Frame 1 (170 bytes on wire, 170 bytes captured) Arrival Time: Jul 13, 2005 12:41:30.193431000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x2eb6da11 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x04c1 (1217) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf6ee (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0x0e0d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x248796B7AAB79897 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 0000 00 a0 8e 72 1e 40 00 0c 29 1d cf fc 08 00 45 00 ...r.@..).....E. 0010 00 98 04 c1 00 00 80 11 f6 ee a5 e3 f9 73 a5 e3 .............s.. 0020 f9 6a 01 f4 01 f4 00 84 0e 0d 24 87 96 b7 aa b7 .j........$..... 0030 98 97 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 ..D..-.......F.y 0090 dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 ..........>.in.c 00a0 81 b5 ec 42 7b 1f 2e b6 da 11 ...B{..... Frame 2 (150 bytes on wire, 150 bytes captured) Arrival Time: Jul 13, 2005 12:41:30.318037000 Time delta from previous packet: 0.124606000 seconds Time since reference or first frame: 0.124606000 seconds Frame Number: 2 Packet Length: 150 bytes Capture Length: 150 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x0a6c4003 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 132 Identification: 0x6f10 (28432) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xccb3 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 112 Checksum: 0x856e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x248796B7AAB79897 Responder cookie: 0x53A4AFD524E0121D Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 104 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Key-Length (14): Key-Length (128) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt 0000 00 0c 29 1d cf fc 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 84 6f 10 00 00 40 11 cc b3 a5 e3 f9 6a a5 e3 ..o...@......j.. 0020 f9 73 01 f4 01 f4 00 70 85 6e 24 87 96 b7 aa b7 .s.....p.n$..... 0030 98 97 53 a4 af d5 24 e0 12 1d 01 10 02 00 00 00 ..S...$......... 0040 00 00 00 00 00 68 0d 00 00 38 00 00 00 01 00 00 .....h...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 02 00 02 80 03 00 01 80 0e ................ 0070 00 80 80 04 00 02 80 0b 00 01 80 0c 0e 10 00 00 ................ 0080 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 0090 01 00 0a 6c 40 03 ...l@. Frame 3 (302 bytes on wire, 302 bytes captured) Arrival Time: Jul 13, 2005 12:41:32.498394000 Time delta from previous packet: 2.180357000 seconds Time since reference or first frame: 2.304963000 seconds Frame Number: 3 Packet Length: 302 bytes Capture Length: 302 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x3b7b2b74 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x04c2 (1218) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf669 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0x8559 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x248796B7AAB79897 Responder cookie: 0x53A4AFD524E0121D Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 a0 8e 72 1e 40 00 0c 29 1d cf fc 08 00 45 00 ...r.@..).....E. 0010 01 1c 04 c2 00 00 80 11 f6 69 a5 e3 f9 73 a5 e3 .........i...s.. 0020 f9 6a 01 f4 01 f4 01 08 85 59 24 87 96 b7 aa b7 .j.......Y$..... 0030 98 97 53 a4 af d5 24 e0 12 1d 04 10 02 00 00 00 ..S...$......... 0040 00 00 00 00 01 00 0a 00 00 84 3e 7a 37 4c b7 b1 ..........>z7L.. 0050 53 89 2d 11 b2 dc 43 43 29 e9 37 95 7e 30 74 af S.-...CC).7.~0t. 0060 20 f7 31 e9 2a e3 a9 6e fa b7 ce 64 89 52 6a 5e .1.*..n...d.Rj^ 0070 81 fd 8f 42 65 aa f3 ae f7 43 77 e5 73 1e 69 77 ...Be....Cw.s.iw 0080 83 6f 52 bc f9 7b c9 98 89 34 9c 5d 3f dd ed bf .oR..{...4.]?... 0090 0c 1a ea 9e 27 e1 ff 80 db 58 ab 42 d8 7c 68 18 ....'....X.B.|h. 00a0 26 e0 01 07 0e 8d d2 ff 00 8f d7 ae b6 7d 4f 59 &............}OY 00b0 af 7c 9a 03 09 a4 11 2f db 2c 82 02 36 90 50 28 .|...../.,..6.P( 00c0 50 ee 0a 2d 35 91 3e 49 94 45 0d 00 00 18 cc 60 P..-5.>I.E.....` 00d0 cc a9 b0 96 ee 38 54 a8 ee 03 22 14 be 19 e4 e7 .....8T..."..... 00e0 d0 92 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .....0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 3b 7b 2b 74 ....&.....;{+t Frame 4 (262 bytes on wire, 262 bytes captured) Arrival Time: Jul 13, 2005 12:41:32.653861000 Time delta from previous packet: 0.155467000 seconds Time since reference or first frame: 2.460430000 seconds Frame Number: 4 Packet Length: 262 bytes Capture Length: 262 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x03c4eb13 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 244 Identification: 0x6f11 (28433) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xcc42 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 224 Checksum: 0xe022 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x248796B7AAB79897 Responder cookie: 0x53A4AFD524E0121D Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 216 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 32 Vendor ID: unknown vendor ID: 0x0300001422BA62A43B1E813509C507A9... 0000 00 0c 29 1d cf fc 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 f4 6f 11 00 00 40 11 cc 42 a5 e3 f9 6a a5 e3 ..o...@..B...j.. 0020 f9 73 01 f4 01 f4 00 e0 e0 22 24 87 96 b7 aa b7 .s......."$..... 0030 98 97 53 a4 af d5 24 e0 12 1d 04 10 02 00 00 00 ..S...$......... 0040 00 00 00 00 00 d8 0a 00 00 84 5c 5b dd 3c f5 a9 ..........\[.<.. 0050 50 41 b8 c6 66 d7 5c bf 2e d4 8e 1d ae 39 60 5c PA..f.\......9`\ 0060 b5 20 f0 e8 6d 38 d8 bd b0 fd b7 61 b1 b4 cc 89 . ..m8.....a.... 0070 6e f6 f6 3a ca ad 59 ac 3b f1 96 64 eb 96 eb 3a n..:..Y.;..d...: 0080 52 6f d2 b9 0f 23 36 f9 e4 d5 70 b6 df 0a 4c 91 Ro...#6...p...L. 0090 8b fe bb 0e 9b b0 0c 02 6a 4a 31 0a cd 57 46 e4 ........jJ1..WF. 00a0 d2 94 fc 31 31 e0 51 3f cd cf 86 1b f3 c2 83 8b ...11.Q?........ 00b0 4d 3e 9f ae 40 ae c7 41 d2 ae 73 e4 3f df 19 c6 M>..@..A..s.?... 00c0 02 cb 53 f0 60 b6 d9 21 5c 02 0d 00 00 18 07 3e ..S.`..!\......> 00d0 d0 4b 33 ef 35 d5 ed 0a 56 c4 4c 70 41 6c 18 5a .K3.5...V.LpAl.Z 00e0 5c 62 00 00 00 20 03 00 00 14 22 ba 62 a4 3b 1e \b... ....".b.;. 00f0 81 35 09 c5 07 a9 61 e2 4d b2 00 00 00 08 00 06 .5....a.M....... 0100 00 03 03 c4 eb 13 ...... Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: Jul 13, 2005 12:41:33.675162000 Time delta from previous packet: 1.021301000 seconds Time since reference or first frame: 3.481731000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0xd30d50ca (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x04c4 (1220) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf70b (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xd352 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x248796B7AAB79897 Responder cookie: 0x53A4AFD524E0121D Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 1d cf fc 08 00 45 00 ...r.@..).....E. 0010 00 78 04 c4 00 00 80 11 f7 0b a5 e3 f9 73 a5 e3 .x...........s.. 0020 f9 6a 01 f4 01 f4 00 64 d3 52 24 87 96 b7 aa b7 .j.....d.R$..... 0030 98 97 53 a4 af d5 24 e0 12 1d 05 10 02 01 00 00 ..S...$......... 0040 00 00 00 00 00 5c 00 ca 9f f5 4f d2 0a 77 9d 51 .....\....O..w.Q 0050 92 fb 3e 12 2d 22 1c f7 8d 7e 3b 50 b1 6d b4 7b ..>.-"...~;P.m.{ 0060 90 4c 97 f1 55 9b 75 3f 39 a1 1a cd 2b 7c 7e 48 .L..U.u?9...+|~H 0070 47 a2 63 73 43 c1 be ff 1f 65 1f e4 16 9d 2a be G.csC....e....*. 0080 ad 4d 4d 87 ab fd d3 0d 50 ca .MM.....P. Frame 6 (138 bytes on wire, 138 bytes captured) Arrival Time: Jul 13, 2005 12:41:33.679527000 Time delta from previous packet: 0.004365000 seconds Time since reference or first frame: 3.486096000 seconds Frame Number: 6 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x4a481006 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x6f12 (28434) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xccbd (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x5095 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x248796B7AAB79897 Responder cookie: 0x53A4AFD524E0121D Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 1d cf fc 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 78 6f 12 00 00 40 11 cc bd a5 e3 f9 6a a5 e3 .xo...@......j.. 0020 f9 73 01 f4 01 f4 00 64 50 95 24 87 96 b7 aa b7 .s.....dP.$..... 0030 98 97 53 a4 af d5 24 e0 12 1d 05 10 02 01 00 00 ..S...$......... 0040 00 00 00 00 00 5c c9 f3 58 65 69 c4 bd 6c e7 4e .....\..Xei..l.N 0050 30 fc 0a a1 d0 37 90 49 44 8e 6d 3b b0 f0 b9 2a 0....7.ID.m;...* 0060 78 92 f2 82 0b c2 aa 7c 1c ee 1d 55 14 c0 3e ae x......|...U..>. 0070 ea 0e e3 2c 42 d2 a8 13 c4 ba aa cd 5b 35 0a 1e ...,B.......[5.. 0080 f0 db 84 b3 91 21 4a 48 10 06 .....!JH.. Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Jul 13, 2005 12:41:35.830401000 Time delta from previous packet: 2.150874000 seconds Time since reference or first frame: 5.636970000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0xfcf32861 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x04c6 (1222) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf639 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x1587 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x248796B7AAB79897 Responder cookie: 0x53A4AFD524E0121D Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x1E776860 Length: 300 Encrypted payload (272 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 1d cf fc 08 00 45 00 ...r.@..).....E. 0010 01 48 04 c6 00 00 80 11 f6 39 a5 e3 f9 73 a5 e3 .H.......9...s.. 0020 f9 6a 01 f4 01 f4 01 34 15 87 24 87 96 b7 aa b7 .j.....4..$..... 0030 98 97 53 a4 af d5 24 e0 12 1d 08 10 20 01 1e 77 ..S...$..... ..w 0040 68 60 00 00 01 2c 71 f4 42 9b a2 5d 57 62 b1 92 h`...,q.B..]Wb.. 0050 60 13 12 14 85 91 f4 19 07 d8 27 f0 ad 43 cf 66 `.........'..C.f 0060 9d 88 74 ee 56 4e cc f4 47 87 91 ab a7 21 be 78 ..t.VN..G....!.x 0070 a3 5b fe 6e 6f 45 10 5b a0 e8 de 81 73 91 ce ae .[.noE.[....s... 0080 3a 29 10 6e 37 3e c9 ba d7 4f 1d 6e 5e a9 d0 27 :).n7>...O.n^..' 0090 d1 fa 4f 05 cb a8 e9 b3 80 8a 1d 66 c8 1b e0 a0 ..O........f.... 00a0 7a 6e 96 68 b5 05 7e d7 31 76 0b 62 ca 45 fe 9b zn.h..~.1v.b.E.. 00b0 9f dd 79 36 60 d8 ff 25 dd 20 8e 69 c7 cd 15 f0 ..y6`..%. .i.... 00c0 8c d8 ff ba 52 5f 42 c5 a2 4b 59 ab 4d 7c a8 41 ....R_B..KY.M|.A 00d0 a8 dd 67 33 db db 67 4e fc 6f 88 d9 08 60 f7 91 ..g3..gN.o...`.. 00e0 3b 3e 6a 39 6a 17 94 db 21 d0 c7 b4 ab de 44 71 ;>j9j...!.....Dq 00f0 94 16 f2 ac c3 68 78 85 95 84 1b d5 1d f3 17 51 .....hx........Q 0100 5d 52 30 23 de e4 9c c3 e4 a5 d1 79 33 79 7a 30 ]R0#.......y3yz0 0110 6a b3 fc c1 9b 28 8d 7f 1a 21 98 9e f0 03 cf 4d j....(...!.....M 0120 11 0c 32 0b d3 88 95 da 85 ea 57 92 d9 6b ac 93 ..2.......W..k.. 0130 95 46 e8 48 31 6e d2 89 c7 41 46 ad 7c a3 d1 e0 .F.H1n...AF.|... 0140 3b 8a d8 17 46 11 2b cc 4e 8b d0 33 d1 d0 e2 46 ;...F.+.N..3...F 0150 a7 c7 7b 7f e7 86 fc f3 28 61 ..{.....(a Frame 8 (346 bytes on wire, 346 bytes captured) Arrival Time: Jul 13, 2005 12:41:36.109548000 Time delta from previous packet: 0.279147000 seconds Time since reference or first frame: 5.916117000 seconds Frame Number: 8 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xfaa56306 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x6f13 (28435) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xcbec (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xb354 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x248796B7AAB79897 Responder cookie: 0x53A4AFD524E0121D Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x1E776860 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 1d cf fc 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 01 48 6f 13 00 00 40 11 cb ec a5 e3 f9 6a a5 e3 .Ho...@......j.. 0020 f9 73 01 f4 01 f4 01 34 b3 54 24 87 96 b7 aa b7 .s.....4.T$..... 0030 98 97 53 a4 af d5 24 e0 12 1d 08 10 20 01 1e 77 ..S...$..... ..w 0040 68 60 00 00 01 2c 46 2a 2f 42 47 73 e1 76 4b 25 h`...,F*/BGs.vK% 0050 9e 40 35 6a db bd 9f 7c 3e b6 d1 ef 30 95 5a 48 .@5j...|>...0.ZH 0060 0e 70 a5 b8 b5 de 39 e4 42 f5 8d ca 3d 2f 23 0a .p....9.B...=/#. 0070 f2 22 53 b2 69 6d 9d 79 f8 21 29 2a cf d2 f1 c3 ."S.im.y.!)*.... 0080 6c 3c 00 71 9c 0f 4b d0 35 1e ca e3 04 f7 c5 40 l<.q..K.5......@ 0090 bd d1 c6 c2 1e 6d e9 ed 13 1d 07 32 0f 35 a4 a1 .....m.....2.5.. 00a0 6f b7 c9 fb 3b 3d 50 f0 56 79 e2 8c b8 83 c2 bb o...;=P.Vy...... 00b0 53 98 d1 2e 3e b6 2b b9 37 0a c7 b2 61 3f 62 76 S...>.+.7...a?bv 00c0 1f 2d 3f 0c fa 43 8c 72 a4 9d be a9 6f 82 b6 79 .-?..C.r....o..y 00d0 43 88 59 00 fd 04 da 29 95 59 cc 7b b6 00 a8 8c C.Y....).Y.{.... 00e0 ea 65 f7 68 5d ed 40 51 07 4e b1 c9 7c 39 3f bb .e.h].@Q.N..|9?. 00f0 38 3e 84 b7 64 11 fd 3f 66 e0 91 b4 81 59 a5 92 8>..d..?f....Y.. 0100 cf 47 e8 cd 99 c9 46 ee 6e 1f 1b ab f0 bf 04 2f .G....F.n....../ 0110 99 54 d1 7b 32 7f 23 f3 8b 78 b1 2a 0c 25 f9 98 .T.{2.#..x.*.%.. 0120 db d5 30 63 1b bb ad b3 73 bf 54 d7 68 2c c9 e7 ..0c....s.T.h,.. 0130 9b 85 d5 c8 9b 22 6f 0c 38 69 84 db 68 ba 24 42 ....."o.8i..h.$B 0140 1f c8 b6 79 72 15 82 51 d6 aa d2 dd 53 08 9e b2 ...yr..Q....S... 0150 ee 0e a0 72 85 9a fa a5 63 06 ...r....c. Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Jul 13, 2005 12:41:36.116163000 Time delta from previous packet: 0.006615000 seconds Time since reference or first frame: 5.922732000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0xcc63ff6c (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x04c7 (1223) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf728 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.106 (165.227.249.106) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xa232 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x248796B7AAB79897 Responder cookie: 0x53A4AFD524E0121D Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x1E776860 Length: 60 Encrypted payload (32 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 1d cf fc 08 00 45 00 ...r.@..).....E. 0010 00 58 04 c7 00 00 80 11 f7 28 a5 e3 f9 73 a5 e3 .X.......(...s.. 0020 f9 6a 01 f4 01 f4 00 44 a2 32 24 87 96 b7 aa b7 .j.....D.2$..... 0030 98 97 53 a4 af d5 24 e0 12 1d 08 10 20 01 1e 77 ..S...$..... ..w 0040 68 60 00 00 00 3c 85 24 b3 6d 64 22 d9 97 ea bf h`...<.$.md".... 0050 d9 08 8d d1 c6 99 71 d5 af 55 68 b3 01 24 22 ba ......q..Uh..$". 0060 f4 37 8d 99 74 6d cc 63 ff 6c .7..tm.c.l Frame 10 (138 bytes on wire, 138 bytes captured) Arrival Time: Jul 13, 2005 12:41:40.524580000 Time delta from previous packet: 4.408417000 seconds Time since reference or first frame: 10.331149000 seconds Frame Number: 10 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0xdeb14c0e (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfbad (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x239aa800 Sequence: 1 Data (92 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 1d cf fc 08 00 45 00 ...r.@..).....E. 0010 00 78 00 01 00 00 80 32 fb ad a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 6a 23 9a a8 00 00 00 00 01 a6 f0 e0 7a b6 95 .j#..........z.. 0030 a1 15 c8 be f3 b7 49 32 bf 35 f3 20 e1 84 7a 6b ......I2.5. ..zk 0040 36 1f c0 fe 6d f5 1f 98 80 d1 d0 c3 e9 99 63 c7 6...m.........c. 0050 06 95 7e bb 6c 46 73 2f df 3b 2f 67 10 c9 1b 58 ..~.lFs/.;/g...X 0060 fe 69 03 8e a6 e9 ed b0 21 04 d3 57 88 c8 62 e1 .i......!..W..b. 0070 54 6b 86 57 18 7f a6 4a 62 12 93 0d a6 58 ae e6 Tk.W...Jb....X.. 0080 c8 f0 76 9c 19 be de b1 4c 0e ..v.....L. Frame 11 (138 bytes on wire, 138 bytes captured) Arrival Time: Jul 13, 2005 12:41:40.526817000 Time delta from previous packet: 0.002237000 seconds Time since reference or first frame: 10.333386000 seconds Frame Number: 11 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0xe82793e9 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x6f14 (28436) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xcc9a (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xdd92418b Sequence: 1 Data (92 bytes) 0000 00 0c 29 1d cf fc 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 78 6f 14 00 00 40 32 cc 9a a5 e3 f9 6a a5 e3 .xo...@2.....j.. 0020 f9 73 dd 92 41 8b 00 00 00 01 7d d3 49 59 3a 74 .s..A.....}.IY:t 0030 b2 98 43 79 37 23 70 fd 12 4b c7 f6 6a d2 87 2c ..Cy7#p..K..j.., 0040 bb 29 76 1d 4f bb cf 18 39 cc fe 58 90 39 f7 a4 .)v.O...9..X.9.. 0050 0f 63 94 63 2f 43 c0 c7 8f c2 fc 32 3d 27 8a 25 .c.c/C.....2='.% 0060 bd 1b 5f 9c 68 7a 20 7e 73 35 af 41 0a 57 67 6b .._.hz ~s5.A.Wgk 0070 91 9d e0 ec 71 f7 09 5e a2 99 ac 4a 28 09 a7 33 ....q..^...J(..3 0080 b5 e6 9d 43 f8 6c e8 27 93 e9 ...C.l.'.. Frame 12 (138 bytes on wire, 138 bytes captured) Arrival Time: Jul 13, 2005 12:41:41.539405000 Time delta from previous packet: 1.012588000 seconds Time since reference or first frame: 11.345974000 seconds Frame Number: 12 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:a0:8e:72:1e:40 Destination: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0xf1fc31af (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.106 (165.227.249.106) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfbac (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.106 (165.227.249.106) Encapsulating Security Payload SPI: 0x239aa800 Sequence: 2 Data (92 bytes) 0000 00 a0 8e 72 1e 40 00 0c 29 1d cf fc 08 00 45 00 ...r.@..).....E. 0010 00 78 00 02 00 00 80 32 fb ac a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 6a 23 9a a8 00 00 00 00 02 d3 57 88 c8 62 e1 .j#........W..b. 0030 54 6b 86 57 18 7f a6 4a 62 12 a3 2c fd 42 15 a9 Tk.W...Jb..,.B.. 0040 5f 28 f4 49 e1 cc 23 ff 20 85 37 06 a5 07 2f c3 _(.I..#. .7.../. 0050 0e 08 ce ae 4a 13 d9 66 9c 9a f2 65 61 9c 45 89 ....J..f...ea.E. 0060 33 7e e5 72 05 ae e3 e3 59 5b 3e 86 de 5d 74 83 3~.r....Y[>..]t. 0070 8e a9 6a 4b bb 99 90 03 54 08 31 6c 8d 7f c1 a8 ..jK....T.1l.... 0080 89 f5 37 6e 6c 32 f1 fc 31 af ..7nl2..1. Frame 13 (138 bytes on wire, 138 bytes captured) Arrival Time: Jul 13, 2005 12:41:41.540447000 Time delta from previous packet: 0.001042000 seconds Time since reference or first frame: 11.347016000 seconds Frame Number: 13 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:a0:8e:72:1e:40, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:a0:8e:72:1e:40 (00:a0:8e:72:1e:40) Type: IP (0x0800) Frame check sequence: 0x83de3919 (correct) Internet Protocol, Src Addr: 165.227.249.106 (165.227.249.106), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x6f15 (28437) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xcc99 (correct) Source: 165.227.249.106 (165.227.249.106) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xdd92418b Sequence: 2 Data (92 bytes) 0000 00 0c 29 1d cf fc 00 a0 8e 72 1e 40 08 00 45 00 ..)......r.@..E. 0010 00 78 6f 15 00 00 40 32 cc 99 a5 e3 f9 6a a5 e3 .xo...@2.....j.. 0020 f9 73 dd 92 41 8b 00 00 00 02 77 52 1c e6 2f e7 .s..A.....wR../. 0030 7d 3d 06 cf 48 5d 29 d5 97 12 63 07 19 ed bc 59 }=..H])...c....Y 0040 d4 a3 22 5c 9e 01 07 b0 52 a5 d8 bc 53 f7 3f 77 .."\....R...S.?w 0050 d4 e2 5b e8 07 f8 59 e3 33 f9 a9 36 20 4f 7a ce ..[...Y.3..6 Oz. 0060 71 eb e3 a2 b3 26 38 75 ef db 44 ad bd 7e bd 34 q....&8u..D..~.4 0070 48 0e 45 48 e3 18 a2 9e 0a e3 9e 30 3b 96 81 74 H.EH.......0;..t 0080 ff 22 8e 32 d5 f7 83 de 39 19 .".2....9.