Frame 1 (170 bytes on wire, 170 bytes captured) Arrival Time: Sep 15, 2005 12:41:16.518890000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x3d0142c1 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x06b5 (1717) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf4f8 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0x89ea (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2615039A7F98D966 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 0000 00 13 46 3d 7d 5e 00 0c 29 1d cf fc 08 00 45 00 ..F=}^..).....E. 0010 00 98 06 b5 00 00 80 11 f4 f8 a5 e3 f9 73 a5 e3 .............s.. 0020 f9 6c 01 f4 01 f4 00 84 89 ea 26 15 03 9a 7f 98 .l........&..... 0030 d9 66 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .f.............. 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 ..D..-.......F.y 0090 dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 ..........>.in.c 00a0 81 b5 ec 42 7b 1f 3d 01 42 c1 ...B{.=.B. Frame 2 (270 bytes on wire, 270 bytes captured) Arrival Time: Sep 15, 2005 12:41:16.528051000 Time delta from previous packet: 0.009161000 seconds Time since reference or first frame: 0.009161000 seconds Frame Number: 2 Packet Length: 270 bytes Capture Length: 270 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0xff03891a (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x054e (1358) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x76fb (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0xb31c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2615039A7F98D966 Responder cookie: 0x910802D584A1FC73 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 29 1d cf fc 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 00 fc 05 4e 00 00 ff 11 76 fb a5 e3 f9 6c a5 e3 ...N....v....l.. 0020 f9 73 01 f4 01 f4 00 e8 b3 1c 26 15 03 9a 7f 98 .s........&..... 0030 d9 66 91 08 02 d5 84 a1 fc 73 01 10 02 00 00 00 .f.......s...... 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 0090 01 00 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e ......'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 ff 03 89 1a .o,....R.V.... Frame 3 (270 bytes on wire, 270 bytes captured) Arrival Time: Sep 15, 2005 12:41:17.026824000 Time delta from previous packet: 0.498773000 seconds Time since reference or first frame: 0.507934000 seconds Frame Number: 3 Packet Length: 270 bytes Capture Length: 270 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0xa8dd09b4 (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x010c (268) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7b3d (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0xb31c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2615039A7F98D966 Responder cookie: 0x910802D584A1FC73 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 29 1d cf fc 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 00 fc 01 0c 00 00 ff 11 7b 3d a5 e3 f9 6c a5 e3 ........{=...l.. 0020 f9 73 01 f4 01 f4 00 e8 b3 1c 26 15 03 9a 7f 98 .s........&..... 0030 d9 66 91 08 02 d5 84 a1 fc 73 01 10 02 00 00 00 .f.......s...... 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 0090 01 00 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e ......'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 a8 dd 09 b4 .o,....R.V.... Frame 4 (270 bytes on wire, 270 bytes captured) Arrival Time: Sep 15, 2005 12:41:18.026778000 Time delta from previous packet: 0.999954000 seconds Time since reference or first frame: 1.507888000 seconds Frame Number: 4 Packet Length: 270 bytes Capture Length: 270 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0x30c38c5e (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x029b (667) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x79ae (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0xb31c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2615039A7F98D966 Responder cookie: 0x910802D584A1FC73 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 29 1d cf fc 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 00 fc 02 9b 00 00 ff 11 79 ae a5 e3 f9 6c a5 e3 ........y....l.. 0020 f9 73 01 f4 01 f4 00 e8 b3 1c 26 15 03 9a 7f 98 .s........&..... 0030 d9 66 91 08 02 d5 84 a1 fc 73 01 10 02 00 00 00 .f.......s...... 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 0090 01 00 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e ......'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 30 c3 8c 5e .o,....R.V0..^ Frame 5 (350 bytes on wire, 350 bytes captured) Arrival Time: Sep 15, 2005 12:41:18.466945000 Time delta from previous packet: 0.440167000 seconds Time since reference or first frame: 1.948055000 seconds Frame Number: 5 Packet Length: 350 bytes Capture Length: 350 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x6096206d (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x06b7 (1719) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf442 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0x8a22 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2615039A7F98D966 Responder cookie: 0x910802D584A1FC73 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 304 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 24 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Vendor ID (13) Length: 24 Payload Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 13 46 3d 7d 5e 00 0c 29 1d cf fc 08 00 45 00 ..F=}^..).....E. 0010 01 4c 06 b7 00 00 80 11 f4 42 a5 e3 f9 73 a5 e3 .L.......B...s.. 0020 f9 6c 01 f4 01 f4 01 38 8a 22 26 15 03 9a 7f 98 .l.....8."&..... 0030 d9 66 91 08 02 d5 84 a1 fc 73 04 10 02 00 00 00 .f.......s...... 0040 00 00 00 00 01 30 0a 00 00 84 1d 5f bc a9 f3 fa .....0....._.... 0050 6c 07 b7 eb 85 7c 4d 74 d5 78 63 2a fd d7 80 eb l....|Mt.xc*.... 0060 8e ca bb 0f 52 c3 7d ea a5 ea d3 d1 ae 57 56 d7 ....R.}......WV. 0070 76 29 c4 24 1f 41 dc aa fd 98 9a cf b9 97 ae 31 v).$.A.........1 0080 b5 58 3f 5b 7c 67 25 94 21 1d 09 24 eb 54 73 f6 .X?[|g%.!..$.Ts. 0090 2d 07 cc 08 0a e4 4d 8f 68 d3 62 9f aa 79 25 a4 -.....M.h.b..y%. 00a0 a3 93 91 f7 70 f3 08 50 bd 6d 21 58 5a aa ec 44 ....p..P.m!XZ..D 00b0 16 49 8f 53 67 33 5c bd f5 d5 54 e8 e5 77 73 54 .I.Sg3\...T..wsT 00c0 9a e2 cd 43 25 d3 4a d1 5f 3a 82 00 00 18 90 61 ...C%.J._:.....a 00d0 1b 4a 98 64 12 59 5d e2 f3 f2 bc a2 7c 68 e3 39 .J.d.Y].....|h.9 00e0 03 fb 82 00 00 18 0d d6 67 bc 7d dd 9c dc 57 92 ........g.}...W. 00f0 91 da 54 19 04 a9 93 af db 1e 0d 00 00 18 b3 80 ..T............. 0100 87 3f 5f bd d1 34 3b b0 57 87 eb a1 47 b5 b8 b7 .?_..4;.W...G... 0110 37 ca 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 7....0G......... 0120 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0130 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0140 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0150 00 0c 09 00 26 89 df d6 b7 12 60 96 20 6d ....&.....`. m Frame 6 (350 bytes on wire, 350 bytes captured) Arrival Time: Sep 15, 2005 12:41:18.469513000 Time delta from previous packet: 0.002568000 seconds Time since reference or first frame: 1.950623000 seconds Frame Number: 6 Packet Length: 350 bytes Capture Length: 350 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0xcc2bd857 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x06b8 (1720) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf441 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0x8a22 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2615039A7F98D966 Responder cookie: 0x910802D584A1FC73 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 304 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 24 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Vendor ID (13) Length: 24 Payload Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 13 46 3d 7d 5e 00 0c 29 1d cf fc 08 00 45 00 ..F=}^..).....E. 0010 01 4c 06 b8 00 00 80 11 f4 41 a5 e3 f9 73 a5 e3 .L.......A...s.. 0020 f9 6c 01 f4 01 f4 01 38 8a 22 26 15 03 9a 7f 98 .l.....8."&..... 0030 d9 66 91 08 02 d5 84 a1 fc 73 04 10 02 00 00 00 .f.......s...... 0040 00 00 00 00 01 30 0a 00 00 84 1d 5f bc a9 f3 fa .....0....._.... 0050 6c 07 b7 eb 85 7c 4d 74 d5 78 63 2a fd d7 80 eb l....|Mt.xc*.... 0060 8e ca bb 0f 52 c3 7d ea a5 ea d3 d1 ae 57 56 d7 ....R.}......WV. 0070 76 29 c4 24 1f 41 dc aa fd 98 9a cf b9 97 ae 31 v).$.A.........1 0080 b5 58 3f 5b 7c 67 25 94 21 1d 09 24 eb 54 73 f6 .X?[|g%.!..$.Ts. 0090 2d 07 cc 08 0a e4 4d 8f 68 d3 62 9f aa 79 25 a4 -.....M.h.b..y%. 00a0 a3 93 91 f7 70 f3 08 50 bd 6d 21 58 5a aa ec 44 ....p..P.m!XZ..D 00b0 16 49 8f 53 67 33 5c bd f5 d5 54 e8 e5 77 73 54 .I.Sg3\...T..wsT 00c0 9a e2 cd 43 25 d3 4a d1 5f 3a 82 00 00 18 90 61 ...C%.J._:.....a 00d0 1b 4a 98 64 12 59 5d e2 f3 f2 bc a2 7c 68 e3 39 .J.d.Y].....|h.9 00e0 03 fb 82 00 00 18 0d d6 67 bc 7d dd 9c dc 57 92 ........g.}...W. 00f0 91 da 54 19 04 a9 93 af db 1e 0d 00 00 18 b3 80 ..T............. 0100 87 3f 5f bd d1 34 3b b0 57 87 eb a1 47 b5 b8 b7 .?_..4;.W...G... 0110 37 ca 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 7....0G......... 0120 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0130 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0140 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0150 00 0c 09 00 26 89 df d6 b7 12 cc 2b d8 57 ....&......+.W Frame 7 (350 bytes on wire, 350 bytes captured) Arrival Time: Sep 15, 2005 12:41:18.470516000 Time delta from previous packet: 0.001003000 seconds Time since reference or first frame: 1.951626000 seconds Frame Number: 7 Packet Length: 350 bytes Capture Length: 350 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0xd32743ca (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x06b9 (1721) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf440 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0x8a22 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2615039A7F98D966 Responder cookie: 0x910802D584A1FC73 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 304 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 24 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Vendor ID (13) Length: 24 Payload Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 13 46 3d 7d 5e 00 0c 29 1d cf fc 08 00 45 00 ..F=}^..).....E. 0010 01 4c 06 b9 00 00 80 11 f4 40 a5 e3 f9 73 a5 e3 .L.......@...s.. 0020 f9 6c 01 f4 01 f4 01 38 8a 22 26 15 03 9a 7f 98 .l.....8."&..... 0030 d9 66 91 08 02 d5 84 a1 fc 73 04 10 02 00 00 00 .f.......s...... 0040 00 00 00 00 01 30 0a 00 00 84 1d 5f bc a9 f3 fa .....0....._.... 0050 6c 07 b7 eb 85 7c 4d 74 d5 78 63 2a fd d7 80 eb l....|Mt.xc*.... 0060 8e ca bb 0f 52 c3 7d ea a5 ea d3 d1 ae 57 56 d7 ....R.}......WV. 0070 76 29 c4 24 1f 41 dc aa fd 98 9a cf b9 97 ae 31 v).$.A.........1 0080 b5 58 3f 5b 7c 67 25 94 21 1d 09 24 eb 54 73 f6 .X?[|g%.!..$.Ts. 0090 2d 07 cc 08 0a e4 4d 8f 68 d3 62 9f aa 79 25 a4 -.....M.h.b..y%. 00a0 a3 93 91 f7 70 f3 08 50 bd 6d 21 58 5a aa ec 44 ....p..P.m!XZ..D 00b0 16 49 8f 53 67 33 5c bd f5 d5 54 e8 e5 77 73 54 .I.Sg3\...T..wsT 00c0 9a e2 cd 43 25 d3 4a d1 5f 3a 82 00 00 18 90 61 ...C%.J._:.....a 00d0 1b 4a 98 64 12 59 5d e2 f3 f2 bc a2 7c 68 e3 39 .J.d.Y].....|h.9 00e0 03 fb 82 00 00 18 0d d6 67 bc 7d dd 9c dc 57 92 ........g.}...W. 00f0 91 da 54 19 04 a9 93 af db 1e 0d 00 00 18 b3 80 ..T............. 0100 87 3f 5f bd d1 34 3b b0 57 87 eb a1 47 b5 b8 b7 .?_..4;.W...G... 0110 37 ca 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 7....0G......... 0120 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0130 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0140 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0150 00 0c 09 00 26 89 df d6 b7 12 d3 27 43 ca ....&......'C. Frame 8 (370 bytes on wire, 370 bytes captured) Arrival Time: Sep 15, 2005 12:41:18.794732000 Time delta from previous packet: 0.324216000 seconds Time since reference or first frame: 2.275842000 seconds Frame Number: 8 Packet Length: 370 bytes Capture Length: 370 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0x76a1db1e (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 352 Identification: 0x0705 (1797) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x74e0 (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 332 Checksum: 0x061f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2615039A7F98D966 Responder cookie: 0x910802D584A1FC73 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 324 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0c 29 1d cf fc 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 01 60 07 05 00 00 ff 11 74 e0 a5 e3 f9 6c a5 e3 .`......t....l.. 0020 f9 73 01 f4 01 f4 01 4c 06 1f 26 15 03 9a 7f 98 .s.....L..&..... 0030 d9 66 91 08 02 d5 84 a1 fc 73 04 10 02 00 00 00 .f.......s...... 0040 00 00 00 00 01 44 0a 00 00 84 2d 01 d6 b1 a5 0b .....D....-..... 0050 17 3d 85 e8 f3 4e 9c 3a d7 fd ad 35 44 dd bf 60 .=...N.:...5D..` 0060 f6 c5 ea ef 15 c6 7c 62 42 93 bd ba b9 9c 89 0b ......|bB....... 0070 f5 57 21 b6 6a 08 f1 66 9a e8 2a a8 50 cd 1a ea .W!.j..f..*.P... 0080 08 bc 53 e2 49 6a bc f8 5f 8a 6a 45 70 9e 6c 20 ..S.Ij.._.jEp.l 0090 9b 68 81 d1 8d 94 77 60 f6 d3 19 d9 18 d8 0b 0c .h....w`........ 00a0 e9 ca 09 74 55 ba 44 35 f8 5e b8 48 d7 f5 39 96 ...tU.D5.^.H..9. 00b0 d5 61 f7 aa 1a 74 fa ac f4 bb 96 fe b5 fd 1d cc .a...t.......... 00c0 b6 29 28 7d 15 3b 18 96 4e 12 82 00 00 14 cb 47 .)(}.;..N......G 00d0 d0 52 79 d0 cb 0a a0 04 7c 28 eb e0 03 f0 82 00 .Ry.....|(...... 00e0 00 18 b3 80 87 3f 5f bd d1 34 3b b0 57 87 eb a1 .....?_..4;.W... 00f0 47 b5 b8 b7 37 ca 82 00 00 18 17 19 be 68 31 f7 G...7........h1. 0100 53 22 da 72 06 de 75 26 25 7a 31 36 4c 76 82 00 S".r..u&%z16Lv.. 0110 00 18 0d d6 67 bc 7d dd 9c dc 57 92 91 da 54 19 ....g.}...W...T. 0120 04 a9 93 af db 1e 82 00 00 18 1b d4 ca 0e 23 51 ..............#Q 0130 ec 7c 1e c7 94 72 c9 44 b3 aa 0b 1a 8f 4e 82 00 .|...r.D.....N.. 0140 00 18 26 cc 66 eb b7 80 36 e8 c8 f7 6b 8a ef 28 ..&.f...6...k..( 0150 3a 40 e9 f1 df e3 00 00 00 18 c3 e8 89 78 78 58 :@...........xxX 0160 9e 2a f4 bb 4a 76 12 85 9a 9a 53 c3 4c 45 76 a1 .*..Jv....S.LEv. 0170 db 1e .. Frame 9 (370 bytes on wire, 370 bytes captured) Arrival Time: Sep 15, 2005 12:41:19.286777000 Time delta from previous packet: 0.492045000 seconds Time since reference or first frame: 2.767887000 seconds Frame Number: 9 Packet Length: 370 bytes Capture Length: 370 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0x5b66b715 (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 352 Identification: 0x06ea (1770) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x74fb (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 332 Checksum: 0x061f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2615039A7F98D966 Responder cookie: 0x910802D584A1FC73 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 324 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0c 29 1d cf fc 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 01 60 06 ea 00 00 ff 11 74 fb a5 e3 f9 6c a5 e3 .`......t....l.. 0020 f9 73 01 f4 01 f4 01 4c 06 1f 26 15 03 9a 7f 98 .s.....L..&..... 0030 d9 66 91 08 02 d5 84 a1 fc 73 04 10 02 00 00 00 .f.......s...... 0040 00 00 00 00 01 44 0a 00 00 84 2d 01 d6 b1 a5 0b .....D....-..... 0050 17 3d 85 e8 f3 4e 9c 3a d7 fd ad 35 44 dd bf 60 .=...N.:...5D..` 0060 f6 c5 ea ef 15 c6 7c 62 42 93 bd ba b9 9c 89 0b ......|bB....... 0070 f5 57 21 b6 6a 08 f1 66 9a e8 2a a8 50 cd 1a ea .W!.j..f..*.P... 0080 08 bc 53 e2 49 6a bc f8 5f 8a 6a 45 70 9e 6c 20 ..S.Ij.._.jEp.l 0090 9b 68 81 d1 8d 94 77 60 f6 d3 19 d9 18 d8 0b 0c .h....w`........ 00a0 e9 ca 09 74 55 ba 44 35 f8 5e b8 48 d7 f5 39 96 ...tU.D5.^.H..9. 00b0 d5 61 f7 aa 1a 74 fa ac f4 bb 96 fe b5 fd 1d cc .a...t.......... 00c0 b6 29 28 7d 15 3b 18 96 4e 12 82 00 00 14 cb 47 .)(}.;..N......G 00d0 d0 52 79 d0 cb 0a a0 04 7c 28 eb e0 03 f0 82 00 .Ry.....|(...... 00e0 00 18 b3 80 87 3f 5f bd d1 34 3b b0 57 87 eb a1 .....?_..4;.W... 00f0 47 b5 b8 b7 37 ca 82 00 00 18 17 19 be 68 31 f7 G...7........h1. 0100 53 22 da 72 06 de 75 26 25 7a 31 36 4c 76 82 00 S".r..u&%z16Lv.. 0110 00 18 0d d6 67 bc 7d dd 9c dc 57 92 91 da 54 19 ....g.}...W...T. 0120 04 a9 93 af db 1e 82 00 00 18 1b d4 ca 0e 23 51 ..............#Q 0130 ec 7c 1e c7 94 72 c9 44 b3 aa 0b 1a 8f 4e 82 00 .|...r.D.....N.. 0140 00 18 26 cc 66 eb b7 80 36 e8 c8 f7 6b 8a ef 28 ..&.f...6...k..( 0150 3a 40 e9 f1 df e3 00 00 00 18 c3 e8 89 78 78 58 :@...........xxX 0160 9e 2a f4 bb 4a 76 12 85 9a 9a 53 c3 4c 45 5b 66 .*..Jv....S.LE[f 0170 b7 15 .. Frame 10 (138 bytes on wire, 138 bytes captured) Arrival Time: Sep 15, 2005 12:41:19.817792000 Time delta from previous packet: 0.531015000 seconds Time since reference or first frame: 3.298902000 seconds Frame Number: 10 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x8f448b4c (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x06ba (1722) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf513 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xbc27 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2615039A7F98D966 Responder cookie: 0x910802D584A1FC73 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 13 46 3d 7d 5e 00 0c 29 1d cf fc 08 00 45 00 ..F=}^..).....E. 0010 00 78 06 ba 00 00 80 11 f5 13 a5 e3 f9 73 a5 e3 .x...........s.. 0020 f9 6c 01 f4 01 f4 00 64 bc 27 26 15 03 9a 7f 98 .l.....d.'&..... 0030 d9 66 91 08 02 d5 84 a1 fc 73 05 10 02 01 00 00 .f.......s...... 0040 00 00 00 00 00 5c 0f be 3c d3 31 50 68 a1 13 a7 .....\..<.1Ph... 0050 a5 06 d1 76 ed 5f fd 30 99 30 58 45 cf f4 3a 97 ...v._.0.0XE..:. 0060 89 2d dd 6a 52 e5 1b 9e da 30 1a 70 be 09 78 3c .-.jR....0.p..x< 0070 3f 45 9b 69 ff a8 b5 1e 5e f6 d1 5f d2 8c 56 1f ?E.i....^.._..V. 0080 0f 18 ee 09 24 88 8f 44 8b 4c ....$..D.L Frame 11 (138 bytes on wire, 138 bytes captured) Arrival Time: Sep 15, 2005 12:41:19.818720000 Time delta from previous packet: 0.000928000 seconds Time since reference or first frame: 3.299830000 seconds Frame Number: 11 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0xb0dbe0ca (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x06bb (1723) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf512 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xbc27 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2615039A7F98D966 Responder cookie: 0x910802D584A1FC73 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 13 46 3d 7d 5e 00 0c 29 1d cf fc 08 00 45 00 ..F=}^..).....E. 0010 00 78 06 bb 00 00 80 11 f5 12 a5 e3 f9 73 a5 e3 .x...........s.. 0020 f9 6c 01 f4 01 f4 00 64 bc 27 26 15 03 9a 7f 98 .l.....d.'&..... 0030 d9 66 91 08 02 d5 84 a1 fc 73 05 10 02 01 00 00 .f.......s...... 0040 00 00 00 00 00 5c 0f be 3c d3 31 50 68 a1 13 a7 .....\..<.1Ph... 0050 a5 06 d1 76 ed 5f fd 30 99 30 58 45 cf f4 3a 97 ...v._.0.0XE..:. 0060 89 2d dd 6a 52 e5 1b 9e da 30 1a 70 be 09 78 3c .-.jR....0.p..x< 0070 3f 45 9b 69 ff a8 b5 1e 5e f6 d1 5f d2 8c 56 1f ?E.i....^.._..V. 0080 0f 18 ee 09 24 88 b0 db e0 ca ....$..... Frame 12 (122 bytes on wire, 122 bytes captured) Arrival Time: Sep 15, 2005 12:41:19.825321000 Time delta from previous packet: 0.006601000 seconds Time since reference or first frame: 3.306431000 seconds Frame Number: 12 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0x79496159 (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0126 (294) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x7bb7 (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x7ed6 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2615039A7F98D966 Responder cookie: 0x910802D584A1FC73 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 1d cf fc 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 00 68 01 26 00 00 ff 11 7b b7 a5 e3 f9 6c a5 e3 .h.&....{....l.. 0020 f9 73 01 f4 01 f4 00 54 7e d6 26 15 03 9a 7f 98 .s.....T~.&..... 0030 d9 66 91 08 02 d5 84 a1 fc 73 05 10 02 01 00 00 .f.......s...... 0040 00 00 00 00 00 4c 9d 0c fd 12 16 dc 2d e0 01 c0 .....L......-... 0050 2d 92 a8 d1 a3 a5 0a 62 00 2e 75 10 25 54 f2 dc -......b..u.%T.. 0060 5d e3 1a a7 e7 82 43 ce a1 31 ae d8 d2 35 94 3a ].....C..1...5.: 0070 0a 35 4b c9 fc 15 79 49 61 59 .5K...yIaY Frame 13 (346 bytes on wire, 346 bytes captured) Arrival Time: Sep 15, 2005 12:41:22.093735000 Time delta from previous packet: 2.268414000 seconds Time since reference or first frame: 5.574845000 seconds Frame Number: 13 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x3af0df39 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x06bd (1725) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf440 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xb7ad (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2615039A7F98D966 Responder cookie: 0x910802D584A1FC73 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x68102F11 Length: 300 Encrypted payload (272 bytes) 0000 00 13 46 3d 7d 5e 00 0c 29 1d cf fc 08 00 45 00 ..F=}^..).....E. 0010 01 48 06 bd 00 00 80 11 f4 40 a5 e3 f9 73 a5 e3 .H.......@...s.. 0020 f9 6c 01 f4 01 f4 01 34 b7 ad 26 15 03 9a 7f 98 .l.....4..&..... 0030 d9 66 91 08 02 d5 84 a1 fc 73 08 10 20 01 68 10 .f.......s.. .h. 0040 2f 11 00 00 01 2c 35 39 b8 53 d8 f8 1b d3 1b 1e /....,59.S...... 0050 5f 45 0a a7 1a 2b d5 e6 21 d4 3b 8c 88 d8 a1 16 _E...+..!.;..... 0060 e4 6f 7c 7a 5c 55 a2 92 ed e6 75 33 e9 d7 b5 0e .o|z\U....u3.... 0070 4e 4d 0e d1 52 b7 d2 66 93 d0 93 c9 79 57 ac be NM..R..f....yW.. 0080 84 ea 8f ce 50 e5 30 02 d0 fe 52 56 03 96 cf fa ....P.0...RV.... 0090 a9 9a f6 13 86 7d dd ba af df f9 ca fc c8 5a eb .....}........Z. 00a0 92 25 a2 01 40 cc 73 a1 af 1b 97 25 8d d2 8e 17 .%..@.s....%.... 00b0 a2 16 6f f6 76 ae 78 c8 ed 51 bf 23 ff b7 79 63 ..o.v.x..Q.#..yc 00c0 4f 80 b7 c3 45 65 45 51 8a f3 4c f6 4a 6e 50 d2 O...EeEQ..L.JnP. 00d0 93 dc 99 a3 47 5a 88 7a d4 86 5a 58 6c 73 96 55 ....GZ.z..ZXls.U 00e0 ab d8 b6 c0 af 02 0e 15 fa be b8 7a 0d d2 8c f8 ...........z.... 00f0 86 6d 65 33 3d ae 51 e2 cc 8d 29 b3 0c 17 02 76 .me3=.Q...)....v 0100 56 1f 1b 46 6d d5 cd 8e e7 bd 23 41 0f 24 25 10 V..Fm.....#A.$%. 0110 aa 24 20 13 26 a4 c8 92 66 7c 24 d6 f3 95 44 64 .$ .&...f|$...Dd 0120 bd c8 9e ac 5b e9 b7 ed f3 c3 cc 13 f3 8c e6 db ....[........... 0130 0b d7 87 98 36 02 40 04 f3 fa f4 70 cd 0a 33 8d ....6.@....p..3. 0140 d3 09 91 d0 65 4d b9 51 3c 51 56 c9 ba c6 d4 7c ....eM.QZ. 0140 3e b8 90 3e 44 99 34 ce 4b db 0e 37 fd 02 88 12 >..>D.4.K..7.... 0150 9c 56 a4 17 5c 57 21 9b 54 15 .V..\W!.T. Frame 15 (106 bytes on wire, 106 bytes captured) Arrival Time: Sep 15, 2005 12:41:22.273187000 Time delta from previous packet: 0.005613000 seconds Time since reference or first frame: 5.754297000 seconds Frame Number: 15 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0xff405057 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x06bf (1727) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf52e (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.108 (165.227.249.108) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x347e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x2615039A7F98D966 Responder cookie: 0x910802D584A1FC73 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x68102F11 Length: 60 Encrypted payload (32 bytes) 0000 00 13 46 3d 7d 5e 00 0c 29 1d cf fc 08 00 45 00 ..F=}^..).....E. 0010 00 58 06 bf 00 00 80 11 f5 2e a5 e3 f9 73 a5 e3 .X...........s.. 0020 f9 6c 01 f4 01 f4 00 44 34 7e 26 15 03 9a 7f 98 .l.....D4~&..... 0030 d9 66 91 08 02 d5 84 a1 fc 73 08 10 20 01 68 10 .f.......s.. .h. 0040 2f 11 00 00 00 3c e0 25 34 a7 9c 16 f7 3b 3f 34 /....<.%4....;?4 0050 4f b3 f5 ff 93 11 13 ca e2 02 3c 86 b9 65 5c 10 O.........<..e\. 0060 6a e2 c7 11 f7 71 ff 40 50 57 j....q.@PW Frame 16 (138 bytes on wire, 138 bytes captured) Arrival Time: Sep 15, 2005 12:41:26.951183000 Time delta from previous packet: 4.677996000 seconds Time since reference or first frame: 10.432293000 seconds Frame Number: 16 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0xa912c828 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfbab (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.108 (165.227.249.108) Encapsulating Security Payload SPI: 0x1686f43b Sequence: 1 Data (92 bytes) 0000 00 13 46 3d 7d 5e 00 0c 29 1d cf fc 08 00 45 00 ..F=}^..).....E. 0010 00 78 00 01 00 00 80 32 fb ab a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 6c 16 86 f4 3b 00 00 00 01 30 77 23 21 37 a2 .l...;....0w#!7. 0030 d9 a1 2e 03 00 32 f7 42 33 76 e7 e7 49 22 90 ec .....2.B3v..I".. 0040 9e 85 d6 c0 8e 8f f6 e9 13 c2 0e 7a 8e ef 55 83 ...........z..U. 0050 78 59 60 16 a7 7a bc 0e c3 6f 49 8b 85 d2 dc 0c xY`..z...oI..... 0060 f3 24 af fc cf db 26 c5 33 49 e0 48 74 e7 0e 89 .$....&.3I.Ht... 0070 c7 0f d8 5f 64 dd 57 7b 60 e0 af a8 32 3f d3 76 ..._d.W{`...2?.v 0080 6c b0 a8 ae dd 2f a9 12 c8 28 l..../...( Frame 17 (138 bytes on wire, 138 bytes captured) Arrival Time: Sep 15, 2005 12:41:26.962059000 Time delta from previous packet: 0.010876000 seconds Time since reference or first frame: 10.443169000 seconds Frame Number: 17 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0x0da5ee6e (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0548 (1352) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8664 (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0x944ca4dc Sequence: 1 Data (92 bytes) 0000 00 0c 29 1d cf fc 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 00 78 05 48 00 00 f0 32 86 64 a5 e3 f9 6c a5 e3 .x.H...2.d...l.. 0020 f9 73 94 4c a4 dc 00 00 00 01 00 00 00 00 f0 32 .s.L...........2 0030 8b ac a5 e3 f9 6c a5 e3 f9 73 67 8a 0c ce c2 38 .....l...sg....8 0040 ee dd e5 60 db 4e 91 1a be 49 2a f2 b8 71 18 d0 ...`.N...I*..q.. 0050 25 bb 3f e8 ee 73 68 d1 a0 ac 8d 04 42 08 c8 66 %.?..sh.....B..f 0060 90 e8 43 c2 7b e6 7f 52 3f 67 89 b2 53 d5 5d f9 ..C.{..R?g..S.]. 0070 58 31 9f d3 9f 37 8a 58 a0 94 5e 3f 66 b3 c6 a8 X1...7.X..^?f... 0080 ef ab e8 35 51 c7 0d a5 ee 6e ...5Q....n Frame 18 (138 bytes on wire, 138 bytes captured) Arrival Time: Sep 15, 2005 12:41:27.988278000 Time delta from previous packet: 1.026219000 seconds Time since reference or first frame: 11.469388000 seconds Frame Number: 18 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:1d:cf:fc, Dst: 00:13:46:3d:7d:5e Destination: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Frame check sequence: 0x3d66c3c7 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.108 (165.227.249.108) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfbaa (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.108 (165.227.249.108) Encapsulating Security Payload SPI: 0x1686f43b Sequence: 2 Data (92 bytes) 0000 00 13 46 3d 7d 5e 00 0c 29 1d cf fc 08 00 45 00 ..F=}^..).....E. 0010 00 78 00 02 00 00 80 32 fb aa a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 6c 16 86 f4 3b 00 00 00 02 e0 48 74 e7 0e 89 .l...;.....Ht... 0030 c7 0f d8 5f 64 dd 57 7b 60 e0 8e e8 f6 38 6d a1 ..._d.W{`....8m. 0040 95 fc b4 85 67 d1 e1 a0 4c ce 85 90 14 af 2a cc ....g...L.....*. 0050 14 57 2f 05 36 b1 48 38 0a be 75 c1 d6 83 ff fa .W/.6.H8..u..... 0060 52 08 ed 67 ae d3 4b f9 69 18 05 36 97 37 71 83 R..g..K.i..6.7q. 0070 cb 2d f6 39 42 19 c5 96 43 b2 7b 7c 18 88 9b dd .-.9B...C.{|.... 0080 fc 5e 52 8f cf d4 3d 66 c3 c7 .^R...=f.. Frame 19 (138 bytes on wire, 138 bytes captured) Arrival Time: Sep 15, 2005 12:41:27.989698000 Time delta from previous packet: 0.001420000 seconds Time since reference or first frame: 11.470808000 seconds Frame Number: 19 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:13:46:3d:7d:5e, Dst: 00:0c:29:1d:cf:fc Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:13:46:3d:7d:5e (00:13:46:3d:7d:5e) Type: IP (0x0800) Frame check sequence: 0x72e44eb3 (correct) Internet Protocol, Src Addr: 165.227.249.108 (165.227.249.108), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x07bc (1980) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x83f0 (correct) Source: 165.227.249.108 (165.227.249.108) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0x944ca4dc Sequence: 2 Data (92 bytes) 0000 00 0c 29 1d cf fc 00 13 46 3d 7d 5e 08 00 45 00 ..).....F=}^..E. 0010 00 78 07 bc 00 00 f0 32 83 f0 a5 e3 f9 6c a5 e3 .x.....2.....l.. 0020 f9 73 94 4c a4 dc 00 00 00 02 00 01 00 00 f0 32 .s.L...........2 0030 8b ab a5 e3 f9 6c a5 e3 f9 73 73 0b 49 8b 3e b1 .....l...ss.I.>. 0040 d9 d7 25 85 2e cd 04 12 2a 8b 10 13 84 7e 8d 47 ..%.....*....~.G 0050 19 26 e8 28 7b 1a 14 17 7e a8 1a 88 3b 3e ad 20 .&.({...~...;>. 0060 66 7f d2 db 05 ec 0f b6 57 9a 9c 55 21 15 92 4b f.......W..U!..K 0070 b2 20 6c fe f0 b3 42 92 46 1f 83 4d 5b f9 e1 36 . l...B.F..M[..6 0080 b1 45 89 af c6 7f 72 e4 4e b3 .E....r.N.