Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Feb 15, 2010 14:12:24.597950000 [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 166 bytes Capture Length: 166 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:12 (00:00:00:00:00:12) Destination: 00:00:00:00:00:12 (00:00:00:00:00:12) Address: 00:00:00:00:00:12 (00:00:00:00:00:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x026f (623) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf932 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0x5990 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: A60D9F10C5DBA802 Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Next payload: NONE (0) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n 0000 00 00 00 00 00 12 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 00 98 02 6f 00 00 80 11 f9 32 a5 e3 f9 73 a5 e3 ...o.....2...s.. 0020 f9 78 01 f4 01 f4 00 84 59 90 a6 0d 9f 10 c5 db .x......Y....... 0030 a8 02 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 ..D..-.......F.y 0090 dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 ..........>.in.c 00a0 81 b5 ec 42 7b 1f ...B{. Frame 2 (166 bytes on wire, 166 bytes captured) Arrival Time: Feb 15, 2010 14:12:24.597975000 [Time delta from previous captured frame: 0.000025000 seconds] [Time delta from previous displayed frame: 0.000025000 seconds] [Time since reference or first frame: 0.000025000 seconds] Frame Number: 2 Frame Length: 166 bytes Capture Length: 166 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:12 (00:00:00:00:00:12) Destination: 00:00:00:00:00:12 (00:00:00:00:00:12) Address: 00:00:00:00:00:12 (00:00:00:00:00:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x026f (623) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf932 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0x5990 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: A60D9F10C5DBA802 Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Next payload: NONE (0) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n 0000 00 00 00 00 00 12 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 00 98 02 6f 00 00 80 11 f9 32 a5 e3 f9 73 a5 e3 ...o.....2...s.. 0020 f9 78 01 f4 01 f4 00 84 59 90 a6 0d 9f 10 c5 db .x......Y....... 0030 a8 02 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 ..D..-.......F.y 0090 dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 ..........>.in.c 00a0 81 b5 ec 42 7b 1f ...B{. Frame 3 (166 bytes on wire, 166 bytes captured) Arrival Time: Feb 15, 2010 14:12:24.624328000 [Time delta from previous captured frame: 0.026353000 seconds] [Time delta from previous displayed frame: 0.026353000 seconds] [Time since reference or first frame: 0.026378000 seconds] Frame Number: 3 Frame Length: 166 bytes Capture Length: 166 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:00:00:00:00:12 (00:00:00:00:00:12), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:00:00:00:00:12 (00:00:00:00:00:12) Address: 00:00:00:00:00:12 (00:00:00:00:00:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.120 (165.227.249.120), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfba1 [correct] [Good: True] [Bad : False] Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0x596e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: A60D9F10C5DBA802 Responder cookie: 085BB7C5D9DD1771 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Next payload: Vendor ID (13) Payload length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35 Next payload: NONE (0) Payload length: 20 Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 6d a9 a5 00 00 00 00 00 12 08 00 45 00 ..)m..........E. 0010 00 98 00 00 40 00 40 11 fb a1 a5 e3 f9 78 a5 e3 ....@.@......x.. 0020 f9 73 01 f4 01 f4 00 84 59 6e a6 0d 9f 10 c5 db .s......Yn...... 0030 a8 02 08 5b b7 c5 d9 dd 17 71 01 10 02 00 00 00 ...[.....q...... 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 0090 01 00 00 00 00 14 70 03 cb c1 09 7d be 9c 26 00 ......p....}..&. 00a0 ba 69 83 bc 8b 35 .i...5 Frame 4 (298 bytes on wire, 298 bytes captured) Arrival Time: Feb 15, 2010 14:12:26.633503000 [Time delta from previous captured frame: 2.009175000 seconds] [Time delta from previous displayed frame: 2.009175000 seconds] [Time since reference or first frame: 2.035553000 seconds] Frame Number: 4 Frame Length: 298 bytes Capture Length: 298 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:12 (00:00:00:00:00:12) Destination: 00:00:00:00:00:12 (00:00:00:00:00:12) Address: 00:00:00:00:00:12 (00:00:00:00:00:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x0272 (626) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8ab [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0xa8da [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: A60D9F10C5DBA802 Responder cookie: 085BB7C5D9DD1771 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: Vendor ID (13) Payload length: 24 Nonce Data Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Next payload: Vendor ID (13) Payload length: 48 Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Vendor ID: DA8E937880010000 Next payload: Vendor ID (13) Payload length: 12 Vendor ID: DA8E937880010000 Vendor ID: draft-beaulieu-ike-xauth-02.txt Next payload: NONE (0) Payload length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 00 00 00 00 12 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 01 1c 02 72 00 00 80 11 f8 ab a5 e3 f9 73 a5 e3 ...r.........s.. 0020 f9 78 01 f4 01 f4 01 08 a8 da a6 0d 9f 10 c5 db .x.............. 0030 a8 02 08 5b b7 c5 d9 dd 17 71 04 10 02 00 00 00 ...[.....q...... 0040 00 00 00 00 01 00 0a 00 00 84 e3 9c fc 0b 41 b8 ..............A. 0050 53 1a 7a ed bd 7b 36 57 3c b4 3e 8c d1 1b 39 ff S.z..{6W<.>...9. 0060 32 8f 61 2e cb c7 f5 08 a9 b2 08 c1 ef 26 27 d9 2.a..........&'. 0070 11 a2 4b f4 e4 5d 5b dd 44 06 15 8b c0 e1 af c4 ..K..][.D....... 0080 8d 37 f4 78 f0 f5 20 1d 75 25 2c 45 d1 1b 79 29 .7.x.. .u%,E..y) 0090 6f be 89 ba f9 dc 7f 4d c2 b5 0a 6d 52 95 49 01 o......M...mR.I. 00a0 50 30 f9 b9 1c 46 80 7e 7c 9c 3e e0 a4 1f 62 7a P0...F.~|.>...bz 00b0 81 0b 60 3c a7 a0 c0 b8 d2 50 2d e5 1c f6 e0 c4 ..`<.....P-..... 00c0 5a cb 91 29 05 da bb 05 45 15 0d 00 00 18 99 70 Z..)....E......p 00d0 af f0 e2 25 59 c7 d2 c6 cc df 9c e3 af 1b 2c d9 ...%Y.........,. 00e0 ef 5a 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .Z...0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 ....&..... Frame 5 (298 bytes on wire, 298 bytes captured) Arrival Time: Feb 15, 2010 14:12:26.633524000 [Time delta from previous captured frame: 0.000021000 seconds] [Time delta from previous displayed frame: 0.000021000 seconds] [Time since reference or first frame: 2.035574000 seconds] Frame Number: 5 Frame Length: 298 bytes Capture Length: 298 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:12 (00:00:00:00:00:12) Destination: 00:00:00:00:00:12 (00:00:00:00:00:12) Address: 00:00:00:00:00:12 (00:00:00:00:00:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x0272 (626) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8ab [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0xa8da [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: A60D9F10C5DBA802 Responder cookie: 085BB7C5D9DD1771 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: Vendor ID (13) Payload length: 24 Nonce Data Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Next payload: Vendor ID (13) Payload length: 48 Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Vendor ID: DA8E937880010000 Next payload: Vendor ID (13) Payload length: 12 Vendor ID: DA8E937880010000 Vendor ID: draft-beaulieu-ike-xauth-02.txt Next payload: NONE (0) Payload length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 00 00 00 00 12 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 01 1c 02 72 00 00 80 11 f8 ab a5 e3 f9 73 a5 e3 ...r.........s.. 0020 f9 78 01 f4 01 f4 01 08 a8 da a6 0d 9f 10 c5 db .x.............. 0030 a8 02 08 5b b7 c5 d9 dd 17 71 04 10 02 00 00 00 ...[.....q...... 0040 00 00 00 00 01 00 0a 00 00 84 e3 9c fc 0b 41 b8 ..............A. 0050 53 1a 7a ed bd 7b 36 57 3c b4 3e 8c d1 1b 39 ff S.z..{6W<.>...9. 0060 32 8f 61 2e cb c7 f5 08 a9 b2 08 c1 ef 26 27 d9 2.a..........&'. 0070 11 a2 4b f4 e4 5d 5b dd 44 06 15 8b c0 e1 af c4 ..K..][.D....... 0080 8d 37 f4 78 f0 f5 20 1d 75 25 2c 45 d1 1b 79 29 .7.x.. .u%,E..y) 0090 6f be 89 ba f9 dc 7f 4d c2 b5 0a 6d 52 95 49 01 o......M...mR.I. 00a0 50 30 f9 b9 1c 46 80 7e 7c 9c 3e e0 a4 1f 62 7a P0...F.~|.>...bz 00b0 81 0b 60 3c a7 a0 c0 b8 d2 50 2d e5 1c f6 e0 c4 ..`<.....P-..... 00c0 5a cb 91 29 05 da bb 05 45 15 0d 00 00 18 99 70 Z..)....E......p 00d0 af f0 e2 25 59 c7 d2 c6 cc df 9c e3 af 1b 2c d9 ...%Y.........,. 00e0 ef 5a 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .Z...0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 ....&..... Frame 6 (242 bytes on wire, 242 bytes captured) Arrival Time: Feb 15, 2010 14:12:26.704715000 [Time delta from previous captured frame: 0.071191000 seconds] [Time delta from previous displayed frame: 0.071191000 seconds] [Time since reference or first frame: 2.106765000 seconds] Frame Number: 6 Frame Length: 242 bytes Capture Length: 242 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:00:00:00:00:12 (00:00:00:00:00:12), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:00:00:00:00:12 (00:00:00:00:00:12) Address: 00:00:00:00:00:12 (00:00:00:00:00:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.120 (165.227.249.120), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 228 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb55 [correct] [Good: True] [Bad : False] Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 208 Checksum: 0x6b22 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: A60D9F10C5DBA802 Responder cookie: 085BB7C5D9DD1771 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 200 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: Vendor ID (13) Payload length: 20 Nonce Data Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35 Next payload: NONE (0) Payload length: 20 Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 6d a9 a5 00 00 00 00 00 12 08 00 45 00 ..)m..........E. 0010 00 e4 00 00 40 00 40 11 fb 55 a5 e3 f9 78 a5 e3 ....@.@..U...x.. 0020 f9 73 01 f4 01 f4 00 d0 6b 22 a6 0d 9f 10 c5 db .s......k"...... 0030 a8 02 08 5b b7 c5 d9 dd 17 71 04 10 02 00 00 00 ...[.....q...... 0040 00 00 00 00 00 c8 0a 00 00 84 ef a2 63 53 07 6e ............cS.n 0050 b2 45 57 5e 43 aa 09 2e c9 1d ed ef 51 9e f8 40 .EW^C.......Q..@ 0060 a3 be 54 cc 1a 2f b7 1c 9e 63 f7 14 64 3c 3a 2a ..T../...c..d<:* 0070 cf ba 55 33 5b c9 9d 7d 19 7c 7d 2c a7 d6 df 31 ..U3[..}.|},...1 0080 2b d3 2f 8f 37 dc f5 99 46 e3 d9 a3 9c de b6 49 +./.7...F......I 0090 f0 e1 71 26 64 61 9a 74 96 cf 34 0e 68 df d6 9a ..q&da.t..4.h... 00a0 b7 a7 2b c4 37 84 c7 aa c6 92 14 3c 8e d4 47 98 ..+.7......<..G. 00b0 2c ef 18 c2 4d 2a 20 8d 35 97 09 1a c8 f6 5e 72 ,...M* .5.....^r 00c0 ad 5c b7 b5 cf c6 4b b1 0a 26 0d 00 00 14 d3 73 .\....K..&.....s 00d0 9e b7 96 49 00 50 f6 82 19 df 83 51 b2 b9 00 00 ...I.P.....Q.... 00e0 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 00f0 8b 35 .5 Frame 7 (134 bytes on wire, 134 bytes captured) Arrival Time: Feb 15, 2010 14:12:27.625770000 [Time delta from previous captured frame: 0.921055000 seconds] [Time delta from previous displayed frame: 0.921055000 seconds] [Time since reference or first frame: 3.027820000 seconds] Frame Number: 7 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:12 (00:00:00:00:00:12) Destination: 00:00:00:00:00:12 (00:00:00:00:00:12) Address: 00:00:00:00:00:12 (00:00:00:00:00:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0275 (629) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf94c [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x3736 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: A60D9F10C5DBA802 Responder cookie: 085BB7C5D9DD1771 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 00 00 00 00 12 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 00 78 02 75 00 00 80 11 f9 4c a5 e3 f9 73 a5 e3 .x.u.....L...s.. 0020 f9 78 01 f4 01 f4 00 64 37 36 a6 0d 9f 10 c5 db .x.....d76...... 0030 a8 02 08 5b b7 c5 d9 dd 17 71 05 10 02 01 00 00 ...[.....q...... 0040 00 00 00 00 00 5c 99 1d 98 49 ab e6 36 a4 cd fc .....\...I..6... 0050 34 44 b4 fa 87 c8 59 9d 3e ac ef 10 89 f5 cd bc 4D....Y.>....... 0060 92 a0 cd 72 38 7b 97 0e ba bc 5b ad 44 0e 93 66 ...r8{....[.D..f 0070 50 e1 53 eb 55 c2 51 aa 09 86 44 a7 60 85 d8 2b P.S.U.Q...D.`..+ 0080 2f 5a 40 7c 87 0d /Z@|.. Frame 8 (134 bytes on wire, 134 bytes captured) Arrival Time: Feb 15, 2010 14:12:27.625787000 [Time delta from previous captured frame: 0.000017000 seconds] [Time delta from previous displayed frame: 0.000017000 seconds] [Time since reference or first frame: 3.027837000 seconds] Frame Number: 8 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:12 (00:00:00:00:00:12) Destination: 00:00:00:00:00:12 (00:00:00:00:00:12) Address: 00:00:00:00:00:12 (00:00:00:00:00:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0275 (629) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf94c [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x3736 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: A60D9F10C5DBA802 Responder cookie: 085BB7C5D9DD1771 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 00 00 00 00 12 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 00 78 02 75 00 00 80 11 f9 4c a5 e3 f9 73 a5 e3 .x.u.....L...s.. 0020 f9 78 01 f4 01 f4 00 64 37 36 a6 0d 9f 10 c5 db .x.....d76...... 0030 a8 02 08 5b b7 c5 d9 dd 17 71 05 10 02 01 00 00 ...[.....q...... 0040 00 00 00 00 00 5c 99 1d 98 49 ab e6 36 a4 cd fc .....\...I..6... 0050 34 44 b4 fa 87 c8 59 9d 3e ac ef 10 89 f5 cd bc 4D....Y.>....... 0060 92 a0 cd 72 38 7b 97 0e ba bc 5b ad 44 0e 93 66 ...r8{....[.D..f 0070 50 e1 53 eb 55 c2 51 aa 09 86 44 a7 60 85 d8 2b P.S.U.Q...D.`..+ 0080 2f 5a 40 7c 87 0d /Z@|.. Frame 9 (118 bytes on wire, 118 bytes captured) Arrival Time: Feb 15, 2010 14:12:27.646207000 [Time delta from previous captured frame: 0.020420000 seconds] [Time delta from previous displayed frame: 0.020420000 seconds] [Time since reference or first frame: 3.048257000 seconds] Frame Number: 9 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:00:00:00:00:12 (00:00:00:00:00:12), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:00:00:00:00:12 (00:00:00:00:00:12) Address: 00:00:00:00:00:12 (00:00:00:00:00:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.120 (165.227.249.120), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbd1 [correct] [Good: True] [Bad : False] Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xe838 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: A60D9F10C5DBA802 Responder cookie: 085BB7C5D9DD1771 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 6d a9 a5 00 00 00 00 00 12 08 00 45 00 ..)m..........E. 0010 00 68 00 00 40 00 40 11 fb d1 a5 e3 f9 78 a5 e3 .h..@.@......x.. 0020 f9 73 01 f4 01 f4 00 54 e8 38 a6 0d 9f 10 c5 db .s.....T.8...... 0030 a8 02 08 5b b7 c5 d9 dd 17 71 05 10 02 01 00 00 ...[.....q...... 0040 00 00 00 00 00 4c 65 bf 9e c8 bd bd 78 e1 2d 95 .....Le.....x.-. 0050 20 d6 19 f2 fb f7 2d 19 bd 40 32 f8 33 fa 08 9b .....-..@2.3... 0060 5b ed bd 57 17 2c f6 99 46 a2 a4 c9 69 24 b3 72 [..W.,..F...i$.r 0070 6c 0b 12 d7 c1 53 l....S Frame 10 (134 bytes on wire, 134 bytes captured) Arrival Time: Feb 15, 2010 14:12:27.655453000 [Time delta from previous captured frame: 0.009246000 seconds] [Time delta from previous displayed frame: 0.009246000 seconds] [Time since reference or first frame: 3.057503000 seconds] Frame Number: 10 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:00:00:00:00:12 (00:00:00:00:00:12), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:00:00:00:00:12 (00:00:00:00:00:12) Address: 00:00:00:00:00:12 (00:00:00:00:00:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.120 (165.227.249.120), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc1 [correct] [Good: True] [Bad : False] Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xd96e [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: A60D9F10C5DBA802 Responder cookie: 085BB7C5D9DD1771 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xc63d8e23 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 6d a9 a5 00 00 00 00 00 12 08 00 45 00 ..)m..........E. 0010 00 78 00 00 40 00 40 11 fb c1 a5 e3 f9 78 a5 e3 .x..@.@......x.. 0020 f9 73 01 f4 01 f4 00 64 d9 6e a6 0d 9f 10 c5 db .s.....d.n...... 0030 a8 02 08 5b b7 c5 d9 dd 17 71 08 10 05 01 c6 3d ...[.....q.....= 0040 8e 23 00 00 00 5c 83 54 a1 c2 de 07 2d 6f dd aa .#...\.T....-o.. 0050 ca 6b 45 68 12 f2 e0 8d 0a f3 0c eb 72 87 e0 ed .kEh........r... 0060 23 b7 94 50 e2 fd fc a4 2d 5f 30 7e 88 a2 37 72 #..P....-_0~..7r 0070 8e 5d 94 9c 64 47 ad 7b 14 04 8c 2e 96 b4 bb 73 .]..dG.{.......s 0080 02 bf 74 ce 4b be ..t.K. Frame 11 (342 bytes on wire, 342 bytes captured) Arrival Time: Feb 15, 2010 14:12:29.921628000 [Time delta from previous captured frame: 2.266175000 seconds] [Time delta from previous displayed frame: 2.266175000 seconds] [Time since reference or first frame: 5.323678000 seconds] Frame Number: 11 Frame Length: 342 bytes Capture Length: 342 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:12 (00:00:00:00:00:12) Destination: 00:00:00:00:00:12 (00:00:00:00:00:12) Address: 00:00:00:00:00:12 (00:00:00:00:00:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x027f (639) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf872 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x9477 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: A60D9F10C5DBA802 Responder cookie: 085BB7C5D9DD1771 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x63a9b4c4 Length: 300 Encrypted payload (272 bytes) 0000 00 00 00 00 00 12 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 01 48 02 7f 00 00 80 11 f8 72 a5 e3 f9 73 a5 e3 .H.......r...s.. 0020 f9 78 01 f4 01 f4 01 34 94 77 a6 0d 9f 10 c5 db .x.....4.w...... 0030 a8 02 08 5b b7 c5 d9 dd 17 71 08 10 20 01 63 a9 ...[.....q.. .c. 0040 b4 c4 00 00 01 2c e5 8e 39 15 65 d3 fe 0f 75 bf .....,..9.e...u. 0050 cf 7b 3f a7 d8 44 af b7 7a 93 8f 3b ac c5 ca 35 .{?..D..z..;...5 0060 b8 0b 94 db 1b 8e ac b9 70 da 96 c7 2d 22 29 c0 ........p...-"). 0070 47 92 3f c3 fe 57 af c7 ce 17 1f 82 7b db 2a a6 G.?..W......{.*. 0080 1a 1f 0e 78 68 a1 f1 bd 47 09 97 6e 56 06 7e 67 ...xh...G..nV.~g 0090 53 4f 69 5a da e4 15 04 9b 9a ce f7 26 0b 69 5a SOiZ........&.iZ 00a0 ff 94 08 fb cc 77 24 c8 51 2f 65 93 d6 e5 ee 15 .....w$.Q/e..... 00b0 fe 9e 86 1b 29 6d 9f be 0e 61 07 34 fa 86 a4 f7 ....)m...a.4.... 00c0 f4 77 c2 b1 65 b9 eb 4c 8e 92 ea 98 12 26 b6 25 .w..e..L.....&.% 00d0 e3 32 ad ce 4f fc 23 df 30 31 65 e2 66 f9 9d f9 .2..O.#.01e.f... 00e0 f6 9d ea bf af 7e 8f 76 bb 33 e9 4f 43 9e db 51 .....~.v.3.OC..Q 00f0 c3 8b 54 6b 6d 57 b1 99 0a ef 97 8b 95 49 1e 4b ..TkmW.......I.K 0100 5c d5 48 25 56 b1 6d af d7 c3 93 5e 44 ad cc c0 \.H%V.m....^D... 0110 c0 89 18 62 91 21 8b bf a3 24 49 ff cd f3 9d 8e ...b.!...$I..... 0120 e7 e4 9a 4a 89 24 8c 60 15 67 45 aa 1f 77 b4 97 ...J.$.`.gE..w.. 0130 a2 fc f6 a9 53 62 fc 0a 30 0d ca 82 2e 96 bc 0f ....Sb..0....... 0140 16 bf 54 d8 24 d9 9e 54 21 23 38 de 42 68 20 65 ..T.$..T!#8.Bh e 0150 9e 7e df 59 50 c3 .~.YP. Frame 12 (342 bytes on wire, 342 bytes captured) Arrival Time: Feb 15, 2010 14:12:29.921648000 [Time delta from previous captured frame: 0.000020000 seconds] [Time delta from previous displayed frame: 0.000020000 seconds] [Time since reference or first frame: 5.323698000 seconds] Frame Number: 12 Frame Length: 342 bytes Capture Length: 342 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:12 (00:00:00:00:00:12) Destination: 00:00:00:00:00:12 (00:00:00:00:00:12) Address: 00:00:00:00:00:12 (00:00:00:00:00:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x027f (639) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf872 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x9477 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: A60D9F10C5DBA802 Responder cookie: 085BB7C5D9DD1771 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x63a9b4c4 Length: 300 Encrypted payload (272 bytes) 0000 00 00 00 00 00 12 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 01 48 02 7f 00 00 80 11 f8 72 a5 e3 f9 73 a5 e3 .H.......r...s.. 0020 f9 78 01 f4 01 f4 01 34 94 77 a6 0d 9f 10 c5 db .x.....4.w...... 0030 a8 02 08 5b b7 c5 d9 dd 17 71 08 10 20 01 63 a9 ...[.....q.. .c. 0040 b4 c4 00 00 01 2c e5 8e 39 15 65 d3 fe 0f 75 bf .....,..9.e...u. 0050 cf 7b 3f a7 d8 44 af b7 7a 93 8f 3b ac c5 ca 35 .{?..D..z..;...5 0060 b8 0b 94 db 1b 8e ac b9 70 da 96 c7 2d 22 29 c0 ........p...-"). 0070 47 92 3f c3 fe 57 af c7 ce 17 1f 82 7b db 2a a6 G.?..W......{.*. 0080 1a 1f 0e 78 68 a1 f1 bd 47 09 97 6e 56 06 7e 67 ...xh...G..nV.~g 0090 53 4f 69 5a da e4 15 04 9b 9a ce f7 26 0b 69 5a SOiZ........&.iZ 00a0 ff 94 08 fb cc 77 24 c8 51 2f 65 93 d6 e5 ee 15 .....w$.Q/e..... 00b0 fe 9e 86 1b 29 6d 9f be 0e 61 07 34 fa 86 a4 f7 ....)m...a.4.... 00c0 f4 77 c2 b1 65 b9 eb 4c 8e 92 ea 98 12 26 b6 25 .w..e..L.....&.% 00d0 e3 32 ad ce 4f fc 23 df 30 31 65 e2 66 f9 9d f9 .2..O.#.01e.f... 00e0 f6 9d ea bf af 7e 8f 76 bb 33 e9 4f 43 9e db 51 .....~.v.3.OC..Q 00f0 c3 8b 54 6b 6d 57 b1 99 0a ef 97 8b 95 49 1e 4b ..TkmW.......I.K 0100 5c d5 48 25 56 b1 6d af d7 c3 93 5e 44 ad cc c0 \.H%V.m....^D... 0110 c0 89 18 62 91 21 8b bf a3 24 49 ff cd f3 9d 8e ...b.!...$I..... 0120 e7 e4 9a 4a 89 24 8c 60 15 67 45 aa 1f 77 b4 97 ...J.$.`.gE..w.. 0130 a2 fc f6 a9 53 62 fc 0a 30 0d ca 82 2e 96 bc 0f ....Sb..0....... 0140 16 bf 54 d8 24 d9 9e 54 21 23 38 de 42 68 20 65 ..T.$..T!#8.Bh e 0150 9e 7e df 59 50 c3 .~.YP. Frame 13 (342 bytes on wire, 342 bytes captured) Arrival Time: Feb 15, 2010 14:12:30.060721000 [Time delta from previous captured frame: 0.139073000 seconds] [Time delta from previous displayed frame: 0.139073000 seconds] [Time since reference or first frame: 5.462771000 seconds] Frame Number: 13 Frame Length: 342 bytes Capture Length: 342 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:00:00:00:00:12 (00:00:00:00:00:12), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:00:00:00:00:12 (00:00:00:00:00:12) Address: 00:00:00:00:00:12 (00:00:00:00:00:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.120 (165.227.249.120), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfaf1 [correct] [Good: True] [Bad : False] Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xe657 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: A60D9F10C5DBA802 Responder cookie: 085BB7C5D9DD1771 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x63a9b4c4 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 6d a9 a5 00 00 00 00 00 12 08 00 45 00 ..)m..........E. 0010 01 48 00 00 40 00 40 11 fa f1 a5 e3 f9 78 a5 e3 .H..@.@......x.. 0020 f9 73 01 f4 01 f4 01 34 e6 57 a6 0d 9f 10 c5 db .s.....4.W...... 0030 a8 02 08 5b b7 c5 d9 dd 17 71 08 10 20 01 63 a9 ...[.....q.. .c. 0040 b4 c4 00 00 01 2c bd 5a 45 42 e9 17 23 c0 99 01 .....,.ZEB..#... 0050 00 e6 64 1b ec 4f de ba fb 11 06 7d e1 39 96 d7 ..d..O.....}.9.. 0060 68 07 36 f8 2b 60 fc 1c 61 dc cc ff c9 dd ec 93 h.6.+`..a....... 0070 27 87 e8 0a bc b1 50 54 b1 ed 82 72 15 74 11 ea '.....PT...r.t.. 0080 ed 16 4d dd f9 1e 5d 20 a6 3a 87 d1 62 5b 36 75 ..M...] .:..b[6u 0090 a7 11 87 77 e0 eb 47 ea ad 65 c1 34 19 e5 f9 d5 ...w..G..e.4.... 00a0 b1 72 be 7c fd 3b fc 01 2a 6e 4b 85 2a 9a 1e 55 .r.|.;..*nK.*..U 00b0 09 2b e4 c1 00 c7 af 72 63 1e cb d7 0d c5 21 ac .+.....rc.....!. 00c0 59 9c 1f 7c 23 ed 46 90 01 b0 af 58 5c 86 69 70 Y..|#.F....X\.ip 00d0 1a 02 9a 96 85 d4 de 60 2c 2d e4 e5 8d 76 9a 8c .......`,-...v.. 00e0 67 04 b9 fb 3f 25 12 b5 f4 5b 02 9b 8b 08 1b ba g...?%...[...... 00f0 04 70 47 39 3b cc 81 d4 6f 86 21 14 f5 26 b2 7f .pG9;...o.!..&.. 0100 37 39 91 a1 e3 d9 58 01 d9 e7 7b 4b cc df 21 5e 79....X...{K..!^ 0110 68 57 64 03 da 69 e8 46 28 e5 2b 3c fa ce fa 46 hWd..i.F(.+<...F 0120 f5 58 59 a6 5f 8e e1 45 c0 73 2a cb 36 15 4c e4 .XY._..E.s*.6.L. 0130 82 e4 fe 36 6d 41 3d 13 3a 0e ba f8 ba a8 0c 0a ...6mA=.:....... 0140 b2 9d 2e d1 51 0b c4 64 fa c0 d5 a5 35 27 fe 1b ....Q..d....5'.. 0150 ec 4d b6 d3 bf ef .M.... Frame 14 (102 bytes on wire, 102 bytes captured) Arrival Time: Feb 15, 2010 14:12:30.063515000 [Time delta from previous captured frame: 0.002794000 seconds] [Time delta from previous displayed frame: 0.002794000 seconds] [Time since reference or first frame: 5.465565000 seconds] Frame Number: 14 Frame Length: 102 bytes Capture Length: 102 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:12 (00:00:00:00:00:12) Destination: 00:00:00:00:00:12 (00:00:00:00:00:12) Address: 00:00:00:00:00:12 (00:00:00:00:00:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0284 (644) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf95d [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x8a2a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: A60D9F10C5DBA802 Responder cookie: 085BB7C5D9DD1771 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x63a9b4c4 Length: 60 Encrypted payload (32 bytes) 0000 00 00 00 00 00 12 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 00 58 02 84 00 00 80 11 f9 5d a5 e3 f9 73 a5 e3 .X.......]...s.. 0020 f9 78 01 f4 01 f4 00 44 8a 2a a6 0d 9f 10 c5 db .x.....D.*...... 0030 a8 02 08 5b b7 c5 d9 dd 17 71 08 10 20 01 63 a9 ...[.....q.. .c. 0040 b4 c4 00 00 00 3c 7f 0d 79 2c 82 33 e6 fb 29 a9 .....<..y,.3..). 0050 81 31 84 30 29 80 d4 bc d4 d4 88 e8 cf 12 c8 69 .1.0)..........i 0060 b2 5e 1e be 38 70 .^..8p Frame 15 (102 bytes on wire, 102 bytes captured) Arrival Time: Feb 15, 2010 14:12:30.063534000 [Time delta from previous captured frame: 0.000019000 seconds] [Time delta from previous displayed frame: 0.000019000 seconds] [Time since reference or first frame: 5.465584000 seconds] Frame Number: 15 Frame Length: 102 bytes Capture Length: 102 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:12 (00:00:00:00:00:12) Destination: 00:00:00:00:00:12 (00:00:00:00:00:12) Address: 00:00:00:00:00:12 (00:00:00:00:00:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0284 (644) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf95d [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.120 (165.227.249.120) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x8a2a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: A60D9F10C5DBA802 Responder cookie: 085BB7C5D9DD1771 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x63a9b4c4 Length: 60 Encrypted payload (32 bytes) 0000 00 00 00 00 00 12 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 00 58 02 84 00 00 80 11 f9 5d a5 e3 f9 73 a5 e3 .X.......]...s.. 0020 f9 78 01 f4 01 f4 00 44 8a 2a a6 0d 9f 10 c5 db .x.....D.*...... 0030 a8 02 08 5b b7 c5 d9 dd 17 71 08 10 20 01 63 a9 ...[.....q.. .c. 0040 b4 c4 00 00 00 3c 7f 0d 79 2c 82 33 e6 fb 29 a9 .....<..y,.3..). 0050 81 31 84 30 29 80 d4 bc d4 d4 88 e8 cf 12 c8 69 .1.0)..........i 0060 b2 5e 1e be 38 70 .^..8p Frame 16 (134 bytes on wire, 134 bytes captured) Arrival Time: Feb 15, 2010 14:12:40.235727000 [Time delta from previous captured frame: 10.172193000 seconds] [Time delta from previous displayed frame: 10.172193000 seconds] [Time since reference or first frame: 15.637777000 seconds] Frame Number: 16 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:12 (00:00:00:00:00:12) Destination: 00:00:00:00:00:12 (00:00:00:00:00:12) Address: 00:00:00:00:00:12 (00:00:00:00:00:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb9f [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.120 (165.227.249.120) Encapsulating Security Payload ESP SPI: 0x03dd80fc ESP Sequence: 1 0000 00 00 00 00 00 12 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 00 78 00 01 00 00 80 32 fb 9f a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 78 03 dd 80 fc 00 00 00 01 80 89 53 b3 c0 83 .x..........S... 0030 4f c0 70 09 0e f9 eb 46 2f d8 5d 0c 8d 71 55 6e O.p....F/.]..qUn 0040 dd 57 5c c8 43 80 98 4e b8 e0 9c f0 37 2c 21 4e .W\.C..N....7,!N 0050 51 e9 cf 8e ea ea 73 d4 03 f3 35 03 e1 9a 7e 49 Q.....s...5...~I 0060 72 14 35 50 c5 aa c8 4d 0f 0e 83 80 06 3f 94 e4 r.5P...M.....?.. 0070 49 64 91 51 b5 24 ed a2 af b1 1d 31 ea 06 38 37 Id.Q.$.....1..87 0080 2b c8 4e ed ca 74 +.N..t Frame 17 (134 bytes on wire, 134 bytes captured) Arrival Time: Feb 15, 2010 14:12:40.235741000 [Time delta from previous captured frame: 0.000014000 seconds] [Time delta from previous displayed frame: 0.000014000 seconds] [Time since reference or first frame: 15.637791000 seconds] Frame Number: 17 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:12 (00:00:00:00:00:12) Destination: 00:00:00:00:00:12 (00:00:00:00:00:12) Address: 00:00:00:00:00:12 (00:00:00:00:00:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb9f [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.120 (165.227.249.120) Encapsulating Security Payload ESP SPI: 0x03dd80fc ESP Sequence: 1 0000 00 00 00 00 00 12 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 00 78 00 01 00 00 80 32 fb 9f a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 78 03 dd 80 fc 00 00 00 01 80 89 53 b3 c0 83 .x..........S... 0030 4f c0 70 09 0e f9 eb 46 2f d8 5d 0c 8d 71 55 6e O.p....F/.]..qUn 0040 dd 57 5c c8 43 80 98 4e b8 e0 9c f0 37 2c 21 4e .W\.C..N....7,!N 0050 51 e9 cf 8e ea ea 73 d4 03 f3 35 03 e1 9a 7e 49 Q.....s...5...~I 0060 72 14 35 50 c5 aa c8 4d 0f 0e 83 80 06 3f 94 e4 r.5P...M.....?.. 0070 49 64 91 51 b5 24 ed a2 af b1 1d 31 ea 06 38 37 Id.Q.$.....1..87 0080 2b c8 4e ed ca 74 +.N..t Frame 18 (134 bytes on wire, 134 bytes captured) Arrival Time: Feb 15, 2010 14:12:40.237366000 [Time delta from previous captured frame: 0.001625000 seconds] [Time delta from previous displayed frame: 0.001625000 seconds] [Time since reference or first frame: 15.639416000 seconds] Frame Number: 18 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:00:00:00:00:12 (00:00:00:00:00:12), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:00:00:00:00:12 (00:00:00:00:00:12) Address: 00:00:00:00:00:12 (00:00:00:00:00:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.120 (165.227.249.120), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x6514 (25876) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xd68c [correct] [Good: True] [Bad : False] Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload ESP SPI: 0x9df9325c ESP Sequence: 1 0000 00 0c 29 6d a9 a5 00 00 00 00 00 12 08 00 45 00 ..)m..........E. 0010 00 78 65 14 00 00 40 32 d6 8c a5 e3 f9 78 a5 e3 .xe...@2.....x.. 0020 f9 73 9d f9 32 5c 00 00 00 01 d2 a3 eb 37 38 32 .s..2\.......782 0030 10 a6 12 03 bf 84 31 02 5b 24 84 c9 a3 91 9c 50 ......1.[$.....P 0040 91 8d 1a 42 17 43 cd 00 6e ec 96 1f ff f7 7a e4 ...B.C..n.....z. 0050 81 cc 40 ca ae bb a8 c6 66 3a 58 5a 34 46 65 a1 ..@.....f:XZ4Fe. 0060 f7 1a d8 57 a3 97 25 4f 61 66 14 8f 18 e3 3a d1 ...W..%Oaf....:. 0070 63 99 1e 8c 76 5b 5f 60 8f 99 84 b7 54 04 f0 58 c...v[_`....T..X 0080 45 50 bf fc 0c 94 EP.... Frame 19 (134 bytes on wire, 134 bytes captured) Arrival Time: Feb 15, 2010 14:12:41.244376000 [Time delta from previous captured frame: 1.007010000 seconds] [Time delta from previous displayed frame: 1.007010000 seconds] [Time since reference or first frame: 16.646426000 seconds] Frame Number: 19 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:12 (00:00:00:00:00:12) Destination: 00:00:00:00:00:12 (00:00:00:00:00:12) Address: 00:00:00:00:00:12 (00:00:00:00:00:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0002 (2) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb9e [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.120 (165.227.249.120) Encapsulating Security Payload ESP SPI: 0x03dd80fc ESP Sequence: 2 0000 00 00 00 00 00 12 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 00 78 00 02 00 00 80 32 fb 9e a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 78 03 dd 80 fc 00 00 00 02 83 80 06 3f 94 e4 .x...........?.. 0030 49 64 91 51 b5 24 ed a2 af b1 e5 70 36 6a f9 16 Id.Q.$.....p6j.. 0040 23 bb bb ee f0 c9 65 14 84 04 f3 fd 96 88 13 66 #.....e........f 0050 5b 7c e6 16 e7 15 5c 0c 70 4d 5f 8f 58 73 0f 76 [|....\.pM_.Xs.v 0060 19 ba 94 1e 2f cf 6c aa bb 52 3d e1 b5 88 6e b3 ..../.l..R=...n. 0070 d5 97 32 be 87 4e 69 5a 09 60 40 71 55 b8 3b b5 ..2..NiZ.`@qU.;. 0080 9d 7b 52 82 61 a7 .{R.a. Frame 20 (134 bytes on wire, 134 bytes captured) Arrival Time: Feb 15, 2010 14:12:41.244393000 [Time delta from previous captured frame: 0.000017000 seconds] [Time delta from previous displayed frame: 0.000017000 seconds] [Time since reference or first frame: 16.646443000 seconds] Frame Number: 20 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:00:00:00:00:12 (00:00:00:00:00:12) Destination: 00:00:00:00:00:12 (00:00:00:00:00:12) Address: 00:00:00:00:00:12 (00:00:00:00:00:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.120 (165.227.249.120) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0002 (2) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb9e [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.120 (165.227.249.120) Encapsulating Security Payload ESP SPI: 0x03dd80fc ESP Sequence: 2 0000 00 00 00 00 00 12 00 0c 29 6d a9 a5 08 00 45 00 ........)m....E. 0010 00 78 00 02 00 00 80 32 fb 9e a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 78 03 dd 80 fc 00 00 00 02 83 80 06 3f 94 e4 .x...........?.. 0030 49 64 91 51 b5 24 ed a2 af b1 e5 70 36 6a f9 16 Id.Q.$.....p6j.. 0040 23 bb bb ee f0 c9 65 14 84 04 f3 fd 96 88 13 66 #.....e........f 0050 5b 7c e6 16 e7 15 5c 0c 70 4d 5f 8f 58 73 0f 76 [|....\.pM_.Xs.v 0060 19 ba 94 1e 2f cf 6c aa bb 52 3d e1 b5 88 6e b3 ..../.l..R=...n. 0070 d5 97 32 be 87 4e 69 5a 09 60 40 71 55 b8 3b b5 ..2..NiZ.`@qU.;. 0080 9d 7b 52 82 61 a7 .{R.a. Frame 21 (134 bytes on wire, 134 bytes captured) Arrival Time: Feb 15, 2010 14:12:41.247852000 [Time delta from previous captured frame: 0.003459000 seconds] [Time delta from previous displayed frame: 0.003459000 seconds] [Time since reference or first frame: 16.649902000 seconds] Frame Number: 21 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:00:00:00:00:12 (00:00:00:00:00:12), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:00:00:00:00:12 (00:00:00:00:00:12) Address: 00:00:00:00:00:12 (00:00:00:00:00:12) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.120 (165.227.249.120), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x1ba2 (7074) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x1fff [correct] [Good: True] [Bad : False] Source: 165.227.249.120 (165.227.249.120) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload ESP SPI: 0x9df9325c ESP Sequence: 2 0000 00 0c 29 6d a9 a5 00 00 00 00 00 12 08 00 45 00 ..)m..........E. 0010 00 78 1b a2 00 00 40 32 1f ff a5 e3 f9 78 a5 e3 .x....@2.....x.. 0020 f9 73 9d f9 32 5c 00 00 00 02 14 8f 18 e3 3a d1 .s..2\........:. 0030 63 99 1e 8c 76 5b 5f 60 8f 99 c1 b9 aa 3f 23 6e c...v[_`.....?#n 0040 de 9b 04 79 6d ab 0d 98 9a a9 f8 eb fe 0f 15 a7 ...ym........... 0050 72 7e 94 30 4e 54 2d 1b e7 10 83 e5 37 b7 64 d2 r~.0NT-.....7.d. 0060 a7 ba a0 fd 8e a2 75 eb 0d 02 20 46 d4 4b 80 c7 ......u... F.K.. 0070 e8 d1 69 d9 3e 43 f3 e4 d8 c1 6f 6d 11 b5 be b3 ..i.>C....om.... 0080 88 4e be 0f fe a0 .N....