Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Feb 22, 2010 14:57:17.549284000 [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 166 bytes Capture Length: 166 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02) Destination: 00:00:00:00:00:02 (00:00:00:00:00:02) Address: 00:00:00:00:00:02 (00:00:00:00:00:02) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x01c2 (450) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9f0 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0x54c0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 276CBFDC2D34A360 Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Next payload: NONE (0) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n 0000 00 00 00 00 00 02 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 00 98 01 c2 00 00 80 11 f9 f0 a5 e3 f9 73 a5 e3 .............s.. 0020 f9 67 01 f4 01 f4 00 84 54 c0 27 6c bf dc 2d 34 .g......T.'l..-4 0030 a3 60 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .`.............. 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 ..D..-.......F.y 0090 dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 ..........>.in.c 00a0 81 b5 ec 42 7b 1f ...B{. Frame 2 (166 bytes on wire, 166 bytes captured) Arrival Time: Feb 22, 2010 14:57:17.549301000 [Time delta from previous captured frame: 0.000017000 seconds] [Time delta from previous displayed frame: 0.000017000 seconds] [Time since reference or first frame: 0.000017000 seconds] Frame Number: 2 Frame Length: 166 bytes Capture Length: 166 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02) Destination: 00:00:00:00:00:02 (00:00:00:00:00:02) Address: 00:00:00:00:00:02 (00:00:00:00:00:02) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x01c2 (450) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9f0 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0x54c0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 276CBFDC2D34A360 Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Next payload: NONE (0) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n 0000 00 00 00 00 00 02 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 00 98 01 c2 00 00 80 11 f9 f0 a5 e3 f9 73 a5 e3 .............s.. 0020 f9 67 01 f4 01 f4 00 84 54 c0 27 6c bf dc 2d 34 .g......T.'l..-4 0030 a3 60 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .`.............. 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 ..D..-.......F.y 0090 dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 ..........>.in.c 00a0 81 b5 ec 42 7b 1f ...B{. Frame 3 (166 bytes on wire, 166 bytes captured) Arrival Time: Feb 22, 2010 14:57:17.612535000 [Time delta from previous captured frame: 0.063234000 seconds] [Time delta from previous displayed frame: 0.063234000 seconds] [Time since reference or first frame: 0.063251000 seconds] Frame Number: 3 Frame Length: 166 bytes Capture Length: 166 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:00:00:00:00:02 (00:00:00:00:00:02), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:00:00:00:00:02 (00:00:00:00:00:02) Address: 00:00:00:00:00:02 (00:00:00:00:00:02) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbb2 [correct] [Good: True] [Bad : False] Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0xec85 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 276CBFDC2D34A360 Responder cookie: 32269F13209427BA Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Next payload: Vendor ID (13) Payload length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35 Next payload: NONE (0) Payload length: 20 Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 6d a9 a5 00 00 00 00 00 02 08 00 45 00 ..)m..........E. 0010 00 98 00 00 40 00 40 11 fb b2 a5 e3 f9 67 a5 e3 ....@.@......g.. 0020 f9 73 01 f4 01 f4 00 84 ec 85 27 6c bf dc 2d 34 .s........'l..-4 0030 a3 60 32 26 9f 13 20 94 27 ba 01 10 02 00 00 00 .`2&.. .'....... 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 0090 01 00 00 00 00 14 70 03 cb c1 09 7d be 9c 26 00 ......p....}..&. 00a0 ba 69 83 bc 8b 35 .i...5 Frame 4 (298 bytes on wire, 298 bytes captured) Arrival Time: Feb 22, 2010 14:57:19.521586000 [Time delta from previous captured frame: 1.909051000 seconds] [Time delta from previous displayed frame: 1.909051000 seconds] [Time since reference or first frame: 1.972302000 seconds] Frame Number: 4 Frame Length: 298 bytes Capture Length: 298 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02) Destination: 00:00:00:00:00:02 (00:00:00:00:00:02) Address: 00:00:00:00:00:02 (00:00:00:00:00:02) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x01c5 (453) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf969 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0x3e21 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 276CBFDC2D34A360 Responder cookie: 32269F13209427BA Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: Vendor ID (13) Payload length: 24 Nonce Data Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Next payload: Vendor ID (13) Payload length: 48 Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Vendor ID: DA8E937880010000 Next payload: Vendor ID (13) Payload length: 12 Vendor ID: DA8E937880010000 Vendor ID: draft-beaulieu-ike-xauth-02.txt Next payload: NONE (0) Payload length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 00 00 00 00 02 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 01 1c 01 c5 00 00 80 11 f9 69 a5 e3 f9 73 a5 e3 .........i...s.. 0020 f9 67 01 f4 01 f4 01 08 3e 21 27 6c bf dc 2d 34 .g......>!'l..-4 0030 a3 60 32 26 9f 13 20 94 27 ba 04 10 02 00 00 00 .`2&.. .'....... 0040 00 00 00 00 01 00 0a 00 00 84 5e e7 fb 34 a6 7f ..........^..4.. 0050 08 f3 5f 75 eb 43 95 f9 b1 df ca d8 90 42 b9 f6 .._u.C.......B.. 0060 9b 12 dc 6e c1 e9 9d e9 f0 c8 20 fe 77 4d a1 e4 ...n...... .wM.. 0070 98 84 4b 18 13 45 60 41 0f 37 3a ff 30 23 77 c0 ..K..E`A.7:.0#w. 0080 f1 ca 65 2b c1 f3 d0 ba df 8e 41 bd fc 28 70 43 ..e+......A..(pC 0090 d3 24 f7 c6 b8 32 0f 18 ff c4 a4 af a5 ca c9 36 .$...2.........6 00a0 cc b9 f8 d1 2d 52 65 ec da 94 e8 52 58 91 ec f6 ....-Re....RX... 00b0 0f 27 81 eb 59 3f 5d 0e c7 40 27 d7 45 51 00 32 .'..Y?]..@'.EQ.2 00c0 0a 4c 34 f6 f0 85 a3 9c c0 13 0d 00 00 18 16 62 .L4............b 00d0 45 0d 23 45 50 9d f4 a0 08 d6 71 cf ef dd e3 0a E.#EP.....q..... 00e0 1a b6 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .....0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 ....&..... Frame 5 (298 bytes on wire, 298 bytes captured) Arrival Time: Feb 22, 2010 14:57:19.521600000 [Time delta from previous captured frame: 0.000014000 seconds] [Time delta from previous displayed frame: 0.000014000 seconds] [Time since reference or first frame: 1.972316000 seconds] Frame Number: 5 Frame Length: 298 bytes Capture Length: 298 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02) Destination: 00:00:00:00:00:02 (00:00:00:00:00:02) Address: 00:00:00:00:00:02 (00:00:00:00:00:02) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x01c5 (453) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf969 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0x3e21 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 276CBFDC2D34A360 Responder cookie: 32269F13209427BA Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: Vendor ID (13) Payload length: 24 Nonce Data Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Next payload: Vendor ID (13) Payload length: 48 Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Vendor ID: DA8E937880010000 Next payload: Vendor ID (13) Payload length: 12 Vendor ID: DA8E937880010000 Vendor ID: draft-beaulieu-ike-xauth-02.txt Next payload: NONE (0) Payload length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 00 00 00 00 02 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 01 1c 01 c5 00 00 80 11 f9 69 a5 e3 f9 73 a5 e3 .........i...s.. 0020 f9 67 01 f4 01 f4 01 08 3e 21 27 6c bf dc 2d 34 .g......>!'l..-4 0030 a3 60 32 26 9f 13 20 94 27 ba 04 10 02 00 00 00 .`2&.. .'....... 0040 00 00 00 00 01 00 0a 00 00 84 5e e7 fb 34 a6 7f ..........^..4.. 0050 08 f3 5f 75 eb 43 95 f9 b1 df ca d8 90 42 b9 f6 .._u.C.......B.. 0060 9b 12 dc 6e c1 e9 9d e9 f0 c8 20 fe 77 4d a1 e4 ...n...... .wM.. 0070 98 84 4b 18 13 45 60 41 0f 37 3a ff 30 23 77 c0 ..K..E`A.7:.0#w. 0080 f1 ca 65 2b c1 f3 d0 ba df 8e 41 bd fc 28 70 43 ..e+......A..(pC 0090 d3 24 f7 c6 b8 32 0f 18 ff c4 a4 af a5 ca c9 36 .$...2.........6 00a0 cc b9 f8 d1 2d 52 65 ec da 94 e8 52 58 91 ec f6 ....-Re....RX... 00b0 0f 27 81 eb 59 3f 5d 0e c7 40 27 d7 45 51 00 32 .'..Y?]..@'.EQ.2 00c0 0a 4c 34 f6 f0 85 a3 9c c0 13 0d 00 00 18 16 62 .L4............b 00d0 45 0d 23 45 50 9d f4 a0 08 d6 71 cf ef dd e3 0a E.#EP.....q..... 00e0 1a b6 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .....0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 ....&..... Frame 6 (242 bytes on wire, 242 bytes captured) Arrival Time: Feb 22, 2010 14:57:19.697325000 [Time delta from previous captured frame: 0.175725000 seconds] [Time delta from previous displayed frame: 0.175725000 seconds] [Time since reference or first frame: 2.148041000 seconds] Frame Number: 6 Frame Length: 242 bytes Capture Length: 242 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:00:00:00:00:02 (00:00:00:00:00:02), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:00:00:00:00:02 (00:00:00:00:00:02) Address: 00:00:00:00:00:02 (00:00:00:00:00:02) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 228 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb66 [correct] [Good: True] [Bad : False] Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 208 Checksum: 0x7ee0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 276CBFDC2D34A360 Responder cookie: 32269F13209427BA Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 200 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: Vendor ID (13) Payload length: 20 Nonce Data Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35 Next payload: NONE (0) Payload length: 20 Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 6d a9 a5 00 00 00 00 00 02 08 00 45 00 ..)m..........E. 0010 00 e4 00 00 40 00 40 11 fb 66 a5 e3 f9 67 a5 e3 ....@.@..f...g.. 0020 f9 73 01 f4 01 f4 00 d0 7e e0 27 6c bf dc 2d 34 .s......~.'l..-4 0030 a3 60 32 26 9f 13 20 94 27 ba 04 10 02 00 00 00 .`2&.. .'....... 0040 00 00 00 00 00 c8 0a 00 00 84 ca fa 9e 01 12 c1 ................ 0050 7a 75 1d d5 2f 0a 78 3c 84 69 94 b5 87 b7 a6 12 zu../.x<.i...... 0060 6a 1b 12 c8 0c 04 76 73 e5 8e 44 be 30 de 72 8a j.....vs..D.0.r. 0070 99 8f f7 7f b5 01 58 c3 70 7c a9 e5 93 45 b5 0d ......X.p|...E.. 0080 bd 67 00 af 7c 20 7e 7f e8 7a 0d 24 28 67 f8 15 .g..| ~..z.$(g.. 0090 ee 70 0a 54 5d 4a bf 29 b9 00 33 13 32 bd 98 dc .p.T]J.)..3.2... 00a0 df a5 1c ee 05 85 9b 18 e7 34 cc 37 f7 2a 7b f8 .........4.7.*{. 00b0 26 cf 11 f4 52 6b 41 af 4c ca 5b b1 9b 2a e9 d8 &...RkA.L.[..*.. 00c0 1a cb 9f 26 3b e2 7b 98 5e cd 0d 00 00 14 83 6d ...&;.{.^......m 00d0 7f 3d 2f 94 25 f8 25 c8 d0 eb d8 6d 37 80 00 00 .=/.%.%....m7... 00e0 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 00f0 8b 35 .5 Frame 7 (134 bytes on wire, 134 bytes captured) Arrival Time: Feb 22, 2010 14:57:20.755846000 [Time delta from previous captured frame: 1.058521000 seconds] [Time delta from previous displayed frame: 1.058521000 seconds] [Time since reference or first frame: 3.206562000 seconds] Frame Number: 7 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02) Destination: 00:00:00:00:00:02 (00:00:00:00:00:02) Address: 00:00:00:00:00:02 (00:00:00:00:00:02) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x01c8 (456) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa0a [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x948d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 276CBFDC2D34A360 Responder cookie: 32269F13209427BA Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 00 00 00 00 02 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 00 78 01 c8 00 00 80 11 fa 0a a5 e3 f9 73 a5 e3 .x...........s.. 0020 f9 67 01 f4 01 f4 00 64 94 8d 27 6c bf dc 2d 34 .g.....d..'l..-4 0030 a3 60 32 26 9f 13 20 94 27 ba 05 10 02 01 00 00 .`2&.. .'....... 0040 00 00 00 00 00 5c a4 7e 1d 0e e0 cc 22 19 c3 a5 .....\.~...."... 0050 91 84 13 97 b3 d0 e8 30 75 2c aa 86 23 ef 88 c5 .......0u,..#... 0060 65 c4 4c 98 4d 7e 18 2f d8 ec 93 f5 da 6c 45 23 e.L.M~./.....lE# 0070 91 4d 90 0a 57 36 0d 54 32 74 3e 25 b7 ca f6 23 .M..W6.T2t>%...# 0080 6b c7 53 a6 b1 48 k.S..H Frame 8 (134 bytes on wire, 134 bytes captured) Arrival Time: Feb 22, 2010 14:57:20.755864000 [Time delta from previous captured frame: 0.000018000 seconds] [Time delta from previous displayed frame: 0.000018000 seconds] [Time since reference or first frame: 3.206580000 seconds] Frame Number: 8 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02) Destination: 00:00:00:00:00:02 (00:00:00:00:00:02) Address: 00:00:00:00:00:02 (00:00:00:00:00:02) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x01c8 (456) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa0a [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x948d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 276CBFDC2D34A360 Responder cookie: 32269F13209427BA Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 00 00 00 00 02 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 00 78 01 c8 00 00 80 11 fa 0a a5 e3 f9 73 a5 e3 .x...........s.. 0020 f9 67 01 f4 01 f4 00 64 94 8d 27 6c bf dc 2d 34 .g.....d..'l..-4 0030 a3 60 32 26 9f 13 20 94 27 ba 05 10 02 01 00 00 .`2&.. .'....... 0040 00 00 00 00 00 5c a4 7e 1d 0e e0 cc 22 19 c3 a5 .....\.~...."... 0050 91 84 13 97 b3 d0 e8 30 75 2c aa 86 23 ef 88 c5 .......0u,..#... 0060 65 c4 4c 98 4d 7e 18 2f d8 ec 93 f5 da 6c 45 23 e.L.M~./.....lE# 0070 91 4d 90 0a 57 36 0d 54 32 74 3e 25 b7 ca f6 23 .M..W6.T2t>%...# 0080 6b c7 53 a6 b1 48 k.S..H Frame 9 (118 bytes on wire, 118 bytes captured) Arrival Time: Feb 22, 2010 14:57:20.799802000 [Time delta from previous captured frame: 0.043938000 seconds] [Time delta from previous displayed frame: 0.043938000 seconds] [Time since reference or first frame: 3.250518000 seconds] Frame Number: 9 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:00:00:00:00:02 (00:00:00:00:00:02), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:00:00:00:00:02 (00:00:00:00:00:02) Address: 00:00:00:00:00:02 (00:00:00:00:00:02) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbe2 [correct] [Good: True] [Bad : False] Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xc9b2 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 276CBFDC2D34A360 Responder cookie: 32269F13209427BA Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 6d a9 a5 00 00 00 00 00 02 08 00 45 00 ..)m..........E. 0010 00 68 00 00 40 00 40 11 fb e2 a5 e3 f9 67 a5 e3 .h..@.@......g.. 0020 f9 73 01 f4 01 f4 00 54 c9 b2 27 6c bf dc 2d 34 .s.....T..'l..-4 0030 a3 60 32 26 9f 13 20 94 27 ba 05 10 02 01 00 00 .`2&.. .'....... 0040 00 00 00 00 00 4c 22 e5 9d f1 34 c0 23 6d 7f ff .....L"...4.#m.. 0050 dd 69 d3 bb 77 d1 3d cb 55 b3 54 ed 1a 5c 7f d4 .i..w.=.U.T..\.. 0060 9a d7 77 db d2 f6 86 46 63 00 97 38 79 b6 4b 5d ..w....Fc..8y.K] 0070 fd c2 4f ee 5c c0 ..O.\. Frame 10 (134 bytes on wire, 134 bytes captured) Arrival Time: Feb 22, 2010 14:57:20.820039000 [Time delta from previous captured frame: 0.020237000 seconds] [Time delta from previous displayed frame: 0.020237000 seconds] [Time since reference or first frame: 3.270755000 seconds] Frame Number: 10 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:00:00:00:00:02 (00:00:00:00:00:02), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:00:00:00:00:02 (00:00:00:00:00:02) Address: 00:00:00:00:00:02 (00:00:00:00:00:02) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbd2 [correct] [Good: True] [Bad : False] Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x8a71 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 276CBFDC2D34A360 Responder cookie: 32269F13209427BA Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xb5d10cdd Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 6d a9 a5 00 00 00 00 00 02 08 00 45 00 ..)m..........E. 0010 00 78 00 00 40 00 40 11 fb d2 a5 e3 f9 67 a5 e3 .x..@.@......g.. 0020 f9 73 01 f4 01 f4 00 64 8a 71 27 6c bf dc 2d 34 .s.....d.q'l..-4 0030 a3 60 32 26 9f 13 20 94 27 ba 08 10 05 01 b5 d1 .`2&.. .'....... 0040 0c dd 00 00 00 5c 31 f4 80 62 72 f2 33 f1 0d cd .....\1..br.3... 0050 22 3a df 8a ae e2 df c5 d2 bd d1 c8 b1 51 61 b7 ":...........Qa. 0060 e2 53 24 b2 78 85 47 52 c0 d5 5c 39 38 10 9e 1d .S$.x.GR..\98... 0070 c3 23 72 78 b7 d3 a9 66 b1 38 05 82 a1 e2 03 3e .#rx...f.8.....> 0080 40 84 d7 b5 1c 9d @..... Frame 11 (342 bytes on wire, 342 bytes captured) Arrival Time: Feb 22, 2010 14:57:22.874698000 [Time delta from previous captured frame: 2.054659000 seconds] [Time delta from previous displayed frame: 2.054659000 seconds] [Time since reference or first frame: 5.325414000 seconds] Frame Number: 11 Frame Length: 342 bytes Capture Length: 342 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02) Destination: 00:00:00:00:00:02 (00:00:00:00:00:02) Address: 00:00:00:00:00:02 (00:00:00:00:00:02) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x01d2 (466) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf930 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xf24f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 276CBFDC2D34A360 Responder cookie: 32269F13209427BA Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5c4d0e40 Length: 300 Encrypted payload (272 bytes) 0000 00 00 00 00 00 02 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 01 48 01 d2 00 00 80 11 f9 30 a5 e3 f9 73 a5 e3 .H.......0...s.. 0020 f9 67 01 f4 01 f4 01 34 f2 4f 27 6c bf dc 2d 34 .g.....4.O'l..-4 0030 a3 60 32 26 9f 13 20 94 27 ba 08 10 20 01 5c 4d .`2&.. .'... .\M 0040 0e 40 00 00 01 2c ff b2 ca 58 3d a1 d2 5a e2 ec .@...,...X=..Z.. 0050 8b 51 c1 d4 72 ec ed 4e 1e e6 db 3f 7b 2b f8 50 .Q..r..N...?{+.P 0060 e5 2e e7 08 29 56 5a 89 22 7b cb 61 0c 33 0f 29 ....)VZ."{.a.3.) 0070 e3 d7 d2 b5 55 d6 1c d9 6a 7c db 27 ea 3a bd 4f ....U...j|.'.:.O 0080 a6 4a 8b c7 ae 2d b5 61 71 d5 53 a8 e7 02 a5 0b .J...-.aq.S..... 0090 c7 f4 e7 f2 24 d9 5f 20 5f 68 7f 08 05 e8 b8 65 ....$._ _h.....e 00a0 5d 86 7e 85 3d bc ea e9 0b 62 f1 3c f6 66 36 a7 ].~.=....b.<.f6. 00b0 4d d8 62 ad 6c 47 b1 68 c0 c7 8f e9 d4 fe e1 0a M.b.lG.h........ 00c0 aa 72 13 24 65 fe ca 95 b7 c2 ed 35 53 68 bb 6f .r.$e......5Sh.o 00d0 26 36 5e 2e fa 17 e0 98 7c 2b 54 0b aa fb 00 81 &6^.....|+T..... 00e0 44 5f 24 f6 9c bc 3f d6 a7 ed 7b 00 b6 ac 5c 85 D_$...?...{...\. 00f0 1e 98 5d c7 22 bf e1 a3 e6 4c 3e 70 c0 32 96 bf ..]."....L>p.2.. 0100 35 3a c0 0f d4 bb 93 f5 ac 17 37 f4 78 ad e9 11 5:........7.x... 0110 75 bb 60 de c7 e1 ca 4b 28 8c 28 24 eb 28 85 a9 u.`....K(.($.(.. 0120 75 45 65 4c 39 7c b9 d5 17 e8 e8 c1 1b d9 87 a3 uEeL9|.......... 0130 f1 fe 7c 4e f5 d1 d1 9b 77 2c 66 5b 72 b5 f8 74 ..|N....w,f[r..t 0140 99 a9 10 6b e7 4b 07 19 a6 bd 9d ba c4 b8 31 32 ...k.K........12 0150 a5 15 86 80 ae 6d .....m Frame 12 (342 bytes on wire, 342 bytes captured) Arrival Time: Feb 22, 2010 14:57:22.874718000 [Time delta from previous captured frame: 0.000020000 seconds] [Time delta from previous displayed frame: 0.000020000 seconds] [Time since reference or first frame: 5.325434000 seconds] Frame Number: 12 Frame Length: 342 bytes Capture Length: 342 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02) Destination: 00:00:00:00:00:02 (00:00:00:00:00:02) Address: 00:00:00:00:00:02 (00:00:00:00:00:02) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x01d2 (466) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf930 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xf24f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 276CBFDC2D34A360 Responder cookie: 32269F13209427BA Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5c4d0e40 Length: 300 Encrypted payload (272 bytes) 0000 00 00 00 00 00 02 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 01 48 01 d2 00 00 80 11 f9 30 a5 e3 f9 73 a5 e3 .H.......0...s.. 0020 f9 67 01 f4 01 f4 01 34 f2 4f 27 6c bf dc 2d 34 .g.....4.O'l..-4 0030 a3 60 32 26 9f 13 20 94 27 ba 08 10 20 01 5c 4d .`2&.. .'... .\M 0040 0e 40 00 00 01 2c ff b2 ca 58 3d a1 d2 5a e2 ec .@...,...X=..Z.. 0050 8b 51 c1 d4 72 ec ed 4e 1e e6 db 3f 7b 2b f8 50 .Q..r..N...?{+.P 0060 e5 2e e7 08 29 56 5a 89 22 7b cb 61 0c 33 0f 29 ....)VZ."{.a.3.) 0070 e3 d7 d2 b5 55 d6 1c d9 6a 7c db 27 ea 3a bd 4f ....U...j|.'.:.O 0080 a6 4a 8b c7 ae 2d b5 61 71 d5 53 a8 e7 02 a5 0b .J...-.aq.S..... 0090 c7 f4 e7 f2 24 d9 5f 20 5f 68 7f 08 05 e8 b8 65 ....$._ _h.....e 00a0 5d 86 7e 85 3d bc ea e9 0b 62 f1 3c f6 66 36 a7 ].~.=....b.<.f6. 00b0 4d d8 62 ad 6c 47 b1 68 c0 c7 8f e9 d4 fe e1 0a M.b.lG.h........ 00c0 aa 72 13 24 65 fe ca 95 b7 c2 ed 35 53 68 bb 6f .r.$e......5Sh.o 00d0 26 36 5e 2e fa 17 e0 98 7c 2b 54 0b aa fb 00 81 &6^.....|+T..... 00e0 44 5f 24 f6 9c bc 3f d6 a7 ed 7b 00 b6 ac 5c 85 D_$...?...{...\. 00f0 1e 98 5d c7 22 bf e1 a3 e6 4c 3e 70 c0 32 96 bf ..]."....L>p.2.. 0100 35 3a c0 0f d4 bb 93 f5 ac 17 37 f4 78 ad e9 11 5:........7.x... 0110 75 bb 60 de c7 e1 ca 4b 28 8c 28 24 eb 28 85 a9 u.`....K(.($.(.. 0120 75 45 65 4c 39 7c b9 d5 17 e8 e8 c1 1b d9 87 a3 uEeL9|.......... 0130 f1 fe 7c 4e f5 d1 d1 9b 77 2c 66 5b 72 b5 f8 74 ..|N....w,f[r..t 0140 99 a9 10 6b e7 4b 07 19 a6 bd 9d ba c4 b8 31 32 ...k.K........12 0150 a5 15 86 80 ae 6d .....m Frame 13 (342 bytes on wire, 342 bytes captured) Arrival Time: Feb 22, 2010 14:57:23.188846000 [Time delta from previous captured frame: 0.314128000 seconds] [Time delta from previous displayed frame: 0.314128000 seconds] [Time since reference or first frame: 5.639562000 seconds] Frame Number: 13 Frame Length: 342 bytes Capture Length: 342 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:00:00:00:00:02 (00:00:00:00:00:02), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:00:00:00:00:02 (00:00:00:00:00:02) Address: 00:00:00:00:00:02 (00:00:00:00:00:02) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb02 [correct] [Good: True] [Bad : False] Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x56ed [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 276CBFDC2D34A360 Responder cookie: 32269F13209427BA Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5c4d0e40 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 6d a9 a5 00 00 00 00 00 02 08 00 45 00 ..)m..........E. 0010 01 48 00 00 40 00 40 11 fb 02 a5 e3 f9 67 a5 e3 .H..@.@......g.. 0020 f9 73 01 f4 01 f4 01 34 56 ed 27 6c bf dc 2d 34 .s.....4V.'l..-4 0030 a3 60 32 26 9f 13 20 94 27 ba 08 10 20 01 5c 4d .`2&.. .'... .\M 0040 0e 40 00 00 01 2c d7 4e 60 92 fa 21 29 c6 0f 74 .@...,.N`..!)..t 0050 de 66 54 07 cd b1 b2 0f 63 16 78 09 94 c0 e8 74 .fT.....c.x....t 0060 10 91 b2 08 e2 20 56 7f f8 37 c3 41 78 55 08 ae ..... V..7.AxU.. 0070 13 c7 76 3c cd 0a 28 99 ec 6b 7b 90 0c 0a 0e 66 ..v<..(..k{....f 0080 0e 0e ba 2c 21 a7 05 8a 42 08 e7 68 66 48 48 43 ...,!...B..hfHHC 0090 e2 49 86 57 4c aa be ca 56 85 8d 8f e3 04 30 a7 .I.WL...V.....0. 00a0 86 1b c7 00 f7 e6 d3 ed 90 ce 1f 1e c7 51 55 65 .............QUe 00b0 38 ec ef 40 eb 6f 04 75 d5 30 d5 0a 67 7b 7f 55 8..@.o.u.0..g{.U 00c0 3e d7 a8 72 f9 e3 d7 ac f7 40 22 6f 21 b1 79 07 >..r.....@"o!.y. 00d0 f4 b3 91 13 a1 10 ab cf 93 fc 2c b3 a3 0d 09 e0 ..........,..... 00e0 6e 5f f2 55 fd 92 db b3 61 41 23 01 70 f6 60 0d n_.U....aA#.p.`. 00f0 a0 20 f8 0e 25 5c 55 76 bc 92 62 01 b4 71 77 df . ..%\Uv..b..qw. 0100 4b 10 ed 5f 5b d9 f2 19 dd 47 34 12 7a c2 4e c4 K.._[....G4.z.N. 0110 0e db 22 92 1b cc 52 7d 65 58 b5 c7 dd 9e 76 09 .."...R}eX....v. 0120 f6 48 ab 3c 12 0f bf 89 15 c1 2b 6f 15 6c bb ef .H.<......+o.l.. 0130 f6 24 ce 6c 78 a6 28 8b bd c8 29 ad 7f 65 d6 96 .$.lx.(...)..e.. 0140 b2 91 10 c6 15 cb f9 ac 7b b6 76 44 22 9b 0f e9 ........{.vD"... 0150 6d 5d 28 01 cd 58 m](..X Frame 14 (102 bytes on wire, 102 bytes captured) Arrival Time: Feb 22, 2010 14:57:23.192018000 [Time delta from previous captured frame: 0.003172000 seconds] [Time delta from previous displayed frame: 0.003172000 seconds] [Time since reference or first frame: 5.642734000 seconds] Frame Number: 14 Frame Length: 102 bytes Capture Length: 102 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02) Destination: 00:00:00:00:00:02 (00:00:00:00:00:02) Address: 00:00:00:00:00:02 (00:00:00:00:00:02) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x01d7 (471) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa1b [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xe667 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 276CBFDC2D34A360 Responder cookie: 32269F13209427BA Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5c4d0e40 Length: 60 Encrypted payload (32 bytes) 0000 00 00 00 00 00 02 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 00 58 01 d7 00 00 80 11 fa 1b a5 e3 f9 73 a5 e3 .X...........s.. 0020 f9 67 01 f4 01 f4 00 44 e6 67 27 6c bf dc 2d 34 .g.....D.g'l..-4 0030 a3 60 32 26 9f 13 20 94 27 ba 08 10 20 01 5c 4d .`2&.. .'... .\M 0040 0e 40 00 00 00 3c 83 2d a7 23 1a 93 a9 c4 95 6a .@...<.-.#.....j 0050 97 10 48 c0 5e be a6 01 c4 eb 04 0f 96 1b e2 a7 ..H.^........... 0060 87 5c a6 d7 99 9c .\.... Frame 15 (102 bytes on wire, 102 bytes captured) Arrival Time: Feb 22, 2010 14:57:23.192035000 [Time delta from previous captured frame: 0.000017000 seconds] [Time delta from previous displayed frame: 0.000017000 seconds] [Time since reference or first frame: 5.642751000 seconds] Frame Number: 15 Frame Length: 102 bytes Capture Length: 102 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02) Destination: 00:00:00:00:00:02 (00:00:00:00:00:02) Address: 00:00:00:00:00:02 (00:00:00:00:00:02) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x01d7 (471) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa1b [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.103 (165.227.249.103) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xe667 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 276CBFDC2D34A360 Responder cookie: 32269F13209427BA Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x5c4d0e40 Length: 60 Encrypted payload (32 bytes) 0000 00 00 00 00 00 02 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 00 58 01 d7 00 00 80 11 fa 1b a5 e3 f9 73 a5 e3 .X...........s.. 0020 f9 67 01 f4 01 f4 00 44 e6 67 27 6c bf dc 2d 34 .g.....D.g'l..-4 0030 a3 60 32 26 9f 13 20 94 27 ba 08 10 20 01 5c 4d .`2&.. .'... .\M 0040 0e 40 00 00 00 3c 83 2d a7 23 1a 93 a9 c4 95 6a .@...<.-.#.....j 0050 97 10 48 c0 5e be a6 01 c4 eb 04 0f 96 1b e2 a7 ..H.^........... 0060 87 5c a6 d7 99 9c .\.... Frame 16 (134 bytes on wire, 134 bytes captured) Arrival Time: Feb 22, 2010 14:57:31.724047000 [Time delta from previous captured frame: 8.532012000 seconds] [Time delta from previous displayed frame: 8.532012000 seconds] [Time since reference or first frame: 14.174763000 seconds] Frame Number: 16 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02) Destination: 00:00:00:00:00:02 (00:00:00:00:00:02) Address: 00:00:00:00:00:02 (00:00:00:00:00:02) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfbb0 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.103 (165.227.249.103) Encapsulating Security Payload ESP SPI: 0x02785ff2 ESP Sequence: 1 0000 00 00 00 00 00 02 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 00 78 00 01 00 00 80 32 fb b0 a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 67 02 78 5f f2 00 00 00 01 19 c4 b6 ce c9 ad .g.x_........... 0030 83 08 97 12 f4 86 b1 c5 a4 7a 03 73 33 db 4d 78 .........z.s3.Mx 0040 cf 87 56 f9 52 f5 90 c5 23 01 a2 64 5e 86 9e 8a ..V.R...#..d^... 0050 32 d9 01 3a 66 73 c2 06 43 e8 60 64 82 5b 38 bf 2..:fs..C.`d.[8. 0060 38 d2 09 bc 1e f0 14 cc 0e 82 0b bb 68 fb d5 21 8...........h..! 0070 99 11 b5 76 75 09 62 44 ff d4 89 2e 38 e3 a0 72 ...vu.bD....8..r 0080 cd eb 93 c9 c4 6a .....j Frame 17 (134 bytes on wire, 134 bytes captured) Arrival Time: Feb 22, 2010 14:57:31.724065000 [Time delta from previous captured frame: 0.000018000 seconds] [Time delta from previous displayed frame: 0.000018000 seconds] [Time since reference or first frame: 14.174781000 seconds] Frame Number: 17 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02) Destination: 00:00:00:00:00:02 (00:00:00:00:00:02) Address: 00:00:00:00:00:02 (00:00:00:00:00:02) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.103 (165.227.249.103) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfbb0 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.103 (165.227.249.103) Encapsulating Security Payload ESP SPI: 0x02785ff2 ESP Sequence: 1 0000 00 00 00 00 00 02 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 00 78 00 01 00 00 80 32 fb b0 a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 67 02 78 5f f2 00 00 00 01 19 c4 b6 ce c9 ad .g.x_........... 0030 83 08 97 12 f4 86 b1 c5 a4 7a 03 73 33 db 4d 78 .........z.s3.Mx 0040 cf 87 56 f9 52 f5 90 c5 23 01 a2 64 5e 86 9e 8a ..V.R...#..d^... 0050 32 d9 01 3a 66 73 c2 06 43 e8 60 64 82 5b 38 bf 2..:fs..C.`d.[8. 0060 38 d2 09 bc 1e f0 14 cc 0e 82 0b bb 68 fb d5 21 8...........h..! 0070 99 11 b5 76 75 09 62 44 ff d4 89 2e 38 e3 a0 72 ...vu.bD....8..r 0080 cd eb 93 c9 c4 6a .....j Frame 18 (134 bytes on wire, 134 bytes captured) Arrival Time: Feb 22, 2010 14:57:31.726468000 [Time delta from previous captured frame: 0.002403000 seconds] [Time delta from previous displayed frame: 0.002403000 seconds] [Time since reference or first frame: 14.177184000 seconds] Frame Number: 18 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:00:00:00:00:02 (00:00:00:00:00:02), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:00:00:00:00:02 (00:00:00:00:00:02) Address: 00:00:00:00:00:02 (00:00:00:00:00:02) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x100c (4108) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x2ba6 [correct] [Good: True] [Bad : False] Source: 165.227.249.103 (165.227.249.103) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload ESP SPI: 0x82d1fdc7 ESP Sequence: 1 0000 00 0c 29 6d a9 a5 00 00 00 00 00 02 08 00 45 00 ..)m..........E. 0010 00 78 10 0c 00 00 40 32 2b a6 a5 e3 f9 67 a5 e3 .x....@2+....g.. 0020 f9 73 82 d1 fd c7 00 00 00 01 e5 39 9b 48 41 b8 .s.........9.HA. 0030 c8 4c 49 db d0 44 fe c6 54 78 82 d7 23 e3 4d f8 .LI..D..Tx..#.M. 0040 9d 38 97 44 1e 45 2e 97 ec 0d aa da 1a fb 17 f0 .8.D.E.......... 0050 8f 83 ae eb 4d ec 76 26 2c 2a 3c 39 2a 68 d2 0b ....M.v&,*<9*h.. 0060 71 71 e1 d0 44 20 38 04 c6 8a 7b c9 23 d8 07 52 qq..D 8...{.#..R 0070 1d e7 02 f6 ff ee 90 19 4c f1 6f 71 e6 20 32 f7 ........L.oq. 2. 0080 8a 84 e7 58 c8 56 ...X.V