Frame 1 (170 bytes on wire, 170 bytes captured)
    Arrival Time: Sep 29, 2005 09:09:19.334985000
    Time delta from previous packet: 0.000000000 seconds
    Time since reference or first frame: 0.000000000 seconds
    Frame Number: 1
    Packet Length: 170 bytes
    Capture Length: 170 bytes
Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:0f:b5:5f:1b:8f
    Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f)
    Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc)
    Type: IP (0x0800)
    Frame check sequence: 0x3883e424 (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.100 (165.227.249.100)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 152
    Identification: 0x06de (1758)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf4d7 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.100 (165.227.249.100)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 132
    Checksum: 0x343a (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x88D2DC92E4DB8E25
    Responder cookie: 0x0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 124
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (3600)
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-00
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02

0000  00 0f b5 5f 1b 8f 00 0c 29 1d cf fc 08 00 45 00   ..._....).....E.
0010  00 98 06 de 00 00 80 11 f4 d7 a5 e3 f9 73 a5 e3   .............s..
0020  f9 64 01 f4 01 f4 00 84 34 3a 88 d2 dc 92 e4 db   .d......4:......
0030  8e 25 00 00 00 00 00 00 00 00 01 10 02 00 00 00   .%..............
0040  00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00   .....|...8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04   ................
0070  00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00   ................
0080  00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79   ..D..-.......F.y
0090  dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63   ..........>.in.c
00a0  81 b5 ec 42 7b 1f 38 83 e4 24                     ...B{.8..$

Frame 2 (130 bytes on wire, 130 bytes captured)
    Arrival Time: Sep 29, 2005 09:09:19.339529000
    Time delta from previous packet: 0.004544000 seconds
    Time since reference or first frame: 0.004544000 seconds
    Frame Number: 2
    Packet Length: 130 bytes
    Capture Length: 130 bytes
Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:1d:cf:fc
    Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc)
    Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f)
    Type: IP (0x0800)
    Frame check sequence: 0x791f61a2 (correct)
Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 112
    Identification: 0x0030 (48)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3bae (correct)
    Source: 165.227.249.100 (165.227.249.100)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 92
    Checksum: 0x8ce7 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x88D2DC92E4DB8E25
    Responder cookie: 0xBBCAE90BDD0B40BD
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 84
    Security Association payload
        Next payload: NONE (0)
        Length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (3600)

0000  00 0c 29 1d cf fc 00 0f b5 5f 1b 8f 08 00 45 00   ..)......_....E.
0010  00 70 00 30 00 00 40 11 3b ae a5 e3 f9 64 a5 e3   .p.0..@.;....d..
0020  f9 73 01 f4 01 f4 00 5c 8c e7 88 d2 dc 92 e4 db   .s.....\........
0030  8e 25 bb ca e9 0b dd 0b 40 bd 01 10 02 00 00 00   .%......@.......
0040  00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00   .....T...8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04   ................
0070  00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 79 1f   ..............y.
0080  61 a2                                             a.

Frame 3 (302 bytes on wire, 302 bytes captured)
    Arrival Time: Sep 29, 2005 09:09:21.516018000
    Time delta from previous packet: 2.176489000 seconds
    Time since reference or first frame: 2.181033000 seconds
    Frame Number: 3
    Packet Length: 302 bytes
    Capture Length: 302 bytes
Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:0f:b5:5f:1b:8f
    Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f)
    Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc)
    Type: IP (0x0800)
    Frame check sequence: 0xabcbd122 (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.100 (165.227.249.100)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 284
    Identification: 0x06df (1759)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf452 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.100 (165.227.249.100)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 264
    Checksum: 0x11cd (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x88D2DC92E4DB8E25
    Responder cookie: 0xBBCAE90BDD0B40BD
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 256
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: Vendor ID (13)
        Length: 24
        Nonce Data
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 48
        Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5...
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 12
        Vendor ID: unknown vendor ID: 0xDA8E937880010000
    Vendor ID payload
        Next payload: NONE (0)
        Length: 12
        Vendor ID: draft-beaulieu-ike-xauth-02.txt

0000  00 0f b5 5f 1b 8f 00 0c 29 1d cf fc 08 00 45 00   ..._....).....E.
0010  01 1c 06 df 00 00 80 11 f4 52 a5 e3 f9 73 a5 e3   .........R...s..
0020  f9 64 01 f4 01 f4 01 08 11 cd 88 d2 dc 92 e4 db   .d..............
0030  8e 25 bb ca e9 0b dd 0b 40 bd 04 10 02 00 00 00   .%......@.......
0040  00 00 00 00 01 00 0a 00 00 84 e3 14 24 27 4a b3   ............$'J.
0050  1c 06 09 3a cf 70 de 01 ff 76 2d c3 4c d3 ef 52   ...:.p...v-.L..R
0060  c5 56 bd 7e de de ed a2 31 af aa c2 5e 58 c0 9a   .V.~....1...^X..
0070  d6 3d cf 74 58 92 4f 4f 46 d8 06 24 36 b8 09 97   .=.tX.OOF..$6...
0080  28 3d 9a 6a 28 c7 65 a3 ba 2a 23 87 e9 bb 0b cf   (=.j(.e..*#.....
0090  b6 37 6b fa 84 82 18 dc b5 54 e3 25 50 74 1b aa   .7k......T.%Pt..
00a0  bf 07 97 2f cb ed 82 43 30 b7 6b 13 7e ae e6 85   .../...C0.k.~...
00b0  79 79 fd 45 bc fb 67 f2 8e 54 ca ef 0c 78 c4 ec   yy.E..g..T...x..
00c0  3a 79 2a 6f 1b 36 9c a1 12 f8 0d 00 00 18 23 b9   :y*o.6........#.
00d0  6e 1e fe 56 10 4a f8 c9 e9 06 a1 8c b7 41 52 f3   n..V.J.......AR.
00e0  b3 cb 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6   .....0G.........
00f0  d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31   ..V\h..........1
0100  30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29   0.1.1 (Build 10)
0110  00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00   .........x......
0120  00 0c 09 00 26 89 df d6 b7 12 ab cb d1 22         ....&........"

Frame 4 (218 bytes on wire, 218 bytes captured)
    Arrival Time: Sep 29, 2005 09:09:22.853651000
    Time delta from previous packet: 1.337633000 seconds
    Time since reference or first frame: 3.518666000 seconds
    Frame Number: 4
    Packet Length: 218 bytes
    Capture Length: 218 bytes
Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:1d:cf:fc
    Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc)
    Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f)
    Type: IP (0x0800)
    Frame check sequence: 0x9cf50ce8 (correct)
Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 200
    Identification: 0x0031 (49)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3b55 (correct)
    Source: 165.227.249.100 (165.227.249.100)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 180
    Checksum: 0xeb05 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x88D2DC92E4DB8E25
    Responder cookie: 0xBBCAE90BDD0B40BD
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 172
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: NONE (0)
        Length: 12
        Nonce Data

0000  00 0c 29 1d cf fc 00 0f b5 5f 1b 8f 08 00 45 00   ..)......_....E.
0010  00 c8 00 31 00 00 40 11 3b 55 a5 e3 f9 64 a5 e3   ...1..@.;U...d..
0020  f9 73 01 f4 01 f4 00 b4 eb 05 88 d2 dc 92 e4 db   .s..............
0030  8e 25 bb ca e9 0b dd 0b 40 bd 04 10 02 00 00 00   .%......@.......
0040  00 00 00 00 00 ac 0a 00 00 84 fe 60 28 15 f4 5d   ...........`(..]
0050  11 29 9a 57 f5 3f b5 9d 1b 6e 60 f7 36 58 d2 d1   .).W.?...n`.6X..
0060  0e 40 7a 67 50 05 7c b6 bd f3 63 15 67 9c 0b 24   .@zgP.|...c.g..$
0070  47 02 ca 2f f6 6f 13 1d 3c 39 d1 3e 4c 72 41 05   G../.o..<9.>LrA.
0080  78 88 65 21 76 95 74 d3 0a 14 38 8e 23 7d bd c7   x.e!v.t...8.#}..
0090  f2 7f 58 a4 d0 e2 2c ee df 6d 45 ee 99 f9 b7 d6   ..X...,..mE.....
00a0  d4 ca 23 f3 58 c3 4d 6d 71 33 09 a8 38 79 b4 85   ..#.X.Mmq3..8y..
00b0  14 01 bb 05 39 70 f7 19 4d c1 ab 49 81 89 e6 cd   ....9p..M..I....
00c0  81 d4 c2 34 11 02 c8 3d 5e 43 00 00 00 0c cf ab   ...4...=^C......
00d0  2f 98 57 a8 a7 b7 9c f5 0c e8                     /.W.......

Frame 5 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Sep 29, 2005 09:09:23.863501000
    Time delta from previous packet: 1.009850000 seconds
    Time since reference or first frame: 4.528516000 seconds
    Frame Number: 5
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:0f:b5:5f:1b:8f
    Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f)
    Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc)
    Type: IP (0x0800)
    Frame check sequence: 0x2506c29b (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.100 (165.227.249.100)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x06e1 (1761)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf4f4 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.100 (165.227.249.100)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 100
    Checksum: 0x863e (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x88D2DC92E4DB8E25
    Responder cookie: 0xBBCAE90BDD0B40BD
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 92
    Encrypted payload (64 bytes)

0000  00 0f b5 5f 1b 8f 00 0c 29 1d cf fc 08 00 45 00   ..._....).....E.
0010  00 78 06 e1 00 00 80 11 f4 f4 a5 e3 f9 73 a5 e3   .x...........s..
0020  f9 64 01 f4 01 f4 00 64 86 3e 88 d2 dc 92 e4 db   .d.....d.>......
0030  8e 25 bb ca e9 0b dd 0b 40 bd 05 10 02 01 00 00   .%......@.......
0040  00 00 00 00 00 5c 89 1e 14 64 b0 17 79 f5 d0 40   .....\...d..y..@
0050  09 0e 9c 1d 77 12 b9 06 45 d2 9d 6b 6e f4 48 45   ....w...E..kn.HE
0060  29 b0 32 18 9e b1 eb 07 3a c9 67 7e e3 c0 2e e1   ).2.....:.g~....
0070  e4 b5 23 86 b6 95 c4 f6 79 6a 20 38 f0 2a 2c 2d   ..#.....yj 8.*,-
0080  74 55 98 3a ab a0 25 06 c2 9b                     tU.:..%...

Frame 6 (122 bytes on wire, 122 bytes captured)
    Arrival Time: Sep 29, 2005 09:09:25.503166000
    Time delta from previous packet: 1.639665000 seconds
    Time since reference or first frame: 6.168181000 seconds
    Frame Number: 6
    Packet Length: 122 bytes
    Capture Length: 122 bytes
Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:1d:cf:fc
    Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc)
    Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f)
    Type: IP (0x0800)
    Frame check sequence: 0x8970ff45 (correct)
Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0x0032 (50)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3bb4 (correct)
    Source: 165.227.249.100 (165.227.249.100)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 84
    Checksum: 0x1481 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x88D2DC92E4DB8E25
    Responder cookie: 0xBBCAE90BDD0B40BD
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 76
    Encrypted payload (48 bytes)

0000  00 0c 29 1d cf fc 00 0f b5 5f 1b 8f 08 00 45 00   ..)......_....E.
0010  00 68 00 32 00 00 40 11 3b b4 a5 e3 f9 64 a5 e3   .h.2..@.;....d..
0020  f9 73 01 f4 01 f4 00 54 14 81 88 d2 dc 92 e4 db   .s.....T........
0030  8e 25 bb ca e9 0b dd 0b 40 bd 05 10 02 01 00 00   .%......@.......
0040  00 00 00 00 00 4c e8 93 1f de eb 4d 91 73 02 fe   .....L.....M.s..
0050  ec c1 d7 96 cd 75 b2 3d f7 1d 14 6d a0 06 99 3b   .....u.=...m...;
0060  72 b9 01 f3 e1 0e 81 0e 52 78 d2 e7 b4 e4 e2 c3   r.......Rx......
0070  97 b9 c6 7e 02 c4 89 70 ff 45                     ...~...p.E

Frame 7 (346 bytes on wire, 346 bytes captured)
    Arrival Time: Sep 29, 2005 09:09:27.634081000
    Time delta from previous packet: 2.130915000 seconds
    Time since reference or first frame: 8.299096000 seconds
    Frame Number: 7
    Packet Length: 346 bytes
    Capture Length: 346 bytes
Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:0f:b5:5f:1b:8f
    Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f)
    Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc)
    Type: IP (0x0800)
    Frame check sequence: 0x3dd757b2 (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.100 (165.227.249.100)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 328
    Identification: 0x06e3 (1763)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf422 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.100 (165.227.249.100)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 308
    Checksum: 0xf440 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x88D2DC92E4DB8E25
    Responder cookie: 0xBBCAE90BDD0B40BD
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x28F44666
    Length: 300
    Encrypted payload (272 bytes)

0000  00 0f b5 5f 1b 8f 00 0c 29 1d cf fc 08 00 45 00   ..._....).....E.
0010  01 48 06 e3 00 00 80 11 f4 22 a5 e3 f9 73 a5 e3   .H......."...s..
0020  f9 64 01 f4 01 f4 01 34 f4 40 88 d2 dc 92 e4 db   .d.....4.@......
0030  8e 25 bb ca e9 0b dd 0b 40 bd 08 10 20 01 28 f4   .%......@... .(.
0040  46 66 00 00 01 2c ca af ae d6 58 d5 66 19 67 f5   Ff...,....X.f.g.
0050  ed c4 5e 32 8a 88 0e 98 88 0a 32 c3 13 5f 5a d0   ..^2......2.._Z.
0060  07 f1 3f 3b fe 47 64 bf 23 9a cc 17 13 9d 3a d8   ..?;.Gd.#.....:.
0070  5f 38 85 9a 52 a1 94 0b 1c 28 6d 75 3f 6d e2 1c   _8..R....(mu?m..
0080  90 38 ff 0b b2 62 33 8c 27 b3 e9 b4 da f0 cb 2e   .8...b3.'.......
0090  42 fc 28 32 be 14 76 a4 71 75 fe 81 d4 dd 60 f6   B.(2..v.qu....`.
00a0  25 b5 47 33 86 7a 1a 01 cf ad b8 69 98 95 9f 51   %.G3.z.....i...Q
00b0  db 68 da f1 17 53 f3 be 62 43 0d 71 30 2f 37 07   .h...S..bC.q0/7.
00c0  3e cc 03 96 31 cf dc ea c7 50 ab 7b d2 f9 51 29   >...1....P.{..Q)
00d0  14 1b b2 d5 20 24 00 39 db 2c ab bf e1 1c e8 12   .... $.9.,......
00e0  0e 3c 49 ff 35 d5 5b ba 02 23 2a 82 2f 44 62 89   .<I.5.[..#*./Db.
00f0  57 44 54 22 c4 91 5a 7b 0d f3 1b 9a 72 9c ea 35   WDT"..Z{....r..5
0100  95 da ba 21 ed 05 7e e7 06 59 18 5e b0 f9 e5 ba   ...!..~..Y.^....
0110  7a 03 c4 c5 b3 3f ef 52 44 83 ba db ce 36 77 c5   z....?.RD....6w.
0120  91 f3 02 1c 6a aa b7 9c 83 8f e9 78 2f ad 76 de   ....j......x/.v.
0130  35 a8 cc 50 4e 40 46 cb 88 72 99 77 bf b0 d2 98   5..PN@F..r.w....
0140  81 8f 01 68 71 83 2e a3 30 43 cf dd f7 fb 89 82   ...hq...0C......
0150  77 77 28 d7 a2 b1 3d d7 57 b2                     ww(...=.W.

Frame 8 (330 bytes on wire, 330 bytes captured)
    Arrival Time: Sep 29, 2005 09:09:28.969307000
    Time delta from previous packet: 1.335226000 seconds
    Time since reference or first frame: 9.634322000 seconds
    Frame Number: 8
    Packet Length: 330 bytes
    Capture Length: 330 bytes
Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:1d:cf:fc
    Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc)
    Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f)
    Type: IP (0x0800)
    Frame check sequence: 0xa6c7b1b1 (correct)
Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 312
    Identification: 0x0037 (55)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3adf (correct)
    Source: 165.227.249.100 (165.227.249.100)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 292
    Checksum: 0x0d64 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x88D2DC92E4DB8E25
    Responder cookie: 0xBBCAE90BDD0B40BD
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x28F44666
    Length: 284
    Encrypted payload (256 bytes)

0000  00 0c 29 1d cf fc 00 0f b5 5f 1b 8f 08 00 45 00   ..)......_....E.
0010  01 38 00 37 00 00 40 11 3a df a5 e3 f9 64 a5 e3   .8.7..@.:....d..
0020  f9 73 01 f4 01 f4 01 24 0d 64 88 d2 dc 92 e4 db   .s.....$.d......
0030  8e 25 bb ca e9 0b dd 0b 40 bd 08 10 20 01 28 f4   .%......@... .(.
0040  46 66 00 00 01 1c 00 97 00 d2 bb a9 8b e0 ac ca   Ff..............
0050  58 8a 67 e8 c0 98 2e db 03 c2 2c c0 40 c3 56 5c   X.g.......,.@.V\
0060  97 1b 7f f9 1f c0 2f d3 6b 2d 1c f8 a2 95 c5 31   ....../.k-.....1
0070  6c dd e5 61 aa a3 dd 33 68 71 81 a5 e0 d0 65 c9   l..a...3hq....e.
0080  2c 2c fa a9 09 b7 d9 3f 42 19 25 de 9f a3 c2 0e   ,,.....?B.%.....
0090  56 6f aa cb 0d 62 50 69 5a c7 d2 21 b0 58 97 2a   Vo...bPiZ..!.X.*
00a0  64 95 4b 6b a9 85 62 9d 23 5c 5c d6 e4 ba 49 64   d.Kk..b.#\\...Id
00b0  f1 04 bd bb 65 96 fd ec 9a 1b f0 a6 7a b1 36 99   ....e.......z.6.
00c0  26 8e 29 c1 e3 a1 cd fe cf 60 48 73 f1 eb c1 f2   &.)......`Hs....
00d0  23 0b 3d 17 2f 6a ad c1 11 88 fb 32 58 5f a7 e3   #.=./j.....2X_..
00e0  53 95 fb 1b 57 f9 a5 ae f2 5b 6c 3c e9 ef 1a 69   S...W....[l<...i
00f0  80 2f c4 0c 1a 80 84 2b d8 e6 c6 03 86 89 4d c9   ./.....+......M.
0100  8a fa 30 2e 54 e9 0d bf 64 6f d7 da 57 f1 5a 55   ..0.T...do..W.ZU
0110  27 64 ed c3 2a 39 02 68 77 a0 0a 1b e3 d9 c6 e8   'd..*9.hw.......
0120  d8 17 9f d9 ee 40 72 80 ea 78 24 6f 87 3c f8 f9   .....@r..x$o.<..
0130  92 f0 da c0 98 a2 b9 13 50 35 54 bf e1 14 ae 5b   ........P5T....[
0140  b6 cf 12 ce 8e 93 a6 c7 b1 b1                     ..........

Frame 9 (106 bytes on wire, 106 bytes captured)
    Arrival Time: Sep 29, 2005 09:09:28.977263000
    Time delta from previous packet: 0.007956000 seconds
    Time since reference or first frame: 9.642278000 seconds
    Frame Number: 9
    Packet Length: 106 bytes
    Capture Length: 106 bytes
Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:0f:b5:5f:1b:8f
    Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f)
    Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc)
    Type: IP (0x0800)
    Frame check sequence: 0x97ea9459 (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.100 (165.227.249.100)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 88
    Identification: 0x06e5 (1765)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf510 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.100 (165.227.249.100)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 68
    Checksum: 0x8750 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x88D2DC92E4DB8E25
    Responder cookie: 0xBBCAE90BDD0B40BD
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x28F44666
    Length: 60
    Encrypted payload (32 bytes)

0000  00 0f b5 5f 1b 8f 00 0c 29 1d cf fc 08 00 45 00   ..._....).....E.
0010  00 58 06 e5 00 00 80 11 f5 10 a5 e3 f9 73 a5 e3   .X...........s..
0020  f9 64 01 f4 01 f4 00 44 87 50 88 d2 dc 92 e4 db   .d.....D.P......
0030  8e 25 bb ca e9 0b dd 0b 40 bd 08 10 20 01 28 f4   .%......@... .(.
0040  46 66 00 00 00 3c f4 7c 8f 76 b1 5c bf 25 99 7b   Ff...<.|.v.\.%.{
0050  19 6c 17 fa c7 29 22 37 0a e1 b5 e2 22 91 38 38   .l...)"7....".88
0060  f3 a3 bf 3f 8b b6 97 ea 94 59                     ...?.....Y

Frame 10 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Sep 29, 2005 09:09:34.305692000
    Time delta from previous packet: 5.328429000 seconds
    Time since reference or first frame: 14.970707000 seconds
    Frame Number: 10
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:0f:b5:5f:1b:8f
    Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f)
    Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc)
    Type: IP (0x0800)
    Frame check sequence: 0x3f5b9f75 (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.100 (165.227.249.100)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0001 (1)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: ESP (0x32)
    Header checksum: 0xfbb3 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.100 (165.227.249.100)
Encapsulating Security Payload
    SPI: 0xdb76d899
    Sequence: 1
    Data (92 bytes)

0000  00 0f b5 5f 1b 8f 00 0c 29 1d cf fc 08 00 45 00   ..._....).....E.
0010  00 78 00 01 00 00 80 32 fb b3 a5 e3 f9 73 a5 e3   .x.....2.....s..
0020  f9 64 db 76 d8 99 00 00 00 01 33 b0 15 db 12 37   .d.v......3....7
0030  28 c2 a2 31 61 16 62 8e 1c 71 fb ba e7 e7 e8 24   (..1a.b..q.....$
0040  19 0d 1b 0f f0 ec 75 3d 29 6b 14 3f 91 22 92 d7   ......u=)k.?."..
0050  a8 f0 01 32 76 61 46 12 d2 74 f7 84 59 05 6a d8   ...2vaF..t..Y.j.
0060  af e8 28 14 c6 61 b4 0a 1d b7 02 c2 6a c2 bb 4e   ..(..a......j..N
0070  e6 9f f6 83 79 f7 06 45 ec 59 0e 9a 3c ae 9f e5   ....y..E.Y..<...
0080  75 55 52 b0 cf c8 3f 5b 9f 75                     uUR...?[.u

Frame 11 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Sep 29, 2005 09:09:34.335845000
    Time delta from previous packet: 0.030153000 seconds
    Time since reference or first frame: 15.000860000 seconds
    Frame Number: 11
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:1d:cf:fc
    Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc)
    Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f)
    Type: IP (0x0800)
    Frame check sequence: 0xadb63c10 (correct)
Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x6911 (26897)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 30
    Protocol: ESP (0x32)
    Header checksum: 0xf4a3 (correct)
    Source: 165.227.249.100 (165.227.249.100)
    Destination: 165.227.249.115 (165.227.249.115)
Encapsulating Security Payload
    SPI: 0x4ad7331a
    Sequence: 1
    Data (92 bytes)

0000  00 0c 29 1d cf fc 00 0f b5 5f 1b 8f 08 00 45 00   ..)......_....E.
0010  00 78 69 11 00 00 1e 32 f4 a3 a5 e3 f9 64 a5 e3   .xi....2.....d..
0020  f9 73 4a d7 33 1a 00 00 00 01 85 7c 90 7c 0f 27   .sJ.3......|.|.'
0030  ff 3c 00 00 00 00 00 00 00 00 90 e8 24 69 7f f9   .<..........$i..
0040  18 dc 93 58 1f b8 1b 2b ad 28 bd 11 14 6a 50 74   ...X...+.(...jPt
0050  80 2c 0b 39 62 44 71 09 5c 71 8e 68 2d 58 60 7d   .,.9bDq.\q.h-X`}
0060  39 c9 b1 8b 9d 60 ac 37 86 69 44 3c 51 15 e7 79   9....`.7.iD<Q..y
0070  35 64 1f a0 87 af f1 6b e6 5d ec 58 8f b8 82 e5   5d.....k.].X....
0080  78 81 61 7b 60 e1 ad b6 3c 10                     x.a{`...<.

Frame 12 (330 bytes on wire, 330 bytes captured)
    Arrival Time: Sep 29, 2005 09:09:35.655135000
    Time delta from previous packet: 1.319290000 seconds
    Time since reference or first frame: 16.320150000 seconds
    Frame Number: 12
    Packet Length: 330 bytes
    Capture Length: 330 bytes
Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:1d:cf:fc
    Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc)
    Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f)
    Type: IP (0x0800)
    Frame check sequence: 0xa20dda40 (correct)
Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 312
    Identification: 0x0039 (57)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3add (correct)
    Source: 165.227.249.100 (165.227.249.100)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 292
    Checksum: 0x0d64 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x88D2DC92E4DB8E25
    Responder cookie: 0xBBCAE90BDD0B40BD
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x28F44666
    Length: 284
    Encrypted payload (256 bytes)

0000  00 0c 29 1d cf fc 00 0f b5 5f 1b 8f 08 00 45 00   ..)......_....E.
0010  01 38 00 39 00 00 40 11 3a dd a5 e3 f9 64 a5 e3   .8.9..@.:....d..
0020  f9 73 01 f4 01 f4 01 24 0d 64 88 d2 dc 92 e4 db   .s.....$.d......
0030  8e 25 bb ca e9 0b dd 0b 40 bd 08 10 20 01 28 f4   .%......@... .(.
0040  46 66 00 00 01 1c 00 97 00 d2 bb a9 8b e0 ac ca   Ff..............
0050  58 8a 67 e8 c0 98 2e db 03 c2 2c c0 40 c3 56 5c   X.g.......,.@.V\
0060  97 1b 7f f9 1f c0 2f d3 6b 2d 1c f8 a2 95 c5 31   ....../.k-.....1
0070  6c dd e5 61 aa a3 dd 33 68 71 81 a5 e0 d0 65 c9   l..a...3hq....e.
0080  2c 2c fa a9 09 b7 d9 3f 42 19 25 de 9f a3 c2 0e   ,,.....?B.%.....
0090  56 6f aa cb 0d 62 50 69 5a c7 d2 21 b0 58 97 2a   Vo...bPiZ..!.X.*
00a0  64 95 4b 6b a9 85 62 9d 23 5c 5c d6 e4 ba 49 64   d.Kk..b.#\\...Id
00b0  f1 04 bd bb 65 96 fd ec 9a 1b f0 a6 7a b1 36 99   ....e.......z.6.
00c0  26 8e 29 c1 e3 a1 cd fe cf 60 48 73 f1 eb c1 f2   &.)......`Hs....
00d0  23 0b 3d 17 2f 6a ad c1 11 88 fb 32 58 5f a7 e3   #.=./j.....2X_..
00e0  53 95 fb 1b 57 f9 a5 ae f2 5b 6c 3c e9 ef 1a 69   S...W....[l<...i
00f0  80 2f c4 0c 1a 80 84 2b d8 e6 c6 03 86 89 4d c9   ./.....+......M.
0100  8a fa 30 2e 54 e9 0d bf 64 6f d7 da 57 f1 5a 55   ..0.T...do..W.ZU
0110  27 64 ed c3 2a 39 02 68 77 a0 0a 1b e3 d9 c6 e8   'd..*9.hw.......
0120  d8 17 9f d9 ee 40 72 80 ea 78 24 6f 87 3c f8 f9   .....@r..x$o.<..
0130  92 f0 da c0 98 a2 b9 13 50 35 54 bf e1 14 ae 5b   ........P5T....[
0140  b6 cf 12 ce 8e 93 a2 0d da 40                     .........@

Frame 13 (106 bytes on wire, 106 bytes captured)
    Arrival Time: Sep 29, 2005 09:09:35.656883000
    Time delta from previous packet: 0.001748000 seconds
    Time since reference or first frame: 16.321898000 seconds
    Frame Number: 13
    Packet Length: 106 bytes
    Capture Length: 106 bytes
Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:0f:b5:5f:1b:8f
    Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f)
    Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc)
    Type: IP (0x0800)
    Frame check sequence: 0x0caa74f1 (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.100 (165.227.249.100)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 88
    Identification: 0x06ea (1770)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf50b (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.100 (165.227.249.100)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 68
    Checksum: 0x8750 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x88D2DC92E4DB8E25
    Responder cookie: 0xBBCAE90BDD0B40BD
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x28F44666
    Length: 60
    Encrypted payload (32 bytes)

0000  00 0f b5 5f 1b 8f 00 0c 29 1d cf fc 08 00 45 00   ..._....).....E.
0010  00 58 06 ea 00 00 80 11 f5 0b a5 e3 f9 73 a5 e3   .X...........s..
0020  f9 64 01 f4 01 f4 00 44 87 50 88 d2 dc 92 e4 db   .d.....D.P......
0030  8e 25 bb ca e9 0b dd 0b 40 bd 08 10 20 01 28 f4   .%......@... .(.
0040  46 66 00 00 00 3c f4 7c 8f 76 b1 5c bf 25 99 7b   Ff...<.|.v.\.%.{
0050  19 6c 17 fa c7 29 22 37 0a e1 b5 e2 22 91 38 38   .l...)"7....".88
0060  f3 a3 bf 3f 8b b6 0c aa 74 f1                     ...?....t.

Frame 14 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Sep 29, 2005 09:09:37.926313000
    Time delta from previous packet: 2.269430000 seconds
    Time since reference or first frame: 18.591328000 seconds
    Frame Number: 14
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:0f:b5:5f:1b:8f
    Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f)
    Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc)
    Type: IP (0x0800)
    Frame check sequence: 0x06b380ed (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.100 (165.227.249.100)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0002 (2)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: ESP (0x32)
    Header checksum: 0xfbb2 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.100 (165.227.249.100)
Encapsulating Security Payload
    SPI: 0xdb76d899
    Sequence: 2
    Data (92 bytes)

0000  00 0f b5 5f 1b 8f 00 0c 29 1d cf fc 08 00 45 00   ..._....).....E.
0010  00 78 00 02 00 00 80 32 fb b2 a5 e3 f9 73 a5 e3   .x.....2.....s..
0020  f9 64 db 76 d8 99 00 00 00 02 02 c2 6a c2 bb 4e   .d.v........j..N
0030  e6 9f f6 83 79 f7 06 45 ec 59 22 85 24 df 50 85   ....y..E.Y".$.P.
0040  33 65 5d 3a 3c d1 df 71 07 62 3f f8 64 4d 28 c6   3e]:<..q.b?.dM(.
0050  3a 3b 67 31 f1 09 64 20 54 61 31 a5 8f f0 1d cb   :;g1..d Ta1.....
0060  9c dc c6 04 4c 4e f9 a8 38 bc 01 a7 3f dc a2 d0   ....LN..8...?...
0070  a6 62 06 6d 9b 8a 9c 2b d7 40 9d 39 47 b6 a8 fc   .b.m...+.@.9G...
0080  06 fb 86 f0 15 a2 06 b3 80 ed                     ..........

Frame 15 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Sep 29, 2005 09:09:37.929382000
    Time delta from previous packet: 0.003069000 seconds
    Time since reference or first frame: 18.594397000 seconds
    Frame Number: 15
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:1d:cf:fc
    Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc)
    Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f)
    Type: IP (0x0800)
    Frame check sequence: 0xb0f16ea5 (correct)
Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0ee3 (3811)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 30
    Protocol: ESP (0x32)
    Header checksum: 0x4ed2 (correct)
    Source: 165.227.249.100 (165.227.249.100)
    Destination: 165.227.249.115 (165.227.249.115)
Encapsulating Security Payload
    SPI: 0x4ad7331a
    Sequence: 2
    Data (92 bytes)

0000  00 0c 29 1d cf fc 00 0f b5 5f 1b 8f 08 00 45 00   ..)......_....E.
0010  00 78 0e e3 00 00 1e 32 4e d2 a5 e3 f9 64 a5 e3   .x.....2N....d..
0020  f9 73 4a d7 33 1a 00 00 00 02 44 3c 51 15 e7 79   .sJ.3.....D<Q..y
0030  35 64 1f a0 87 af f1 6b e6 5d 54 0a 30 67 c8 1b   5d.....k.]T.0g..
0040  85 58 05 8a 64 e7 3a 24 dc 5a 89 81 4b 30 36 26   .X..d.:$.Z..K06&
0050  27 9b db ba fd e0 f5 78 52 96 30 ae 04 7d f4 95   '......xR.0..}..
0060  7a 89 96 c3 d1 d7 2b 9e 97 38 98 5a e4 5f 38 e0   z.....+..8.Z._8.
0070  54 12 5b 0b e5 81 f4 da d5 b9 c3 d3 cc f7 d3 fd   T.[.............
0080  f2 1d db 65 54 92 b0 f1 6e a5                     ...eT...n.

Frame 16 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Sep 29, 2005 09:09:38.937295000
    Time delta from previous packet: 1.007913000 seconds
    Time since reference or first frame: 19.602310000 seconds
    Frame Number: 16
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:0f:b5:5f:1b:8f
    Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f)
    Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc)
    Type: IP (0x0800)
    Frame check sequence: 0xe3a01d3c (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.100 (165.227.249.100)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0003 (3)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: ESP (0x32)
    Header checksum: 0xfbb1 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.100 (165.227.249.100)
Encapsulating Security Payload
    SPI: 0xdb76d899
    Sequence: 3
    Data (92 bytes)

0000  00 0f b5 5f 1b 8f 00 0c 29 1d cf fc 08 00 45 00   ..._....).....E.
0010  00 78 00 03 00 00 80 32 fb b1 a5 e3 f9 73 a5 e3   .x.....2.....s..
0020  f9 64 db 76 d8 99 00 00 00 03 01 a7 3f dc a2 d0   .d.v........?...
0030  a6 62 06 6d 9b 8a 9c 2b d7 40 d6 ce 18 65 c4 31   .b.m...+.@...e.1
0040  12 41 9b d6 8f ba ac 93 f9 a1 a3 c1 ea a3 2b ef   .A............+.
0050  6b b2 86 66 4d 0e 62 d1 06 39 79 20 c9 79 7e 63   k..fM.b..9y .y~c
0060  ee 0b 7e ee 76 c1 0a d5 08 1d d6 62 5a 41 f3 04   ..~.v......bZA..
0070  0a 3b f8 b9 26 06 0e 23 85 d2 9e aa 6d 00 64 43   .;..&..#....m.dC
0080  00 91 8a 0d cd 3c e3 a0 1d 3c                     .....<...<

Frame 17 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Sep 29, 2005 09:09:38.940411000
    Time delta from previous packet: 0.003116000 seconds
    Time since reference or first frame: 19.605426000 seconds
    Frame Number: 17
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:1d:cf:fc
    Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc)
    Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f)
    Type: IP (0x0800)
    Frame check sequence: 0x7dbae397 (correct)
Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x7b13 (31507)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 30
    Protocol: ESP (0x32)
    Header checksum: 0xe2a1 (correct)
    Source: 165.227.249.100 (165.227.249.100)
    Destination: 165.227.249.115 (165.227.249.115)
Encapsulating Security Payload
    SPI: 0x4ad7331a
    Sequence: 3
    Data (92 bytes)

0000  00 0c 29 1d cf fc 00 0f b5 5f 1b 8f 08 00 45 00   ..)......_....E.
0010  00 78 7b 13 00 00 1e 32 e2 a1 a5 e3 f9 64 a5 e3   .x{....2.....d..
0020  f9 73 4a d7 33 1a 00 00 00 03 98 5a e4 5f 38 e0   .sJ.3......Z._8.
0030  54 12 5b 0b e5 81 f4 da d5 b9 c9 03 22 c4 4f 40   T.[.........".O@
0040  89 69 37 81 ec ba 59 95 77 ad e5 06 68 c1 be e3   .i7...Y.w...h...
0050  4a 43 5f cc 89 76 b8 e7 9a 6f d6 c4 81 97 0b 7c   JC_..v...o.....|
0060  29 70 d2 25 2b be 76 e7 c5 7a 4e 45 ae b3 11 e1   )p.%+.v..zNE....
0070  68 49 f2 f3 85 b0 d3 15 e4 70 19 4d 90 ae 36 5b   hI.......p.M..6[
0080  0e 91 15 ed 72 b5 7d ba e3 97                     ....r.}...

Frame 18 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Sep 29, 2005 09:09:39.945159000
    Time delta from previous packet: 1.004748000 seconds
    Time since reference or first frame: 20.610174000 seconds
    Frame Number: 18
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:0f:b5:5f:1b:8f
    Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f)
    Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc)
    Type: IP (0x0800)
    Frame check sequence: 0x173e40de (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.100 (165.227.249.100)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0004 (4)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: ESP (0x32)
    Header checksum: 0xfbb0 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.100 (165.227.249.100)
Encapsulating Security Payload
    SPI: 0xdb76d899
    Sequence: 4
    Data (92 bytes)

0000  00 0f b5 5f 1b 8f 00 0c 29 1d cf fc 08 00 45 00   ..._....).....E.
0010  00 78 00 04 00 00 80 32 fb b0 a5 e3 f9 73 a5 e3   .x.....2.....s..
0020  f9 64 db 76 d8 99 00 00 00 04 d6 62 5a 41 f3 04   .d.v.......bZA..
0030  0a 3b f8 b9 26 06 0e 23 85 d2 be ba 8c c9 78 94   .;..&..#......x.
0040  95 9d 72 89 1c fe 23 f8 1e 79 03 4f dd 4b 76 af   ..r...#..y.O.Kv.
0050  eb 35 f3 0e 60 3e 00 73 ad c1 10 3d 53 d1 a3 a6   .5..`>.s...=S...
0060  cf b6 1e d4 36 e1 3b 40 d9 da 1c 66 cd f2 99 41   ....6.;@...f...A
0070  cf 52 95 18 34 f6 58 9d 69 59 f2 32 45 98 97 ee   .R..4.X.iY.2E...
0080  b0 a7 0a f4 ff 19 17 3e 40 de                     .......>@.

Frame 19 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Sep 29, 2005 09:09:39.948151000
    Time delta from previous packet: 0.002992000 seconds
    Time since reference or first frame: 20.613166000 seconds
    Frame Number: 19
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:1d:cf:fc
    Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc)
    Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f)
    Type: IP (0x0800)
    Frame check sequence: 0x5671ed0a (correct)
Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0630 (1584)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 30
    Protocol: ESP (0x32)
    Header checksum: 0x5785 (correct)
    Source: 165.227.249.100 (165.227.249.100)
    Destination: 165.227.249.115 (165.227.249.115)
Encapsulating Security Payload
    SPI: 0x4ad7331a
    Sequence: 4
    Data (92 bytes)

0000  00 0c 29 1d cf fc 00 0f b5 5f 1b 8f 08 00 45 00   ..)......_....E.
0010  00 78 06 30 00 00 1e 32 57 85 a5 e3 f9 64 a5 e3   .x.0...2W....d..
0020  f9 73 4a d7 33 1a 00 00 00 04 4e 45 ae b3 11 e1   .sJ.3.....NE....
0030  68 49 f2 f3 85 b0 d3 15 e4 70 19 3f 94 bb 23 9a   hI.......p.?..#.
0040  d2 7a 3c 21 c7 28 a9 79 1a 02 b1 33 ee 7e 51 43   .z<!.(.y...3.~QC
0050  e9 dd 4d 54 c1 49 08 f7 39 99 c9 f1 7d 2c df 21   ..MT.I..9...},.!
0060  62 5d 20 6d 45 d5 aa 03 87 07 91 90 f8 f6 5a 6a   b] mE.........Zj
0070  b7 de 11 b4 6f c5 f1 a4 90 44 41 1b 1d 3d 33 24   ....o....DA..=3$
0080  54 7d f6 48 11 21 56 71 ed 0a                     T}.H.!Vq..

Frame 20 (330 bytes on wire, 330 bytes captured)
    Arrival Time: Sep 29, 2005 09:09:40.664723000
    Time delta from previous packet: 0.716572000 seconds
    Time since reference or first frame: 21.329738000 seconds
    Frame Number: 20
    Packet Length: 330 bytes
    Capture Length: 330 bytes
Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:1d:cf:fc
    Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc)
    Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f)
    Type: IP (0x0800)
    Frame check sequence: 0xdef18706 (correct)
Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 312
    Identification: 0x003a (58)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3adc (correct)
    Source: 165.227.249.100 (165.227.249.100)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 292
    Checksum: 0x0d64 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x88D2DC92E4DB8E25
    Responder cookie: 0xBBCAE90BDD0B40BD
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x28F44666
    Length: 284
    Encrypted payload (256 bytes)

0000  00 0c 29 1d cf fc 00 0f b5 5f 1b 8f 08 00 45 00   ..)......_....E.
0010  01 38 00 3a 00 00 40 11 3a dc a5 e3 f9 64 a5 e3   .8.:..@.:....d..
0020  f9 73 01 f4 01 f4 01 24 0d 64 88 d2 dc 92 e4 db   .s.....$.d......
0030  8e 25 bb ca e9 0b dd 0b 40 bd 08 10 20 01 28 f4   .%......@... .(.
0040  46 66 00 00 01 1c 00 97 00 d2 bb a9 8b e0 ac ca   Ff..............
0050  58 8a 67 e8 c0 98 2e db 03 c2 2c c0 40 c3 56 5c   X.g.......,.@.V\
0060  97 1b 7f f9 1f c0 2f d3 6b 2d 1c f8 a2 95 c5 31   ....../.k-.....1
0070  6c dd e5 61 aa a3 dd 33 68 71 81 a5 e0 d0 65 c9   l..a...3hq....e.
0080  2c 2c fa a9 09 b7 d9 3f 42 19 25 de 9f a3 c2 0e   ,,.....?B.%.....
0090  56 6f aa cb 0d 62 50 69 5a c7 d2 21 b0 58 97 2a   Vo...bPiZ..!.X.*
00a0  64 95 4b 6b a9 85 62 9d 23 5c 5c d6 e4 ba 49 64   d.Kk..b.#\\...Id
00b0  f1 04 bd bb 65 96 fd ec 9a 1b f0 a6 7a b1 36 99   ....e.......z.6.
00c0  26 8e 29 c1 e3 a1 cd fe cf 60 48 73 f1 eb c1 f2   &.)......`Hs....
00d0  23 0b 3d 17 2f 6a ad c1 11 88 fb 32 58 5f a7 e3   #.=./j.....2X_..
00e0  53 95 fb 1b 57 f9 a5 ae f2 5b 6c 3c e9 ef 1a 69   S...W....[l<...i
00f0  80 2f c4 0c 1a 80 84 2b d8 e6 c6 03 86 89 4d c9   ./.....+......M.
0100  8a fa 30 2e 54 e9 0d bf 64 6f d7 da 57 f1 5a 55   ..0.T...do..W.ZU
0110  27 64 ed c3 2a 39 02 68 77 a0 0a 1b e3 d9 c6 e8   'd..*9.hw.......
0120  d8 17 9f d9 ee 40 72 80 ea 78 24 6f 87 3c f8 f9   .....@r..x$o.<..
0130  92 f0 da c0 98 a2 b9 13 50 35 54 bf e1 14 ae 5b   ........P5T....[
0140  b6 cf 12 ce 8e 93 de f1 87 06                     ..........

Frame 21 (106 bytes on wire, 106 bytes captured)
    Arrival Time: Sep 29, 2005 09:09:40.666243000
    Time delta from previous packet: 0.001520000 seconds
    Time since reference or first frame: 21.331258000 seconds
    Frame Number: 21
    Packet Length: 106 bytes
    Capture Length: 106 bytes
Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:0f:b5:5f:1b:8f
    Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f)
    Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc)
    Type: IP (0x0800)
    Frame check sequence: 0x6fe58b27 (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.100 (165.227.249.100)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 88
    Identification: 0x06ef (1775)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf506 (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.100 (165.227.249.100)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 68
    Checksum: 0x8750 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x88D2DC92E4DB8E25
    Responder cookie: 0xBBCAE90BDD0B40BD
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x28F44666
    Length: 60
    Encrypted payload (32 bytes)

0000  00 0f b5 5f 1b 8f 00 0c 29 1d cf fc 08 00 45 00   ..._....).....E.
0010  00 58 06 ef 00 00 80 11 f5 06 a5 e3 f9 73 a5 e3   .X...........s..
0020  f9 64 01 f4 01 f4 00 44 87 50 88 d2 dc 92 e4 db   .d.....D.P......
0030  8e 25 bb ca e9 0b dd 0b 40 bd 08 10 20 01 28 f4   .%......@... .(.
0040  46 66 00 00 00 3c f4 7c 8f 76 b1 5c bf 25 99 7b   Ff...<.|.v.\.%.{
0050  19 6c 17 fa c7 29 22 37 0a e1 b5 e2 22 91 38 38   .l...)"7....".88
0060  f3 a3 bf 3f 8b b6 6f e5 8b 27                     ...?..o..'

Frame 22 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Sep 29, 2005 09:09:40.953038000
    Time delta from previous packet: 0.286795000 seconds
    Time since reference or first frame: 21.618053000 seconds
    Frame Number: 22
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:0f:b5:5f:1b:8f
    Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f)
    Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc)
    Type: IP (0x0800)
    Frame check sequence: 0xc42d536f (correct)
Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.100 (165.227.249.100)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0005 (5)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: ESP (0x32)
    Header checksum: 0xfbaf (correct)
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.100 (165.227.249.100)
Encapsulating Security Payload
    SPI: 0xdb76d899
    Sequence: 5
    Data (92 bytes)

0000  00 0f b5 5f 1b 8f 00 0c 29 1d cf fc 08 00 45 00   ..._....).....E.
0010  00 78 00 05 00 00 80 32 fb af a5 e3 f9 73 a5 e3   .x.....2.....s..
0020  f9 64 db 76 d8 99 00 00 00 05 1c 66 cd f2 99 41   .d.v.......f...A
0030  cf 52 95 18 34 f6 58 9d 69 59 fd a5 60 a6 b1 44   .R..4.X.iY..`..D
0040  63 d2 fb 13 39 aa 83 e1 0d ff 76 cf 66 c6 18 83   c...9.....v.f...
0050  58 e3 48 51 b4 dc 61 e3 96 7d d9 45 3c d2 fc 15   X.HQ..a..}.E<...
0060  53 1b 60 78 40 a6 fb ce a1 3d 29 31 fd bc 03 87   S.`x@....=)1....
0070  79 9d a6 00 62 d8 e6 c5 ae 53 42 9d 4d 77 17 08   y...b....SB.Mw..
0080  6c 27 af 0d ac 6b c4 2d 53 6f                     l'...k.-So

Frame 23 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Sep 29, 2005 09:09:40.956041000
    Time delta from previous packet: 0.003003000 seconds
    Time since reference or first frame: 21.621056000 seconds
    Frame Number: 23
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:1d:cf:fc
    Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc)
    Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f)
    Type: IP (0x0800)
    Frame check sequence: 0xa381b6e2 (correct)
Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x5c70 (23664)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 30
    Protocol: ESP (0x32)
    Header checksum: 0x0145 (correct)
    Source: 165.227.249.100 (165.227.249.100)
    Destination: 165.227.249.115 (165.227.249.115)
Encapsulating Security Payload
    SPI: 0x4ad7331a
    Sequence: 5
    Data (92 bytes)

0000  00 0c 29 1d cf fc 00 0f b5 5f 1b 8f 08 00 45 00   ..)......_....E.
0010  00 78 5c 70 00 00 1e 32 01 45 a5 e3 f9 64 a5 e3   .x\p...2.E...d..
0020  f9 73 4a d7 33 1a 00 00 00 05 91 90 f8 f6 5a 6a   .sJ.3.........Zj
0030  b7 de 11 b4 6f c5 f1 a4 90 44 b9 ac 6e 1d e9 1e   ....o....D..n...
0040  28 20 36 8c 24 ed 5a 40 3e c4 11 aa 29 aa 2b 18   ( 6.$.Z@>...).+.
0050  de aa 92 6b 3a a7 ff 96 72 b7 7a 7f b1 ac 90 55   ...k:...r.z....U
0060  fb 0c 9a 4c d9 9e bb c0 00 27 56 71 46 9d 24 8d   ...L.....'VqF.$.
0070  d6 4e 8a 2d 5b 35 9d cd 29 aa f0 4f 0f e3 99 dc   .N.-[5..)..O....
0080  da 90 d9 00 13 29 a3 81 b6 e2                     .....)....