IPsec packets received: Frame 1 (122 bytes on wire, 122 bytes captured) Arrival Time: Aug 21, 2003 07:47:06.255792000 Time delta from previous packet: 0.000000000 seconds Time relative to first packet: 0.000000000 seconds Frame Number: 1 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:d0:09:1e:ab:d6 Destination: 00:d0:09:1e:ab:d6 (00:d0:09:1e:ab:d6) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 61.11.60.71 (61.11.60.71), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 108 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 45 Protocol: UDP (0x11) Header checksum: 0x37df (correct) Source: 61.11.60.71 (61.11.60.71) Destination: 63.202.92.134 (63.202.92.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 88 Checksum: 0x2bf3 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x24E08DD37E8E4C2C Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 80 Security Association payload Next payload: NONE (0) Length: 52 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 40 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 32 Transform number: 0 Transform ID: KEY_IKE (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (14400) Encryption-Algorithm (1): 3DES-CBC (5) Authentication-Method (3): RSA-SIG (3) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) 0000 00 d0 09 1e ab d6 00 20 6f 09 60 0e 08 00 45 00 ....... o.`...E. 0010 00 6c 00 00 40 00 2d 11 37 df 3d 0b 3c 47 3f ca .l..@.-.7.=......^....o 0060 1f bd 64 3d d4 df 57 09 a6 16 19 ff 6f 15 5f 49 ..d=..W.....o._I 0070 3b 59 8d 60 04 60 97 31 3a ba 6c 13 de f9 32 88 ;Y.`.`.1:.l...2. 0080 61 37 e3 dd 62 75 5b 0f 30 f2 c7 18 bd d6 de cc a7..bu[.0....... 0090 79 3c 03 6a 10 70 92 4d 05 9c b5 c8 7a 72 6a 02 y<.j.p.M....zrj. 00a0 5f c1 2c de e0 46 50 f4 d4 d9 c0 09 16 71 e2 a8 _.,..FP......q.. 00b0 7d 97 5d bc 45 ea b7 02 cc a3 80 f6 04 8e 58 c5 }.].E.........X. 00c0 3a 12 d5 95 12 3d c9 32 c5 24 00 00 00 14 24 5f :....=.2.$....$_ 00d0 4c 5c 1f d1 e3 84 13 42 fb d8 2e b8 31 57 L\.....B....1W Frame 5 (782 bytes on wire, 782 bytes captured) Arrival Time: Aug 21, 2003 07:47:07.734815000 Time delta from previous packet: 0.580792000 seconds Time relative to first packet: 1.479023000 seconds Frame Number: 5 Packet Length: 782 bytes Capture Length: 782 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:d0:09:1e:ab:d6 Destination: 00:d0:09:1e:ab:d6 (00:d0:09:1e:ab:d6) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 61.11.60.71 (61.11.60.71), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 768 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 45 Protocol: UDP (0x11) Header checksum: 0x354b (correct) Source: 61.11.60.71 (61.11.60.71) Destination: 63.202.92.134 (63.202.92.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 748 Checksum: 0x665c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x24E08DD37E8E4C2C Responder cookie: 0x880A8541BADD05D4 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 740 Encrypted payload (712 bytes) 0000 00 d0 09 1e ab d6 00 20 6f 09 60 0e 08 00 45 00 ....... o.`...E. 0010 03 00 00 00 40 00 2d 11 35 4b 3d 0b 3c 47 3f ca ....@.-.5K=.g.q.....GF..2? 0070 44 0d 6d 5b da 1f 78 12 8b 8a 27 b4 64 0f 2a a5 D.m[..x...'.d.*. 0080 a5 11 78 15 15 d2 db 73 57 5c 98 54 8c 99 67 f7 ..x....sW\.T..g. 0090 a7 98 f4 91 2d 09 35 47 44 7d 42 ff fe fb 4d 1d ....-.5GD}B...M. 00a0 87 c5 3f 73 2b 4c 5c 6c f9 d2 d5 ec 56 ef 37 57 ..?s+L\l....V.7W 00b0 13 ca 48 10 39 12 18 28 1f 8f 94 37 bc d5 ec 53 ..H.9..(...7...S 00c0 c8 c0 a6 a6 ef ac d8 c3 0f f8 c1 60 13 8d a9 1c ...........`.... 00d0 fc 35 76 e2 f8 3c ce 7d 69 a8 6c 3c 8b 71 93 6a .5v..<.}i.l<.q.j 00e0 b3 29 11 c2 8d 97 aa 29 5b d1 08 f7 77 28 f5 67 .).....)[...w(.g 00f0 6f c6 4d c8 ca 82 98 29 d3 67 b9 0d 04 29 95 4d o.M....).g...).M 0100 02 6e 7b ec 12 dc d6 e8 bc dd 90 f1 a4 d1 59 03 .n{...........Y. 0110 9b ed ae fa 15 57 5c db c1 b6 ac b9 62 a8 03 38 .....W\.....b..8 0120 8c 70 57 f3 b3 30 07 ab 7f fb d2 e2 05 32 05 28 .pW..0.......2.( 0130 4c 48 dc 5f 0c fc f5 7c dc 2a ef fc 3a ec 38 ee LH._...|.*..:.8. 0140 25 5d 20 12 9f 12 20 75 c6 cf 60 69 50 d0 e2 10 %] ... u..`iP... 0150 e7 91 dc 37 cc 36 b0 bd c9 9e 95 9b 80 21 06 8a ...7.6.......!.. 0160 48 07 8b 6a d9 67 23 e6 4e 30 1b ff 13 36 19 6e H..j.g#.N0...6.n 0170 34 75 ba 02 51 17 0f 4e e5 e8 51 c7 00 5d 89 77 4u..Q..N..Q..].w 0180 1a 69 46 7d a1 52 e7 db 9a 9e 44 1b 10 e3 f4 ef .iF}.R....D..... 0190 57 c0 ff 86 9e e3 49 73 a3 b1 e1 16 cb 08 4a bb W.....Is......J. 01a0 5a be 0b f0 ba 5e 7d 8f e2 0d 76 c4 6c 23 c1 bf Z....^}...v.l#.. 01b0 89 10 52 a4 bb cd 6d 9f 51 c5 72 e0 3a 34 db 97 ..R...m.Q.r.:4.. 01c0 29 33 cd 7e 82 cc 9d 26 4b 8a f4 c9 10 35 23 1b )3.~...&K....5#. 01d0 85 4b 23 2d 2e e6 8b 1f f5 e5 c6 e4 ae 9a af fb .K#-............ 01e0 6f 59 89 d7 bf 56 20 26 be 95 ad 88 70 9b ee e4 oY...V &....p... 01f0 91 77 6e 61 7b 9b 76 7c 8a 66 3a 38 41 7e a4 13 .wna{.v|.f:8A~.. 0200 6f 3a d0 31 3d cd 40 a1 f4 f5 c6 57 ff b2 72 a6 o:.1=.@....W..r. 0210 36 4d 69 ad 2d f5 b0 0f 35 8d 55 35 f2 f0 b4 ea 6Mi.-...5.U5.... 0220 00 67 bb a7 0a 6e de 0d 30 d7 64 11 36 a0 b4 03 .g...n..0.d.6... 0230 88 36 7c bb fc 2d a9 76 7c 14 49 6a ef 9b 78 84 .6|..-.v|.Ij..x. 0240 90 c1 5c bf 96 76 ee b7 19 9b 8a b1 a2 54 93 5d ..\..v.......T.] 0250 86 08 d6 57 d4 31 c0 fa 27 19 2b 9e 98 5d c7 c2 ...W.1..'.+..].. 0260 af 7d f0 b7 b6 48 87 7d 1a d2 94 ad ae 42 61 c1 .}...H.}.....Ba. 0270 bc 6c 14 0b d7 b8 42 ba 24 7c e8 aa 4b 42 a9 c9 .l....B.$|..KB.. 0280 d0 b1 36 92 6a 0c 8d ad 60 82 04 6c ef 0a 52 76 ..6.j...`..l..Rv 0290 ea da ed ed a5 d8 a5 55 56 0c b9 63 fd 05 08 89 .......UV..c.... 02a0 fb 77 dc bc 61 0f 3d 8d 34 5c 7e 9c 89 69 14 08 .w..a.=.4\~..i.. 02b0 7b 64 fb 8e 89 e0 62 18 d7 54 1b a4 e7 6e 98 f4 {d....b..T...n.. 02c0 eb 28 98 af 79 a1 5d fd 79 c5 dc e9 9c 4b 5e 61 .(..y.].y....K^a 02d0 2a 2b a3 4f 69 69 5c 83 88 31 97 cb 18 7e 03 1d *+.Oii\..1...~.. 02e0 b1 b4 f1 7b 92 8a df 76 fd ea db 5f 9b 82 8d 3d ...{...v..._...= 02f0 c6 6e 48 cf 81 bc 63 bf 92 49 c5 36 36 e7 b0 ba .nH...c..I.66... 0300 e4 dc 59 9b 21 e9 59 36 3e be ef 26 69 8b ..Y.!.Y6>..&i. Frame 6 (718 bytes on wire, 718 bytes captured) Arrival Time: Aug 21, 2003 07:47:08.140407000 Time delta from previous packet: 0.405592000 seconds Time relative to first packet: 1.884615000 seconds Frame Number: 6 Packet Length: 718 bytes Capture Length: 718 bytes Ethernet II, Src: 00:d0:09:1e:ab:d6, Dst: 00:20:6f:09:60:0e Destination: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Source: 00:d0:09:1e:ab:d6 (00:d0:09:1e:ab:d6) Type: IP (0x0800) Internet Protocol, Src Addr: 63.202.92.134 (63.202.92.134), Dst Addr: 61.11.60.71 (61.11.60.71) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 704 Identification: 0x57fc (22524) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x0a8f (correct) Source: 63.202.92.134 (63.202.92.134) Destination: 61.11.60.71 (61.11.60.71) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 684 Checksum: 0x8980 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x24E08DD37E8E4C2C Responder cookie: 0x880A8541BADD05D4 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 676 Encrypted payload (648 bytes) 0000 00 20 6f 09 60 0e 00 d0 09 1e ab d6 08 00 45 00 . o.`.........E. 0010 02 c0 57 fc 00 00 40 11 0a 8f 3f ca 5c 86 3d 0b ..W...@...?.\.=. 0020 3c 47 01 f4 01 f4 02 ac 89 80 24 e0 8d d3 7e 8e $/VY 0090 5d eb 92 46 a0 4a 0f 55 f0 1c e5 3b 83 f4 19 0d ]..F.J.U...;.... 00a0 b7 72 e5 d7 cb 5c 0c 68 77 d7 27 87 41 84 f0 69 .r...\.hw.'.A..i 00b0 c5 70 0e ed cb 63 f5 32 8a 09 37 e6 1e 15 ba 55 .p...c.2..7....U 00c0 43 91 20 ab 80 94 d4 92 0b d3 a6 3f 78 63 c7 f2 C. ........?xc.. 00d0 69 da 03 e3 ae 5d c6 e7 36 4b f8 5e 39 66 de ce i....]..6K.^9f.. 00e0 21 60 15 84 79 cd 16 82 75 aa 5b 50 d4 9e 16 bd !`..y...u.[P.... 00f0 13 b9 95 1d d3 9a 94 d4 a4 0d d0 c6 b4 ab cf 3f ...............? 0100 b6 fb 31 77 97 31 24 c7 be 9a 9d 45 f0 4d 28 e0 ..1w.1$....E.M(. 0110 f8 49 b1 26 fe d8 a8 94 30 98 be 3f 74 8c 81 e5 .I.&....0..?t... 0120 f8 3b ae a2 21 3a ce 40 00 c3 f7 89 ac dd 32 66 .;..!:.@......2f 0130 ca 28 c9 ae 0d 33 86 de 6a c4 b4 0b b7 97 83 03 .(...3..j....... 0140 2e ce 1c 21 36 02 50 9e 4b 57 0b c7 59 98 b0 09 ...!6.P.KW..Y... 0150 29 30 49 2b a5 a0 0e ab 86 ba b9 98 d9 50 46 ac )0I+.........PF. 0160 1e 56 b1 46 f2 9b 42 dd 16 c4 b3 ac ec 69 45 f1 .V.F..B......iE. 0170 fa 82 14 66 2c d8 a2 39 c0 b1 4e 73 3e 51 19 37 ...f,..9..Ns>Q.7 0180 71 d3 7b 83 7c 74 f5 08 77 1f 35 3d 1c a1 60 f8 q.{.|t..w.5=..`. 0190 e3 1f 4b 35 4a 33 1d ff 46 6d 82 13 a0 cf 7e 68 ..K5J3..Fm....~h 01a0 d2 ef c3 d3 b7 79 e2 a3 0e 50 59 9b cd 1d 8b 65 .....y...PY....e 01b0 f6 3e 9b c9 1a 2e fc f9 20 96 a7 ba a0 5c 0e 49 .>...... ....\.I 01c0 f0 3c ac 80 94 7c 97 34 3f 5f a9 e9 ec e3 3c 76 .<...|.4?_.....3EpO.y.= 01f0 7e 61 8a 4f 93 90 56 37 28 1e 00 db 07 97 6a 2d ~a.O..V7(.....j- 0200 63 1e 70 be 2c 95 ea 41 00 ba 8f 15 d2 e8 b8 0c c.p.,..A........ 0210 ee bd 8a cb 75 1a ff 6d 94 38 4f 90 d1 b7 84 de ....u..m.8O..... 0220 be 07 48 a3 6e 76 f8 21 07 79 95 8a ce 56 51 14 ..H.nv.!.y...VQ. 0230 d7 bf 59 2c c0 cd 24 17 96 4b 45 d9 e3 b0 f3 30 ..Y,..$..KE....0 0240 40 65 82 cc c4 09 33 10 97 b7 6e a9 44 b9 d3 b1 @e....3...n.D... 0250 55 47 2d 9a 4e 77 c5 72 da 74 77 0e 26 ad 7d 04 UG-.Nw.r.tw.&.}. 0260 82 55 fe 0f 59 34 87 ad 4a ef ad 7d c1 c6 86 89 .U..Y4..J..}.... 0270 38 66 ec 62 df 60 e9 f3 4a 37 8f b5 7c ed 67 d9 8f.b.`..J7..|.g. 0280 a5 15 38 e3 33 49 ea 93 5b b9 a8 4a 1c 28 86 c4 ..8.3I..[..J.(.. 0290 67 e7 eb 5f e8 7a 55 5c dd 59 56 39 66 86 d0 3b g.._.zU\.YV9f..; 02a0 be 59 9f 63 db c0 7f 83 62 8e 67 df 85 43 0b 5e .Y.c....b.g..C.^ 02b0 90 64 ef 55 99 0f 75 58 49 98 cf 5e 99 fa 5b 63 .d.U..uXI..^..[c 02c0 ec 0b 25 9b 2e 00 0b b9 c5 15 a5 77 e3 84 ..%........w.. Frame 7 (126 bytes on wire, 126 bytes captured) Arrival Time: Aug 21, 2003 07:47:08.618905000 Time delta from previous packet: 0.478498000 seconds Time relative to first packet: 2.363113000 seconds Frame Number: 7 Packet Length: 126 bytes Capture Length: 126 bytes Ethernet II, Src: 00:20:6f:09:60:0e, Dst: 00:d0:09:1e:ab:d6 Destination: 00:d0:09:1e:ab:d6 (00:d0:09:1e:ab:d6) Source: 00:20:6f:09:60:0e (00:20:6f:09:60:0e) Type: IP (0x0800) Internet Protocol, Src Addr: 61.11.60.71 (61.11.60.71), Dst Addr: 63.202.92.134 (63.202.92.134) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 45 Protocol: UDP (0x11) Header checksum: 0x37db (correct) Source: 61.11.60.71 (61.11.60.71) Destination: 63.202.92.134 (63.202.92.134) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x34f7 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x24E08DD37E8E4C2C Responder cookie: 0x880A8541BADD05D4 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x7575A0BB Length: 84 Encrypted payload (56 bytes) 0000 00 d0 09 1e ab d6 00 20 6f 09 60 0e 08 00 45 00 ....... o.`...E. 0010 00 70 00 00 40 00 2d 11 37 db 3d 0b 3c 47 3f ca .p..@.-.7.=.