Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Mar 21, 2011 14:13:23.082182000 [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 166 bytes Capture Length: 166 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77), Dst: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Destination: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Address: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x02e6 (742) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8b5 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.126 (165.227.249.126) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0x5f49 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 76F413D847BADAB6 Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Next payload: NONE (0) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n 0000 e0 91 f5 99 a5 34 00 0c 29 3f 71 77 08 00 45 00 .....4..)?qw..E. 0010 00 98 02 e6 00 00 80 11 f8 b5 a5 e3 f9 73 a5 e3 .............s.. 0020 f9 7e 01 f4 01 f4 00 84 5f 49 76 f4 13 d8 47 ba .~......_Iv...G. 0030 da b6 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 ..D..-.......F.y 0090 dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 ..........>.in.c 00a0 81 b5 ec 42 7b 1f ...B{. Frame 2 (166 bytes on wire, 166 bytes captured) Arrival Time: Mar 21, 2011 14:13:23.082213000 [Time delta from previous captured frame: 0.000031000 seconds] [Time delta from previous displayed frame: 0.000031000 seconds] [Time since reference or first frame: 0.000031000 seconds] Frame Number: 2 Frame Length: 166 bytes Capture Length: 166 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77), Dst: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Destination: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Address: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x02e6 (742) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8b5 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.126 (165.227.249.126) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0x5f49 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 76F413D847BADAB6 Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Next payload: NONE (0) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n 0000 e0 91 f5 99 a5 34 00 0c 29 3f 71 77 08 00 45 00 .....4..)?qw..E. 0010 00 98 02 e6 00 00 80 11 f8 b5 a5 e3 f9 73 a5 e3 .............s.. 0020 f9 7e 01 f4 01 f4 00 84 5f 49 76 f4 13 d8 47 ba .~......_Iv...G. 0030 da b6 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 ..D..-.......F.y 0090 dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 ..........>.in.c 00a0 81 b5 ec 42 7b 1f ...B{. Frame 3 (166 bytes on wire, 166 bytes captured) Arrival Time: Mar 21, 2011 14:13:23.095083000 [Time delta from previous captured frame: 0.012870000 seconds] [Time delta from previous displayed frame: 0.012870000 seconds] [Time since reference or first frame: 0.012901000 seconds] Frame Number: 3 Frame Length: 166 bytes Capture Length: 166 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34), Dst: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) Destination: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Address: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.126 (165.227.249.126), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb9b [correct] [Good: True] [Bad : False] Source: 165.227.249.126 (165.227.249.126) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0xe573 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 76F413D847BADAB6 Responder cookie: 73232617E96CA87B Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Next payload: Vendor ID (13) Payload length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35 Next payload: NONE (0) Payload length: 20 Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 3f 71 77 e0 91 f5 99 a5 34 08 00 45 00 ..)?qw.....4..E. 0010 00 98 00 00 40 00 40 11 fb 9b a5 e3 f9 7e a5 e3 ....@.@......~.. 0020 f9 73 01 f4 01 f4 00 84 e5 73 76 f4 13 d8 47 ba .s.......sv...G. 0030 da b6 73 23 26 17 e9 6c a8 7b 01 10 02 00 00 00 ..s#&..l.{...... 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 0090 01 00 00 00 00 14 70 03 cb c1 09 7d be 9c 26 00 ......p....}..&. 00a0 ba 69 83 bc 8b 35 .i...5 Frame 4 (298 bytes on wire, 298 bytes captured) Arrival Time: Mar 21, 2011 14:13:25.233120000 [Time delta from previous captured frame: 2.138037000 seconds] [Time delta from previous displayed frame: 2.138037000 seconds] [Time since reference or first frame: 2.150938000 seconds] Frame Number: 4 Frame Length: 298 bytes Capture Length: 298 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77), Dst: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Destination: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Address: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x02e9 (745) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf82e [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.126 (165.227.249.126) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0x1bb3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 76F413D847BADAB6 Responder cookie: 73232617E96CA87B Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: Vendor ID (13) Payload length: 24 Nonce Data Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Next payload: Vendor ID (13) Payload length: 48 Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Vendor ID: DA8E937880010000 Next payload: Vendor ID (13) Payload length: 12 Vendor ID: DA8E937880010000 Vendor ID: draft-beaulieu-ike-xauth-02.txt Next payload: NONE (0) Payload length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 e0 91 f5 99 a5 34 00 0c 29 3f 71 77 08 00 45 00 .....4..)?qw..E. 0010 01 1c 02 e9 00 00 80 11 f8 2e a5 e3 f9 73 a5 e3 .............s.. 0020 f9 7e 01 f4 01 f4 01 08 1b b3 76 f4 13 d8 47 ba .~........v...G. 0030 da b6 73 23 26 17 e9 6c a8 7b 04 10 02 00 00 00 ..s#&..l.{...... 0040 00 00 00 00 01 00 0a 00 00 84 4f 24 d2 4d 4f fc ..........O$.MO. 0050 14 98 f6 58 49 11 f2 cf 68 7e a7 f3 71 21 5f 2f ...XI...h~..q!_/ 0060 fc a7 c3 22 83 86 c1 eb 88 2a bd 15 f1 d0 79 d6 ...".....*....y. 0070 aa 65 a5 9d a7 d9 88 52 75 d6 9c 1b a2 06 2c 7e .e.....Ru.....,~ 0080 6b c8 5a a2 91 b9 4f 92 e6 23 77 c2 fc f0 19 3f k.Z...O..#w....? 0090 d3 cb 8b 64 93 e9 07 4b dd d6 0d e7 53 78 91 29 ...d...K....Sx.) 00a0 90 cc 3f a9 1b 0d 9b 5a a1 fc 25 35 e6 97 cc b4 ..?....Z..%5.... 00b0 b6 91 6c 7d 58 b2 23 51 bf 72 4f 82 0f cd 2b 10 ..l}X.#Q.rO...+. 00c0 d7 8c 4a 8b ba 97 3f 59 ad 8d 0d 00 00 18 2e 76 ..J...?Y.......v 00d0 16 4b 4d 29 ba 09 ac 89 bc 73 7e 56 ea e1 5a b5 .KM).....s~V..Z. 00e0 0e f3 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .....0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 ....&..... Frame 5 (298 bytes on wire, 298 bytes captured) Arrival Time: Mar 21, 2011 14:13:25.233150000 [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 2.150968000 seconds] Frame Number: 5 Frame Length: 298 bytes Capture Length: 298 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77), Dst: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Destination: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Address: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x02e9 (745) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf82e [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.126 (165.227.249.126) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0x1bb3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 76F413D847BADAB6 Responder cookie: 73232617E96CA87B Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: Vendor ID (13) Payload length: 24 Nonce Data Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Next payload: Vendor ID (13) Payload length: 48 Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Vendor ID: DA8E937880010000 Next payload: Vendor ID (13) Payload length: 12 Vendor ID: DA8E937880010000 Vendor ID: draft-beaulieu-ike-xauth-02.txt Next payload: NONE (0) Payload length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 e0 91 f5 99 a5 34 00 0c 29 3f 71 77 08 00 45 00 .....4..)?qw..E. 0010 01 1c 02 e9 00 00 80 11 f8 2e a5 e3 f9 73 a5 e3 .............s.. 0020 f9 7e 01 f4 01 f4 01 08 1b b3 76 f4 13 d8 47 ba .~........v...G. 0030 da b6 73 23 26 17 e9 6c a8 7b 04 10 02 00 00 00 ..s#&..l.{...... 0040 00 00 00 00 01 00 0a 00 00 84 4f 24 d2 4d 4f fc ..........O$.MO. 0050 14 98 f6 58 49 11 f2 cf 68 7e a7 f3 71 21 5f 2f ...XI...h~..q!_/ 0060 fc a7 c3 22 83 86 c1 eb 88 2a bd 15 f1 d0 79 d6 ...".....*....y. 0070 aa 65 a5 9d a7 d9 88 52 75 d6 9c 1b a2 06 2c 7e .e.....Ru.....,~ 0080 6b c8 5a a2 91 b9 4f 92 e6 23 77 c2 fc f0 19 3f k.Z...O..#w....? 0090 d3 cb 8b 64 93 e9 07 4b dd d6 0d e7 53 78 91 29 ...d...K....Sx.) 00a0 90 cc 3f a9 1b 0d 9b 5a a1 fc 25 35 e6 97 cc b4 ..?....Z..%5.... 00b0 b6 91 6c 7d 58 b2 23 51 bf 72 4f 82 0f cd 2b 10 ..l}X.#Q.rO...+. 00c0 d7 8c 4a 8b ba 97 3f 59 ad 8d 0d 00 00 18 2e 76 ..J...?Y.......v 00d0 16 4b 4d 29 ba 09 ac 89 bc 73 7e 56 ea e1 5a b5 .KM).....s~V..Z. 00e0 0e f3 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .....0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 ....&..... Frame 6 (242 bytes on wire, 242 bytes captured) Arrival Time: Mar 21, 2011 14:13:25.294668000 [Time delta from previous captured frame: 0.061518000 seconds] [Time delta from previous displayed frame: 0.061518000 seconds] [Time since reference or first frame: 2.212486000 seconds] Frame Number: 6 Frame Length: 242 bytes Capture Length: 242 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34), Dst: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) Destination: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Address: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.126 (165.227.249.126), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 228 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb4f [correct] [Good: True] [Bad : False] Source: 165.227.249.126 (165.227.249.126) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 208 Checksum: 0xd751 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 76F413D847BADAB6 Responder cookie: 73232617E96CA87B Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 200 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: Vendor ID (13) Payload length: 20 Nonce Data Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35 Next payload: NONE (0) Payload length: 20 Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 3f 71 77 e0 91 f5 99 a5 34 08 00 45 00 ..)?qw.....4..E. 0010 00 e4 00 00 40 00 40 11 fb 4f a5 e3 f9 7e a5 e3 ....@.@..O...~.. 0020 f9 73 01 f4 01 f4 00 d0 d7 51 76 f4 13 d8 47 ba .s.......Qv...G. 0030 da b6 73 23 26 17 e9 6c a8 7b 04 10 02 00 00 00 ..s#&..l.{...... 0040 00 00 00 00 00 c8 0a 00 00 84 ee c8 e2 dc 74 cc ..............t. 0050 41 c9 7a 47 39 e6 76 39 c5 b0 21 2f 30 89 21 90 A.zG9.v9..!/0.!. 0060 b5 e8 99 cf a4 6c b0 bd cd 04 cc cc 93 3d ab 20 .....l.......=. 0070 ed 10 81 b0 41 21 1e 9c 64 63 13 ba bb 00 1c d4 ....A!..dc...... 0080 1f b4 66 b7 b2 5e 0e 0b 28 48 17 5b 82 15 ec 62 ..f..^..(H.[...b 0090 3d d5 39 a8 3c c7 3d 31 5c 82 76 4a ec 51 ee 4b =.9.<.=1\.vJ.Q.K 00a0 62 9b 21 3b 6a 8e 42 ff b2 0b 47 5c ad c8 c1 e5 b.!;j.B...G\.... 00b0 cb 41 bb 93 ad b4 38 89 27 ac b8 f2 4b 2f 79 7b .A....8.'...K/y{ 00c0 e2 1e eb 8d 35 c8 58 69 b3 1e 0d 00 00 14 af d4 ....5.Xi........ 00d0 1e c5 3f cb 19 e5 f7 0b 5a 11 cf ef da 1d 00 00 ..?.....Z....... 00e0 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 00f0 8b 35 .5 Frame 7 (134 bytes on wire, 134 bytes captured) Arrival Time: Mar 21, 2011 14:13:26.318237000 [Time delta from previous captured frame: 1.023569000 seconds] [Time delta from previous displayed frame: 1.023569000 seconds] [Time since reference or first frame: 3.236055000 seconds] Frame Number: 7 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77), Dst: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Destination: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Address: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x02ec (748) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8cf [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.126 (165.227.249.126) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x3267 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 76F413D847BADAB6 Responder cookie: 73232617E96CA87B Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 e0 91 f5 99 a5 34 00 0c 29 3f 71 77 08 00 45 00 .....4..)?qw..E. 0010 00 78 02 ec 00 00 80 11 f8 cf a5 e3 f9 73 a5 e3 .x...........s.. 0020 f9 7e 01 f4 01 f4 00 64 32 67 76 f4 13 d8 47 ba .~.....d2gv...G. 0030 da b6 73 23 26 17 e9 6c a8 7b 05 10 02 01 00 00 ..s#&..l.{...... 0040 00 00 00 00 00 5c d1 5e 32 16 db 40 6e ec f6 d3 .....\.^2..@n... 0050 74 3e 1e a8 7f 5b 43 45 65 21 52 2c ee 9c ff 9d t>...[CEe!R,.... 0060 a5 32 7d 8d 16 e8 ae dd 6d 5f a4 78 d2 f2 8c 19 .2}.....m_.x.... 0070 60 18 6c be 23 af f4 80 02 dd 59 fd 83 5c 38 9c `.l.#.....Y..\8. 0080 bc fe 29 4d 2d 39 ..)M-9 Frame 8 (134 bytes on wire, 134 bytes captured) Arrival Time: Mar 21, 2011 14:13:26.318264000 [Time delta from previous captured frame: 0.000027000 seconds] [Time delta from previous displayed frame: 0.000027000 seconds] [Time since reference or first frame: 3.236082000 seconds] Frame Number: 8 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77), Dst: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Destination: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Address: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x02ec (748) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8cf [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.126 (165.227.249.126) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x3267 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 76F413D847BADAB6 Responder cookie: 73232617E96CA87B Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 e0 91 f5 99 a5 34 00 0c 29 3f 71 77 08 00 45 00 .....4..)?qw..E. 0010 00 78 02 ec 00 00 80 11 f8 cf a5 e3 f9 73 a5 e3 .x...........s.. 0020 f9 7e 01 f4 01 f4 00 64 32 67 76 f4 13 d8 47 ba .~.....d2gv...G. 0030 da b6 73 23 26 17 e9 6c a8 7b 05 10 02 01 00 00 ..s#&..l.{...... 0040 00 00 00 00 00 5c d1 5e 32 16 db 40 6e ec f6 d3 .....\.^2..@n... 0050 74 3e 1e a8 7f 5b 43 45 65 21 52 2c ee 9c ff 9d t>...[CEe!R,.... 0060 a5 32 7d 8d 16 e8 ae dd 6d 5f a4 78 d2 f2 8c 19 .2}.....m_.x.... 0070 60 18 6c be 23 af f4 80 02 dd 59 fd 83 5c 38 9c `.l.#.....Y..\8. 0080 bc fe 29 4d 2d 39 ..)M-9 Frame 9 (118 bytes on wire, 118 bytes captured) Arrival Time: Mar 21, 2011 14:13:26.330017000 [Time delta from previous captured frame: 0.011753000 seconds] [Time delta from previous displayed frame: 0.011753000 seconds] [Time since reference or first frame: 3.247835000 seconds] Frame Number: 9 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34), Dst: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) Destination: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Address: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.126 (165.227.249.126), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbcb [correct] [Good: True] [Bad : False] Source: 165.227.249.126 (165.227.249.126) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x47ff [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 76F413D847BADAB6 Responder cookie: 73232617E96CA87B Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 3f 71 77 e0 91 f5 99 a5 34 08 00 45 00 ..)?qw.....4..E. 0010 00 68 00 00 40 00 40 11 fb cb a5 e3 f9 7e a5 e3 .h..@.@......~.. 0020 f9 73 01 f4 01 f4 00 54 47 ff 76 f4 13 d8 47 ba .s.....TG.v...G. 0030 da b6 73 23 26 17 e9 6c a8 7b 05 10 02 01 00 00 ..s#&..l.{...... 0040 00 00 00 00 00 4c aa 1e df 60 51 d8 7e c1 ee b3 .....L...`Q.~... 0050 82 76 83 94 a1 44 22 c2 88 3e 1a 1f 75 de 4b 8c .v...D"..>..u.K. 0060 f7 fa 07 21 39 92 0a 9a 10 d4 6c 6e 6d d6 7a 14 ...!9.....lnm.z. 0070 0b 41 eb fc 7e 8c .A..~. Frame 10 (134 bytes on wire, 134 bytes captured) Arrival Time: Mar 21, 2011 14:13:26.335320000 [Time delta from previous captured frame: 0.005303000 seconds] [Time delta from previous displayed frame: 0.005303000 seconds] [Time since reference or first frame: 3.253138000 seconds] Frame Number: 10 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34), Dst: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) Destination: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Address: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.126 (165.227.249.126), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbbb [correct] [Good: True] [Bad : False] Source: 165.227.249.126 (165.227.249.126) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xc566 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 76F413D847BADAB6 Responder cookie: 73232617E96CA87B Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x8003f995 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 3f 71 77 e0 91 f5 99 a5 34 08 00 45 00 ..)?qw.....4..E. 0010 00 78 00 00 40 00 40 11 fb bb a5 e3 f9 7e a5 e3 .x..@.@......~.. 0020 f9 73 01 f4 01 f4 00 64 c5 66 76 f4 13 d8 47 ba .s.....d.fv...G. 0030 da b6 73 23 26 17 e9 6c a8 7b 08 10 05 01 80 03 ..s#&..l.{...... 0040 f9 95 00 00 00 5c 54 98 2f 71 98 12 84 e2 d6 04 .....\T./q...... 0050 77 51 9f cb 4c 6c 18 fb 71 21 ca f0 5f d2 c3 d9 wQ..Ll..q!.._... 0060 f9 1e 20 db 5a aa 0f 0f ed 36 1e f4 94 67 f7 3e .. .Z....6...g.> 0070 95 23 03 fd 20 f9 16 ab ee 40 41 a2 e7 48 ef bb .#.. ....@A..H.. 0080 12 b7 b2 7a 8c 0c ...z.. Frame 11 (342 bytes on wire, 342 bytes captured) Arrival Time: Mar 21, 2011 14:13:28.529012000 [Time delta from previous captured frame: 2.193692000 seconds] [Time delta from previous displayed frame: 2.193692000 seconds] [Time since reference or first frame: 5.446830000 seconds] Frame Number: 11 Frame Length: 342 bytes Capture Length: 342 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77), Dst: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Destination: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Address: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x02f5 (757) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf7f6 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.126 (165.227.249.126) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x8678 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 76F413D847BADAB6 Responder cookie: 73232617E96CA87B Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x614de5e0 Length: 300 Encrypted payload (272 bytes) 0000 e0 91 f5 99 a5 34 00 0c 29 3f 71 77 08 00 45 00 .....4..)?qw..E. 0010 01 48 02 f5 00 00 80 11 f7 f6 a5 e3 f9 73 a5 e3 .H...........s.. 0020 f9 7e 01 f4 01 f4 01 34 86 78 76 f4 13 d8 47 ba .~.....4.xv...G. 0030 da b6 73 23 26 17 e9 6c a8 7b 08 10 20 01 61 4d ..s#&..l.{.. .aM 0040 e5 e0 00 00 01 2c 7d de 72 28 c9 c4 0d ab a6 db .....,}.r(...... 0050 aa ff 97 08 55 f0 a2 bb ca 87 69 f4 66 7f 20 47 ....U.....i.f. G 0060 ea cf ee a1 09 81 85 7d 7c d7 ff 79 16 14 6c 8f .......}|..y..l. 0070 5a 9f 38 3c e9 70 6d 62 1a 7a 65 75 1f 7f 3b 08 Z.8<.pmb.zeu..;. 0080 d5 77 f1 10 bb 90 4d 88 bf 1b 84 9e 9d 0a 05 87 .w....M......... 0090 50 e9 d7 4e 5f d5 a1 8c 68 81 46 1c 06 1b d1 21 P..N_...h.F....! 00a0 3d c6 f5 14 d6 3a 2e 01 d2 11 69 86 33 45 b0 8f =....:....i.3E.. 00b0 4b 94 94 75 c3 5c 6c 65 69 f0 74 c1 29 48 2f a9 K..u.\lei.t.)H/. 00c0 2a e1 ba dc 06 5e 3b 24 28 ae ae 48 6c d2 1f 82 *....^;$(..Hl... 00d0 5a 3b 2b 38 bd 3c da 2a 84 0b 46 21 ec dc 5e 42 Z;+8.<.*..F!..^B 00e0 f6 1b 49 94 05 3c 1f 8a 02 41 a7 cf 4d 5a c2 46 ..I..<...A..MZ.F 00f0 68 06 c5 68 a7 8d 9e 8e 39 12 d9 33 54 40 fc a3 h..h....9..3T@.. 0100 46 ec 41 47 cd ae be 0f 1e 1a 79 6d b1 90 1f 86 F.AG......ym.... 0110 54 8b 76 b4 8e 63 c5 7e 78 51 1c 66 a6 43 39 30 T.v..c.~xQ.f.C90 0120 5d cb 7e 29 f6 b9 e6 d5 79 26 44 e9 86 ab 13 c7 ].~)....y&D..... 0130 f6 70 20 e4 c7 15 95 6e 02 13 55 bc 3c b1 37 c2 .p ....n..U.<.7. 0140 ea 86 90 fb 30 ee cd 28 f9 ab 84 0c a0 5a 02 56 ....0..(.....Z.V 0150 fa 5c 2a 60 86 23 .\*`.# Frame 12 (342 bytes on wire, 342 bytes captured) Arrival Time: Mar 21, 2011 14:13:28.529042000 [Time delta from previous captured frame: 0.000030000 seconds] [Time delta from previous displayed frame: 0.000030000 seconds] [Time since reference or first frame: 5.446860000 seconds] Frame Number: 12 Frame Length: 342 bytes Capture Length: 342 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77), Dst: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Destination: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Address: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x02f5 (757) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf7f6 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.126 (165.227.249.126) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x8678 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 76F413D847BADAB6 Responder cookie: 73232617E96CA87B Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x614de5e0 Length: 300 Encrypted payload (272 bytes) 0000 e0 91 f5 99 a5 34 00 0c 29 3f 71 77 08 00 45 00 .....4..)?qw..E. 0010 01 48 02 f5 00 00 80 11 f7 f6 a5 e3 f9 73 a5 e3 .H...........s.. 0020 f9 7e 01 f4 01 f4 01 34 86 78 76 f4 13 d8 47 ba .~.....4.xv...G. 0030 da b6 73 23 26 17 e9 6c a8 7b 08 10 20 01 61 4d ..s#&..l.{.. .aM 0040 e5 e0 00 00 01 2c 7d de 72 28 c9 c4 0d ab a6 db .....,}.r(...... 0050 aa ff 97 08 55 f0 a2 bb ca 87 69 f4 66 7f 20 47 ....U.....i.f. G 0060 ea cf ee a1 09 81 85 7d 7c d7 ff 79 16 14 6c 8f .......}|..y..l. 0070 5a 9f 38 3c e9 70 6d 62 1a 7a 65 75 1f 7f 3b 08 Z.8<.pmb.zeu..;. 0080 d5 77 f1 10 bb 90 4d 88 bf 1b 84 9e 9d 0a 05 87 .w....M......... 0090 50 e9 d7 4e 5f d5 a1 8c 68 81 46 1c 06 1b d1 21 P..N_...h.F....! 00a0 3d c6 f5 14 d6 3a 2e 01 d2 11 69 86 33 45 b0 8f =....:....i.3E.. 00b0 4b 94 94 75 c3 5c 6c 65 69 f0 74 c1 29 48 2f a9 K..u.\lei.t.)H/. 00c0 2a e1 ba dc 06 5e 3b 24 28 ae ae 48 6c d2 1f 82 *....^;$(..Hl... 00d0 5a 3b 2b 38 bd 3c da 2a 84 0b 46 21 ec dc 5e 42 Z;+8.<.*..F!..^B 00e0 f6 1b 49 94 05 3c 1f 8a 02 41 a7 cf 4d 5a c2 46 ..I..<...A..MZ.F 00f0 68 06 c5 68 a7 8d 9e 8e 39 12 d9 33 54 40 fc a3 h..h....9..3T@.. 0100 46 ec 41 47 cd ae be 0f 1e 1a 79 6d b1 90 1f 86 F.AG......ym.... 0110 54 8b 76 b4 8e 63 c5 7e 78 51 1c 66 a6 43 39 30 T.v..c.~xQ.f.C90 0120 5d cb 7e 29 f6 b9 e6 d5 79 26 44 e9 86 ab 13 c7 ].~)....y&D..... 0130 f6 70 20 e4 c7 15 95 6e 02 13 55 bc 3c b1 37 c2 .p ....n..U.<.7. 0140 ea 86 90 fb 30 ee cd 28 f9 ab 84 0c a0 5a 02 56 ....0..(.....Z.V 0150 fa 5c 2a 60 86 23 .\*`.# Frame 13 (342 bytes on wire, 342 bytes captured) Arrival Time: Mar 21, 2011 14:13:28.618449000 [Time delta from previous captured frame: 0.089407000 seconds] [Time delta from previous displayed frame: 0.089407000 seconds] [Time since reference or first frame: 5.536267000 seconds] Frame Number: 13 Frame Length: 342 bytes Capture Length: 342 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34), Dst: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) Destination: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Address: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.126 (165.227.249.126), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfaeb [correct] [Good: True] [Bad : False] Source: 165.227.249.126 (165.227.249.126) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xef13 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 76F413D847BADAB6 Responder cookie: 73232617E96CA87B Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x614de5e0 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 3f 71 77 e0 91 f5 99 a5 34 08 00 45 00 ..)?qw.....4..E. 0010 01 48 00 00 40 00 40 11 fa eb a5 e3 f9 7e a5 e3 .H..@.@......~.. 0020 f9 73 01 f4 01 f4 01 34 ef 13 76 f4 13 d8 47 ba .s.....4..v...G. 0030 da b6 73 23 26 17 e9 6c a8 7b 08 10 20 01 61 4d ..s#&..l.{.. .aM 0040 e5 e0 00 00 01 2c 02 09 e4 22 06 c0 c9 16 1f e7 .....,..."...... 0050 d2 d3 4e c2 9d bc 0e 47 cd 56 fb 52 dc 59 5f 1c ..N....G.V.R.Y_. 0060 d2 0f 9d 77 64 30 ac 3d 4f fa 43 ba e3 71 67 14 ...wd0.=O.C..qg. 0070 4e ad 86 f9 38 5e 0a 9e fa df 35 99 2e ca 99 19 N...8^....5..... 0080 82 d0 3d 6c 36 d4 08 6a 42 36 02 70 77 03 a5 3c ..=l6..jB6.pw..< 0090 65 83 6d 7f 02 d8 1e 42 ca a1 70 ba c6 14 6c 94 e.m....B..p...l. 00a0 2d 97 37 22 98 00 36 65 29 50 8f ee 8b ca ea c3 -.7"..6e)P...... 00b0 30 6f a2 8b d8 4f a7 5b 6f ba c6 c2 e0 4a 20 60 0o...O.[o....J ` 00c0 35 f1 eb 6f 1f b5 74 58 cc 33 d7 c7 9f 22 5b 70 5..o..tX.3..."[p 00d0 b9 a3 fd 6e d1 55 64 d4 7a 7b c6 6e a0 41 1a 23 ...n.Ud.z{.n.A.# 00e0 58 30 30 97 bb fd be ab ef 00 69 7c 0a 7d 7d 8a X00.......i|.}}. 00f0 a2 db f2 c2 cd eb a6 a6 7e 43 17 e3 0a 2b a8 1e ........~C...+.. 0100 95 cf 60 69 0a 9f 01 0d 0c c5 b6 cd c6 7c 79 67 ..`i.........|yg 0110 cc 13 5e 0d 62 86 7f fa 47 ac 97 28 48 54 2e 22 ..^.b...G..(HT." 0120 fa 3b c1 b1 82 bb 19 30 6d 30 d7 33 54 08 69 12 .;.....0m0.3T.i. 0130 6b b8 b1 60 6b 14 bc 4a 8c d9 48 e4 2c f8 05 1e k..`k..J..H.,... 0140 a6 5a 66 45 c1 a5 c5 5e 54 6a cc c1 2e d3 bf 87 .ZfE...^Tj...... 0150 2d 36 82 32 ea 4e -6.2.N Frame 14 (102 bytes on wire, 102 bytes captured) Arrival Time: Mar 21, 2011 14:13:28.622106000 [Time delta from previous captured frame: 0.003657000 seconds] [Time delta from previous displayed frame: 0.003657000 seconds] [Time since reference or first frame: 5.539924000 seconds] Frame Number: 14 Frame Length: 102 bytes Capture Length: 102 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77), Dst: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Destination: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Address: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x02fb (763) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8e0 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.126 (165.227.249.126) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x4007 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 76F413D847BADAB6 Responder cookie: 73232617E96CA87B Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x614de5e0 Length: 60 Encrypted payload (32 bytes) 0000 e0 91 f5 99 a5 34 00 0c 29 3f 71 77 08 00 45 00 .....4..)?qw..E. 0010 00 58 02 fb 00 00 80 11 f8 e0 a5 e3 f9 73 a5 e3 .X...........s.. 0020 f9 7e 01 f4 01 f4 00 44 40 07 76 f4 13 d8 47 ba .~.....D@.v...G. 0030 da b6 73 23 26 17 e9 6c a8 7b 08 10 20 01 61 4d ..s#&..l.{.. .aM 0040 e5 e0 00 00 00 3c b5 e7 c5 8a 4c 6d 12 00 7e ab .....<....Lm..~. 0050 61 50 6a 67 ad 7b 39 5d 48 06 07 3a 85 08 65 88 aPjg.{9]H..:..e. 0060 2f 23 bb 10 05 c0 /#.... Frame 15 (102 bytes on wire, 102 bytes captured) Arrival Time: Mar 21, 2011 14:13:28.622135000 [Time delta from previous captured frame: 0.000029000 seconds] [Time delta from previous displayed frame: 0.000029000 seconds] [Time since reference or first frame: 5.539953000 seconds] Frame Number: 15 Frame Length: 102 bytes Capture Length: 102 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77), Dst: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Destination: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Address: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x02fb (763) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf8e0 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.126 (165.227.249.126) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x4007 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 76F413D847BADAB6 Responder cookie: 73232617E96CA87B Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x614de5e0 Length: 60 Encrypted payload (32 bytes) 0000 e0 91 f5 99 a5 34 00 0c 29 3f 71 77 08 00 45 00 .....4..)?qw..E. 0010 00 58 02 fb 00 00 80 11 f8 e0 a5 e3 f9 73 a5 e3 .X...........s.. 0020 f9 7e 01 f4 01 f4 00 44 40 07 76 f4 13 d8 47 ba .~.....D@.v...G. 0030 da b6 73 23 26 17 e9 6c a8 7b 08 10 20 01 61 4d ..s#&..l.{.. .aM 0040 e5 e0 00 00 00 3c b5 e7 c5 8a 4c 6d 12 00 7e ab .....<....Lm..~. 0050 61 50 6a 67 ad 7b 39 5d 48 06 07 3a 85 08 65 88 aPjg.{9]H..:..e. 0060 2f 23 bb 10 05 c0 /#.... Frame 16 (134 bytes on wire, 134 bytes captured) Arrival Time: Mar 21, 2011 14:13:39.140440000 [Time delta from previous captured frame: 10.518305000 seconds] [Time delta from previous displayed frame: 10.518305000 seconds] [Time since reference or first frame: 16.058258000 seconds] Frame Number: 16 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77), Dst: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Destination: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Address: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb99 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.126 (165.227.249.126) Encapsulating Security Payload ESP SPI: 0x07a8fc26 ESP Sequence: 1 0000 e0 91 f5 99 a5 34 00 0c 29 3f 71 77 08 00 45 00 .....4..)?qw..E. 0010 00 78 00 01 00 00 80 32 fb 99 a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 7e 07 a8 fc 26 00 00 00 01 97 aa 3e 1a b9 6c .~...&......>..l 0030 45 f4 86 64 b4 af 6c a0 09 ba ca d7 7c cb 33 cb E..d..l.....|.3. 0040 46 90 0c 0e a1 de 6f 3c 91 b1 c7 75 2f a2 81 ee F.....o<...u/... 0050 33 72 e0 60 a6 74 bc f5 8e 33 d5 c5 f7 e0 69 bb 3r.`.t...3....i. 0060 82 0e 1a 10 55 d9 4d d7 a2 70 33 f1 c5 03 57 5a ....U.M..p3...WZ 0070 fc 02 73 38 84 fc 92 15 f6 fa 2d 4a 04 f7 61 82 ..s8......-J..a. 0080 85 5a fd 04 db ca .Z.... Frame 17 (134 bytes on wire, 134 bytes captured) Arrival Time: Mar 21, 2011 14:13:39.140458000 [Time delta from previous captured frame: 0.000018000 seconds] [Time delta from previous displayed frame: 0.000018000 seconds] [Time since reference or first frame: 16.058276000 seconds] Frame Number: 17 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77), Dst: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Destination: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Address: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.126 (165.227.249.126) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb99 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.126 (165.227.249.126) Encapsulating Security Payload ESP SPI: 0x07a8fc26 ESP Sequence: 1 0000 e0 91 f5 99 a5 34 00 0c 29 3f 71 77 08 00 45 00 .....4..)?qw..E. 0010 00 78 00 01 00 00 80 32 fb 99 a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 7e 07 a8 fc 26 00 00 00 01 97 aa 3e 1a b9 6c .~...&......>..l 0030 45 f4 86 64 b4 af 6c a0 09 ba ca d7 7c cb 33 cb E..d..l.....|.3. 0040 46 90 0c 0e a1 de 6f 3c 91 b1 c7 75 2f a2 81 ee F.....o<...u/... 0050 33 72 e0 60 a6 74 bc f5 8e 33 d5 c5 f7 e0 69 bb 3r.`.t...3....i. 0060 82 0e 1a 10 55 d9 4d d7 a2 70 33 f1 c5 03 57 5a ....U.M..p3...WZ 0070 fc 02 73 38 84 fc 92 15 f6 fa 2d 4a 04 f7 61 82 ..s8......-J..a. 0080 85 5a fd 04 db ca .Z.... Frame 18 (134 bytes on wire, 134 bytes captured) Arrival Time: Mar 21, 2011 14:13:39.143198000 [Time delta from previous captured frame: 0.002740000 seconds] [Time delta from previous displayed frame: 0.002740000 seconds] [Time since reference or first frame: 16.061016000 seconds] Frame Number: 18 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34), Dst: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) Destination: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) Address: e0:91:f5:99:a5:34 (e0:91:f5:99:a5:34) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.126 (165.227.249.126), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0xfd06 (64774) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3e94 [correct] [Good: True] [Bad : False] Source: 165.227.249.126 (165.227.249.126) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload ESP SPI: 0x25265a8f ESP Sequence: 1 0000 00 0c 29 3f 71 77 e0 91 f5 99 a5 34 08 00 45 00 ..)?qw.....4..E. 0010 00 78 fd 06 00 00 40 32 3e 94 a5 e3 f9 7e a5 e3 .x....@2>....~.. 0020 f9 73 25 26 5a 8f 00 00 00 01 45 d2 95 b6 8c 71 .s%&Z.....E....q 0030 86 c4 c3 31 40 78 f2 28 65 ff 04 21 ce 4e fa c7 ...1@x.(e..!.N.. 0040 2b ed 89 8f e7 49 11 e2 74 33 1b 50 0a 0e 68 25 +....I..t3.P..h% 0050 a6 60 e8 81 01 d8 eb bc 44 4f 77 3b a5 1b 62 dc .`......DOw;..b. 0060 37 41 e2 49 db 9c 9e ca a7 0e 40 c6 32 bd de 17 7A.I......@.2... 0070 5d c9 c8 6c ac e6 c2 62 2b ae c5 50 0d 5b ca a5 ]..l...b+..P.[.. 0080 34 d0 34 b2 87 a4 4.4...