Frame 1 (166 bytes on wire, 166 bytes captured)
    Arrival Time: Nov 12, 2007 14:14:50.321862000
    Time delta from previous packet: 0.000000000 seconds
    Time since reference or first frame: 0.000000000 seconds
    Frame Number: 1
    Packet Length: 166 bytes
    Capture Length: 166 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Destination: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.111 (165.227.249.111)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 152
    Identification: 0x0469 (1129)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf741 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.111 (165.227.249.111)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 132
    Checksum: 0xbcb8 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x17747277D63BEFB5
    Responder cookie: 0x0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 124
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (3600)
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-00
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02

0000  00 1c f0 72 2f 16 00 0c 29 ab 06 ab 08 00 45 00   ...r/...).....E.
0010  00 98 04 69 00 00 80 11 f7 41 a5 e3 f9 73 a5 e3   ...i.....A...s..
0020  f9 6f 01 f4 01 f4 00 84 bc b8 17 74 72 77 d6 3b   .o.........trw.;
0030  ef b5 00 00 00 00 00 00 00 00 01 10 02 00 00 00   ................
0040  00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00   .....|...8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04   ................
0070  00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00   ................
0080  00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79   ..D..-.......F.y
0090  dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63   ..........>.in.c
00a0  81 b5 ec 42 7b 1f                                 ...B{.

Frame 2 (166 bytes on wire, 166 bytes captured)
    Arrival Time: Nov 12, 2007 14:14:50.325724000
    Time delta from previous packet: 0.003862000 seconds
    Time since reference or first frame: 0.003862000 seconds
    Frame Number: 2
    Packet Length: 166 bytes
    Capture Length: 166 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Source: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.111 (165.227.249.111), Dst: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 152
    Identification: 0x669a (26266)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: UDP (0x11)
    Header checksum: 0x1610 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.111 (165.227.249.111)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 132
    Checksum: 0x5551 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x17747277D63BEFB5
    Responder cookie: 0x7A595DB2922424C8
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 124
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (3600)
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)

0000  00 0c 29 ab 06 ab 00 1c f0 72 2f 16 08 00 45 00   ..)......r/...E.
0010  00 98 66 9a 00 00 ff 11 16 10 a5 e3 f9 6f a5 e3   ..f..........o..
0020  f9 73 01 f4 01 f4 00 84 55 51 17 74 72 77 d6 3b   .s......UQ.trw.;
0030  ef b5 7a 59 5d b2 92 24 24 c8 01 10 02 00 00 00   ..zY]..$$.......
0040  00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00   .....|...8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04   ................
0070  00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00   ................
0080  00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b   .....N.$...GYL(K
0090  21 3b 00 00 00 14 af ca d7 13 68 a1 f1 c9 6b 86   !;........h...k.
00a0  96 fc 77 57 01 00                                 ..wW..

Frame 3 (166 bytes on wire, 166 bytes captured)
    Arrival Time: Nov 12, 2007 14:14:50.921833000
    Time delta from previous packet: 0.596109000 seconds
    Time since reference or first frame: 0.599971000 seconds
    Frame Number: 3
    Packet Length: 166 bytes
    Capture Length: 166 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Source: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.111 (165.227.249.111), Dst: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 152
    Identification: 0x67ec (26604)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: UDP (0x11)
    Header checksum: 0x14be [correct]
        Good: True
        Bad : False
    Source: 165.227.249.111 (165.227.249.111)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 132
    Checksum: 0x5551 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x17747277D63BEFB5
    Responder cookie: 0x7A595DB2922424C8
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 124
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (3600)
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)

0000  00 0c 29 ab 06 ab 00 1c f0 72 2f 16 08 00 45 00   ..)......r/...E.
0010  00 98 67 ec 00 00 ff 11 14 be a5 e3 f9 6f a5 e3   ..g..........o..
0020  f9 73 01 f4 01 f4 00 84 55 51 17 74 72 77 d6 3b   .s......UQ.trw.;
0030  ef b5 7a 59 5d b2 92 24 24 c8 01 10 02 00 00 00   ..zY]..$$.......
0040  00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00   .....|...8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04   ................
0070  00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00   ................
0080  00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b   .....N.$...GYL(K
0090  21 3b 00 00 00 14 af ca d7 13 68 a1 f1 c9 6b 86   !;........h...k.
00a0  96 fc 77 57 01 00                                 ..wW..

Frame 4 (166 bytes on wire, 166 bytes captured)
    Arrival Time: Nov 12, 2007 14:14:51.931698000
    Time delta from previous packet: 1.009865000 seconds
    Time since reference or first frame: 1.609836000 seconds
    Frame Number: 4
    Packet Length: 166 bytes
    Capture Length: 166 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Source: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.111 (165.227.249.111), Dst: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 152
    Identification: 0x6458 (25688)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: UDP (0x11)
    Header checksum: 0x1852 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.111 (165.227.249.111)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 132
    Checksum: 0x5551 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x17747277D63BEFB5
    Responder cookie: 0x7A595DB2922424C8
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 124
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (3600)
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)

0000  00 0c 29 ab 06 ab 00 1c f0 72 2f 16 08 00 45 00   ..)......r/...E.
0010  00 98 64 58 00 00 ff 11 18 52 a5 e3 f9 6f a5 e3   ..dX.....R...o..
0020  f9 73 01 f4 01 f4 00 84 55 51 17 74 72 77 d6 3b   .s......UQ.trw.;
0030  ef b5 7a 59 5d b2 92 24 24 c8 01 10 02 00 00 00   ..zY]..$$.......
0040  00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00   .....|...8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04   ................
0070  00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00   ................
0080  00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b   .....N.$...GYL(K
0090  21 3b 00 00 00 14 af ca d7 13 68 a1 f1 c9 6b 86   !;........h...k.
00a0  96 fc 77 57 01 00                                 ..wW..

Frame 5 (298 bytes on wire, 298 bytes captured)
    Arrival Time: Nov 12, 2007 14:14:52.562117000
    Time delta from previous packet: 0.630419000 seconds
    Time since reference or first frame: 2.240255000 seconds
    Frame Number: 5
    Packet Length: 298 bytes
    Capture Length: 298 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Destination: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.111 (165.227.249.111)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 284
    Identification: 0x046a (1130)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf6bc [correct]
        Good: True
        Bad : False
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.111 (165.227.249.111)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 264
    Checksum: 0x2f1c [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x17747277D63BEFB5
    Responder cookie: 0x7A595DB2922424C8
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 256
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: Vendor ID (13)
        Length: 24
        Nonce Data
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 48
        Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103...
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 12
        Vendor ID: unknown vendor ID: 0xDA8E937880010000
    Vendor ID payload
        Next payload: NONE (0)
        Length: 12
        Vendor ID: draft-beaulieu-ike-xauth-02.txt

0000  00 1c f0 72 2f 16 00 0c 29 ab 06 ab 08 00 45 00   ...r/...).....E.
0010  01 1c 04 6a 00 00 80 11 f6 bc a5 e3 f9 73 a5 e3   ...j.........s..
0020  f9 6f 01 f4 01 f4 01 08 2f 1c 17 74 72 77 d6 3b   .o....../..trw.;
0030  ef b5 7a 59 5d b2 92 24 24 c8 04 10 02 00 00 00   ..zY]..$$.......
0040  00 00 00 00 01 00 0a 00 00 84 05 ad d8 21 3d 69   .............!=i
0050  c6 71 32 bf c4 18 eb a6 05 6d 0a b3 13 9c 73 c3   .q2......m....s.
0060  1b 92 bf c1 e0 f2 89 92 a7 b0 68 57 aa 8e 6d 7b   ..........hW..m{
0070  d4 ac 3c bb 0b 71 b7 4e 81 9e 95 a0 37 ec 9c 36   ..<..q.N....7..6
0080  0e 14 d0 44 1b 53 22 ea f2 01 d1 ab 92 b1 8a f5   ...D.S".........
0090  71 80 37 b9 a8 fc 93 41 f8 b6 d1 27 11 e4 27 e3   q.7....A...'..'.
00a0  e5 f2 0e 6d 17 10 1d 5c 49 f9 4f 38 a0 78 fd 86   ...m...\I.O8.x..
00b0  20 c2 65 ca 7b 6c 88 19 bf 8e 3f bb 7f 24 b4 d2    .e.{l....?..$..
00c0  dc e0 7c 2a 34 a8 4e 54 2b 2b 0d 00 00 18 a6 ad   ..|*4.NT++......
00d0  3f 08 6e 3a 4d 71 f2 ea b9 90 54 f3 21 7d 74 ae   ?.n:Mq....T.!}t.
00e0  ea 94 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6   .....0G.........
00f0  d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31   ..V\h..........1
0100  30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29   0.1.1 (Build 10)
0110  00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00   .........x......
0120  00 0c 09 00 26 89 df d6 b7 12                     ....&.....

Frame 6 (298 bytes on wire, 298 bytes captured)
    Arrival Time: Nov 12, 2007 14:14:52.562487000
    Time delta from previous packet: 0.000370000 seconds
    Time since reference or first frame: 2.240625000 seconds
    Frame Number: 6
    Packet Length: 298 bytes
    Capture Length: 298 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Destination: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.111 (165.227.249.111)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 284
    Identification: 0x046b (1131)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf6bb [correct]
        Good: True
        Bad : False
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.111 (165.227.249.111)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 264
    Checksum: 0x2f1c [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x17747277D63BEFB5
    Responder cookie: 0x7A595DB2922424C8
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 256
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: Vendor ID (13)
        Length: 24
        Nonce Data
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 48
        Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103...
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 12
        Vendor ID: unknown vendor ID: 0xDA8E937880010000
    Vendor ID payload
        Next payload: NONE (0)
        Length: 12
        Vendor ID: draft-beaulieu-ike-xauth-02.txt

0000  00 1c f0 72 2f 16 00 0c 29 ab 06 ab 08 00 45 00   ...r/...).....E.
0010  01 1c 04 6b 00 00 80 11 f6 bb a5 e3 f9 73 a5 e3   ...k.........s..
0020  f9 6f 01 f4 01 f4 01 08 2f 1c 17 74 72 77 d6 3b   .o....../..trw.;
0030  ef b5 7a 59 5d b2 92 24 24 c8 04 10 02 00 00 00   ..zY]..$$.......
0040  00 00 00 00 01 00 0a 00 00 84 05 ad d8 21 3d 69   .............!=i
0050  c6 71 32 bf c4 18 eb a6 05 6d 0a b3 13 9c 73 c3   .q2......m....s.
0060  1b 92 bf c1 e0 f2 89 92 a7 b0 68 57 aa 8e 6d 7b   ..........hW..m{
0070  d4 ac 3c bb 0b 71 b7 4e 81 9e 95 a0 37 ec 9c 36   ..<..q.N....7..6
0080  0e 14 d0 44 1b 53 22 ea f2 01 d1 ab 92 b1 8a f5   ...D.S".........
0090  71 80 37 b9 a8 fc 93 41 f8 b6 d1 27 11 e4 27 e3   q.7....A...'..'.
00a0  e5 f2 0e 6d 17 10 1d 5c 49 f9 4f 38 a0 78 fd 86   ...m...\I.O8.x..
00b0  20 c2 65 ca 7b 6c 88 19 bf 8e 3f bb 7f 24 b4 d2    .e.{l....?..$..
00c0  dc e0 7c 2a 34 a8 4e 54 2b 2b 0d 00 00 18 a6 ad   ..|*4.NT++......
00d0  3f 08 6e 3a 4d 71 f2 ea b9 90 54 f3 21 7d 74 ae   ?.n:Mq....T.!}t.
00e0  ea 94 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6   .....0G.........
00f0  d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31   ..V\h..........1
0100  30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29   0.1.1 (Build 10)
0110  00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00   .........x......
0120  00 0c 09 00 26 89 df d6 b7 12                     ....&.....

Frame 7 (298 bytes on wire, 298 bytes captured)
    Arrival Time: Nov 12, 2007 14:14:52.562733000
    Time delta from previous packet: 0.000246000 seconds
    Time since reference or first frame: 2.240871000 seconds
    Frame Number: 7
    Packet Length: 298 bytes
    Capture Length: 298 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Destination: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.111 (165.227.249.111)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 284
    Identification: 0x046c (1132)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf6ba [correct]
        Good: True
        Bad : False
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.111 (165.227.249.111)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 264
    Checksum: 0x2f1c [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x17747277D63BEFB5
    Responder cookie: 0x7A595DB2922424C8
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 256
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: Vendor ID (13)
        Length: 24
        Nonce Data
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 48
        Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103...
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 12
        Vendor ID: unknown vendor ID: 0xDA8E937880010000
    Vendor ID payload
        Next payload: NONE (0)
        Length: 12
        Vendor ID: draft-beaulieu-ike-xauth-02.txt

0000  00 1c f0 72 2f 16 00 0c 29 ab 06 ab 08 00 45 00   ...r/...).....E.
0010  01 1c 04 6c 00 00 80 11 f6 ba a5 e3 f9 73 a5 e3   ...l.........s..
0020  f9 6f 01 f4 01 f4 01 08 2f 1c 17 74 72 77 d6 3b   .o....../..trw.;
0030  ef b5 7a 59 5d b2 92 24 24 c8 04 10 02 00 00 00   ..zY]..$$.......
0040  00 00 00 00 01 00 0a 00 00 84 05 ad d8 21 3d 69   .............!=i
0050  c6 71 32 bf c4 18 eb a6 05 6d 0a b3 13 9c 73 c3   .q2......m....s.
0060  1b 92 bf c1 e0 f2 89 92 a7 b0 68 57 aa 8e 6d 7b   ..........hW..m{
0070  d4 ac 3c bb 0b 71 b7 4e 81 9e 95 a0 37 ec 9c 36   ..<..q.N....7..6
0080  0e 14 d0 44 1b 53 22 ea f2 01 d1 ab 92 b1 8a f5   ...D.S".........
0090  71 80 37 b9 a8 fc 93 41 f8 b6 d1 27 11 e4 27 e3   q.7....A...'..'.
00a0  e5 f2 0e 6d 17 10 1d 5c 49 f9 4f 38 a0 78 fd 86   ...m...\I.O8.x..
00b0  20 c2 65 ca 7b 6c 88 19 bf 8e 3f bb 7f 24 b4 d2    .e.{l....?..$..
00c0  dc e0 7c 2a 34 a8 4e 54 2b 2b 0d 00 00 18 a6 ad   ..|*4.NT++......
00d0  3f 08 6e 3a 4d 71 f2 ea b9 90 54 f3 21 7d 74 ae   ?.n:Mq....T.!}t.
00e0  ea 94 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6   .....0G.........
00f0  d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31   ..V\h..........1
0100  30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29   0.1.1 (Build 10)
0110  00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00   .........x......
0120  00 0c 09 00 26 89 df d6 b7 12                     ....&.....

Frame 8 (222 bytes on wire, 222 bytes captured)
    Arrival Time: Nov 12, 2007 14:14:52.687799000
    Time delta from previous packet: 0.125066000 seconds
    Time since reference or first frame: 2.365937000 seconds
    Frame Number: 8
    Packet Length: 222 bytes
    Capture Length: 222 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Source: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.111 (165.227.249.111), Dst: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 208
    Identification: 0x65a3 (26019)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: UDP (0x11)
    Header checksum: 0x16cf [correct]
        Good: True
        Bad : False
    Source: 165.227.249.111 (165.227.249.111)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 188
    Checksum: 0xf800 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x17747277D63BEFB5
    Responder cookie: 0x7A595DB2922424C8
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 180
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: NONE (0)
        Length: 20
        Nonce Data

0000  00 0c 29 ab 06 ab 00 1c f0 72 2f 16 08 00 45 00   ..)......r/...E.
0010  00 d0 65 a3 00 00 ff 11 16 cf a5 e3 f9 6f a5 e3   ..e..........o..
0020  f9 73 01 f4 01 f4 00 bc f8 00 17 74 72 77 d6 3b   .s.........trw.;
0030  ef b5 7a 59 5d b2 92 24 24 c8 04 10 02 00 00 00   ..zY]..$$.......
0040  00 00 00 00 00 b4 0a 00 00 84 d8 19 f0 9d 1d d6   ................
0050  34 d6 0f 5f c0 a2 cc 46 e2 91 2f 13 31 3a 5e c9   4.._...F../.1:^.
0060  d7 b4 59 3d 33 72 2d cd 64 29 9a 0e 4e f4 a8 3e   ..Y=3r-.d)..N..>
0070  25 5f 81 ec 7a 6b 81 b6 07 c4 f5 ff 92 c1 0e e2   %_..zk..........
0080  19 b3 91 ce 02 0b 8c 7a 3f 14 80 2b 81 2c e1 ad   .......z?..+.,..
0090  ca 30 0c fb f4 67 f6 3c 86 53 46 2f 46 d3 10 d8   .0...g.<.SF/F...
00a0  49 67 85 5e af b5 ee 89 94 d7 91 bb 41 c3 9c 87   Ig.^........A...
00b0  56 78 77 90 18 3c 99 fe e7 59 8f 79 4d 56 51 e4   Vxw..<...Y.yMVQ.
00c0  24 de 9e cd 4d 33 c8 d0 d5 36 00 00 00 14 25 f2   $...M3...6....%.
00d0  05 df 4c e3 f4 41 89 92 aa 82 52 ee c2 b3         ..L..A....R...

Frame 9 (222 bytes on wire, 222 bytes captured)
    Arrival Time: Nov 12, 2007 14:14:53.143043000
    Time delta from previous packet: 0.455244000 seconds
    Time since reference or first frame: 2.821181000 seconds
    Frame Number: 9
    Packet Length: 222 bytes
    Capture Length: 222 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Source: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.111 (165.227.249.111), Dst: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 208
    Identification: 0x6658 (26200)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: UDP (0x11)
    Header checksum: 0x161a [correct]
        Good: True
        Bad : False
    Source: 165.227.249.111 (165.227.249.111)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 188
    Checksum: 0xf800 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x17747277D63BEFB5
    Responder cookie: 0x7A595DB2922424C8
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 180
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: NONE (0)
        Length: 20
        Nonce Data

0000  00 0c 29 ab 06 ab 00 1c f0 72 2f 16 08 00 45 00   ..)......r/...E.
0010  00 d0 66 58 00 00 ff 11 16 1a a5 e3 f9 6f a5 e3   ..fX.........o..
0020  f9 73 01 f4 01 f4 00 bc f8 00 17 74 72 77 d6 3b   .s.........trw.;
0030  ef b5 7a 59 5d b2 92 24 24 c8 04 10 02 00 00 00   ..zY]..$$.......
0040  00 00 00 00 00 b4 0a 00 00 84 d8 19 f0 9d 1d d6   ................
0050  34 d6 0f 5f c0 a2 cc 46 e2 91 2f 13 31 3a 5e c9   4.._...F../.1:^.
0060  d7 b4 59 3d 33 72 2d cd 64 29 9a 0e 4e f4 a8 3e   ..Y=3r-.d)..N..>
0070  25 5f 81 ec 7a 6b 81 b6 07 c4 f5 ff 92 c1 0e e2   %_..zk..........
0080  19 b3 91 ce 02 0b 8c 7a 3f 14 80 2b 81 2c e1 ad   .......z?..+.,..
0090  ca 30 0c fb f4 67 f6 3c 86 53 46 2f 46 d3 10 d8   .0...g.<.SF/F...
00a0  49 67 85 5e af b5 ee 89 94 d7 91 bb 41 c3 9c 87   Ig.^........A...
00b0  56 78 77 90 18 3c 99 fe e7 59 8f 79 4d 56 51 e4   Vxw..<...Y.yMVQ.
00c0  24 de 9e cd 4d 33 c8 d0 d5 36 00 00 00 14 25 f2   $...M3...6....%.
00d0  05 df 4c e3 f4 41 89 92 aa 82 52 ee c2 b3         ..L..A....R...

Frame 10 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Nov 12, 2007 14:14:53.624064000
    Time delta from previous packet: 0.481021000 seconds
    Time since reference or first frame: 3.302202000 seconds
    Frame Number: 10
    Packet Length: 134 bytes
    Capture Length: 134 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Destination: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.111 (165.227.249.111)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x046d (1133)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf75d [correct]
        Good: True
        Bad : False
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.111 (165.227.249.111)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 100
    Checksum: 0xa02a [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x17747277D63BEFB5
    Responder cookie: 0x7A595DB2922424C8
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 92
    Encrypted payload (64 bytes)

0000  00 1c f0 72 2f 16 00 0c 29 ab 06 ab 08 00 45 00   ...r/...).....E.
0010  00 78 04 6d 00 00 80 11 f7 5d a5 e3 f9 73 a5 e3   .x.m.....]...s..
0020  f9 6f 01 f4 01 f4 00 64 a0 2a 17 74 72 77 d6 3b   .o.....d.*.trw.;
0030  ef b5 7a 59 5d b2 92 24 24 c8 05 10 02 01 00 00   ..zY]..$$.......
0040  00 00 00 00 00 5c a1 c9 27 ad aa b8 45 b1 1d 15   .....\..'...E...
0050  ab 48 a5 80 b2 02 c2 c0 9e 78 eb 77 83 ae 27 23   .H.......x.w..'#
0060  53 0c 6c 33 c7 f1 eb 9c bd 83 c3 76 d2 f5 2f f7   S.l3.......v../.
0070  1b ce e8 da eb f7 64 db bc 34 f5 d5 90 a1 76 25   ......d..4....v%
0080  ff a9 6d 3b f2 f7                                 ..m;..

Frame 11 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Nov 12, 2007 14:14:53.624066000
    Time delta from previous packet: 0.000002000 seconds
    Time since reference or first frame: 3.302204000 seconds
    Frame Number: 11
    Packet Length: 134 bytes
    Capture Length: 134 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Destination: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.111 (165.227.249.111)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x046e (1134)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf75c [correct]
        Good: True
        Bad : False
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.111 (165.227.249.111)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 100
    Checksum: 0xa02a [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x17747277D63BEFB5
    Responder cookie: 0x7A595DB2922424C8
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 92
    Encrypted payload (64 bytes)

0000  00 1c f0 72 2f 16 00 0c 29 ab 06 ab 08 00 45 00   ...r/...).....E.
0010  00 78 04 6e 00 00 80 11 f7 5c a5 e3 f9 73 a5 e3   .x.n.....\...s..
0020  f9 6f 01 f4 01 f4 00 64 a0 2a 17 74 72 77 d6 3b   .o.....d.*.trw.;
0030  ef b5 7a 59 5d b2 92 24 24 c8 05 10 02 01 00 00   ..zY]..$$.......
0040  00 00 00 00 00 5c a1 c9 27 ad aa b8 45 b1 1d 15   .....\..'...E...
0050  ab 48 a5 80 b2 02 c2 c0 9e 78 eb 77 83 ae 27 23   .H.......x.w..'#
0060  53 0c 6c 33 c7 f1 eb 9c bd 83 c3 76 d2 f5 2f f7   S.l3.......v../.
0070  1b ce e8 da eb f7 64 db bc 34 f5 d5 90 a1 76 25   ......d..4....v%
0080  ff a9 6d 3b f2 f7                                 ..m;..

Frame 12 (118 bytes on wire, 118 bytes captured)
    Arrival Time: Nov 12, 2007 14:14:53.627147000
    Time delta from previous packet: 0.003081000 seconds
    Time since reference or first frame: 3.305285000 seconds
    Frame Number: 12
    Packet Length: 118 bytes
    Capture Length: 118 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Source: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.111 (165.227.249.111), Dst: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0x61cc (25036)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: UDP (0x11)
    Header checksum: 0x1b0e [correct]
        Good: True
        Bad : False
    Source: 165.227.249.111 (165.227.249.111)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 84
    Checksum: 0x7fa7 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x17747277D63BEFB5
    Responder cookie: 0x7A595DB2922424C8
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 76
    Encrypted payload (48 bytes)

0000  00 0c 29 ab 06 ab 00 1c f0 72 2f 16 08 00 45 00   ..)......r/...E.
0010  00 68 61 cc 00 00 ff 11 1b 0e a5 e3 f9 6f a5 e3   .ha..........o..
0020  f9 73 01 f4 01 f4 00 54 7f a7 17 74 72 77 d6 3b   .s.....T...trw.;
0030  ef b5 7a 59 5d b2 92 24 24 c8 05 10 02 01 00 00   ..zY]..$$.......
0040  00 00 00 00 00 4c a4 a1 94 c9 07 b4 1c bf 4b ae   .....L........K.
0050  38 88 b9 e5 ce e9 05 67 89 78 ad bf 88 c7 e6 57   8......g.x.....W
0060  c2 00 16 b3 7e f4 b6 b7 1f 60 a8 46 ce 63 14 64   ....~....`.F.c.d
0070  38 18 0e 57 40 f8                                 8..W@.

Frame 13 (342 bytes on wire, 342 bytes captured)
    Arrival Time: Nov 12, 2007 14:14:55.770907000
    Time delta from previous packet: 2.143760000 seconds
    Time since reference or first frame: 5.449045000 seconds
    Frame Number: 13
    Packet Length: 342 bytes
    Capture Length: 342 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Destination: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.111 (165.227.249.111)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 328
    Identification: 0x0470 (1136)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf68a [correct]
        Good: True
        Bad : False
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.111 (165.227.249.111)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 308
    Checksum: 0x9eb9 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x17747277D63BEFB5
    Responder cookie: 0x7A595DB2922424C8
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xFBF61EA5
    Length: 300
    Encrypted payload (272 bytes)

0000  00 1c f0 72 2f 16 00 0c 29 ab 06 ab 08 00 45 00   ...r/...).....E.
0010  01 48 04 70 00 00 80 11 f6 8a a5 e3 f9 73 a5 e3   .H.p.........s..
0020  f9 6f 01 f4 01 f4 01 34 9e b9 17 74 72 77 d6 3b   .o.....4...trw.;
0030  ef b5 7a 59 5d b2 92 24 24 c8 08 10 20 01 fb f6   ..zY]..$$... ...
0040  1e a5 00 00 01 2c df 38 30 28 0e b6 b6 2d 64 89   .....,.80(...-d.
0050  e2 60 21 b7 78 4b dd 71 bb e8 8a a7 f9 95 5f e7   .`!.xK.q......_.
0060  9a c7 c7 1f a0 a4 e0 bf 35 70 b5 fc ea 5e 84 f7   ........5p...^..
0070  7e d5 cd f8 c4 c7 03 a4 f0 4f b8 c6 b0 28 6d 44   ~........O...(mD
0080  ab cf 88 62 18 c6 af b2 25 43 15 35 0e 6b 18 68   ...b....%C.5.k.h
0090  ff f8 ae 35 80 29 56 87 30 5f e4 41 44 58 22 53   ...5.)V.0_.ADX"S
00a0  63 50 ea a6 ec 89 1c 01 67 88 34 d1 86 7c ac 3c   cP......g.4..|.<
00b0  1f 23 47 e3 16 98 49 88 09 68 c5 d9 64 f6 21 04   .#G...I..h..d.!.
00c0  2e 34 4d dd 05 42 85 33 b7 62 ce 6b 1e d4 63 79   .4M..B.3.b.k..cy
00d0  c6 5f f2 59 30 af f8 83 d4 e5 38 e1 cc 14 86 ab   ._.Y0.....8.....
00e0  0a 0f 4b 78 82 58 fb d8 cc 47 30 ff 38 2d 61 94   ..Kx.X...G0.8-a.
00f0  24 42 8e c8 0c 87 4c c2 09 4b df 1d b2 dc 9f cf   $B....L..K......
0100  d4 8a 7f cc 64 14 8e ac ed a1 19 8f 85 53 32 a7   ....d........S2.
0110  b8 0c 84 0b 3a a8 3b 0d f0 77 c5 5f 36 52 32 b9   ....:.;..w._6R2.
0120  5b 60 d2 97 cd 9c 64 aa 63 96 25 80 68 3a 44 46   [`....d.c.%.h:DF
0130  04 02 ac 07 6f 01 4f 94 2f b0 f9 4b 9b fd 8a f1   ....o.O./..K....
0140  28 bc 50 ca 21 e6 8d 70 d2 6d 16 bd d1 53 e9 da   (.P.!..p.m...S..
0150  25 1c ba 0f 31 f7                                 %...1.

Frame 14 (342 bytes on wire, 342 bytes captured)
    Arrival Time: Nov 12, 2007 14:14:55.856389000
    Time delta from previous packet: 0.085482000 seconds
    Time since reference or first frame: 5.534527000 seconds
    Frame Number: 14
    Packet Length: 342 bytes
    Capture Length: 342 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Source: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.111 (165.227.249.111), Dst: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 328
    Identification: 0x675d (26461)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: UDP (0x11)
    Header checksum: 0x149d [correct]
        Good: True
        Bad : False
    Source: 165.227.249.111 (165.227.249.111)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 308
    Checksum: 0x8a94 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x17747277D63BEFB5
    Responder cookie: 0x7A595DB2922424C8
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xFBF61EA5
    Length: 300
    Encrypted payload (272 bytes)

0000  00 0c 29 ab 06 ab 00 1c f0 72 2f 16 08 00 45 00   ..)......r/...E.
0010  01 48 67 5d 00 00 ff 11 14 9d a5 e3 f9 6f a5 e3   .Hg].........o..
0020  f9 73 01 f4 01 f4 01 34 8a 94 17 74 72 77 d6 3b   .s.....4...trw.;
0030  ef b5 7a 59 5d b2 92 24 24 c8 08 10 20 01 fb f6   ..zY]..$$... ...
0040  1e a5 00 00 01 2c b6 32 ad d1 5b 69 aa bc e5 9b   .....,.2..[i....
0050  b0 51 45 eb ab 2b 1b d6 4b 74 bb 44 f4 5a 25 fb   .QE..+..Kt.D.Z%.
0060  eb c5 3f c7 c5 74 d4 bc 3b 06 0b 35 d1 62 1d 0c   ..?..t..;..5.b..
0070  4e 97 dc c7 1e da c8 a7 6c 1e 4d d8 2a ba db 62   N.......l.M.*..b
0080  7d 23 46 86 12 2a 1e 99 c0 d5 ee f7 5f 87 79 3a   }#F..*......_.y:
0090  d9 68 24 dd 5a 79 4b d3 00 94 b2 37 ea cf 9a 5e   .h$.ZyK....7...^
00a0  b0 b1 13 ef d5 bb d2 34 b1 50 d0 56 02 0d 72 06   .......4.P.V..r.
00b0  20 a4 a1 b0 9b af 46 56 7a 59 2b 81 0e 3e 6b 55    .....FVzY+..>kU
00c0  b4 f5 8c 29 30 de f0 30 f1 a9 d3 ab ce be 2e ca   ...)0..0........
00d0  0c f9 a0 0e e9 bf 85 0b e3 aa d5 e2 3e c0 13 dd   ............>...
00e0  2d 16 8a e8 4f b7 ce 0e 79 b2 a3 ea d8 64 2b f5   -...O...y....d+.
00f0  f1 31 6d bd dc 80 84 3a b4 0e 22 f5 ca 47 2a 15   .1m....:.."..G*.
0100  61 03 74 b4 b2 60 d1 85 fb 8d 52 97 28 c5 05 14   a.t..`....R.(...
0110  fd 7e 9d 33 a5 0b e3 07 e5 d5 b2 a1 a0 46 05 c4   .~.3.........F..
0120  2b e3 32 f0 55 bb 5a 44 42 0f 13 a7 3e 28 5f b6   +.2.U.ZDB...>(_.
0130  ec 19 a2 19 c8 92 ac 6f e0 11 20 ae cf df ef c3   .......o.. .....
0140  74 5f b2 00 b4 d1 08 dc 0f ec 96 e8 ef fc 91 6a   t_.............j
0150  f7 53 85 75 3c d2                                 .S.u<.

Frame 15 (102 bytes on wire, 102 bytes captured)
    Arrival Time: Nov 12, 2007 14:14:55.856391000
    Time delta from previous packet: 0.000002000 seconds
    Time since reference or first frame: 5.534529000 seconds
    Frame Number: 15
    Packet Length: 102 bytes
    Capture Length: 102 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Destination: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.111 (165.227.249.111)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 88
    Identification: 0x0472 (1138)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf778 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.111 (165.227.249.111)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 68
    Checksum: 0xf363 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x17747277D63BEFB5
    Responder cookie: 0x7A595DB2922424C8
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xFBF61EA5
    Length: 60
    Encrypted payload (32 bytes)

0000  00 1c f0 72 2f 16 00 0c 29 ab 06 ab 08 00 45 00   ...r/...).....E.
0010  00 58 04 72 00 00 80 11 f7 78 a5 e3 f9 73 a5 e3   .X.r.....x...s..
0020  f9 6f 01 f4 01 f4 00 44 f3 63 17 74 72 77 d6 3b   .o.....D.c.trw.;
0030  ef b5 7a 59 5d b2 92 24 24 c8 08 10 20 01 fb f6   ..zY]..$$... ...
0040  1e a5 00 00 00 3c 73 1d f6 2b 00 dc 41 f7 72 f0   .....<s..+..A.r.
0050  06 a1 93 4a b5 fa 13 73 f1 22 9e 77 4f 9f b6 9d   ...J...s.".wO...
0060  5e 26 a8 9d 88 ae                                 ^&....

Frame 16 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Nov 12, 2007 14:15:00.744664000
    Time delta from previous packet: 4.888273000 seconds
    Time since reference or first frame: 10.422802000 seconds
    Frame Number: 16
    Packet Length: 134 bytes
    Capture Length: 134 bytes
    Protocols in frame: eth:ip:esp:data
Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Destination: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.111 (165.227.249.111)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0001 (1)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: ESP (0x32)
    Header checksum: 0xfba8 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.111 (165.227.249.111)
Encapsulating Security Payload
    SPI: 0x0e829e98
    Sequence: 1
    Data (92 bytes)

0000  00 1c f0 72 2f 16 00 0c 29 ab 06 ab 08 00 45 00   ...r/...).....E.
0010  00 78 00 01 00 00 80 32 fb a8 a5 e3 f9 73 a5 e3   .x.....2.....s..
0020  f9 6f 0e 82 9e 98 00 00 00 01 f9 57 c0 a1 8a b9   .o.........W....
0030  b1 35 81 fa 64 03 dd 51 14 e2 8b 72 b4 f0 8b 48   .5..d..Q...r...H
0040  0b 1f f3 e4 8c 5c 44 7e 8e 68 55 73 5f 68 3b 4a   .....\D~.hUs_h;J
0050  0e fd df 7e 13 5f 75 8f 0a 19 0a 75 d9 29 57 be   ...~._u....u.)W.
0060  4b 36 59 21 1e 05 88 44 3d 02 ba 36 75 40 0f 7e   K6Y!...D=..6u@.~
0070  cf 36 2f 7e 04 22 0e df d2 b8 d3 74 ed f8 72 95   .6/~.".....t..r.
0080  60 f5 cf 36 d8 7d                                 `..6.}

Frame 17 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Nov 12, 2007 14:15:00.751944000
    Time delta from previous packet: 0.007280000 seconds
    Time since reference or first frame: 10.430082000 seconds
    Frame Number: 17
    Packet Length: 134 bytes
    Capture Length: 134 bytes
    Protocols in frame: eth:ip:esp:data
Ethernet II, Src: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Source: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.111 (165.227.249.111), Dst: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x604a (24650)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 240
    Protocol: ESP (0x32)
    Header checksum: 0x2b5f [correct]
        Good: True
        Bad : False
    Source: 165.227.249.111 (165.227.249.111)
    Destination: 165.227.249.115 (165.227.249.115)
Encapsulating Security Payload
    SPI: 0xbf03a78b
    Sequence: 2
    Data (92 bytes)

0000  00 0c 29 ab 06 ab 00 1c f0 72 2f 16 08 00 45 00   ..)......r/...E.
0010  00 78 60 4a 00 00 f0 32 2b 5f a5 e3 f9 6f a5 e3   .x`J...2+_...o..
0020  f9 73 bf 03 a7 8b 00 00 00 02 7a 7c e4 da 81 a9   .s........z|....
0030  6e a2 00 00 00 00 00 00 00 00 ca 3a 86 c3 d7 44   n..........:...D
0040  31 67 d6 29 ac 9a e5 3a 2c a2 d0 67 86 67 7b 7e   1g.)...:,..g.g{~
0050  f5 e7 3b a1 66 ef a0 41 11 b0 9f 56 77 ea b3 d1   ..;.f..A...Vw...
0060  9d 3a a9 ea 29 3b 57 33 01 a2 3c 2d 15 92 c2 7b   .:..);W3..<-...{
0070  e9 4e 10 25 c1 71 51 1a 84 92 50 ba cb d0 74 d3   .N.%.qQ...P...t.
0080  96 d6 df a3 a7 29                                 .....)

Frame 18 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Nov 12, 2007 14:15:01.749095000
    Time delta from previous packet: 0.997151000 seconds
    Time since reference or first frame: 11.427233000 seconds
    Frame Number: 18
    Packet Length: 134 bytes
    Capture Length: 134 bytes
    Protocols in frame: eth:ip:esp:data
Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Destination: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.111 (165.227.249.111)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0002 (2)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: ESP (0x32)
    Header checksum: 0xfba7 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.111 (165.227.249.111)
Encapsulating Security Payload
    SPI: 0x0e829e98
    Sequence: 2
    Data (92 bytes)

0000  00 1c f0 72 2f 16 00 0c 29 ab 06 ab 08 00 45 00   ...r/...).....E.
0010  00 78 00 02 00 00 80 32 fb a7 a5 e3 f9 73 a5 e3   .x.....2.....s..
0020  f9 6f 0e 82 9e 98 00 00 00 02 ba 36 75 40 0f 7e   .o.........6u@.~
0030  cf 36 2f 7e 04 22 0e df d2 b8 30 f7 21 8b c8 73   .6/~."....0.!..s
0040  9d 02 15 35 f4 c0 ac 60 8f eb e3 f8 bb b8 05 5c   ...5...`.......\
0050  a3 dd 63 c0 13 a3 48 ef 3c 56 52 9b 0e f0 6f b7   ..c...H.<VR...o.
0060  bb 07 d6 83 d6 c1 fe f9 c2 68 65 a1 90 5e db 7b   .........he..^.{
0070  49 b9 01 02 e9 92 e1 58 eb 2a af b7 26 95 b1 8b   I......X.*..&...
0080  d9 a0 f0 61 cb a6                                 ...a..

Frame 19 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Nov 12, 2007 14:15:01.751770000
    Time delta from previous packet: 0.002675000 seconds
    Time since reference or first frame: 11.429908000 seconds
    Frame Number: 19
    Packet Length: 134 bytes
    Capture Length: 134 bytes
    Protocols in frame: eth:ip:esp:data
Ethernet II, Src: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Source: 00:1c:f0:72:2f:16 (00:1c:f0:72:2f:16)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.111 (165.227.249.111), Dst: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x667c (26236)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 240
    Protocol: ESP (0x32)
    Header checksum: 0x252d [correct]
        Good: True
        Bad : False
    Source: 165.227.249.111 (165.227.249.111)
    Destination: 165.227.249.115 (165.227.249.115)
Encapsulating Security Payload
    SPI: 0xbf03a78b
    Sequence: 3
    Data (92 bytes)

0000  00 0c 29 ab 06 ab 00 1c f0 72 2f 16 08 00 45 00   ..)......r/...E.
0010  00 78 66 7c 00 00 f0 32 25 2d a5 e3 f9 6f a5 e3   .xf|...2%-...o..
0020  f9 73 bf 03 a7 8b 00 00 00 03 7a 7c e4 dc 81 a9   .s........z|....
0030  6e a4 00 00 00 00 00 00 00 00 3c ac 24 8c 7d 2e   n.........<.$.}.
0040  89 43 d6 e7 57 62 ed 10 c5 7b 9c f7 69 ff 92 9c   .C..Wb...{..i...
0050  e2 4c e4 63 9b b3 5a 54 44 0d 7a 51 7f 90 f0 8b   .L.c..ZTD.zQ....
0060  15 72 f5 8a 10 77 b6 ac 95 e2 76 fa d1 e7 3a bd   .r...w....v...:.
0070  dc 51 32 78 54 d2 94 69 76 e9 71 97 7b 33 2e 73   .Q2xT..iv.q.{3.s
0080  91 a5 be b8 2c 0b                                 ....,.