IKE and IPsec packets sent/received:
Frame 1 (126 bytes on wire, 126 bytes captured)
    Arrival Time: Aug 25, 2003 21:38:17.674379000
    Time delta from previous packet: 0.000000000 seconds
    Time relative to first packet: 0.000000000 seconds
    Frame Number: 1
    Packet Length: 126 bytes
    Capture Length: 126 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 5E4AAEE0
Internet Protocol, Src Addr: 61.11.60.71 (61.11.60.71), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 108
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x37e0 (correct)
    Source: 61.11.60.71 (61.11.60.71)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 88
    Checksum: 0x23b3 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x5D7F70C82FE8877F
    Responder cookie: 0x0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 80
    Security Association payload
        Next payload: NONE (0)
        Length: 52
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 0
            Next payload: NONE (0)
            Length: 40
            Proposal number: 0
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 0
                Next payload: NONE (0)
                Length: 32
                Transform number: 0
                Transform ID: KEY_IKE (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (14400)
                Encryption-Algorithm (1): 3DES-CBC (5)
                Authentication-Method (3): RSA-SIG (3)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 6c 00 00 40 00 2d 11 37 e0 3d 0b 3c 47 3f ca   .l..@.-.7.=.<G?.
0020  5c 85 01 f4 01 f4 00 58 23 b3 5d 7f 70 c8 2f e8   \......X#.].p./.
0030  87 7f 00 00 00 00 00 00 00 00 01 10 02 00 00 00   ................
0040  00 00 00 00 00 50 00 00 00 34 00 00 00 01 00 00   .....P...4......
0050  00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01   .....(....... ..
0060  00 00 80 0b 00 01 80 0c 38 40 80 01 00 05 80 03   ........8@......
0070  00 03 80 02 00 02 80 04 00 02 5e 4a ae e0         ..........^J..

Frame 2 (142 bytes on wire, 142 bytes captured)
    Arrival Time: Aug 25, 2003 21:38:17.686111000
    Time delta from previous packet: 0.011732000 seconds
    Time relative to first packet: 0.011732000 seconds
    Frame Number: 2
    Packet Length: 142 bytes
    Capture Length: 142 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 61.11.60.71 (61.11.60.71)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 128
    Identification: 0xac36 (44086)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xb895 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 61.11.60.71 (61.11.60.71)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 108
    Checksum: 0xd383 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x5D7F70C82FE8877F
    Responder cookie: 0x15D1C644727C0112
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 100
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 52
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 0
            Next payload: NONE (0)
            Length: 40
            Proposal number: 0
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 0
                Next payload: NONE (0)
                Length: 32
                Transform number: 0
                Transform ID: KEY_IKE (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (14400)
                Encryption-Algorithm (1): 3DES-CBC (5)
                Authentication-Method (3): RSA-SIG (3)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 80 ac 36 00 00 40 11 b8 95 3f ca 5c 85 3d 0b   ...6..@...?.\.=.
0020  3c 47 01 f4 01 f4 00 6c d3 83 5d 7f 70 c8 2f e8   <G.....l..].p./.
0030  87 7f 15 d1 c6 44 72 7c 01 12 01 10 02 00 00 00   .....Dr|........
0040  00 00 00 00 00 64 0d 00 00 34 00 00 00 01 00 00   .....d...4......
0050  00 01 00 00 00 28 00 01 00 01 00 00 00 20 00 01   .....(....... ..
0060  00 00 80 0b 00 01 80 0c 38 40 80 01 00 05 80 03   ........8@......
0070  00 03 80 02 00 02 80 04 00 02 00 00 00 14 70 03   ..............p.
0080  cb c1 09 7d be 9c 26 00 ba 69 83 bc 8b 35         ...}..&..i...5

Frame 3 (246 bytes on wire, 246 bytes captured)
    Arrival Time: Aug 25, 2003 21:38:18.413038000
    Time delta from previous packet: 0.726927000 seconds
    Time relative to first packet: 0.738659000 seconds
    Frame Number: 3
    Packet Length: 246 bytes
    Capture Length: 246 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 47608039
Internet Protocol, Src Addr: 61.11.60.71 (61.11.60.71), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 228
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x3768 (correct)
    Source: 61.11.60.71 (61.11.60.71)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 208
    Checksum: 0x7126 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x5D7F70C82FE8877F
    Responder cookie: 0x15D1C644727C0112
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 200
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: Vendor ID (13)
        Length: 20
        Nonce Data
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 e4 00 00 40 00 2d 11 37 68 3d 0b 3c 47 3f ca   ....@.-.7h=.<G?.
0020  5c 85 01 f4 01 f4 00 d0 71 26 5d 7f 70 c8 2f e8   \.......q&].p./.
0030  87 7f 15 d1 c6 44 72 7c 01 12 04 10 02 00 00 00   .....Dr|........
0040  00 00 00 00 00 c8 0a 00 00 84 bb cc 08 1a 5a 76   ..............Zv
0050  17 0c 50 36 e9 21 f1 5e 77 e7 b2 72 e9 56 be 69   ..P6.!.^w..r.V.i
0060  62 3c 72 14 f6 ae 36 5e 61 c7 f5 28 4c 71 97 29   b<r...6^a..(Lq.)
0070  6d 60 03 32 ea 8a db af c6 90 33 63 6a e3 3a 54   m`.2......3cj.:T
0080  e1 b0 15 d2 5d ac 23 52 37 2c bb 72 b6 a0 6f e9   ....].#R7,.r..o.
0090  ea a5 a1 7b b9 b6 d5 44 b5 b6 45 b2 81 ef b5 69   ...{...D..E....i
00a0  88 45 ec a5 0b af f1 f8 b8 35 50 df 1b d6 d9 02   .E.......5P.....
00b0  5d 73 d8 f2 6e 5a 0a bd 3b c6 40 77 93 fb 1b 7e   ]s..nZ..;.@w...~
00c0  fa 35 dd 36 b9 a3 98 a8 b7 fb 0d 00 00 14 d7 26   .5.6...........&
00d0  3e 00 96 b6 32 83 a8 e0 3f be 09 ea 6a 8f 00 00   >...2...?...j...
00e0  00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc   ..p....}..&..i..
00f0  8b 35 47 60 80 39                                 .5G`.9

Frame 4 (247 bytes on wire, 247 bytes captured)
    Arrival Time: Aug 25, 2003 21:38:18.465840000
    Time delta from previous packet: 0.052802000 seconds
    Time relative to first packet: 0.791461000 seconds
    Frame Number: 4
    Packet Length: 247 bytes
    Capture Length: 247 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 61.11.60.71 (61.11.60.71)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 233
    Identification: 0xac37 (44087)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xb82b (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 61.11.60.71 (61.11.60.71)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 213
    Checksum: 0x6383 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x5D7F70C82FE8877F
    Responder cookie: 0x15D1C644727C0112
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 205
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: Vendor ID (13)
        Length: 20
        Nonce Data
    Vendor ID payload
        Next payload: Certificate Request (7)
        Length: 20
        Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35
    Certificate Request payload
        Next payload: NONE (0)
        Length: 5
        Certificate type: 4 - X.509 Certificate - Signature
        Certificate Authority

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 e9 ac 37 00 00 40 11 b8 2b 3f ca 5c 85 3d 0b   ...7..@..+?.\.=.
0020  3c 47 01 f4 01 f4 00 d5 63 83 5d 7f 70 c8 2f e8   <G......c.].p./.
0030  87 7f 15 d1 c6 44 72 7c 01 12 04 10 02 00 00 00   .....Dr|........
0040  00 00 00 00 00 cd 0a 00 00 84 dd 92 83 94 3e 6d   ..............>m
0050  14 eb 90 21 cf 03 f7 8d 0b eb e1 c4 46 79 57 02   ...!........FyW.
0060  58 99 a2 3f ba eb 52 99 3a f5 96 85 33 09 ac ff   X..?..R.:...3...
0070  8d 64 b0 64 f5 9a 4e a8 aa 5d 1c 64 4b 94 57 e5   .d.d..N..].dK.W.
0080  07 05 18 b6 08 19 c7 00 aa 5e 9b ba 08 ad d4 32   .........^.....2
0090  3f 58 01 4e d1 ee 22 43 2c ca 69 54 3e fe 58 82   ?X.N.."C,.iT>.X.
00a0  8e a7 cc 92 ec 3b c3 ea 7e 16 2a 41 d8 30 28 52   .....;..~.*A.0(R
00b0  41 a5 f7 1f 52 25 cf 27 66 51 7d b1 81 fa f9 cc   A...R%.'fQ}.....
00c0  0b bd 8c dc 71 f9 8d b8 05 1a 0d 00 00 14 8a 99   ....q...........
00d0  42 9e 7c b0 c7 f9 9f c7 23 e9 9e b5 5e 86 07 00   B.|.....#...^...
00e0  00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc   ..p....}..&..i..
00f0  8b 35 00 00 00 05 04                              .5.....

Frame 5 (786 bytes on wire, 786 bytes captured)
    Arrival Time: Aug 25, 2003 21:38:19.284043000
    Time delta from previous packet: 0.818203000 seconds
    Time relative to first packet: 1.609664000 seconds
    Frame Number: 5
    Packet Length: 786 bytes
    Capture Length: 786 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: BF1FAFD6
Internet Protocol, Src Addr: 61.11.60.71 (61.11.60.71), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 768
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x354c (correct)
    Source: 61.11.60.71 (61.11.60.71)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 748
    Checksum: 0x5cee (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x5D7F70C82FE8877F
    Responder cookie: 0x15D1C644727C0112
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 740
    Encrypted payload (712 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  03 00 00 00 40 00 2d 11 35 4c 3d 0b 3c 47 3f ca   ....@.-.5L=.<G?.
0020  5c 85 01 f4 01 f4 02 ec 5c ee 5d 7f 70 c8 2f e8   \.......\.].p./.
0030  87 7f 15 d1 c6 44 72 7c 01 12 05 10 02 01 00 00   .....Dr|........
0040  00 00 00 00 02 e4 ba 03 20 f6 62 d2 43 30 c8 24   ........ .b.C0.$
0050  04 b2 41 48 72 15 dd 15 a6 58 fa 7d 67 2e 84 7a   ..AHr....X.}g..z
0060  2c 78 56 37 25 e7 36 40 dd d6 2c f2 93 bc ca 99   ,xV7%.6@..,.....
0070  45 89 35 e3 8d d7 a9 fe 4b 0b 4f 22 1f 0a 2e 1e   E.5.....K.O"....
0080  f7 c3 1b b8 e5 fd 95 2a 02 fb 4f e3 b9 98 83 ce   .......*..O.....
0090  7a 8d 4d 6b 33 00 47 0e fd fe ba 62 ae d4 b1 40   z.Mk3.G....b...@
00a0  5d 03 3a e1 b0 65 ca 61 9e c2 e0 c5 8f 8b 24 64   ].:..e.a......$d
00b0  77 cd 63 f6 96 8a 07 c4 40 6d 52 24 3f cd 78 77   w.c.....@mR$?.xw
00c0  86 26 ef 39 94 1b 34 2e de 08 e7 22 16 9f 2e cf   .&.9..4...."....
00d0  53 ee b4 f7 c3 fd 14 06 19 2e d0 da c4 be e2 46   S..............F
00e0  fa 4e cc 8f a8 85 6c e6 98 1a 60 3e 50 0c 08 dd   .N....l...`>P...
00f0  3f 1c 93 78 2c 1e 03 d9 bf e1 44 7e 64 fe 23 48   ?..x,.....D~d.#H
0100  49 48 57 ea a0 0f 2a fe c8 0d 6b b0 94 1a 9d 40   IHW...*...k....@
0110  2d a6 19 b0 ac 50 02 97 d9 cb 54 29 eb 8f eb e9   -....P....T)....
0120  36 05 d4 02 cd 41 6b a0 a7 4b f9 29 05 d3 43 9b   6....Ak..K.)..C.
0130  75 42 e8 14 f9 42 01 68 e3 59 6a 59 a9 47 8b 5c   uB...B.h.YjY.G.\
0140  a7 cc d2 8c cc 78 15 86 fc 87 b7 a0 3e f3 d3 2d   .....x......>..-
0150  99 e1 a8 61 f0 a5 7c af 7d d9 0a 5c 65 95 17 dd   ...a..|.}..\e...
0160  dc 80 0e 1b ea 07 8a 7d 3f 3a bf 48 24 f0 39 50   .......}?:.H$.9P
0170  d6 3f f8 69 80 81 22 b4 35 9f 20 9f 15 2f ee 73   .?.i..".5. ../.s
0180  d8 d3 79 db c8 36 cc 6b ef ae cf 42 51 5e ad df   ..y..6.k...BQ^..
0190  f7 f6 0f c3 e5 65 f8 9e 64 fb 6b 83 0a 1c ba 5b   .....e..d.k....[
01a0  21 97 20 ab 94 34 84 b3 53 e4 c0 5c ac a4 2a e8   !. ..4..S..\..*.
01b0  87 76 3a 5c f5 2f 58 99 b1 54 e5 b0 80 7e ca 20   .v:\./X..T...~. 
01c0  81 b2 38 45 f4 cd 4e 8a ce 3a 4b 38 0d ba 58 80   ..8E..N..:K8..X.
01d0  1b 8a f9 9e d0 4b 0e 7f 05 27 1c 53 f0 6b b3 a4   .....K...'.S.k..
01e0  8f 29 fd d3 25 49 ff 13 9f 71 02 94 c3 11 58 47   .)..%I...q....XG
01f0  f7 b3 83 6d 12 36 67 c3 6d 62 63 57 58 6a 62 d6   ...m.6g.mbcWXjb.
0200  32 f9 ef 28 10 8a 82 57 12 d4 55 c1 6b 9b e6 fc   2..(...W..U.k...
0210  bb f0 65 fb 90 1f d8 70 8a 08 6b cb 27 13 0a 9d   ..e....p..k.'...
0220  ef 0c 30 6f 50 c0 81 d4 9c 62 0e 82 c2 b7 a6 d6   ..0oP....b......
0230  68 6c 4f 1c f1 b9 59 89 75 8e 75 7a 18 ed 23 ca   hlO...Y.u.uz..#.
0240  91 84 57 1c 71 50 48 10 b6 ae 47 dd b5 d3 94 1d   ..W.qPH...G.....
0250  fa 0b 27 08 11 49 ed 00 22 3b d9 e1 c6 d8 3f d7   ..'..I..";....?.
0260  4d 7e 01 70 a2 a4 21 c0 e2 85 ed b6 81 5b 22 30   M~.p..!......["0
0270  c1 f7 62 f5 31 3c 2d 33 2f 9f a0 3d 8d f4 03 4c   ..b.1<-3/..=...L
0280  11 c0 9c e9 b3 06 e3 91 2b 3a c1 6e f1 8a 71 1b   ........+:.n..q.
0290  2f e9 4c 3d 6b f0 96 d5 7f a6 02 6e e9 58 02 00   /.L=k......n.X..
02a0  7d cd 35 2d f3 1f 3d 78 8e e0 e0 61 79 00 cd ce   }.5-..=x...ay...
02b0  c4 f2 2f 33 97 97 f1 26 4d 3c 91 ec 27 97 8d 37   ../3...&M<..'..7
02c0  ac 42 02 59 25 8d af 9e 4c 6a 8c 00 5e 6a 9c 9f   .B.Y%...Lj..^j..
02d0  c6 b6 3d bf 22 0a 96 83 4f 98 91 04 fc b7 3e 37   ..=."...O.....>7
02e0  39 d9 ce 80 cd 7c 4d 1e a9 e0 1a 5a 1e 30 8c 48   9....|M....Z.0.H
02f0  3f a5 55 21 ec cb 93 c7 9c 87 ce d4 59 6b 79 61   ?.U!........Ykya
0300  a9 f6 34 64 34 45 4a 79 eb 85 4d 03 07 93 bf 1f   ..4d4EJy..M.....
0310  af d6                                             ..

Frame 6 (686 bytes on wire, 686 bytes captured)
    Arrival Time: Aug 25, 2003 21:38:19.403497000
    Time delta from previous packet: 0.119454000 seconds
    Time relative to first packet: 1.729118000 seconds
    Frame Number: 6
    Packet Length: 686 bytes
    Capture Length: 686 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 61.11.60.71 (61.11.60.71)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 672
    Identification: 0xac38 (44088)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xb673 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 61.11.60.71 (61.11.60.71)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 652
    Checksum: 0x9b5a (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x5D7F70C82FE8877F
    Responder cookie: 0x15D1C644727C0112
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 644
    Encrypted payload (616 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  02 a0 ac 38 00 00 40 11 b6 73 3f ca 5c 85 3d 0b   ...8..@..s?.\.=.
0020  3c 47 01 f4 01 f4 02 8c 9b 5a 5d 7f 70 c8 2f e8   <G.......Z].p./.
0030  87 7f 15 d1 c6 44 72 7c 01 12 05 10 02 01 00 00   .....Dr|........
0040  00 00 00 00 02 84 78 e4 67 9e 20 f3 8a 25 42 2c   ......x.g. ..%B,
0050  74 64 e9 4f f4 82 7e c2 03 81 be b8 41 8f ea e3   td.O..~.....A...
0060  61 7e 5a 9d 66 48 14 aa 6b a9 49 c9 01 be fb 83   a~Z.fH..k.I.....
0070  d3 ab 4a 29 7f 78 3f 1d 49 e0 a6 ee f2 8f 84 89   ..J).x?.I.......
0080  37 1d 0d 6c f6 25 a0 30 c2 94 43 d7 7d bd 2c d3   7..l.%.0..C.}.,.
0090  9d 7a df 1f a0 8b 1a ed 97 2c c8 75 bb ee 65 e3   .z.......,.u..e.
00a0  89 5f e2 7a 6c 7f 6d fe 0e 01 8f 32 1c ab 96 cd   ._.zl.m....2....
00b0  ca 01 d8 d9 07 2c 28 76 43 df 54 d0 4e f3 b1 c4   .....,(vC.T.N...
00c0  e5 a2 cf 20 79 5f 0f 8e 16 85 de 80 2c 71 67 bd   ... y_......,qg.
00d0  69 eb 36 d5 cc b7 11 2d e7 90 39 52 ea 53 83 6c   i.6....-..9R.S.l
00e0  60 8a e8 bf f5 7a 59 c4 70 19 aa 5e 6c 27 d1 d3   `....zY.p..^l'..
00f0  fe 6c 1d 9c 39 11 3a 42 fc 81 de ad 3d 29 84 f4   .l..9.:B....=)..
0100  97 13 a9 ba a7 91 4e f8 12 91 f0 1c 8b b0 b4 e8   ......N.........
0110  42 2f 79 89 ad 99 61 e7 3b 68 1d ea 4d 5c 50 19   B/y...a.;h..M\P.
0120  2c 85 f7 18 ef 14 57 6c c7 7d bc 4f d6 d4 0c 6a   ,.....Wl.}.O...j
0130  88 b8 bf 58 d7 18 c1 30 de d5 80 2a f8 d9 e3 ff   ...X...0...*....
0140  06 2f d4 bc 05 67 97 79 ca f0 8c 70 ee e1 f1 d3   ./...g.y...p....
0150  43 4b 56 14 ae 56 f1 50 60 2d 35 c9 2c e2 06 3b   CKV..V.P`-5.,..;
0160  e5 cc c6 be f4 14 f2 c0 d5 fb 05 20 65 85 62 d5   ........... e.b.
0170  3a f0 3c 70 a5 31 0c 10 34 a3 b8 ec 3a 2f 5b e8   :.<p.1..4...:/[.
0180  9c d3 44 3a d6 91 65 c8 8f dc 29 55 ba 77 9a a9   ..D:..e...)U.w..
0190  51 86 05 22 fc da 75 5c 5a 4f 6a d8 dd 09 13 47   Q.."..u\ZOj....G
01a0  79 f0 4d 49 16 b4 6a 5f 0a 43 27 c2 1b 3e 29 b3   y.MI..j_.C'..>).
01b0  8c e0 5b ba 6b 5e 32 83 13 48 9e b6 0f c5 3d 81   ..[.k^2..H....=.
01c0  d5 09 e4 74 4a 20 52 9b e4 a8 0e 5f af 95 e0 b0   ...tJ R...._....
01d0  82 37 06 d1 da 86 4c 7d 79 99 71 7e 81 2e b5 38   .7....L}y.q~...8
01e0  1c f8 4d 64 0d e2 8e c8 04 5f 20 13 e5 c0 35 50   ..Md....._ ...5P
01f0  e3 2d 36 22 1e 4a 9c 19 ce 35 49 78 fd bf c5 47   .-6".J...5Ix...G
0200  67 61 ef 6d 00 15 96 23 a7 82 5f 19 60 28 e7 4c   ga.m...#.._.`(.L
0210  0f 81 6b 56 7e 9e f1 67 3f 37 af cc 73 87 37 32   ..kV~..g?7..s.72
0220  2e 3c 66 10 71 e7 27 c7 c8 a2 c3 7b b6 5f 8f 1c   .<f.q.'....{._..
0230  12 68 7c 8b 0c 0e c3 33 6c e3 0c ac 67 91 97 d5   .h|....3l...g...
0240  4a 98 48 c5 a9 60 8a f1 1b e1 37 c7 ac f6 9e 8b   J.H..`....7.....
0250  e2 d5 1b e7 01 29 d0 68 a3 e1 f1 68 0d d1 e7 8b   .....).h...h....
0260  00 60 d9 46 9c fa 7a 1b 59 50 00 78 3b 66 09 8b   .`.F..z.YP.x;f..
0270  4d 7b 14 b2 65 6d ab 84 4b 8d e9 9f be 09 15 8b   M{..em..K.......
0280  2b 39 16 bf 2c 7c 17 aa c3 7b 55 a7 3a 28 6e 17   +9..,|...{U.:(n.
0290  19 07 bd 51 6b 78 d1 84 bc f2 69 b2 36 bf d9 3e   ...Qkx....i.6..>
02a0  f6 a1 72 16 f0 4a 72 1c cf 8a db 5c b7 fa         ..r..Jr....\..

Frame 7 (126 bytes on wire, 126 bytes captured)
    Arrival Time: Aug 25, 2003 21:38:19.409302000
    Time delta from previous packet: 0.005805000 seconds
    Time relative to first packet: 1.734923000 seconds
    Frame Number: 7
    Packet Length: 126 bytes
    Capture Length: 126 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 61.11.60.71 (61.11.60.71)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0xac39 (44089)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xb8a2 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 61.11.60.71 (61.11.60.71)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 92
    Checksum: 0xb685 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x5D7F70C82FE8877F
    Responder cookie: 0x15D1C644727C0112
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x83CF98FA
    Length: 84
    Encrypted payload (56 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 70 ac 39 00 00 40 11 b8 a2 3f ca 5c 85 3d 0b   .p.9..@...?.\.=.
0020  3c 47 01 f4 01 f4 00 5c b6 85 5d 7f 70 c8 2f e8   <G.....\..].p./.
0030  87 7f 15 d1 c6 44 72 7c 01 12 08 10 05 01 83 cf   .....Dr|........
0040  98 fa 00 00 00 54 41 8e 45 b8 a7 b7 3f 91 72 fa   .....TA.E...?.r.
0050  0f 52 2f aa 55 5e 09 a7 ec f3 27 2f e0 4d 44 1a   .R/.U^....'/.MD.
0060  4a 8c 84 37 2f 38 af d0 16 05 bc 25 7c 65 10 62   J..7/8.....%|e.b
0070  98 44 9d 96 f3 67 83 0c 69 ae 69 03 eb cc         .D...g..i.i...

Frame 8 (130 bytes on wire, 130 bytes captured)
    Arrival Time: Aug 25, 2003 21:38:20.114697000
    Time delta from previous packet: 0.705395000 seconds
    Time relative to first packet: 2.440318000 seconds
    Frame Number: 8
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: C1231B22
Internet Protocol, Src Addr: 61.11.60.71 (61.11.60.71), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x37dc (correct)
    Source: 61.11.60.71 (61.11.60.71)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 92
    Checksum: 0x90b7 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x5D7F70C82FE8877F
    Responder cookie: 0x15D1C644727C0112
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x47697428
    Length: 84
    Encrypted payload (56 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 70 00 00 40 00 2d 11 37 dc 3d 0b 3c 47 3f ca   .p..@.-.7.=.<G?.
0020  5c 85 01 f4 01 f4 00 5c 90 b7 5d 7f 70 c8 2f e8   \......\..].p./.
0030  87 7f 15 d1 c6 44 72 7c 01 12 08 10 05 01 47 69   .....Dr|......Gi
0040  74 28 00 00 00 54 20 fc 02 80 6d 11 e6 90 25 30   t(...T ...m...%0
0050  71 1b ee 41 41 0e 54 c3 cf 3c cb 04 0c e5 88 e4   q..AA.T..<......
0060  da 68 e4 7c bf 5d 0d 2e 14 6d 77 04 da f1 16 f3   .h.|.]...mw.....
0070  7b f4 2c fb fa 93 29 95 8a 06 73 93 21 a7 c1 23   {.,...)...s.!..#
0080  1b 22                                             ."

Frame 9 (194 bytes on wire, 194 bytes captured)
    Arrival Time: Aug 25, 2003 21:38:20.665833000
    Time delta from previous packet: 0.551136000 seconds
    Time relative to first packet: 2.991454000 seconds
    Frame Number: 9
    Packet Length: 194 bytes
    Capture Length: 194 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 15528BC8
Internet Protocol, Src Addr: 61.11.60.71 (61.11.60.71), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 176
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x379c (correct)
    Source: 61.11.60.71 (61.11.60.71)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 156
    Checksum: 0x5d8a (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x5D7F70C82FE8877F
    Responder cookie: 0x15D1C644727C0112
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x730A2809
    Length: 148
    Encrypted payload (120 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 b0 00 00 40 00 2d 11 37 9c 3d 0b 3c 47 3f ca   ....@.-.7.=.<G?.
0020  5c 85 01 f4 01 f4 00 9c 5d 8a 5d 7f 70 c8 2f e8   \.......].].p./.
0030  87 7f 15 d1 c6 44 72 7c 01 12 08 10 20 01 73 0a   .....Dr|.... .s.
0040  28 09 00 00 00 94 6d 61 8b 73 9a 8b a2 b3 e7 4c   (.....ma.s.....L
0050  74 55 df 15 a3 ba 90 d6 f5 6c 0d be 23 52 a6 85   tU.......l..#R..
0060  2d 21 05 55 53 ec 30 19 ac 50 be 6a ff 3d 00 8a   -!.US.0..P.j.=..
0070  94 b9 87 af e1 49 29 ff 57 cf 29 76 82 9b 0b ac   .....I).W.)v....
0080  cf 6a a1 f8 cf e4 3c 73 b5 22 a1 73 22 f9 ed 0c   .j....<s.".s"...
0090  81 ff 45 55 02 06 69 d7 04 c7 07 96 f5 0b 6b 03   ..EU..i.......k.
00a0  cf a3 ef be 68 8e bd a1 8f 39 a0 06 99 fc b7 41   ....h....9.....A
00b0  ff 56 a8 21 ec a5 6e 90 4f 3b bc 95 2b 6f 15 52   .V.!..n.O;..+o.R
00c0  8b c8                                             ..

Frame 10 (190 bytes on wire, 190 bytes captured)
    Arrival Time: Aug 25, 2003 21:38:20.688731000
    Time delta from previous packet: 0.022898000 seconds
    Time relative to first packet: 3.014352000 seconds
    Frame Number: 10
    Packet Length: 190 bytes
    Capture Length: 190 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 61.11.60.71 (61.11.60.71)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 176
    Identification: 0xac3a (44090)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xb861 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 61.11.60.71 (61.11.60.71)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 156
    Checksum: 0x7a83 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x5D7F70C82FE8877F
    Responder cookie: 0x15D1C644727C0112
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x730A2809
    Length: 148
    Encrypted payload (120 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 b0 ac 3a 00 00 40 11 b8 61 3f ca 5c 85 3d 0b   ...:..@..a?.\.=.
0020  3c 47 01 f4 01 f4 00 9c 7a 83 5d 7f 70 c8 2f e8   <G......z.].p./.
0030  87 7f 15 d1 c6 44 72 7c 01 12 08 10 20 01 73 0a   .....Dr|.... .s.
0040  28 09 00 00 00 94 22 54 ec 6b 63 6e f6 91 d8 bd   (....."T.kcn....
0050  d3 df b3 c5 3d 69 37 79 6a 0d ef bc 1e 17 22 66   ....=i7yj....."f
0060  d7 20 42 41 85 8d 4d 67 79 94 7c a9 c4 e2 d7 f0   . BA..Mgy.|.....
0070  3d c4 89 18 af 31 cd 21 88 5e b6 cc d9 4d 05 83   =....1.!.^...M..
0080  2f 5f 45 f1 32 0b 9b 80 8a ad 3b c4 c0 48 9d 16   /_E.2.....;..H..
0090  f5 1b 38 8a 4f 3b 9f b0 59 30 f5 82 36 4b 13 11   ..8.O;..Y0..6K..
00a0  6a 76 fb 70 71 d8 98 59 08 6c 03 77 98 53 ef de   jv.pq..Y.l.w.S..
00b0  f6 f5 17 f6 5c d3 c5 99 f1 61 01 71 d5 0f         ....\....a.q..

Frame 11 (106 bytes on wire, 106 bytes captured)
    Arrival Time: Aug 25, 2003 21:38:21.380420000
    Time delta from previous packet: 0.691689000 seconds
    Time relative to first packet: 3.706041000 seconds
    Frame Number: 11
    Packet Length: 106 bytes
    Capture Length: 106 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 2E2F5707
Internet Protocol, Src Addr: 61.11.60.71 (61.11.60.71), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 88
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x37f4 (correct)
    Source: 61.11.60.71 (61.11.60.71)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 68
    Checksum: 0xd57d (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x5D7F70C82FE8877F
    Responder cookie: 0x15D1C644727C0112
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x730A2809
    Length: 60
    Encrypted payload (32 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 58 00 00 40 00 2d 11 37 f4 3d 0b 3c 47 3f ca   .X..@.-.7.=.<G?.
0020  5c 85 01 f4 01 f4 00 44 d5 7d 5d 7f 70 c8 2f e8   \......D.}].p./.
0030  87 7f 15 d1 c6 44 72 7c 01 12 08 10 20 01 73 0a   .....Dr|.... .s.
0040  28 09 00 00 00 3c 83 b8 2e 65 a4 73 d8 fd 22 6a   (....<...e.s.."j
0050  ad 71 dd aa 78 16 d4 96 06 6c c2 8f fa 5d 74 9f   .q..x....l...]t.
0060  6c e9 30 1a 78 ea 2e 2f 57 07                     l.0.x../W.

Frame 12 (122 bytes on wire, 122 bytes captured)
    Arrival Time: Aug 25, 2003 21:38:44.803114000
    Time delta from previous packet: 23.422694000 seconds
    Time relative to first packet: 27.128735000 seconds
    Frame Number: 12
    Packet Length: 122 bytes
    Capture Length: 122 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 60308F0F
Internet Protocol, Src Addr: 61.11.60.71 (61.11.60.71), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0x0001 (1)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 108
    Protocol: ESP (0x32)
    Header checksum: 0x38c2 (correct)
    Source: 61.11.60.71 (61.11.60.71)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x0a6e9bb0
    Sequence: 0x00000001
    Data (76 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 68 00 01 00 00 6c 32 38 c2 3d 0b 3c 47 3f ca   .h....l28.=.<G?.
0020  5c 85 0a 6e 9b b0 00 00 00 01 d5 8e 4f 40 d9 c2   \..n........O@..
0030  f3 94 26 0f b2 7e 89 6d 0e f2 91 77 9b b1 37 f3   ..&..~.m...w..7.
0040  34 31 4b 67 11 4d 95 f2 f8 80 7c 23 a1 0f 46 e4   41Kg.M....|#..F.
0050  e9 95 5b f3 47 2e 69 0d 5b a9 e4 84 cf 2f 66 37   ..[.G.i.[..../f7
0060  d7 ce 4d db 8e b5 a3 3f 40 b7 ac e8 14 bb d7 d4   ..M....?@.......
0070  d6 f0 39 94 dc 15 60 30 8f 0f                     ..9...`0..

Frame 13 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Aug 25, 2003 21:38:44.803830000
    Time delta from previous packet: 0.000716000 seconds
    Time relative to first packet: 27.129451000 seconds
    Frame Number: 13
    Packet Length: 110 bytes
    Capture Length: 110 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 61.11.60.71 (61.11.60.71)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xac55 (44117)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xb875 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 61.11.60.71 (61.11.60.71)
Encapsulating Security Payload
    SPI: 0x05eeab88
    Sequence: 0x00000001
    Data (68 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 60 ac 55 00 00 40 32 b8 75 3f ca 5c 85 3d 0b   .`.U..@2.u?.\.=.
0020  3c 47 05 ee ab 88 00 00 00 01 74 1e f0 b8 97 5d   <G........t....]
0030  54 84 fa 22 91 42 50 b0 51 df a4 17 35 30 e2 b8   T..".BP.Q...50..
0040  1f f3 13 f6 19 24 d5 9c b3 98 8a ba 6f 7d 64 a2   .....$......o}d.
0050  1e f0 52 c9 8a e2 30 dc bf 91 0e b6 0c 59 4d 4b   ..R...0......YMK
0060  ec d9 cc 18 1f 72 4d 91 1d c6 cb 9b 1a e2         .....rM.......

Frame 14 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 25, 2003 21:38:45.326305000
    Time delta from previous packet: 0.522475000 seconds
    Time relative to first packet: 27.651926000 seconds
    Frame Number: 14
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 9EB56CFB
Internet Protocol, Src Addr: 61.11.60.71 (61.11.60.71), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0002 (2)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 108
    Protocol: ESP (0x32)
    Header checksum: 0x38c9 (correct)
    Source: 61.11.60.71 (61.11.60.71)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x0a6e9bb0
    Sequence: 0x00000002
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 00 02 00 00 6c 32 38 c9 3d 0b 3c 47 3f ca   .`....l28.=.<G?.
0020  5c 85 0a 6e 9b b0 00 00 00 02 d6 8f 50 41 da c3   \..n........PA..
0030  f4 95 a8 3b de da e8 b5 2e e1 f6 27 db 2d 5c a2   ...;.......'.-\.
0040  a2 50 6c 9f 76 a6 56 83 ad 83 b2 30 db 66 99 38   .Pl.v.V....0.f.8
0050  3c 9e 35 27 f0 a2 91 95 6e c5 73 7b 3d 92 d2 4f   <.5'....n.s{=..O
0060  a9 bc 10 8f 15 10 75 8f d8 ef 86 bc 23 21 9e b5   ......u.....#!..
0070  6c fb                                             l.

Frame 15 (466 bytes on wire, 466 bytes captured)
    Arrival Time: Aug 25, 2003 21:38:45.344592000
    Time delta from previous packet: 0.018287000 seconds
    Time relative to first packet: 27.670213000 seconds
    Frame Number: 15
    Packet Length: 466 bytes
    Capture Length: 466 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 90623A95
Internet Protocol, Src Addr: 61.11.60.71 (61.11.60.71), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 448
    Identification: 0x0003 (3)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 108
    Protocol: ESP (0x32)
    Header checksum: 0x3768 (correct)
    Source: 61.11.60.71 (61.11.60.71)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x0a6e9bb0
    Sequence: 0x00000003
    Data (420 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  01 c0 00 03 00 00 6c 32 37 68 3d 0b 3c 47 3f ca   ......l27h=.<G?.
0020  5c 85 0a 6e 9b b0 00 00 00 03 d7 90 51 42 db c4   \..n........QB..
0030  f5 96 5e 7b 5e c8 28 cb f3 9c 07 80 14 56 e6 da   ..^{^.(......V..
0040  f0 8a 48 b7 90 05 a3 22 ef ed 4b e5 e3 da ea cc   ..H...."..K.....
0050  ac 9f 67 14 bd f7 3f 6b 81 80 e4 89 50 67 28 e2   ..g...?k....Pg(.
0060  4e e0 93 65 56 d9 77 91 df 12 5a f7 f7 94 f0 4a   N..eV.w...Z....J
0070  f4 6c 1e 48 e9 27 37 1c 6a 21 ab 99 bb 54 4c e7   .l.H.'7.j!...TL.
0080  a2 dc fa a2 3e 5e ff c3 cf 10 6c 36 bd 27 9c 48   ....>^....l6.'.H
0090  b6 98 dd 6d ab 68 31 25 8c 4b dd 2b c1 3f a9 5c   ...m.h1%.K.+.?.\
00a0  03 9d 95 9c 9c ec 06 e4 cf e9 a3 d7 24 58 39 02   ............$X9.
00b0  d1 4f d2 5a a0 2c e3 75 46 6d 09 01 05 22 53 70   .O.Z.,.uFm..."Sp
00c0  43 02 ad 48 25 6e 31 ff 21 c1 a4 2e 36 c6 79 06   C..H%n1.!...6.y.
00d0  d6 22 4f 85 bb 0c cb 93 dc d7 de 98 3a fa 0e c7   ."O.........:...
00e0  3f cb 20 6c 0a 1c c5 15 f0 b2 cf 2a cc 80 1a 05   ?. l.......*....
00f0  4e ce 7d b7 4b 3e 67 1d ee 82 4a 86 ba ac f4 05   N.}.K>g...J.....
0100  fe ec ac a0 d1 1a f8 91 fe 33 a9 a4 f8 6b 1c 9a   .........3...k..
0110  f6 35 37 ec dd 21 29 f2 d8 48 5a 11 c9 a1 71 85   .57..!)..HZ...q.
0120  32 41 4b 03 82 50 c7 9a 45 2b d2 d9 8d bf c0 31   2AK..P..E+.....1
0130  18 be d9 3b fe 14 0b 5b ab 64 9f 5a 59 2d 9f e2   ...;...[.d.ZY-..
0140  3f 94 7c 1b 60 40 56 94 6e 47 a3 57 48 cc f5 ba   ?.|.`@V.nG.WH...
0150  cf 7b b0 a8 79 0b 2b 12 e5 c7 d5 dd f0 70 5e 14   .{..y.+......p^.
0160  88 43 03 e2 b1 9b 3b f3 ee 83 aa 61 4f ac 2f ff   .C....;....aO./.
0170  ab ae 2e e3 6a 07 4d 8b b5 6e 0b a5 d8 97 53 1b   ....j.M..n....S.
0180  58 de 6f e5 64 f8 2d 81 73 0e 41 8e 74 a8 12 59   X.o.d.-.s.A.t..Y
0190  0f 43 c2 ba 78 c7 7b 39 21 ef 0a e7 69 49 65 c3   .C..x.{9!...iIe.
01a0  d5 40 58 07 79 6d 85 51 1a 84 f9 38 54 0a 39 68   .@X.ym.Q...8T.9h
01b0  39 cb e6 36 9e 58 e0 56 fa 41 00 ab 43 6d 3f c7   9..6.X.V.A..Cm?.
01c0  1d 1e 4f 29 95 46 36 e5 11 b1 9e 12 d4 8a 90 62   ..O).F6........b
01d0  3a 95                                             :.

Frame 16 (934 bytes on wire, 934 bytes captured)
    Arrival Time: Aug 25, 2003 21:38:45.374226000
    Time delta from previous packet: 0.029634000 seconds
    Time relative to first packet: 27.699847000 seconds
    Frame Number: 16
    Packet Length: 934 bytes
    Capture Length: 934 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 61.11.60.71 (61.11.60.71)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 920
    Identification: 0xac56 (44118)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xb53c (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 61.11.60.71 (61.11.60.71)
Encapsulating Security Payload
    SPI: 0x05eeab88
    Sequence: 0x00000002
    Data (892 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  03 98 ac 56 00 00 40 32 b5 3c 3f ca 5c 85 3d 0b   ...V..@2.<?.\.=.
0020  3c 47 05 ee ab 88 00 00 00 02 c3 cc 4f ca 51 9e   <G..........O.Q.
0030  29 43 d7 87 93 1c d9 13 c5 24 56 f1 e9 d4 0a 10   )C.......$V.....
0040  32 67 d3 8f ee 6a cb cb 1b 7b 4c d5 f5 4e c5 21   2g...j...{L..N.!
0050  5e a7 3f 2e 76 59 6f 0d 8e 94 3c 35 e6 36 1a 2c   ^.?.vYo...<5.6.,
0060  70 49 c9 52 bf 57 81 50 78 ef 7a 4a 15 f7 64 16   pI.R.W.Px.zJ..d.
0070  1c 06 52 f7 ef a5 ba 6b 98 45 df 70 ce c5 d8 cf   ..R....k.E.p....
0080  0e d6 20 e3 41 7b 32 9e dc a3 47 27 52 54 a4 01   .. .A{2...G'RT..
0090  b9 e1 90 42 5a f1 0d 62 d9 9c 05 00 51 b0 28 77   ...BZ..b....Q.(w
00a0  3a 28 2b 40 8e 04 20 15 83 4c 62 cc d9 7d 1d 12   :(+@.. ..Lb..}..
00b0  42 8c 6d fb ec 7c 46 ab 87 ed 40 7a 01 33 11 8b   B.m..|F...@z.3..
00c0  e2 ed 3b 97 82 19 69 d9 b0 b4 3a 4f 15 a9 ea a0   ..;...i...:O....
00d0  4b 49 7a b9 5e 38 c1 71 e9 95 8d 4f 50 a0 42 f9   KIz.^8.q...OP.B.
00e0  51 25 de a8 b2 66 b9 2c 25 66 b1 f1 9f 43 ce 7a   Q%...f.,%f...C.z
00f0  62 fa 35 45 0e 34 17 3f 34 c1 8f b4 87 59 b9 57   b.5E.4.?4....Y.W
0100  42 2d 9e f9 ce dc ee 22 d2 8a 08 a8 35 7f 78 3d   B-....."....5.x=
0110  7b 13 67 6a d8 4a e7 32 87 e4 b3 2f c8 44 9d 3f   {.gj.J.2.../.D.?
0120  8b ac 41 dd 2d 1c 9c d0 5f 08 d6 27 07 c3 89 e3   ..A.-..._..'....
0130  9a 21 d2 7b d9 4e a6 81 a2 17 78 e8 27 1b 99 f9   .!.{.N....x.'...
0140  5d a7 eb b7 13 21 86 a0 34 a2 d4 17 ab 81 f5 90   ]....!..4.......
0150  27 57 6d df aa e5 be 7d 43 d6 28 49 29 d2 b7 28   'Wm....}C.(I)..(
0160  bb 72 3b c3 a4 3e 22 7d ae ea e5 95 df c9 c7 ac   .r;..>"}........
0170  08 c3 d1 08 1e b6 d7 9d 02 61 d8 24 cb c5 c7 cf   .........a.$....
0180  dd 50 8e 8e 3a ae 1b 1e 25 39 5f 20 dd f6 5a 2d   .P..:...%9_ ..Z-
0190  04 48 0e d7 c5 30 dc 64 56 4e ac be 75 67 66 a4   .H...0.dVN..ugf.
01a0  61 30 3b e0 3d d1 0d 41 14 fb e6 f9 91 b1 e3 d6   a0;.=..A........
01b0  f5 a2 2f 52 0e d3 fc ec 60 ef 76 8b ed 6e bb 99   ../R....`.v..n..
01c0  ae b2 b6 ba 95 50 2a b9 33 20 3b ce 6d 45 2a 8d   .....P*.3 ;.mE*.
01d0  ce 45 ba a3 4e 3a 6b 54 f5 61 61 a0 96 b2 72 f8   .E..N:kT.aa...r.
01e0  5b 6b 71 0e be e5 73 82 10 71 d5 d2 d5 74 c2 be   [kq...s..q...t..
01f0  ba b1 ab f1 13 ee 2c 39 9d 48 f2 97 61 e8 7e 7d   ......,9.H..a.~}
0200  be 19 18 5b 50 6d 45 83 6e ee 17 ce f7 ff 81 76   ...[PmE.n......v
0210  49 5d 7a d1 d3 3e 3a 04 ca c3 bd 7e c4 13 8a e5   I]z..>:....~....
0220  4c 08 e1 dc 0e 9c 59 a2 1d 95 ea 6c 3e 79 91 70   L.....Y....l>y.p
0230  07 4a fb 84 12 5b cb 91 a1 8f 37 00 18 13 88 59   .J...[....7....Y
0240  9c 95 ed 95 f1 74 84 72 bb 33 d1 3d fd f7 f9 80   .....t.r.3.=....
0250  a1 a6 11 9c ef 19 7d 01 66 ad 0c 8d ac 9a 47 53   ......}.f.....GS
0260  74 5e b6 71 51 a9 7b 4d 22 fc 1c 89 56 63 85 78   t^.qQ.{M"...Vc.x
0270  34 de a5 08 5c 3e b3 17 3a b8 12 fd a0 f3 32 e6   4...\>..:.....2.
0280  a4 f3 3b fe ff 38 71 55 3c 2b ac 18 4e 89 ed d2   ..;..8qU<+..N...
0290  6a 45 f1 4d 94 c0 41 5b 3c 1f ab 1a 1c 21 2c 0e   jE.M..A[<....!,.
02a0  56 47 ae ee 95 d2 50 6c 77 d2 b0 2c dd 6d 6d 7c   VG....Plw..,.mm|
02b0  10 27 85 08 dd b0 87 16 85 cb a9 e4 a6 91 94 d7   .'..............
02c0  70 31 a4 ed ec 29 01 ae 2a 55 05 c9 b8 0c 23 a0   p1...)..*U....#.
02d0  32 05 a9 6e 2c c4 a9 b5 c3 6b 3e 9c 68 f8 e8 96   2..n,....k>.h...
02e0  b9 54 39 3a 43 01 e7 70 37 41 3e 1e df 40 70 20   .T9:C..p7A>..@p 
02f0  d6 ff 6d d0 c1 08 29 82 a1 52 38 95 0d 7f 63 39   ..m...)..R8...c9
0300  26 94 77 7e 8e 1e 6a 72 84 16 dc 95 36 53 ee 7b   &.w~..jr....6S.{
0310  ac ac 18 17 bb bb 81 c1 5c 03 05 ef ff 0a 38 3d   ........\.....8=
0320  a5 bd c8 8e 85 d1 d2 06 2b e1 2a bb 91 57 f3 ab   ........+.*..W..
0330  54 0b 97 3a 5b b4 83 b6 35 e8 3d 7d dd 7c da 92   T..:[...5.=}.|..
0340  1f 65 a7 74 d7 9f a6 e7 0e b4 26 a4 74 e0 78 00   .e.t......&.t.x.
0350  56 6b 4d d3 2f 48 e2 f9 5b cb 87 1e 20 70 58 06   VkM./H..[... pX.
0360  ab b6 94 e1 96 1a c3 61 ea a2 70 9c 1c bd 8c f7   .......a..p.....
0370  ee 63 3e 27 39 13 07 af e4 57 18 5e db b3 32 b7   .c>'9....W.^..2.
0380  aa 68 dd bc 79 57 e9 b6 c1 c4 c6 a7 3f 03 4a 2c   .h..yW......?.J,
0390  e8 41 d2 5b 12 ef e3 a4 23 56 3f bb bc 8c 2a 68   .A.[....#V?...*h
03a0  ee f6 41 d2 2a cd                                 ..A.*.

Frame 17 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Aug 25, 2003 21:38:45.374418000
    Time delta from previous packet: 0.000192000 seconds
    Time relative to first packet: 27.700039000 seconds
    Frame Number: 17
    Packet Length: 110 bytes
    Capture Length: 110 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 61.11.60.71 (61.11.60.71)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xac57 (44119)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xb873 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 61.11.60.71 (61.11.60.71)
Encapsulating Security Payload
    SPI: 0x05eeab88
    Sequence: 0x00000003
    Data (68 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 60 ac 57 00 00 40 32 b8 73 3f ca 5c 85 3d 0b   .`.W..@2.s?.\.=.
0020  3c 47 05 ee ab 88 00 00 00 03 cd a7 59 50 25 d6   <G..........YP%.
0030  56 43 e8 bb 5d 4d 94 b3 86 41 80 4c 7b 39 17 48   VC..]M...A.L{9.H
0040  6b a0 dd f5 8f 0c a2 9f 33 56 b9 26 61 58 ac a2   k.......3V.&aX..
0050  3e 76 07 96 40 07 3a 39 06 90 29 66 33 d6 39 4c   >v..@.:9..)f3.9L
0060  df d1 bf c7 89 c6 18 f3 31 a8 54 84 68 10         ........1.T.h.

Frame 18 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 25, 2003 21:38:45.955408000
    Time delta from previous packet: 0.580990000 seconds
    Time relative to first packet: 28.281029000 seconds
    Frame Number: 18
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: E608C992
Internet Protocol, Src Addr: 61.11.60.71 (61.11.60.71), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0004 (4)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 108
    Protocol: ESP (0x32)
    Header checksum: 0x38c7 (correct)
    Source: 61.11.60.71 (61.11.60.71)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x0a6e9bb0
    Sequence: 0x00000004
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 00 04 00 00 6c 32 38 c7 3d 0b 3c 47 3f ca   .`....l28.=.<G?.
0020  5c 85 0a 6e 9b b0 00 00 00 04 d8 91 52 43 dc c5   \..n........RC..
0030  f6 97 a3 df 64 e4 f3 35 bf 6a 4e 7f 7f 97 17 e8   ....d..5.jN.....
0040  72 20 f8 f5 6c ab dc 44 2f b9 02 38 d3 5f a7 05   r ..l..D/..8._..
0050  a0 53 09 77 f6 17 dd ae a3 64 57 e8 27 01 a5 e0   .S.w.....dW.'...
0060  60 ae 4f c2 9c 05 ac 21 d0 cd 1e 8e 0b 68 e6 08   `.O....!.....h..
0070  c9 92                                             ..

Frame 19 (110 bytes on wire, 110 bytes captured)
    Arrival Time: Aug 25, 2003 21:39:00.378023000
    Time delta from previous packet: 14.422615000 seconds
    Time relative to first packet: 42.703644000 seconds
    Frame Number: 19
    Packet Length: 110 bytes
    Capture Length: 110 bytes
Ethernet II, Src: 00:40:63:c1:11:ad, Dst: 00:20:6f:09:60:0e
    Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Source: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 63.202.92.133 (63.202.92.133), Dst Addr: 61.11.60.71 (61.11.60.71)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0xac58 (44120)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xb872 (correct)
    Source: 63.202.92.133 (63.202.92.133)
    Destination: 61.11.60.71 (61.11.60.71)
Encapsulating Security Payload
    SPI: 0x05eeab88
    Sequence: 0x00000004
    Data (68 bytes)

0000  00 20 6f 09 60 0e 00 40 63 c1 11 ad 08 00 45 00   . o.`..@c.....E.
0010  00 60 ac 58 00 00 40 32 b8 72 3f ca 5c 85 3d 0b   .`.X..@2.r?.\.=.
0020  3c 47 05 ee ab 88 00 00 00 04 96 ef 04 0f 01 57   <G.............W
0030  98 4a 29 5b 89 3a 64 2b a3 17 92 88 8e e4 88 4f   .J)[.:d+.......O
0040  bb 70 76 87 0f c3 fe 6a 55 03 42 16 07 34 2d 3a   .pv....jU.B..4-:
0050  2e a5 7f 5a ee b1 e3 c0 f4 b2 66 97 47 8e e7 5b   ...Z......f.G..[
0060  a3 0f ad 9f 86 b5 20 c4 9b 3f c7 70 f4 62         ...... ..?.p.b

Frame 20 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 25, 2003 21:39:00.935686000
    Time delta from previous packet: 0.557663000 seconds
    Time relative to first packet: 43.261307000 seconds
    Frame Number: 20
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 7AAADEAE
Internet Protocol, Src Addr: 61.11.60.71 (61.11.60.71), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0005 (5)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 108
    Protocol: ESP (0x32)
    Header checksum: 0x38c6 (correct)
    Source: 61.11.60.71 (61.11.60.71)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x0a6e9bb0
    Sequence: 0x00000005
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 00 05 00 00 6c 32 38 c6 3d 0b 3c 47 3f ca   .`....l28.=.<G?.
0020  5c 85 0a 6e 9b b0 00 00 00 05 d9 92 53 44 dd c6   \..n........SD..
0030  f7 98 b4 3f 18 b6 83 17 a4 7d 15 72 d1 ac 17 2a   ...?.....}.r...*
0040  3e 67 ff b2 54 61 d6 3c 0e 89 4b 9b 55 06 b5 7f   >g..Ta.<..K.U...
0050  00 f4 4d a6 ab ff 67 62 01 fe 6a a5 ab a6 21 da   ..M...gb..j...!.
0060  e6 34 11 6c c7 04 ea 77 14 91 f2 d4 b5 f4 7a aa   .4.l...w......z.
0070  de ae                                             ..

Frame 21 (114 bytes on wire, 114 bytes captured)
    Arrival Time: Aug 25, 2003 21:39:01.015375000
    Time delta from previous packet: 0.079689000 seconds
    Time relative to first packet: 43.340996000 seconds
    Frame Number: 21
    Packet Length: 114 bytes
    Capture Length: 114 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: E8AC6D4C
Internet Protocol, Src Addr: 61.11.60.71 (61.11.60.71), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 96
    Identification: 0x0006 (6)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 108
    Protocol: ESP (0x32)
    Header checksum: 0x38c5 (correct)
    Source: 61.11.60.71 (61.11.60.71)
    Destination: 63.202.92.133 (63.202.92.133)
Encapsulating Security Payload
    SPI: 0x0a6e9bb0
    Sequence: 0x00000006
    Data (68 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 60 00 06 00 00 6c 32 38 c5 3d 0b 3c 47 3f ca   .`....l28.=.<G?.
0020  5c 85 0a 6e 9b b0 00 00 00 06 da 93 54 45 de c7   \..n........TE..
0030  f8 99 38 d5 50 66 ec 14 f6 39 3c ba 3a 1f 76 cd   ..8.Pf...9<.:.v.
0040  d7 6a fc 82 4c a6 34 45 98 d5 93 88 06 1c 4e 30   .j..L.4E......N0
0050  66 3c 68 c1 c4 a2 a6 34 08 6b ba b2 fa 22 29 0c   f<h....4.k...").
0060  d4 7a 71 17 18 56 e7 06 35 ce 08 87 e8 b1 e8 ac   .zq..V..5.......
0070  6d 4c                                             mL

Frame 22 (122 bytes on wire, 122 bytes captured)
    Arrival Time: Aug 25, 2003 21:41:25.116028000
    Time delta from previous packet: 144.100653000 seconds
    Time relative to first packet: 187.441649000 seconds
    Frame Number: 22
    Packet Length: 122 bytes
    Capture Length: 122 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: B72E01D8
Internet Protocol, Src Addr: 61.11.60.71 (61.11.60.71), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x37e4 (correct)
    Source: 61.11.60.71 (61.11.60.71)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 84
    Checksum: 0x13ee (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x5D7F70C82FE8877F
    Responder cookie: 0x15D1C644727C0112
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x357505DE
    Length: 76
    Encrypted payload (48 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 68 00 00 40 00 2d 11 37 e4 3d 0b 3c 47 3f ca   .h..@.-.7.=.<G?.
0020  5c 85 01 f4 01 f4 00 54 13 ee 5d 7f 70 c8 2f e8   \......T..].p./.
0030  87 7f 15 d1 c6 44 72 7c 01 12 08 10 05 01 35 75   .....Dr|......5u
0040  05 de 00 00 00 4c ec 7a d7 b2 c4 69 31 34 05 1a   .....L.z...i14..
0050  e9 76 78 39 4b 3e 0d a6 b2 2a 9a 88 b2 2f 85 5f   .vx9K>...*.../._
0060  49 e3 44 6a 2c 25 b4 5f ae 36 80 27 72 2b a6 1f   I.Dj,%._.6.'r+..
0070  ea 39 9c 25 7a 32 b7 2e 01 d8                     .9.%z2....

Frame 23 (130 bytes on wire, 130 bytes captured)
    Arrival Time: Aug 25, 2003 21:41:25.131774000
    Time delta from previous packet: 0.015746000 seconds
    Time relative to first packet: 187.457395000 seconds
    Frame Number: 23
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:40:63:c1:11:ad
    Destination: 00:40:63:c1:11:ad (00:40:63:c1:11:ad)
    Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e)
    Type: IP (0x0800)
    Trailer: 5D624802
Internet Protocol, Src Addr: 61.11.60.71 (61.11.60.71), Dst Addr: 63.202.92.133 (63.202.92.133)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 45
    Protocol: UDP (0x11)
    Header checksum: 0x37dc (correct)
    Source: 61.11.60.71 (61.11.60.71)
    Destination: 63.202.92.133 (63.202.92.133)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 92
    Checksum: 0x38e9 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x5D7F70C82FE8877F
    Responder cookie: 0x15D1C644727C0112
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x5E09D19C
    Length: 84
    Encrypted payload (56 bytes)

0000  00 40 63 c1 11 ad 00 20 6f 09 60 0e 08 00 45 00   .@c.... o.`...E.
0010  00 70 00 00 40 00 2d 11 37 dc 3d 0b 3c 47 3f ca   .p..@.-.7.=.<G?.
0020  5c 85 01 f4 01 f4 00 5c 38 e9 5d 7f 70 c8 2f e8   \......\8.].p./.
0030  87 7f 15 d1 c6 44 72 7c 01 12 08 10 05 01 5e 09   .....Dr|......^.
0040  d1 9c 00 00 00 54 19 6d ce e9 54 20 28 b1 cf 93   .....T.m..T (...
0050  ed b1 82 e3 8f cc 23 86 9b 39 80 f3 80 c0 58 5d   ......#..9....X]
0060  11 13 48 03 dd dd bd 0a 6f 71 4d 9c 9a 7c a3 12   ..H.....oqM..|..
0070  2a fb b6 04 58 ec d7 22 e5 ee 10 a2 56 39 5d 62   *...X.."....V9]b
0080  48 02                                             H.