39:53.981488000 Time delta from previous packet: 14.843275000 seconds Time relative to first packet: 16.179496000 seconds Frame Number: 18 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 64.94.50.108 (64.94.50.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0xa8ce (43214) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xc284 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 64.94.50.108 (64.94.50.108) Encapsulating Security Payload SPI: 0x2c28c6fe Sequence: 0x00000004 Data (68 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 a8 ce 00 00 40 32 c2 84 3f ca 5c 85 40 5e .`....@2..?.\.@^ 0020 32 6c 2c 28 c6 fe 00 00 00 04 1f b6 6a c7 36 c8 2l,(........j.6. 0030 45 bc ce e2 fa ea 25 c6 fe db 06 5c 9c 14 c1 29 E.....%....\...) 0040 02 8c 47 b6 f2 a6 f0 1b 65 67 ef a7 d1 7b 63 17 ..G.....eg...{c. 0050 80 bf c5 d1 16 88 13 b7 2f 1a e4 cb 9b bc cf 11 ......../....... 0060 0c 57 ed 15 af ad aa 59 3e 5e 1d c5 01 62 .W.....Y>^...b Frame 19 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 30, 2003 12:39:54.089077000 Time delta from previous packet: 0.107589000 seconds Time relative to first packet: 16.287085000 seconds Frame Number: 19 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: BEB32CB0 Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x000a (10) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 215 Protocol: ESP (0x32) Header checksum: 0x9448 (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x0af88df9 Sequence: 0x00000005 Data (68 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 00 0a 40 00 d7 32 94 48 40 5e 32 6c 3f ca .`..@..2.H@^2l?. 0020 5c 85 0a f8 8d f9 00 00 00 05 d4 8b 0b 2e 33 89 \.............3. 0030 51 06 c8 c4 58 cd 10 61 85 9d 53 9e 9e f0 5d 3e Q...X..a..S...]> 0040 c7 a3 fc 90 fb 3f d1 97 90 22 28 62 6b b2 ee 72 .....?..."(bk..r 0050 d1 f1 76 ae c0 38 29 21 b1 1a cf 16 ff bf 9c b3 ..v..8)!........ 0060 24 a4 93 a7 93 6f 93 9d 99 bb 15 46 98 83 be b3 $....o.....F.... 0070 2c b0 ,. Frame 20 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 30, 2003 12:39:54.138633000 Time delta from previous packet: 0.049556000 seconds Time relative to first packet: 16.336641000 seconds Frame Number: 20 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 7FA916CE Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x000b (11) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 215 Protocol: ESP (0x32) Header checksum: 0x9447 (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x0af88df9 Sequence: 0x00000006 Data (68 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 00 0b 40 00 d7 32 94 47 40 5e 32 6c 3f ca .`..@..2.G@^2l?. 0020 5c 85 0a f8 8d f9 00 00 00 06 1b 49 df 7a d4 ad \..........I.z.. 0030 e6 f5 f5 39 36 a1 c6 33 ca b0 d8 48 28 36 d7 2d ...96..3...H(6.- 0040 e6 33 59 4d 9d 69 0a 2e 2b b6 df af ad bb df aa .3YM.i..+....... 0050 19 6d 69 c0 f9 7f c3 12 cb 60 ca 89 c1 54 86 99 .mi......`...T.. 0060 04 17 0b 57 26 cc f0 83 2f 04 09 1f 7f 07 7f a9 ...W&.../....... 0070 16 ce .. Frame 21 (114 bytes on wire, 114 bytes captured) Arrival Time: Sep 30, 2003 12:44:31.632201000 Time delta from previous packet: 277.493568000 seconds Time relative to first packet: 293.830209000 seconds Frame Number: 21 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: BB8539AA Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0xd1e5 (53733) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 39 Protocol: UDP (0x11) Header checksum: 0xb28e (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x18E051F94121F0A5 Responder cookie: 0x7AFB98EABEA359C8 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x113C4687 Length: 68 Encrypted payload (40 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 d1 e5 00 00 27 11 b2 8e 40 5e 32 6c 3f ca .`....'...@^2l?. 0020 5c 85 01 f4 01 f4 00 4c 00 00 18 e0 51 f9 41 21 \......L....Q.A! 0030 f0 a5 7a fb 98 ea be a3 59 c8 08 10 05 01 11 3c ..z.....Y......< 0040 46 87 00 00 00 44 91 a6 d9 0a 91 db 5f 2d 97 dc F....D......_-.. 0050 a6 07 52 8f a5 90 f6 7b 2c 3c 8b 5c 8e 8f 40 9e ..R....{,<.\..@. 0060 ff e3 a2 b9 62 be 3d bd b4 7a b0 a3 28 36 bb 85 ....b.=..z..(6.. 0070 39 aa 9. Frame 22 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 30, 2003 12:44:31.633239000 Time delta from previous packet: 0.001038000 seconds Time relative to first packet: 293.831247000 seconds Frame Number: 22 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 7508ACF3 Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x8508 (34056) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 39 Protocol: UDP (0x11) Header checksum: 0xff5b (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0x18E051F94121F0A5 Responder cookie: 0x7AFB98EABEA359C8 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xA469672B Length: 84 Encrypted payload (56 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 70 85 08 00 00 27 11 ff 5b 40 5e 32 6c 3f ca .p....'..[@^2l?. 0020 5c 85 01 f4 01 f4 00 5c 00 00 18 e0 51 f9 41 21 \......\....Q.A! 0030 f0 a5 7a fb 98 ea be a3 59 c8 08 10 05 01 a4 69 ..z.....Y......i 0040 67 2b 00 00 00 54 76 f8 63 fd f5 ec fd 56 dc 56 g+...Tv.c....V.V 0050 bd 49 16 c1 31 38 dc 81 fb fa f8 29 27 92 31 98 .I..18.....)'.1. 0060 a7 36 3d ef 59 ee e9 eb 24 15 2b 3c 8e ae dd fa .6=.Y...$.+<.... 0070 f5 e8 ee 00 28 fd db 6b 0b a1 d9 3a e6 e5 75 08 ....(..k...:..u. 0080 ac f3 ..