IKE and IPsec packets sent/received: Frame 1 (506 bytes on wire, 128 bytes captured) Arrival Time: May 29, 2003 13:48:53.270620000 Time delta from previous packet: 0.000000000 seconds Time relative to first packet: 0.000000000 seconds Frame Number: 1 Packet Length: 506 bytes Capture Length: 128 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 68.129.221.21 (68.129.221.21), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 488 Identification: 0x045d (1117) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 116 Protocol: UDP (0x11) Header checksum: 0x82c2 (correct) Source: 68.129.221.21 (68.129.221.21) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 468 Checksum: 0xef89 Internet Security Association and Key Management Protocol Initiator cookie: 0xDF2BB3D55E9D890F Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 460 Security Association payload Next payload: Vendor ID (13) Length: 412 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 400 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 8 Number of transforms: 12 SPI: DF2BB3D55E9D890F Transform payload # 0 Next payload: Transform (3) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) [Short Frame: ISAKMP] 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 01 e8 04 5d 00 00 74 11 82 c2 44 81 dd 15 3f ca ...]..t...D...?. 0020 5c 85 01 f4 01 f4 01 d4 ef 89 df 2b b3 d5 5e 9d \..........+..^. 0030 89 0f 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 01 cc 0d 00 01 9c 00 00 00 01 00 00 ................ 0050 00 01 00 00 01 90 00 01 08 0c df 2b b3 d5 5e 9d ...........+..^. 0060 89 0f 03 00 00 20 00 01 00 00 80 01 00 05 80 02 ..... .......... 0070 00 02 80 03 00 01 80 04 00 02 80 0b 00 01 80 0c ................ Frame 2 (150 bytes on wire, 128 bytes captured) Arrival Time: May 29, 2003 13:48:53.299868000 Time delta from previous packet: 0.029248000 seconds Time relative to first packet: 0.029248000 seconds Frame Number: 2 Packet Length: 150 bytes Capture Length: 128 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 68.129.221.21 (68.129.221.21) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0xb81a (47130) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x0465 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 68.129.221.21 (68.129.221.21) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 116 Checksum: 0x3bfe Internet Security Association and Key Management Protocol Initiator cookie: 0xDF2BB3D55E9D890F Responder cookie: 0x794F8713901BDB71 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 108 Security Association payload Next payload: Vendor ID (13) Length: 60 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 48 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 8 Number of transforms: 1 SPI: 0000000000000000 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) [Short Frame: ISAKMP] 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 88 b8 1a 00 00 40 11 04 65 3f ca 5c 85 44 81 ......@..e?.\.D. 0020 dd 15 01 f4 01 f4 00 74 3b fe df 2b b3 d5 5e 9d .......t;..+..^. 0030 89 0f 79 4f 87 13 90 1b db 71 01 10 02 00 00 00 ..yO.....q...... 0040 00 00 00 00 00 6c 0d 00 00 3c 00 00 00 01 00 00 .....l...<...... 0050 00 01 00 00 00 30 00 01 08 01 00 00 00 00 00 00 .....0.......... 0060 00 00 00 00 00 20 00 01 00 00 80 01 00 05 80 02 ..... .......... 0070 00 02 80 03 00 01 80 04 00 02 80 0b 00 01 80 0c ................ Frame 3 (226 bytes on wire, 128 bytes captured) Arrival Time: May 29, 2003 13:48:53.611770000 Time delta from previous packet: 0.311902000 seconds Time relative to first packet: 0.341150000 seconds Frame Number: 3 Packet Length: 226 bytes Capture Length: 128 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 68.129.221.21 (68.129.221.21), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x045e (1118) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 116 Protocol: UDP (0x11) Header checksum: 0x83d9 (correct) Source: 68.129.221.21 (68.129.221.21) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xd5e4 Internet Security Association and Key Management Protocol Initiator cookie: 0xDF2BB3D55E9D890F Responder cookie: 0x794F8713901BDB71 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data [Short Frame: ISAKMP] 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 d0 04 5e 00 00 74 11 83 d9 44 81 dd 15 3f ca ...^..t...D...?. 0020 5c 85 01 f4 01 f4 00 bc d5 e4 df 2b b3 d5 5e 9d \..........+..^. 0030 89 0f 79 4f 87 13 90 1b db 71 04 10 02 00 00 00 ..yO.....q...... 0040 00 00 00 00 00 b4 0a 00 00 84 23 c4 a2 f4 f0 f3 ..........#..... 0050 8e b7 e4 fc 89 7a ea 90 b9 91 03 9d 74 f7 88 64 .....z......t..d 0060 5d 0a eb 50 a2 5a cd 2d cd f0 3c d6 c3 9c a3 2d ]..P.Z.-..<....- 0070 ae fa dd 8c 39 8b e0 90 2a 10 84 84 b1 0f 86 bc ....9...*....... Frame 4 (242 bytes on wire, 128 bytes captured) Arrival Time: May 29, 2003 13:48:53.664243000 Time delta from previous packet: 0.052473000 seconds Time relative to first packet: 0.393623000 seconds Frame Number: 4 Packet Length: 242 bytes Capture Length: 128 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 68.129.221.21 (68.129.221.21) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 228 Identification: 0xb81b (47131) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x0408 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 68.129.221.21 (68.129.221.21) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 208 Checksum: 0xfa66 Internet Security Association and Key Management Protocol Initiator cookie: 0xDF2BB3D55E9D890F Responder cookie: 0x794F8713901BDB71 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 200 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data [Short Frame: ISAKMP] 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 e4 b8 1b 00 00 40 11 04 08 3f ca 5c 85 44 81 ......@...?.\.D. 0020 dd 15 01 f4 01 f4 00 d0 fa 66 df 2b b3 d5 5e 9d .........f.+..^. 0030 89 0f 79 4f 87 13 90 1b db 71 04 10 02 00 00 00 ..yO.....q...... 0040 00 00 00 00 00 c8 0a 00 00 84 3a 19 b4 9d 06 fe ..........:..... 0050 94 35 49 68 84 dc ae 01 43 e3 77 b6 ca 96 42 2e .5Ih....C.w...B. 0060 11 56 fd 71 c5 e9 aa d9 6f 34 4c ad f3 98 f4 44 .V.q....o4L....D 0070 e4 04 2e a6 59 f3 40 69 28 a9 8d dd d3 00 47 42 ....Y.@i(.....GB Frame 5 (138 bytes on wire, 128 bytes captured) Arrival Time: May 29, 2003 13:48:54.016988000 Time delta from previous packet: 0.352745000 seconds Time relative to first packet: 0.746368000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 128 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 68.129.221.21 (68.129.221.21), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x045f (1119) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 116 Protocol: UDP (0x11) Header checksum: 0x8430 (correct) Source: 68.129.221.21 (68.129.221.21) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x03a0 Internet Security Association and Key Management Protocol Initiator cookie: 0xDF2BB3D55E9D890F Responder cookie: 0x794F8713901BDB71 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 78 04 5f 00 00 74 11 84 30 44 81 dd 15 3f ca .x._..t..0D...?. 0020 5c 85 01 f4 01 f4 00 64 03 a0 df 2b b3 d5 5e 9d \......d...+..^. 0030 89 0f 79 4f 87 13 90 1b db 71 05 10 02 01 00 00 ..yO.....q...... 0040 00 00 00 00 00 5c 11 c1 06 12 17 86 62 02 24 40 .....\......b.$@ 0050 c8 95 d6 cd ce 84 5a d1 8f b7 57 bc cd b8 fc 3b ......Z...W....; 0060 99 b2 ad 9e a6 62 89 79 d7 7c 71 e4 5e 40 bb 6c .....b.y.|q.^@.l 0070 fa 83 c1 97 a5 4f b7 41 98 5d 06 df c1 9b fa ef .....O.A.]...... Frame 6 (110 bytes on wire, 110 bytes captured) Arrival Time: May 29, 2003 13:48:54.030405000 Time delta from previous packet: 0.013417000 seconds Time relative to first packet: 0.759785000 seconds Frame Number: 6 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 68.129.221.21 (68.129.221.21) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0xb81c (47132) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x048b (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 68.129.221.21 (68.129.221.21) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xf404 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xDF2BB3D55E9D890F Responder cookie: 0x794F8713901BDB71 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 b8 1c 00 00 40 11 04 8b 3f ca 5c 85 44 81 .`....@...?.\.D. 0020 dd 15 01 f4 01 f4 00 4c f4 04 df 2b b3 d5 5e 9d .......L...+..^. 0030 89 0f 79 4f 87 13 90 1b db 71 05 10 02 01 00 00 ..yO.....q...... 0040 00 00 00 00 00 44 91 b6 a6 b2 04 8e 7d c8 5d 2b .....D......}.]+ 0050 3d e8 a0 38 37 65 65 9f 43 f3 c4 e7 45 b1 ec 81 =..87ee.C...E... 0060 b9 95 d7 4c 8f 65 16 40 36 44 d8 0c 48 97 ...L.e.@6D..H. Frame 7 (126 bytes on wire, 126 bytes captured) Arrival Time: May 29, 2003 13:48:54.035136000 Time delta from previous packet: 0.004731000 seconds Time relative to first packet: 0.764516000 seconds Frame Number: 7 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 68.129.221.21 (68.129.221.21) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xb81d (47133) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x047a (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 68.129.221.21 (68.129.221.21) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x59f3 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xDF2BB3D55E9D890F Responder cookie: 0x794F8713901BDB71 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDEEC3AE5 Length: 84 Encrypted payload (56 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 70 b8 1d 00 00 40 11 04 7a 3f ca 5c 85 44 81 .p....@..z?.\.D. 0020 dd 15 01 f4 01 f4 00 5c 59 f3 df 2b b3 d5 5e 9d .......\Y..+..^. 0030 89 0f 79 4f 87 13 90 1b db 71 08 10 05 01 de ec ..yO.....q...... 0040 3a e5 00 00 00 54 26 74 c1 ae 97 bf 3c a8 42 a3 :....T&t....<.B. 0050 ac 4d 01 fb b7 8f 07 92 64 46 74 85 e5 2e 38 5c .M......dFt...8\ 0060 30 2f a5 b5 ed 41 a2 f8 f7 a0 62 ff 0c b3 e4 f5 0/...A....b..... 0070 77 b7 a5 0d 18 67 17 1e d4 aa c3 c2 db 8e w....g........ Frame 8 (298 bytes on wire, 128 bytes captured) Arrival Time: May 29, 2003 13:48:54.389429000 Time delta from previous packet: 0.354293000 seconds Time relative to first packet: 1.118809000 seconds Frame Number: 8 Packet Length: 298 bytes Capture Length: 128 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 68.129.221.21 (68.129.221.21), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 280 Identification: 0x0461 (1121) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 116 Protocol: UDP (0x11) Header checksum: 0x838e (correct) Source: 68.129.221.21 (68.129.221.21) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 260 Checksum: 0xbe8c Internet Security Association and Key Management Protocol Initiator cookie: 0xDF2BB3D55E9D890F Responder cookie: 0x794F8713901BDB71 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xFCDD8248 Length: 252 Encrypted payload (224 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 01 18 04 61 00 00 74 11 83 8e 44 81 dd 15 3f ca ...a..t...D...?. 0020 5c 85 01 f4 01 f4 01 04 be 8c df 2b b3 d5 5e 9d \..........+..^. 0030 89 0f 79 4f 87 13 90 1b db 71 08 10 20 01 fc dd ..yO.....q.. ... 0040 82 48 00 00 00 fc f9 07 47 26 77 bb b7 2f 51 1c .H......G&w../Q. 0050 26 16 cd eb b4 96 4d 5b 5c 1f 6c 82 94 81 68 bf &.....M[\.l...h. 0060 e0 ba 48 2b 28 b9 90 98 db ad 63 9e 7e d9 ca ff ..H+(.....c.~... 0070 8d 21 96 e5 0b 68 f6 ac ac 2e 8a 1c 02 4e 83 59 .!...h.......N.Y Frame 9 (190 bytes on wire, 128 bytes captured) Arrival Time: May 29, 2003 13:48:54.419647000 Time delta from previous packet: 0.030218000 seconds Time relative to first packet: 1.149027000 seconds Frame Number: 9 Packet Length: 190 bytes Capture Length: 128 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 68.129.221.21 (68.129.221.21) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 176 Identification: 0xb81f (47135) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x0438 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 68.129.221.21 (68.129.221.21) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 156 Checksum: 0x14b5 Internet Security Association and Key Management Protocol Initiator cookie: 0xDF2BB3D55E9D890F Responder cookie: 0x794F8713901BDB71 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xFCDD8248 Length: 148 Encrypted payload (120 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 b0 b8 1f 00 00 40 11 04 38 3f ca 5c 85 44 81 ......@..8?.\.D. 0020 dd 15 01 f4 01 f4 00 9c 14 b5 df 2b b3 d5 5e 9d ...........+..^. 0030 89 0f 79 4f 87 13 90 1b db 71 08 10 20 01 fc dd ..yO.....q.. ... 0040 82 48 00 00 00 94 24 63 81 d6 e4 8c b8 ca 54 b8 .H....$c......T. 0050 6c 8b 0d d7 d6 41 cd c4 e2 1a d6 4d c5 b3 ae a5 l....A.....M.... 0060 63 cb 70 f2 b9 d7 19 b6 aa 61 68 71 c2 d7 33 0e c.p......ahq..3. 0070 1f b0 be 59 08 6d bd 51 bf b5 c7 47 a9 c0 c7 71 ...Y.m.Q...G...q Frame 10 (98 bytes on wire, 98 bytes captured) Arrival Time: May 29, 2003 13:48:54.828474000 Time delta from previous packet: 0.408827000 seconds Time relative to first packet: 1.557854000 seconds Frame Number: 10 Packet Length: 98 bytes Capture Length: 98 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 98D56463 Internet Protocol, Src Addr: 68.129.221.21 (68.129.221.21), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 80 Identification: 0x0462 (1122) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 116 Protocol: UDP (0x11) Header checksum: 0x8455 (correct) Source: 68.129.221.21 (68.129.221.21) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 60 Checksum: 0x09b0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xDF2BB3D55E9D890F Responder cookie: 0x794F8713901BDB71 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xFCDD8248 Length: 52 Encrypted payload (24 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 50 04 62 00 00 74 11 84 55 44 81 dd 15 3f ca .P.b..t..UD...?. 0020 5c 85 01 f4 01 f4 00 3c 09 b0 df 2b b3 d5 5e 9d \......<...+..^. 0030 89 0f 79 4f 87 13 90 1b db 71 08 10 20 01 fc dd ..yO.....q.. ... 0040 82 48 00 00 00 34 0e 0e 51 27 1d b9 a1 a0 35 08 .H...4..Q'....5. 0050 24 56 74 44 d5 f3 4d ea ad ff dd f0 09 ed 98 d5 $VtD..M......... 0060 64 63 dc Frame 11 (122 bytes on wire, 122 bytes captured) Arrival Time: May 29, 2003 13:49:03.466794000 Time delta from previous packet: 8.638320000 seconds Time relative to first packet: 10.196174000 seconds Frame Number: 11 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: CFFEE9BF Internet Protocol, Src Addr: 68.129.221.21 (68.129.221.21), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0006 (6) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 228 Protocol: ESP (0x32) Header checksum: 0xd877 (correct) Source: 68.129.221.21 (68.129.221.21) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x04e905bb Sequence: 0x00000001 Data (76 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 68 00 06 40 00 e4 32 d8 77 44 81 dd 15 3f ca .h..@..2.wD...?. 0020 5c 85 04 e9 05 bb 00 00 00 01 4c 94 df fc ab 7b \.........L....{ 0030 26 cb e9 ee 20 6a 4f e7 68 3d 34 34 f6 d6 72 c0 &... jO.h=44..r. 0040 f2 c6 70 71 8d 5b 98 48 ec 38 b5 5e 1e c5 59 08 ..pq.[.H.8.^..Y. 0050 5f bd 00 5a 4f 30 75 ec dd a2 e6 6e 3f 2f 19 5b _..ZO0u....n?/.[ 0060 b6 2c a6 99 76 1e c3 47 6c c8 6e 55 06 28 b4 59 .,..v..Gl.nU.(.Y 0070 4d b5 7a 7c e4 2c cf fe e9 bf M.z|.,.... Frame 12 (110 bytes on wire, 110 bytes captured) Arrival Time: May 29, 2003 13:49:03.467884000 Time delta from previous packet: 0.001090000 seconds Time relative to first packet: 10.197264000 seconds Frame Number: 12 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 68.129.221.21 (68.129.221.21) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0xb822 (47138) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x0464 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 68.129.221.21 (68.129.221.21) Encapsulating Security Payload SPI: 0xf37574f7 Sequence: 0x00000001 Data (68 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 b8 22 00 00 40 32 04 64 3f ca 5c 85 44 81 .`."..@2.d?.\.D. 0020 dd 15 f3 75 74 f7 00 00 00 01 87 15 2b 5d 3e d0 ...ut.......+]>. 0030 04 ba 84 42 13 57 c7 bc cc df 74 e0 60 45 aa ca ...B.W....t.`E.. 0040 6c de c0 0d 4f 81 2c 6c e5 d2 c3 e8 ff 6f 85 de l...O.,l.....o.. 0050 9e 04 e7 e6 d1 8a f6 62 fa ea bf 03 27 64 3b e3 .......b....'d;. 0060 cd c6 d0 c4 56 a3 ea 49 ab cf 0b 5e a7 ef ....V..I...^.. Frame 13 (114 bytes on wire, 114 bytes captured) Arrival Time: May 29, 2003 13:49:03.698019000 Time delta from previous packet: 0.230135000 seconds Time relative to first packet: 10.427399000 seconds Frame Number: 13 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 15233013 Internet Protocol, Src Addr: 68.129.221.21 (68.129.221.21), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0007 (7) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 228 Protocol: ESP (0x32) Header checksum: 0xd87e (correct) Source: 68.129.221.21 (68.129.221.21) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x04e905bb Sequence: 0x00000002 Data (68 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 00 07 40 00 e4 32 d8 7e 44 81 dd 15 3f ca .`..@..2.~D...?. 0020 5c 85 04 e9 05 bb 00 00 00 02 24 6e d1 07 d2 62 \.........$n...b 0030 63 f3 b3 12 f6 9d e6 b0 a3 51 7a ad b0 b5 18 15 c........Qz..... 0040 4e 4c e3 7e 14 a7 7c a1 3f 54 ae 72 91 8c 34 9b NL.~..|.?T.r..4. 0050 8f c5 71 76 f8 3e 55 33 65 41 ed 25 bc 0a 39 e2 ..qv.>U3eA.%..9. 0060 37 cc e5 a4 63 90 7b e7 68 de 13 6c e6 95 15 23 7...c.{.h..l...# 0070 30 13 0. Frame 14 (370 bytes on wire, 128 bytes captured) Arrival Time: May 29, 2003 13:49:03.812163000 Time delta from previous packet: 0.114144000 seconds Time relative to first packet: 10.541543000 seconds Frame Number: 14 Packet Length: 370 bytes Capture Length: 128 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 68.129.221.21 (68.129.221.21), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 352 Identification: 0x0008 (8) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 228 Protocol: ESP (0x32) Header checksum: 0xd77d (correct) Source: 68.129.221.21 (68.129.221.21) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x04e905bb Sequence: 0x00000003 Data (86 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 01 60 00 08 40 00 e4 32 d7 7d 44 81 dd 15 3f ca .`..@..2.}D...?. 0020 5c 85 04 e9 05 bb 00 00 00 03 5b f2 56 fe b5 59 \.........[.V..Y 0030 b3 13 f1 4c f7 5a e0 dc 49 1d 0a a1 1f ee 18 3b ...L.Z..I......; 0040 fd ef 6b 7c 03 c1 06 90 be 77 bc e4 d1 69 ab 0f ..k|.....w...i.. 0050 97 94 d7 f1 f5 50 60 95 71 2f eb fe 2c 83 f7 37 .....P`.q/..,..7 0060 03 49 7c 6f 06 09 53 81 89 f6 db db ab 7b 00 6d .I|o..S......{.m 0070 ae a9 c6 0a 71 22 20 49 00 d9 29 fd 82 ef c4 0f ....q" I..)..... Frame 15 (110 bytes on wire, 110 bytes captured) Arrival Time: May 29, 2003 13:49:03.818163000 Time delta from previous packet: 0.006000000 seconds Time relative to first packet: 10.547543000 seconds Frame Number: 15 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 68.129.221.21 (68.129.221.21) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0xb823 (47139) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x0463 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 68.129.221.21 (68.129.221.21) Encapsulating Security Payload SPI: 0xf37574f7 Sequence: 0x00000002 Data (68 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 b8 23 00 00 40 32 04 63 3f ca 5c 85 44 81 .`.#..@2.c?.\.D. 0020 dd 15 f3 75 74 f7 00 00 00 02 a7 5f 51 d8 05 95 ...ut......_Q... 0030 20 81 65 05 ad aa 57 68 62 c7 40 d9 7b 6a 74 b7 .e...Whb.@.{jt. 0040 1f 47 aa c4 24 c4 c8 4e 9f 09 4b 14 cf 4b 98 ed .G..$..N..K..K.. 0050 af db 4b 7d 27 0d 61 ac 79 79 22 46 43 b1 d1 55 ..K}'.a.yy"FC..U 0060 68 d1 d7 53 46 a8 06 a9 12 43 2c 9c 51 66 h..SF....C,.Qf Frame 16 (982 bytes on wire, 128 bytes captured) Arrival Time: May 29, 2003 13:49:04.209758000 Time delta from previous packet: 0.391595000 seconds Time relative to first packet: 10.939138000 seconds Frame Number: 16 Packet Length: 982 bytes Capture Length: 128 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 68.129.221.21 (68.129.221.21) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 968 Identification: 0xb824 (47140) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x00fa (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 68.129.221.21 (68.129.221.21) Encapsulating Security Payload SPI: 0xf37574f7 Sequence: 0x00000003 Data (86 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 03 c8 b8 24 00 00 40 32 00 fa 3f ca 5c 85 44 81 ...$..@2..?.\.D. 0020 dd 15 f3 75 74 f7 00 00 00 03 ad 06 02 02 28 29 ...ut.........() 0030 94 05 ac 1a f8 1c 91 9b f3 b4 ff 36 28 25 49 0d ...........6(%I. 0040 3c dd 13 80 eb 0e 6e df 9b 6d 20 bb 1a 15 2e fb <.....n..m ..... 0050 19 83 82 9e f1 ba e5 2c 18 9a b9 6e 29 76 d3 cc .......,...n)v.. 0060 06 77 b1 8b 77 31 f5 c4 81 45 6b 04 8b d1 53 5e .w..w1...Ek...S^ 0070 be 73 7d 11 60 e1 78 01 fd b9 0e 78 f1 c6 fd 28 .s}.`.x....x...( Frame 17 (110 bytes on wire, 110 bytes captured) Arrival Time: May 29, 2003 13:49:04.209896000 Time delta from previous packet: 0.000138000 seconds Time relative to first packet: 10.939276000 seconds Frame Number: 17 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 68.129.221.21 (68.129.221.21) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0xb825 (47141) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x0461 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 68.129.221.21 (68.129.221.21) Encapsulating Security Payload SPI: 0xf37574f7 Sequence: 0x00000004 Data (68 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 b8 25 00 00 40 32 04 61 3f ca 5c 85 44 81 .`.%..@2.a?.\.D. 0020 dd 15 f3 75 74 f7 00 00 00 04 e9 10 25 98 7c 3f ...ut.......%.|? 0030 42 9b 64 d8 99 69 94 ef da 55 58 a4 41 87 6c 47 B.d..i...UX.A.lG 0040 bb 04 c9 59 4e 76 77 2e 19 70 57 71 ef 6e 5a b4 ...YNvw..pWq.nZ. 0050 db 6f 1a 19 3d 8f df d4 98 52 5b a4 08 f5 07 e7 .o..=....R[..... 0060 4d 40 ee 1c 2d a8 97 10 36 da e5 53 9a 9f M@..-...6..S.. Frame 18 (114 bytes on wire, 114 bytes captured) Arrival Time: May 29, 2003 13:49:04.656750000 Time delta from previous packet: 0.446854000 seconds Time relative to first packet: 11.386130000 seconds Frame Number: 18 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 29CF1982 Internet Protocol, Src Addr: 68.129.221.21 (68.129.221.21), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0009 (9) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 228 Protocol: ESP (0x32) Header checksum: 0xd87c (correct) Source: 68.129.221.21 (68.129.221.21) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x04e905bb Sequence: 0x00000004 Data (68 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 00 09 40 00 e4 32 d8 7c 44 81 dd 15 3f ca .`..@..2.|D...?. 0020 5c 85 04 e9 05 bb 00 00 00 04 b2 bf 94 23 45 00 \............#E. 0030 25 70 3d f1 40 ad cf ea b3 8e 0c 60 41 c9 a6 96 %p=.@......`A... 0040 f6 00 67 61 36 64 76 b5 61 70 53 99 54 fd 2b 18 ..ga6dv.apS.T.+. 0050 9e 1d 22 9a b0 b1 30 b2 5b bb cb 63 8a cd 6f bb .."...0.[..c..o. 0060 01 53 d6 c1 11 75 48 b4 47 14 9e fb 1e d6 29 cf .S...uH.G.....). 0070 19 82 .. Frame 19 (114 bytes on wire, 114 bytes captured) Arrival Time: May 29, 2003 13:49:04.684263000 Time delta from previous packet: 0.027513000 seconds Time relative to first packet: 11.413643000 seconds Frame Number: 19 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 842BFDBA Internet Protocol, Src Addr: 68.129.221.21 (68.129.221.21), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x000a (10) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 228 Protocol: ESP (0x32) Header checksum: 0xd87b (correct) Source: 68.129.221.21 (68.129.221.21) Destination: 63.202.92.133 (63.202.92.133) Encapsulating Security Payload SPI: 0x04e905bb Sequence: 0x00000005 Data (68 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 00 0a 40 00 e4 32 d8 7b 44 81 dd 15 3f ca .`..@..2.{D...?. 0020 5c 85 04 e9 05 bb 00 00 00 05 f8 72 af 2a d3 f5 \..........r.*.. 0030 01 29 5a d0 51 2e 2c 67 d4 8e 18 2d 9b 4c 7b 0c .)Z.Q.,g...-.L{. 0040 b0 d9 7a 64 d0 84 15 52 4c 90 6f 2c 5e b3 67 32 ..zd...RL.o,^.g2 0050 0b e3 83 8c 63 ad d3 20 94 15 1c a0 5f 95 79 f3 ....c.. ...._.y. 0060 d7 4b fb 10 cd 0d c0 6c 37 09 d9 62 16 0b 84 2b .K.....l7..b...+ 0070 fd ba .. Frame 20 (110 bytes on wire, 110 bytes captured) Arrival Time: May 29, 2003 13:49:04.684781000 Time delta from previous packet: 0.000518000 seconds Time relative to first packet: 11.414161000 seconds Frame Number: 20 Packet Length: 110 bytes Capture Length: 110 bytes Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 68.129.221.21 (68.129.221.21) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0xb826 (47142) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x0460 (correct) Source: 63.202.92.133 (63.202.92.133) Destination: 68.129.221.21 (68.129.221.21) Encapsulating Security Payload SPI: 0xf37574f7 Sequence: 0x00000005 Data (68 bytes) 0000 00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00 . o.`..@c.....E. 0010 00 60 b8 26 00 00 40 32 04 60 3f ca 5c 85 44 81 .`.&..@2.`?.\.D. 0020 dd 15 f3 75 74 f7 00 00 00 05 32 4d 6c 81 e7 b7 ...ut.....2Ml... 0030 59 dd 8e 8e 1f 94 9f 6f bb ec 85 e4 82 2a 73 23 Y......o.....*s# 0040 28 45 bb 2d d0 3a a0 91 89 19 cd 1b ab e2 71 21 (E.-.:........q! 0050 68 93 5c 5f cd 7a 9c 13 a9 33 a3 ca 41 e2 f8 12 h.\_.z...3..A... 0060 9c c5 e4 3d 90 3f c1 fc 0e 88 0d 3d 84 e5 ...=.?.....=.. Frame 21 (114 bytes on wire, 114 bytes captured) Arrival Time: May 29, 2003 13:52:07.159256000 Time delta from previous packet: 182.474475000 seconds Time relative to first packet: 193.888636000 seconds Frame Number: 21 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: 74C3949E Internet Protocol, Src Addr: 68.129.221.21 (68.129.221.21), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0482 (1154) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 116 Protocol: UDP (0x11) Header checksum: 0x8425 (correct) Source: 68.129.221.21 (68.129.221.21) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0xee84 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xDF2BB3D55E9D890F Responder cookie: 0x794F8713901BDB71 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x4C57B6CE Length: 68 Encrypted payload (40 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 60 04 82 00 00 74 11 84 25 44 81 dd 15 3f ca .`....t..%D...?. 0020 5c 85 01 f4 01 f4 00 4c ee 84 df 2b b3 d5 5e 9d \......L...+..^. 0030 89 0f 79 4f 87 13 90 1b db 71 08 10 05 01 4c 57 ..yO.....q....LW 0040 b6 ce 00 00 00 44 e4 6f c2 69 4e a7 91 31 53 61 .....D.o.iN..1Sa 0050 be 14 15 12 4a 08 a4 91 4d f8 21 7d 6c 62 23 6d ....J...M.!}lb#m 0060 fc f3 9b 8e c4 76 73 d2 72 9c 86 3b f3 2b 74 c3 .....vs.r..;.+t. 0070 94 9e .. Frame 22 (130 bytes on wire, 128 bytes captured) Arrival Time: May 29, 2003 13:52:07.229580000 Time delta from previous packet: 0.070324000 seconds Time relative to first packet: 193.958960000 seconds Frame Number: 22 Packet Length: 130 bytes Capture Length: 128 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Trailer: E567 Internet Protocol, Src Addr: 68.129.221.21 (68.129.221.21), Dst Addr: 63.202.92.133 (63.202.92.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0483 (1155) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 116 Protocol: UDP (0x11) Header checksum: 0x8414 (correct) Source: 68.129.221.21 (68.129.221.21) Destination: 63.202.92.133 (63.202.92.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x3cbe (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xDF2BB3D55E9D890F Responder cookie: 0x794F8713901BDB71 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xD74DBB3D Length: 84 Encrypted payload (56 bytes) 0000 00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00 .@c.... o.`...E. 0010 00 70 04 83 00 00 74 11 84 14 44 81 dd 15 3f ca .p....t...D...?. 0020 5c 85 01 f4 01 f4 00 5c 3c be df 2b b3 d5 5e 9d \......\<..+..^. 0030 89 0f 79 4f 87 13 90 1b db 71 08 10 05 01 d7 4d ..yO.....q.....M 0040 bb 3d 00 00 00 54 0a 6f c5 36 7e 0e 2e 33 aa a2 .=...T.o.6~..3.. 0050 ae 01 6a e0 90 e6 9a 38 77 15 e8 1b bd b0 ea c9 ..j....8w....... 0060 5c 98 63 a3 7a ec c4 3b 3c dc cf 3a 1b 9a a5 6b \.c.z..;<..:...k 0070 fe 0e 53 3e 20 02 41 89 dd 5e 6c 5b 3e cf e5 67 ..S> .A..^l[>..g