IPsec packets received: Frame 1 (262 bytes on wire, 262 bytes captured) Arrival Time: Sep 30, 2003 12:31:15.208486000 Time delta from previous packet: 0.000000000 seconds Time relative to first packet: 0.000000000 seconds Frame Number: 1 Packet Length: 262 bytes Capture Length: 262 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:d0:09:1e:ab:d6 Destination: 00:d0:09:1e:ab:d6 (00:d0:09:1e:ab:d6) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 248 Identification: 0xbc09 (48137) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 39 Protocol: UDP (0x11) Header checksum: 0xc7d1 (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.134 (63.202.92.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 228 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0xC8A50E3953E4DA6C Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 220 Security Association payload Next payload: Vendor ID (13) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (10800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x5DE9BC4C3560AA16CB2DF25E7950F160 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x27BAB5DC01EA0760EA4E3190AC27C0D0 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x6105C422E76847E43F9684801292AECD Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x4485152D18B6BBCD0BE8A8469579DDCC Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0xCD60464335DF21F87CFDB2FC68B6A448 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x90CB80913EBB696E086381B5EC427B1F Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 d0 09 1e ab d6 00 20 6f 09 60 0e 08 00 45 00 ....... o.`...E. 0010 00 f8 bc 09 00 00 27 11 c7 d1 40 5e 32 6c 3f ca ......'...@^2l?. 0020 5c 86 01 f4 01 f4 00 e4 00 00 c8 a5 0e 39 53 e4 \............9S. 0030 da 6c 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .l.............. 0040 00 00 00 00 00 dc 0d 00 00 34 00 00 00 01 00 00 .........4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 2a 30 0d 00 00 14 5d e9 ........*0....]. 0080 bc 4c 35 60 aa 16 cb 2d f2 5e 79 50 f1 60 0d 00 .L5`...-.^yP.`.. 0090 00 14 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 ..'......`.N1..' 00a0 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 47 e4 3f 96 ......a..".hG.?. 00b0 84 80 12 92 ae cd 0d 00 00 14 44 85 15 2d 18 b6 ..........D..-.. 00c0 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 00 14 cd 60 .....F.y.......` 00d0 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00 FC5.!.|...h..H.. 00e0 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 00f0 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 0100 9d 92 15 52 9d 56 ...R.V Frame 2 (122 bytes on wire, 122 bytes captured) Arrival Time: Sep 30, 2003 12:31:15.418683000 Time delta from previous packet: 0.210197000 seconds Time relative to first packet: 0.210197000 seconds Frame Number: 2 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:d0:09:1e:ab:d6, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:d0:09:1e:ab:d6 (00:d0:09:1e:ab:d6) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.134 (63.202.92.134), Dst Addr: 64.94.50.108 (64.94.50.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0xb8a1 (47265) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xb2c5 (correct) Source: 63.202.92.134 (63.202.92.134) Destination: 64.94.50.108 (64.94.50.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x3a41 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xC8A50E3953E4DA6C Responder cookie: 0x24E30352F6B55F9F Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (10800) 0000 00 20 6f 09 60 0e 00 d0 09 1e ab d6 08 00 45 00 . o.`.........E. 0010 00 6c b8 a1 00 00 40 11 b2 c5 3f ca 5c 86 40 5e .l....@...?.\.@^ 0020 32 6c 01 f4 01 f4 00 58 3a 41 c8 a5 0e 39 53 e4 2l.....X:A...9S. 0030 da 6c 24 e3 03 52 f6 b5 5f 9f 01 10 02 00 00 00 .l$..R.._....... 0040 00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00 .....P...4...... 0050 00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01 .....(....... .. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 80 0c 2a 30 ........*0 Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Sep 30, 2003 12:31:15.543572000 Time delta from previous packet: 0.124889000 seconds Time relative to first packet: 0.335086000 seconds Frame Number: 3 Packet Length: 222 bytes Capture Length: 222 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:d0:09:1e:ab:d6 Destination: 00:d0:09:1e:ab:d6 (00:d0:09:1e:ab:d6) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x9538 (38200) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 39 Protocol: UDP (0x11) Header checksum: 0xeeca (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.134 (63.202.92.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0xC8A50E3953E4DA6C Responder cookie: 0x24E30352F6B55F9F Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 d0 09 1e ab d6 00 20 6f 09 60 0e 08 00 45 00 ....... o.`...E. 0010 00 d0 95 38 00 00 27 11 ee ca 40 5e 32 6c 3f ca ...8..'...@^2l?. 0020 5c 86 01 f4 01 f4 00 bc 00 00 c8 a5 0e 39 53 e4 \............9S. 0030 da 6c 24 e3 03 52 f6 b5 5f 9f 04 10 02 00 00 00 .l$..R.._....... 0040 00 00 00 00 00 b4 0a 00 00 84 d1 2c 9c b9 f2 ac ...........,.... 0050 35 05 67 e8 6c 16 30 f3 60 bc 55 81 30 71 2d 13 5.g.l.0.`.U.0q-. 0060 2b e3 66 0b a9 26 de ad 2b 9e 7e f7 c0 32 fd 2c +.f..&..+.~..2., 0070 16 a2 e0 db b2 85 62 66 a9 b7 b4 7c ac fe fa 96 ......bf...|.... 0080 ba b7 69 ee 69 28 98 ad c4 3c 78 da 52 80 6e ac ..i.i(...w1.-yj....} 00a0 d2 d8 dd a5 e1 88 32 fa e2 c5 55 45 05 c9 39 4a ......2...UE..9J 00b0 5f e6 6b d7 bd 9e dd 16 26 a3 96 1e db 8f 7a fe _.k.....&.....z. 00c0 44 09 2b 85 18 53 08 6c 73 08 00 00 00 14 85 65 D.+..S.ls......e 00d0 a1 77 b2 a0 5a 91 ed f3 3c dd 8e af 3a de .w..Z...<...:. Frame 5 (118 bytes on wire, 118 bytes captured) Arrival Time: Sep 30, 2003 12:31:15.849826000 Time delta from previous packet: 0.130415000 seconds Time relative to first packet: 0.641340000 seconds Frame Number: 5 Packet Length: 118 bytes Capture Length: 118 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:d0:09:1e:ab:d6 Destination: 00:d0:09:1e:ab:d6 (00:d0:09:1e:ab:d6) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0xab22 (43810) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 39 Protocol: UDP (0x11) Header checksum: 0xd948 (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.134 (63.202.92.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0xC8A50E3953E4DA6C Responder cookie: 0x24E30352F6B55F9F Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 d0 09 1e ab d6 00 20 6f 09 60 0e 08 00 45 00 ....... o.`...E. 0010 00 68 ab 22 00 00 27 11 d9 48 40 5e 32 6c 3f ca .h."..'..H@^2l?. 0020 5c 86 01 f4 01 f4 00 54 00 00 c8 a5 0e 39 53 e4 \......T.....9S. 0030 da 6c 24 e3 03 52 f6 b5 5f 9f 05 10 02 01 00 00 .l$..R.._....... 0040 00 00 00 00 00 4c af be 75 b8 7e df d1 5f c0 ee .....L..u.~.._.. 0050 26 b3 0a 6f e2 60 53 c7 f7 e4 b9 a1 07 26 1c f7 &..o.`S......&.. 0060 63 40 ab 11 72 39 9e d8 7a d0 76 a4 79 61 7e 57 c@..r9..z.v.ya~W 0070 c2 82 3b 34 c0 f2 ..;4.. Frame 6 (134 bytes on wire, 134 bytes captured) Arrival Time: Sep 30, 2003 12:31:15.909178000 Time delta from previous packet: 0.059352000 seconds Time relative to first packet: 0.700692000 seconds Frame Number: 6 Packet Length: 134 bytes Capture Length: 134 bytes Ethernet II, Src: 00:d0:09:1e:ab:d6, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:d0:09:1e:ab:d6 (00:d0:09:1e:ab:d6) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.134 (63.202.92.134), Dst Addr: 64.94.50.108 (64.94.50.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0xb924 (47396) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xb236 (correct) Source: 63.202.92.134 (63.202.92.134) Destination: 64.94.50.108 (64.94.50.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x6534 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xC8A50E3953E4DA6C Responder cookie: 0x24E30352F6B55F9F Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 20 6f 09 60 0e 00 d0 09 1e ab d6 08 00 45 00 . o.`.........E. 0010 00 78 b9 24 00 00 40 11 b2 36 3f ca 5c 86 40 5e .x.$..@..6?.\.@^ 0020 32 6c 01 f4 01 f4 00 64 65 34 c8 a5 0e 39 53 e4 2l.....de4...9S. 0030 da 6c 24 e3 03 52 f6 b5 5f 9f 05 10 02 01 00 00 .l$..R.._....... 0040 00 00 00 00 00 5c 8f 83 4f 33 fc 7b b6 a3 69 40 .....\..O3.{..i@ 0050 3f 86 3f 25 e6 e8 c6 b3 b2 85 4d 3c 08 b1 eb 71 ?.?%......M<...q 0060 b0 26 0e 2e 29 ae ea 0e e8 c8 40 1b e8 c7 cd 4c .&..).....@....L 0070 f0 79 5c c0 19 f4 36 86 85 54 fc 48 e1 31 96 ec .y\...6..T.H.1.. 0080 32 b5 d4 6c 90 e6 2..l.. Frame 7 (190 bytes on wire, 190 bytes captured) Arrival Time: Sep 30, 2003 12:31:16.019347000 Time delta from previous packet: 0.110169000 seconds Time relative to first packet: 0.810861000 seconds Frame Number: 7 Packet Length: 190 bytes Capture Length: 190 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:d0:09:1e:ab:d6 Destination: 00:d0:09:1e:ab:d6 (00:d0:09:1e:ab:d6) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 176 Identification: 0x9ca4 (40100) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 39 Protocol: UDP (0x11) Header checksum: 0xe77e (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.134 (63.202.92.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 156 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0xC8A50E3953E4DA6C Responder cookie: 0x24E30352F6B55F9F Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xFB059DC4 Length: 148 Encrypted payload (120 bytes) 0000 00 d0 09 1e ab d6 00 20 6f 09 60 0e 08 00 45 00 ....... o.`...E. 0010 00 b0 9c a4 00 00 27 11 e7 7e 40 5e 32 6c 3f ca ......'..~@^2l?. 0020 5c 86 01 f4 01 f4 00 9c 00 00 c8 a5 0e 39 53 e4 \............9S. 0030 da 6c 24 e3 03 52 f6 b5 5f 9f 08 10 20 01 fb 05 .l$..R.._... ... 0040 9d c4 00 00 00 94 b2 38 41 3f be 25 18 8c c8 e6 .......8A?.%.... 0050 93 04 4b 00 13 97 cd ef c0 9d d0 9a 25 ac d6 a4 ..K.........%... 0060 3b 75 70 e4 25 9d dc 45 37 c8 8e 07 91 36 bc 72 ;up.%..E7....6.r 0070 c9 6b b0 14 96 c6 3d fb b8 fb 96 b5 8d 20 17 0d .k....=...... .. 0080 b7 27 10 66 9b 83 f4 72 55 48 03 ae 18 6b 9b 89 .'.f...rUH...k.. 0090 fc 0c ab 19 e7 34 40 0a 66 97 d3 b0 01 eb d7 0c .....4@.f....... 00a0 60 58 72 f4 8f d7 a2 90 3a 6e 3e f9 aa ec 19 5c `Xr.....:n>....\ 00b0 07 10 38 37 5b 2a 8e 1c 17 fa b7 03 a6 86 ..87[*........ Frame 8 (190 bytes on wire, 190 bytes captured) Arrival Time: Sep 30, 2003 12:31:16.230746000 Time delta from previous packet: 0.211399000 seconds Time relative to first packet: 1.022260000 seconds Frame Number: 8 Packet Length: 190 bytes Capture Length: 190 bytes Ethernet II, Src: 00:d0:09:1e:ab:d6, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:d0:09:1e:ab:d6 (00:d0:09:1e:ab:d6) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.134 (63.202.92.134), Dst Addr: 64.94.50.108 (64.94.50.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 176 Identification: 0xb434 (46132) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xb6ee (correct) Source: 63.202.92.134 (63.202.92.134) Destination: 64.94.50.108 (64.94.50.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 156 Checksum: 0x65d5 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xC8A50E3953E4DA6C Responder cookie: 0x24E30352F6B55F9F Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xFB059DC4 Length: 148 Encrypted payload (120 bytes) 0000 00 20 6f 09 60 0e 00 d0 09 1e ab d6 08 00 45 00 . o.`.........E. 0010 00 b0 b4 34 00 00 40 11 b6 ee 3f ca 5c 86 40 5e ...4..@...?.\.@^ 0020 32 6c 01 f4 01 f4 00 9c 65 d5 c8 a5 0e 39 53 e4 2l......e....9S. 0030 da 6c 24 e3 03 52 f6 b5 5f 9f 08 10 20 01 fb 05 .l$..R.._... ... 0040 9d c4 00 00 00 94 cc 22 93 4f 76 6f 55 a4 94 34 .......".OvoU..4 0050 04 c1 e4 f1 3a ce e3 9d fa 27 5c d6 ea 60 0d b9 ....:....'\..`.. 0060 1f eb 88 36 1a 1b 5a 17 f6 f1 6d bb db e8 1e da ...6..Z...m..... 0070 02 fc c8 75 67 45 f7 79 f5 3d c5 dc 91 8d 31 74 ...ugE.y.=....1t 0080 b6 79 f2 2a 70 fe 84 0d f1 18 d3 72 62 b8 39 72 .y.*p......rb.9r 0090 6c 20 b5 d8 fb 4a b3 85 c1 d3 cb e5 42 bd 4b b9 l ...J......B.K. 00a0 12 d7 76 1b 44 c5 7d 0a 1c 3f 7f d4 49 80 8e 22 ..v.D.}..?..I.." 00b0 e8 27 36 b1 22 17 09 8e da 10 ed a6 49 a0 .'6.".......I. Frame 9 (94 bytes on wire, 94 bytes captured) Arrival Time: Sep 30, 2003 12:31:16.344579000 Time delta from previous packet: 0.113833000 seconds Time relative to first packet: 1.136093000 seconds Frame Number: 9 Packet Length: 94 bytes Capture Length: 94 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:d0:09:1e:ab:d6 Destination: 00:d0:09:1e:ab:d6 (00:d0:09:1e:ab:d6) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x872d (34605) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 39 Protocol: UDP (0x11) Header checksum: 0xfd55 (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.134 (63.202.92.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0xC8A50E3953E4DA6C Responder cookie: 0x24E30352F6B55F9F Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xFB059DC4 Length: 52 Encrypted payload (24 bytes) 0000 00 d0 09 1e ab d6 00 20 6f 09 60 0e 08 00 45 00 ....... o.`...E. 0010 00 50 87 2d 00 00 27 11 fd 55 40 5e 32 6c 3f ca .P.-..'..U@^2l?. 0020 5c 86 01 f4 01 f4 00 3c 00 00 c8 a5 0e 39 53 e4 \......<.....9S. 0030 da 6c 24 e3 03 52 f6 b5 5f 9f 08 10 20 01 fb 05 .l$..R.._... ... 0040 9d c4 00 00 00 34 fd 57 78 60 00 67 54 06 74 8c .....4.Wx`.gT.t. 0050 ce ee 2f 14 34 6f d1 7b f7 38 f2 21 78 26 ../.4o.{.8.!x& Frame 10 (110 bytes on wire, 110 bytes captured) Arrival Time: Sep 30, 2003 12:38:07.463401000 Time delta from previous packet: 411.118822000 seconds Time relative to first packet: 412.254915000 seconds Frame Number: 10 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:d0:09:1e:ab:d6 Destination: 00:d0:09:1e:ab:d6 (00:d0:09:1e:ab:d6) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0xf6f8 (63224) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 39 Protocol: UDP (0x11) Header checksum: 0x8d7a (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.134 (63.202.92.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0xC8A50E3953E4DA6C Responder cookie: 0x24E30352F6B55F9F Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xA60B0B52 Length: 68 Encrypted payload (40 bytes) 0000 00 d0 09 1e ab d6 00 20 6f 09 60 0e 08 00 45 00 ....... o.`...E. 0010 00 60 f6 f8 00 00 27 11 8d 7a 40 5e 32 6c 3f ca .`....'..z@^2l?. 0020 5c 86 01 f4 01 f4 00 4c 00 00 c8 a5 0e 39 53 e4 \......L.....9S. 0030 da 6c 24 e3 03 52 f6 b5 5f 9f 08 10 05 01 a6 0b .l$..R.._....... 0040 0b 52 00 00 00 44 80 d4 39 99 dc f1 83 0a d7 0a .R...D..9....... 0050 76 25 30 aa 08 17 32 40 4f 29 04 65 0a bd 19 61 v%0...2@O).e...a 0060 57 f6 f5 79 c2 ae 80 85 c5 26 05 ca 43 65 W..y.....&..Ce Frame 11 (126 bytes on wire, 126 bytes captured) Arrival Time: Sep 30, 2003 12:38:07.464838000 Time delta from previous packet: 0.001437000 seconds Time relative to first packet: 412.256352000 seconds Frame Number: 11 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:d0:09:1e:ab:d6 Destination: 00:d0:09:1e:ab:d6 (00:d0:09:1e:ab:d6) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 64.94.50.108 (64.94.50.108), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xc019 (49177) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 39 Protocol: UDP (0x11) Header checksum: 0xc449 (correct) Source: 64.94.50.108 (64.94.50.108) Destination: 63.202.92.134 (63.202.92.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x0000 (none) Internet Security Association and Key Management Protocol Initiator cookie: 0xC8A50E3953E4DA6C Responder cookie: 0x24E30352F6B55F9F Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x52603473 Length: 84 Encrypted payload (56 bytes) 0000 00 d0 09 1e ab d6 00 20 6f 09 60 0e 08 00 45 00 ....... o.`...E. 0010 00 70 c0 19 00 00 27 11 c4 49 40 5e 32 6c 3f ca .p....'..I@^2l?. 0020 5c 86 01 f4 01 f4 00 5c 00 00 c8 a5 0e 39 53 e4 \......\.....9S. 0030 da 6c 24 e3 03 52 f6 b5 5f 9f 08 10 05 01 52 60 .l$..R.._.....R` 0040 34 73 00 00 00 54 e1 37 39 f1 b6 cf 15 57 8f 80 4s...T.79....W.. 0050 fe 4f c7 d6 c6 5b fc a1 4b 64 61 41 6b 94 67 6e .O...[..KdaAk.gn 0060 af 8a 52 0b c0 4e 6b 59 ce 66 e3 15 8e 56 dd 0c ..R..NkY.f...V.. 0070 4a 19 bc 35 41 a5 79 8a cb ad 3d 25 6b e5 J..5A.y...=%k.