Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Aug 11, 2010 11:11:46.673699000 [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 166 bytes Capture Length: 166 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x01c3 (451) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9dc [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0x6472 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 7E44135370F4A58C Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Next payload: NONE (0) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n 0000 00 0c 29 51 89 a7 00 0c 29 6d a9 a5 08 00 45 00 ..)Q....)m....E. 0010 00 98 01 c3 00 00 80 11 f9 dc a5 e3 f9 73 a5 e3 .............s.. 0020 f9 7a 01 f4 01 f4 00 84 64 72 7e 44 13 53 70 f4 .z......dr~D.Sp. 0030 a5 8c 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 ..D..-.......F.y 0090 dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 ..........>.in.c 00a0 81 b5 ec 42 7b 1f ...B{. Frame 2 (166 bytes on wire, 166 bytes captured) Arrival Time: Aug 11, 2010 11:11:46.673716000 [Time delta from previous captured frame: 0.000017000 seconds] [Time delta from previous displayed frame: 0.000017000 seconds] [Time since reference or first frame: 0.000017000 seconds] Frame Number: 2 Frame Length: 166 bytes Capture Length: 166 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x01c3 (451) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9dc [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0x6472 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 7E44135370F4A58C Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Next payload: NONE (0) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n 0000 00 0c 29 51 89 a7 00 0c 29 6d a9 a5 08 00 45 00 ..)Q....)m....E. 0010 00 98 01 c3 00 00 80 11 f9 dc a5 e3 f9 73 a5 e3 .............s.. 0020 f9 7a 01 f4 01 f4 00 84 64 72 7e 44 13 53 70 f4 .z......dr~D.Sp. 0030 a5 8c 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 ..D..-.......F.y 0090 dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 ..........>.in.c 00a0 81 b5 ec 42 7b 1f ...B{. Frame 3 (126 bytes on wire, 126 bytes captured) Arrival Time: Aug 11, 2010 11:11:46.676121000 [Time delta from previous captured frame: 0.002405000 seconds] [Time delta from previous displayed frame: 0.002405000 seconds] [Time since reference or first frame: 0.002422000 seconds] Frame Number: 3 Frame Length: 126 bytes Capture Length: 126 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x379b (14235) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x042d [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0xe352 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 7E44135370F4A58C Responder cookie: 3D9508C5E9216CF0 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) 0000 00 0c 29 6d a9 a5 00 0c 29 51 89 a7 08 00 45 00 ..)m....)Q....E. 0010 00 70 37 9b 00 00 40 11 04 2d a5 e3 f9 7a a5 e3 .p7...@..-...z.. 0020 f9 73 01 f4 01 f4 00 5c e3 52 7e 44 13 53 70 f4 .s.....\.R~D.Sp. 0030 a5 8c 3d 95 08 c5 e9 21 6c f0 01 10 02 00 00 00 ..=....!l....... 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 .............. Frame 4 (126 bytes on wire, 126 bytes captured) Arrival Time: Aug 11, 2010 11:11:46.676138000 [Time delta from previous captured frame: 0.000017000 seconds] [Time delta from previous displayed frame: 0.000017000 seconds] [Time since reference or first frame: 0.002439000 seconds] Frame Number: 4 Frame Length: 126 bytes Capture Length: 126 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x379b (14235) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x042d [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0xe352 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 7E44135370F4A58C Responder cookie: 3D9508C5E9216CF0 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) 0000 00 0c 29 6d a9 a5 00 0c 29 51 89 a7 08 00 45 00 ..)m....)Q....E. 0010 00 70 37 9b 00 00 40 11 04 2d a5 e3 f9 7a a5 e3 .p7...@..-...z.. 0020 f9 73 01 f4 01 f4 00 5c e3 52 7e 44 13 53 70 f4 .s.....\.R~D.Sp. 0030 a5 8c 3d 95 08 c5 e9 21 6c f0 01 10 02 00 00 00 ..=....!l....... 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 .............. Frame 5 (126 bytes on wire, 126 bytes captured) Arrival Time: Aug 11, 2010 11:11:48.675708000 [Time delta from previous captured frame: 1.999570000 seconds] [Time delta from previous displayed frame: 1.999570000 seconds] [Time since reference or first frame: 2.002009000 seconds] Frame Number: 5 Frame Length: 126 bytes Capture Length: 126 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x379c (14236) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x042c [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0xe352 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 7E44135370F4A58C Responder cookie: 3D9508C5E9216CF0 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) 0000 00 0c 29 6d a9 a5 00 0c 29 51 89 a7 08 00 45 00 ..)m....)Q....E. 0010 00 70 37 9c 00 00 40 11 04 2c a5 e3 f9 7a a5 e3 .p7...@..,...z.. 0020 f9 73 01 f4 01 f4 00 5c e3 52 7e 44 13 53 70 f4 .s.....\.R~D.Sp. 0030 a5 8c 3d 95 08 c5 e9 21 6c f0 01 10 02 00 00 00 ..=....!l....... 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 .............. Frame 6 (126 bytes on wire, 126 bytes captured) Arrival Time: Aug 11, 2010 11:11:48.675726000 [Time delta from previous captured frame: 0.000018000 seconds] [Time delta from previous displayed frame: 0.000018000 seconds] [Time since reference or first frame: 2.002027000 seconds] Frame Number: 6 Frame Length: 126 bytes Capture Length: 126 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x379c (14236) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x042c [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0xe352 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 7E44135370F4A58C Responder cookie: 3D9508C5E9216CF0 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) 0000 00 0c 29 6d a9 a5 00 0c 29 51 89 a7 08 00 45 00 ..)m....)Q....E. 0010 00 70 37 9c 00 00 40 11 04 2c a5 e3 f9 7a a5 e3 .p7...@..,...z.. 0020 f9 73 01 f4 01 f4 00 5c e3 52 7e 44 13 53 70 f4 .s.....\.R~D.Sp. 0030 a5 8c 3d 95 08 c5 e9 21 6c f0 01 10 02 00 00 00 ..=....!l....... 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 .............. Frame 7 (298 bytes on wire, 298 bytes captured) Arrival Time: Aug 11, 2010 11:11:48.875860000 [Time delta from previous captured frame: 0.200134000 seconds] [Time delta from previous displayed frame: 0.200134000 seconds] [Time since reference or first frame: 2.202161000 seconds] Frame Number: 7 Frame Length: 298 bytes Capture Length: 298 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x01c6 (454) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf955 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0xd11d [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 7E44135370F4A58C Responder cookie: 3D9508C5E9216CF0 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: Vendor ID (13) Payload length: 24 Nonce Data Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Next payload: Vendor ID (13) Payload length: 48 Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Vendor ID: DA8E937880010000 Next payload: Vendor ID (13) Payload length: 12 Vendor ID: DA8E937880010000 Vendor ID: draft-beaulieu-ike-xauth-02.txt Next payload: NONE (0) Payload length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 0c 29 51 89 a7 00 0c 29 6d a9 a5 08 00 45 00 ..)Q....)m....E. 0010 01 1c 01 c6 00 00 80 11 f9 55 a5 e3 f9 73 a5 e3 .........U...s.. 0020 f9 7a 01 f4 01 f4 01 08 d1 1d 7e 44 13 53 70 f4 .z........~D.Sp. 0030 a5 8c 3d 95 08 c5 e9 21 6c f0 04 10 02 00 00 00 ..=....!l....... 0040 00 00 00 00 01 00 0a 00 00 84 82 fa 36 28 c0 84 ............6(.. 0050 2b 28 fd 0d 5d 62 6c 43 2a f8 0d 62 29 a0 bb 79 +(..]blC*..b)..y 0060 cb 4a 37 02 43 b5 29 77 a4 07 99 c0 03 c0 75 62 .J7.C.)w......ub 0070 0d 3c 56 fa f5 d8 29 62 b2 c0 5a ae 7c b2 1e 40 .^E 0090 5e f7 a5 4d d0 fe 61 55 87 80 05 ec 43 be ea 87 ^..M..aU....C... 00a0 d6 4a 1a bf a8 52 11 25 a5 0f 82 a1 7f 28 5d 33 .J...R.%.....(]3 00b0 4d 50 bc 3e 72 fc 2c 6c be 7d 1f 09 a0 f6 96 28 MP.>r.,l.}.....( 00c0 e9 12 aa 2b 21 f6 38 9e 0d 74 6c 4e ab af e1 3c ...+!.8..tlN...< 00d0 ff f8 79 c6 e9 2e 37 c2 1d 88 c6 81 27 19 2a fd ..y...7.....'.*. 00e0 1e 5e dc 23 93 84 fd c9 18 20 13 49 73 80 01 dc .^.#..... .Is... 00f0 15 9c fc 73 08 ad 54 d6 23 e3 5d d6 8a 22 2c ff ...s..T.#.]..",. 0100 17 54 88 d5 98 da 28 f4 1e de ad bc 33 5d 0b 73 .T....(.....3].s 0110 bc ef 81 32 f2 68 8f c8 d5 8e 4e fe f2 a4 4a ff ...2.h....N...J. 0120 16 07 a6 3c 9d cd 27 66 85 84 5e 4f e7 e6 64 37 ...<..'f..^O..d7 0130 9b 35 b5 3c e6 94 d6 b7 f2 5d 49 0d 5d da 33 11 .5.<.....]I.].3. 0140 f2 b8 89 03 16 c1 e7 fa ea f1 6d fa 27 1e 03 ca ..........m.'... 0150 fa bd e6 49 69 99 ...Ii. Frame 22 (342 bytes on wire, 342 bytes captured) Arrival Time: Aug 11, 2010 11:11:51.752586000 [Time delta from previous captured frame: 0.000014000 seconds] [Time delta from previous displayed frame: 0.000014000 seconds] [Time since reference or first frame: 5.078887000 seconds] Frame Number: 22 Frame Length: 342 bytes Capture Length: 342 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x01d5 (469) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf91a [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xd1a3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 7E44135370F4A58C Responder cookie: 3D9508C5E9216CF0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xcc8ddda3 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 51 89 a7 00 0c 29 6d a9 a5 08 00 45 00 ..)Q....)m....E. 0010 01 48 01 d5 00 00 80 11 f9 1a a5 e3 f9 73 a5 e3 .H...........s.. 0020 f9 7a 01 f4 01 f4 01 34 d1 a3 7e 44 13 53 70 f4 .z.....4..~D.Sp. 0030 a5 8c 3d 95 08 c5 e9 21 6c f0 08 10 20 01 cc 8d ..=....!l... ... 0040 dd a3 00 00 01 2c be 64 7d 6c 58 4d 36 ba e2 c5 .....,.d}lXM6... 0050 49 62 05 8f 49 64 de 7b 51 25 50 57 06 72 92 e7 Ib..Id.{Q%PW.r.. 0060 ea 1f 2d 59 1c 8b 62 f7 82 fd a5 e3 6a 04 99 99 ..-Y..b.....j... 0070 c4 ab 74 be 3f 39 04 1e 9f a9 94 ff 5b 2e df 1a ..t.?9......[... 0080 c7 f0 bb 4f 19 25 0a d6 82 91 1f 64 be 3e 5e 45 ...O.%.....d.>^E 0090 5e f7 a5 4d d0 fe 61 55 87 80 05 ec 43 be ea 87 ^..M..aU....C... 00a0 d6 4a 1a bf a8 52 11 25 a5 0f 82 a1 7f 28 5d 33 .J...R.%.....(]3 00b0 4d 50 bc 3e 72 fc 2c 6c be 7d 1f 09 a0 f6 96 28 MP.>r.,l.}.....( 00c0 e9 12 aa 2b 21 f6 38 9e 0d 74 6c 4e ab af e1 3c ...+!.8..tlN...< 00d0 ff f8 79 c6 e9 2e 37 c2 1d 88 c6 81 27 19 2a fd ..y...7.....'.*. 00e0 1e 5e dc 23 93 84 fd c9 18 20 13 49 73 80 01 dc .^.#..... .Is... 00f0 15 9c fc 73 08 ad 54 d6 23 e3 5d d6 8a 22 2c ff ...s..T.#.]..",. 0100 17 54 88 d5 98 da 28 f4 1e de ad bc 33 5d 0b 73 .T....(.....3].s 0110 bc ef 81 32 f2 68 8f c8 d5 8e 4e fe f2 a4 4a ff ...2.h....N...J. 0120 16 07 a6 3c 9d cd 27 66 85 84 5e 4f e7 e6 64 37 ...<..'f..^O..d7 0130 9b 35 b5 3c e6 94 d6 b7 f2 5d 49 0d 5d da 33 11 .5.<.....]I.].3. 0140 f2 b8 89 03 16 c1 e7 fa ea f1 6d fa 27 1e 03 ca ..........m.'... 0150 fa bd e6 49 69 99 ...Ii. Frame 23 (342 bytes on wire, 342 bytes captured) Arrival Time: Aug 11, 2010 11:11:51.754705000 [Time delta from previous captured frame: 0.002119000 seconds] [Time delta from previous displayed frame: 0.002119000 seconds] [Time since reference or first frame: 5.081006000 seconds] Frame Number: 23 Frame Length: 342 bytes Capture Length: 342 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x37a1 (14241) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x034f [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xaf5a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 7E44135370F4A58C Responder cookie: 3D9508C5E9216CF0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xcc8ddda3 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 6d a9 a5 00 0c 29 51 89 a7 08 00 45 00 ..)m....)Q....E. 0010 01 48 37 a1 00 00 40 11 03 4f a5 e3 f9 7a a5 e3 .H7...@..O...z.. 0020 f9 73 01 f4 01 f4 01 34 af 5a 7e 44 13 53 70 f4 .s.....4.Z~D.Sp. 0030 a5 8c 3d 95 08 c5 e9 21 6c f0 08 10 20 01 cc 8d ..=....!l... ... 0040 dd a3 00 00 01 2c 94 d5 8f cc 8a e7 0f 07 d2 0f .....,.......... 0050 9a c7 d6 27 cd 83 b6 1c 34 07 4e 71 de 50 d1 0c ...'....4.Nq.P.. 0060 cd 1e bd 2a 3f 0f d5 bd ea 62 98 aa 12 03 bd 97 ...*?....b...... 0070 45 05 f6 d6 69 1f 4a 1c a4 2f 7e b5 ee 52 c2 57 E...i.J../~..R.W 0080 31 86 d7 cb 92 94 ac 29 b7 60 cc 31 ee f4 e3 c0 1......).`.1.... 0090 d4 40 81 7a f2 03 b7 12 e0 e6 36 1a 23 21 ff d3 .@.z......6.#!.. 00a0 09 34 48 09 91 d6 e1 52 54 cb 9d 99 01 23 0b 85 .4H....RT....#.. 00b0 4e 9e 68 81 f3 09 fb 5c bf 54 5d 33 08 15 b3 e5 N.h....\.T]3.... 00c0 9a fb 25 8d e8 66 e6 f5 09 d2 4f c8 e2 3d 50 b5 ..%..f....O..=P. 00d0 b6 cf c2 92 96 4a 00 fd aa 29 26 27 0c 18 a9 dc .....J...)&'.... 00e0 36 59 38 53 c9 c1 34 43 b9 cf a0 da 48 df 2c b8 6Y8S..4C....H.,. 00f0 59 76 9f 70 cd d5 a4 87 4f 0d 7f 91 2d cf 4c 4e Yv.p....O...-.LN 0100 a2 0e 0e af ba f5 98 95 5a 17 06 cc 7d b3 3a 2b ........Z...}.:+ 0110 5e d6 cd 71 69 2f 30 03 ca d3 ee 81 18 a0 53 5a ^..qi/0.......SZ 0120 25 01 fe a3 a4 54 dd a6 4b ff 5e cb 8a 59 f7 0c %....T..K.^..Y.. 0130 b1 c6 46 b6 5d 3e 43 d2 08 f1 a9 0d 9e 50 9d 51 ..F.]>C......P.Q 0140 f3 5c 1f 5d d1 b1 9b 33 1a f5 0a 1d 82 eb 82 69 .\.]...3.......i 0150 29 8d fa 14 9c b8 )..... Frame 24 (342 bytes on wire, 342 bytes captured) Arrival Time: Aug 11, 2010 11:11:51.754726000 [Time delta from previous captured frame: 0.000021000 seconds] [Time delta from previous displayed frame: 0.000021000 seconds] [Time since reference or first frame: 5.081027000 seconds] Frame Number: 24 Frame Length: 342 bytes Capture Length: 342 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x37a1 (14241) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x034f [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xaf5a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 7E44135370F4A58C Responder cookie: 3D9508C5E9216CF0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xcc8ddda3 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 6d a9 a5 00 0c 29 51 89 a7 08 00 45 00 ..)m....)Q....E. 0010 01 48 37 a1 00 00 40 11 03 4f a5 e3 f9 7a a5 e3 .H7...@..O...z.. 0020 f9 73 01 f4 01 f4 01 34 af 5a 7e 44 13 53 70 f4 .s.....4.Z~D.Sp. 0030 a5 8c 3d 95 08 c5 e9 21 6c f0 08 10 20 01 cc 8d ..=....!l... ... 0040 dd a3 00 00 01 2c 94 d5 8f cc 8a e7 0f 07 d2 0f .....,.......... 0050 9a c7 d6 27 cd 83 b6 1c 34 07 4e 71 de 50 d1 0c ...'....4.Nq.P.. 0060 cd 1e bd 2a 3f 0f d5 bd ea 62 98 aa 12 03 bd 97 ...*?....b...... 0070 45 05 f6 d6 69 1f 4a 1c a4 2f 7e b5 ee 52 c2 57 E...i.J../~..R.W 0080 31 86 d7 cb 92 94 ac 29 b7 60 cc 31 ee f4 e3 c0 1......).`.1.... 0090 d4 40 81 7a f2 03 b7 12 e0 e6 36 1a 23 21 ff d3 .@.z......6.#!.. 00a0 09 34 48 09 91 d6 e1 52 54 cb 9d 99 01 23 0b 85 .4H....RT....#.. 00b0 4e 9e 68 81 f3 09 fb 5c bf 54 5d 33 08 15 b3 e5 N.h....\.T]3.... 00c0 9a fb 25 8d e8 66 e6 f5 09 d2 4f c8 e2 3d 50 b5 ..%..f....O..=P. 00d0 b6 cf c2 92 96 4a 00 fd aa 29 26 27 0c 18 a9 dc .....J...)&'.... 00e0 36 59 38 53 c9 c1 34 43 b9 cf a0 da 48 df 2c b8 6Y8S..4C....H.,. 00f0 59 76 9f 70 cd d5 a4 87 4f 0d 7f 91 2d cf 4c 4e Yv.p....O...-.LN 0100 a2 0e 0e af ba f5 98 95 5a 17 06 cc 7d b3 3a 2b ........Z...}.:+ 0110 5e d6 cd 71 69 2f 30 03 ca d3 ee 81 18 a0 53 5a ^..qi/0.......SZ 0120 25 01 fe a3 a4 54 dd a6 4b ff 5e cb 8a 59 f7 0c %....T..K.^..Y.. 0130 b1 c6 46 b6 5d 3e 43 d2 08 f1 a9 0d 9e 50 9d 51 ..F.]>C......P.Q 0140 f3 5c 1f 5d d1 b1 9b 33 1a f5 0a 1d 82 eb 82 69 .\.]...3.......i 0150 29 8d fa 14 9c b8 )..... Frame 25 (102 bytes on wire, 102 bytes captured) Arrival Time: Aug 11, 2010 11:11:51.759878000 [Time delta from previous captured frame: 0.005152000 seconds] [Time delta from previous displayed frame: 0.005152000 seconds] [Time since reference or first frame: 5.086179000 seconds] Frame Number: 25 Frame Length: 102 bytes Capture Length: 102 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x01dc (476) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa03 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x2144 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 7E44135370F4A58C Responder cookie: 3D9508C5E9216CF0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xcc8ddda3 Length: 60 Encrypted payload (32 bytes) 0000 00 0c 29 51 89 a7 00 0c 29 6d a9 a5 08 00 45 00 ..)Q....)m....E. 0010 00 58 01 dc 00 00 80 11 fa 03 a5 e3 f9 73 a5 e3 .X...........s.. 0020 f9 7a 01 f4 01 f4 00 44 21 44 7e 44 13 53 70 f4 .z.....D!D~D.Sp. 0030 a5 8c 3d 95 08 c5 e9 21 6c f0 08 10 20 01 cc 8d ..=....!l... ... 0040 dd a3 00 00 00 3c cc 14 fd 02 df 0e 7d 7c 05 67 .....<......}|.g 0050 dc b0 9c e2 e6 fc 36 d0 14 76 22 79 01 ce 4e d1 ......6..v"y..N. 0060 d1 37 5c 07 0d 48 .7\..H Frame 26 (102 bytes on wire, 102 bytes captured) Arrival Time: Aug 11, 2010 11:11:51.759895000 [Time delta from previous captured frame: 0.000017000 seconds] [Time delta from previous displayed frame: 0.000017000 seconds] [Time since reference or first frame: 5.086196000 seconds] Frame Number: 26 Frame Length: 102 bytes Capture Length: 102 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x01dc (476) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa03 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x2144 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 7E44135370F4A58C Responder cookie: 3D9508C5E9216CF0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xcc8ddda3 Length: 60 Encrypted payload (32 bytes) 0000 00 0c 29 51 89 a7 00 0c 29 6d a9 a5 08 00 45 00 ..)Q....)m....E. 0010 00 58 01 dc 00 00 80 11 fa 03 a5 e3 f9 73 a5 e3 .X...........s.. 0020 f9 7a 01 f4 01 f4 00 44 21 44 7e 44 13 53 70 f4 .z.....D!D~D.Sp. 0030 a5 8c 3d 95 08 c5 e9 21 6c f0 08 10 20 01 cc 8d ..=....!l... ... 0040 dd a3 00 00 00 3c cc 14 fd 02 df 0e 7d 7c 05 67 .....<......}|.g 0050 dc b0 9c e2 e6 fc 36 d0 14 76 22 79 01 ce 4e d1 ......6..v"y..N. 0060 d1 37 5c 07 0d 48 .7\..H Frame 27 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 11, 2010 11:12:00.743960000 [Time delta from previous captured frame: 8.984065000 seconds] [Time delta from previous displayed frame: 8.984065000 seconds] [Time since reference or first frame: 14.070261000 seconds] Frame Number: 27 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb9d [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload ESP SPI: 0xce23cb86 ESP Sequence: 1 0000 00 0c 29 51 89 a7 00 0c 29 6d a9 a5 08 00 45 00 ..)Q....)m....E. 0010 00 78 00 01 00 00 80 32 fb 9d a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 7a ce 23 cb 86 00 00 00 01 4b 3a b4 0a 29 c0 .z.#......K:..). 0030 36 07 03 28 5b 7d 75 0f 1b 5e 46 0c 6b 3c d7 49 6..([}u..^F.k<.I 0040 d9 f0 86 59 d3 21 ca e8 37 9e 35 a9 26 50 c6 39 ...Y.!..7.5.&P.9 0050 38 6f 03 02 e9 83 06 43 56 01 32 70 85 c9 8a 80 8o.....CV.2p.... 0060 41 be 92 22 44 37 e6 b0 8d b6 00 cb 2a 22 49 28 A.."D7......*"I( 0070 7f 2e 8f a8 ad c7 2e 9e b6 e8 d5 0f c6 0b 0c 29 ...............) 0080 0f b4 f1 ca 67 ba ....g. Frame 28 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 11, 2010 11:12:00.743973000 [Time delta from previous captured frame: 0.000013000 seconds] [Time delta from previous displayed frame: 0.000013000 seconds] [Time since reference or first frame: 14.070274000 seconds] Frame Number: 28 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb9d [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload ESP SPI: 0xce23cb86 ESP Sequence: 1 0000 00 0c 29 51 89 a7 00 0c 29 6d a9 a5 08 00 45 00 ..)Q....)m....E. 0010 00 78 00 01 00 00 80 32 fb 9d a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 7a ce 23 cb 86 00 00 00 01 4b 3a b4 0a 29 c0 .z.#......K:..). 0030 36 07 03 28 5b 7d 75 0f 1b 5e 46 0c 6b 3c d7 49 6..([}u..^F.k<.I 0040 d9 f0 86 59 d3 21 ca e8 37 9e 35 a9 26 50 c6 39 ...Y.!..7.5.&P.9 0050 38 6f 03 02 e9 83 06 43 56 01 32 70 85 c9 8a 80 8o.....CV.2p.... 0060 41 be 92 22 44 37 e6 b0 8d b6 00 cb 2a 22 49 28 A.."D7......*"I( 0070 7f 2e 8f a8 ad c7 2e 9e b6 e8 d5 0f c6 0b 0c 29 ...............) 0080 0f b4 f1 ca 67 ba ....g. Frame 29 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 11, 2010 11:12:00.745962000 [Time delta from previous captured frame: 0.001989000 seconds] [Time delta from previous displayed frame: 0.001989000 seconds] [Time since reference or first frame: 14.072263000 seconds] Frame Number: 29 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0022 (34) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c7c [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload ESP SPI: 0x06e31c28 ESP Sequence: 1 0000 00 0c 29 6d a9 a5 00 0c 29 51 89 a7 08 00 45 00 ..)m....)Q....E. 0010 00 78 00 22 00 00 ff 32 7c 7c a5 e3 f9 7a a5 e3 .x."...2||...z.. 0020 f9 73 06 e3 1c 28 00 00 00 01 30 ce ff 1c 40 53 .s...(....0...@S 0030 1f 0b 61 14 9e 4b af b0 24 d9 76 d8 b5 ec cf ff ..a..K..$.v..... 0040 46 20 a1 29 a5 b1 21 ee a6 0a bd bc 08 b0 ac 1d F .)..!......... 0050 9e 3f 44 c4 d3 ec 10 d7 47 f0 3a 0f 48 1a a8 10 .?D.....G.:.H... 0060 fd ee 7c c5 ac 71 55 47 07 6a 12 3b 0a 55 97 95 ..|..qUG.j.;.U.. 0070 0e e1 81 b9 b0 4a 8b 28 bb 2e 19 f7 72 68 bf ec .....J.(....rh.. 0080 31 e5 2a 29 e6 1b 1.*).. Frame 30 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 11, 2010 11:12:00.745976000 [Time delta from previous captured frame: 0.000014000 seconds] [Time delta from previous displayed frame: 0.000014000 seconds] [Time since reference or first frame: 14.072277000 seconds] Frame Number: 30 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0022 (34) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c7c [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload ESP SPI: 0x06e31c28 ESP Sequence: 1 0000 00 0c 29 6d a9 a5 00 0c 29 51 89 a7 08 00 45 00 ..)m....)Q....E. 0010 00 78 00 22 00 00 ff 32 7c 7c a5 e3 f9 7a a5 e3 .x."...2||...z.. 0020 f9 73 06 e3 1c 28 00 00 00 01 30 ce ff 1c 40 53 .s...(....0...@S 0030 1f 0b 61 14 9e 4b af b0 24 d9 76 d8 b5 ec cf ff ..a..K..$.v..... 0040 46 20 a1 29 a5 b1 21 ee a6 0a bd bc 08 b0 ac 1d F .)..!......... 0050 9e 3f 44 c4 d3 ec 10 d7 47 f0 3a 0f 48 1a a8 10 .?D.....G.:.H... 0060 fd ee 7c c5 ac 71 55 47 07 6a 12 3b 0a 55 97 95 ..|..qUG.j.;.U.. 0070 0e e1 81 b9 b0 4a 8b 28 bb 2e 19 f7 72 68 bf ec .....J.(....rh.. 0080 31 e5 2a 29 e6 1b 1.*).. Frame 31 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 11, 2010 11:12:01.733386000 [Time delta from previous captured frame: 0.987410000 seconds] [Time delta from previous displayed frame: 0.987410000 seconds] [Time since reference or first frame: 15.059687000 seconds] Frame Number: 31 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0002 (2) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb9c [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload ESP SPI: 0xce23cb86 ESP Sequence: 2 0000 00 0c 29 51 89 a7 00 0c 29 6d a9 a5 08 00 45 00 ..)Q....)m....E. 0010 00 78 00 02 00 00 80 32 fb 9c a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 7a ce 23 cb 86 00 00 00 02 00 cb 2a 22 49 28 .z.#........*"I( 0030 7f 2e 8f a8 ad c7 2e 9e b6 e8 30 5d 13 63 31 2f ..........0].c1/ 0040 54 45 6b 1c 11 b0 06 30 5b 27 6b f0 12 11 2f 02 TEk....0['k.../. 0050 ca 66 51 39 e8 45 2c 7f 57 b3 98 53 ed 01 03 ed .fQ9.E,.W..S.... 0060 af 83 06 7d 8d 94 e9 74 cf 2e 29 8c ea dc 41 0d ...}...t..)...A. 0070 66 9c 25 3b aa cd cf 69 d1 a4 86 40 ef 51 a7 56 f.%;...i...@.Q.V 0080 b2 b9 b4 6e 84 59 ...n.Y Frame 32 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 11, 2010 11:12:01.733405000 [Time delta from previous captured frame: 0.000019000 seconds] [Time delta from previous displayed frame: 0.000019000 seconds] [Time since reference or first frame: 15.059706000 seconds] Frame Number: 32 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0002 (2) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb9c [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload ESP SPI: 0xce23cb86 ESP Sequence: 2 0000 00 0c 29 51 89 a7 00 0c 29 6d a9 a5 08 00 45 00 ..)Q....)m....E. 0010 00 78 00 02 00 00 80 32 fb 9c a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 7a ce 23 cb 86 00 00 00 02 00 cb 2a 22 49 28 .z.#........*"I( 0030 7f 2e 8f a8 ad c7 2e 9e b6 e8 30 5d 13 63 31 2f ..........0].c1/ 0040 54 45 6b 1c 11 b0 06 30 5b 27 6b f0 12 11 2f 02 TEk....0['k.../. 0050 ca 66 51 39 e8 45 2c 7f 57 b3 98 53 ed 01 03 ed .fQ9.E,.W..S.... 0060 af 83 06 7d 8d 94 e9 74 cf 2e 29 8c ea dc 41 0d ...}...t..)...A. 0070 66 9c 25 3b aa cd cf 69 d1 a4 86 40 ef 51 a7 56 f.%;...i...@.Q.V 0080 b2 b9 b4 6e 84 59 ...n.Y Frame 33 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 11, 2010 11:12:01.734215000 [Time delta from previous captured frame: 0.000810000 seconds] [Time delta from previous displayed frame: 0.000810000 seconds] [Time since reference or first frame: 15.060516000 seconds] Frame Number: 33 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0023 (35) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c7b [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload ESP SPI: 0x06e31c28 ESP Sequence: 2 0000 00 0c 29 6d a9 a5 00 0c 29 51 89 a7 08 00 45 00 ..)m....)Q....E. 0010 00 78 00 23 00 00 ff 32 7c 7b a5 e3 f9 7a a5 e3 .x.#...2|{...z.. 0020 f9 73 06 e3 1c 28 00 00 00 02 9a ef 43 89 18 da .s...(......C... 0030 59 7e 9a d9 33 80 8a 13 fc ee fd 12 48 83 5b 49 Y~..3.......H.[I 0040 3d 38 2f 5b c6 80 28 21 af 7b f2 d9 0f e8 45 d7 =8/[..(!.{....E. 0050 8b c6 40 c0 d0 99 8e 84 cd ea 22 58 be 3b d3 0f ..@......."X.;.. 0060 96 2a 8e 23 3a 85 d0 d9 b4 c7 3f 57 5c 22 25 05 .*.#:.....?W\"%. 0070 5e e6 bf 8a db 15 dc ac ef 29 c1 22 b5 cc 38 1d ^........)."..8. 0080 a6 73 fd 51 21 31 .s.Q!1 Frame 34 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 11, 2010 11:12:01.734231000 [Time delta from previous captured frame: 0.000016000 seconds] [Time delta from previous displayed frame: 0.000016000 seconds] [Time since reference or first frame: 15.060532000 seconds] Frame Number: 34 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0023 (35) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c7b [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload ESP SPI: 0x06e31c28 ESP Sequence: 2 0000 00 0c 29 6d a9 a5 00 0c 29 51 89 a7 08 00 45 00 ..)m....)Q....E. 0010 00 78 00 23 00 00 ff 32 7c 7b a5 e3 f9 7a a5 e3 .x.#...2|{...z.. 0020 f9 73 06 e3 1c 28 00 00 00 02 9a ef 43 89 18 da .s...(......C... 0030 59 7e 9a d9 33 80 8a 13 fc ee fd 12 48 83 5b 49 Y~..3.......H.[I 0040 3d 38 2f 5b c6 80 28 21 af 7b f2 d9 0f e8 45 d7 =8/[..(!.{....E. 0050 8b c6 40 c0 d0 99 8e 84 cd ea 22 58 be 3b d3 0f ..@......."X.;.. 0060 96 2a 8e 23 3a 85 d0 d9 b4 c7 3f 57 5c 22 25 05 .*.#:.....?W\"%. 0070 5e e6 bf 8a db 15 dc ac ef 29 c1 22 b5 cc 38 1d ^........)."..8. 0080 a6 73 fd 51 21 31 .s.Q!1