Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Aug 29, 2009 11:53:54.283322000 [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 166 bytes Capture Length: 166 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x01c3 (451) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9d3 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.131 (165.227.249.131) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0x0d4d [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 62DDAE39801F6DFE Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Next payload: NONE (0) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n 0000 00 1e 2a d4 6e b1 00 0c 29 6d a9 a5 08 00 45 00 ..*.n...)m....E. 0010 00 98 01 c3 00 00 80 11 f9 d3 a5 e3 f9 73 a5 e3 .............s.. 0020 f9 83 01 f4 01 f4 00 84 0d 4d 62 dd ae 39 80 1f .........Mb..9.. 0030 6d fe 00 00 00 00 00 00 00 00 01 10 02 00 00 00 m............... 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 ..D..-.......F.y 0090 dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 ..........>.in.c 00a0 81 b5 ec 42 7b 1f ...B{. Frame 2 (166 bytes on wire, 166 bytes captured) Arrival Time: Aug 29, 2009 11:53:54.283329000 [Time delta from previous captured frame: 0.000007000 seconds] [Time delta from previous displayed frame: 0.000007000 seconds] [Time since reference or first frame: 0.000007000 seconds] Frame Number: 2 Frame Length: 166 bytes Capture Length: 166 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x01c3 (451) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9d3 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.131 (165.227.249.131) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0x0d4d [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 62DDAE39801F6DFE Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Next payload: NONE (0) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n 0000 00 1e 2a d4 6e b1 00 0c 29 6d a9 a5 08 00 45 00 ..*.n...)m....E. 0010 00 98 01 c3 00 00 80 11 f9 d3 a5 e3 f9 73 a5 e3 .............s.. 0020 f9 83 01 f4 01 f4 00 84 0d 4d 62 dd ae 39 80 1f .........Mb..9.. 0030 6d fe 00 00 00 00 00 00 00 00 01 10 02 00 00 00 m............... 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 ..D..-.......F.y 0090 dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 ..........>.in.c 00a0 81 b5 ec 42 7b 1f ...B{. Frame 3 (166 bytes on wire, 166 bytes captured) Arrival Time: Aug 29, 2009 11:53:54.314931000 [Time delta from previous captured frame: 0.031602000 seconds] [Time delta from previous displayed frame: 0.031602000 seconds] [Time since reference or first frame: 0.031609000 seconds] Frame Number: 3 Frame Length: 166 bytes Capture Length: 166 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb96 [correct] [Good: True] [Bad : False] Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0x3096 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 62DDAE39801F6DFE Responder cookie: 9AE8963F3F9BE375 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID: 3B9031DCE4FCF88B489A923963DD0C49 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: 3B9031DCE4FCF88B489A923963DD0C49 Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35 Next payload: NONE (0) Payload length: 20 Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 6d a9 a5 00 1e 2a d4 6e b1 08 00 45 00 ..)m....*.n...E. 0010 00 98 00 00 40 00 40 11 fb 96 a5 e3 f9 83 a5 e3 ....@.@......... 0020 f9 73 01 f4 01 f4 00 84 30 96 62 dd ae 39 80 1f .s......0.b..9.. 0030 6d fe 9a e8 96 3f 3f 9b e3 75 01 10 02 00 00 00 m....??..u...... 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 3b 90 31 dc e4 fc f8 8b 48 9a 92 39 63 dd ..;.1.....H..9c. 0090 0c 49 00 00 00 14 70 03 cb c1 09 7d be 9c 26 00 .I....p....}..&. 00a0 ba 69 83 bc 8b 35 .i...5 Frame 4 (298 bytes on wire, 298 bytes captured) Arrival Time: Aug 29, 2009 11:53:56.474617000 [Time delta from previous captured frame: 2.159686000 seconds] [Time delta from previous displayed frame: 2.159686000 seconds] [Time since reference or first frame: 2.191295000 seconds] Frame Number: 4 Frame Length: 298 bytes Capture Length: 298 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x01c6 (454) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf94c [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.131 (165.227.249.131) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0xb869 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 62DDAE39801F6DFE Responder cookie: 9AE8963F3F9BE375 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: Vendor ID (13) Payload length: 24 Nonce Data Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Next payload: Vendor ID (13) Payload length: 48 Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Vendor ID: DA8E937880010000 Next payload: Vendor ID (13) Payload length: 12 Vendor ID: DA8E937880010000 Vendor ID: draft-beaulieu-ike-xauth-02.txt Next payload: NONE (0) Payload length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 1e 2a d4 6e b1 00 0c 29 6d a9 a5 08 00 45 00 ..*.n...)m....E. 0010 01 1c 01 c6 00 00 80 11 f9 4c a5 e3 f9 73 a5 e3 .........L...s.. 0020 f9 83 01 f4 01 f4 01 08 b8 69 62 dd ae 39 80 1f .........ib..9.. 0030 6d fe 9a e8 96 3f 3f 9b e3 75 04 10 02 00 00 00 m....??..u...... 0040 00 00 00 00 01 00 0a 00 00 84 a7 d7 c4 e8 d0 f4 ................ 0050 4f 25 06 62 98 23 8a 47 99 56 4a 70 b9 2b 58 01 O%.b.#.G.VJp.+X. 0060 27 fd 04 a5 3d 5a 1a 70 aa dd d2 4d 62 90 8e a7 '...=Z.p...Mb... 0070 8b 53 ec 96 10 74 68 0b e6 22 8d 68 51 24 00 49 .S...th..".hQ$.I 0080 51 58 01 63 16 95 cb 3d e5 21 b8 69 72 ce 12 ba QX.c...=.!.ir... 0090 59 a8 ff 96 80 97 2b 31 db 9e e7 6f 86 7d 85 13 Y.....+1...o.}.. 00a0 ee dc 92 da f4 65 f8 df b7 ae 5c f0 8c c2 31 8b .....e....\...1. 00b0 9a c7 f1 21 f8 32 98 66 4d b6 49 10 a8 fd 5c c7 ...!.2.fM.I...\. 00c0 b0 99 77 de f7 c9 8d c3 33 6a 0d 00 00 18 bd ea ..w.....3j...... 00d0 7e b7 60 77 56 89 13 71 40 55 55 9a 7b 55 bc 60 ~.`wV..q@UU.{U.` 00e0 8b 06 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .....0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 ....&..... Frame 5 (298 bytes on wire, 298 bytes captured) Arrival Time: Aug 29, 2009 11:53:56.474633000 [Time delta from previous captured frame: 0.000016000 seconds] [Time delta from previous displayed frame: 0.000016000 seconds] [Time since reference or first frame: 2.191311000 seconds] Frame Number: 5 Frame Length: 298 bytes Capture Length: 298 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x01c6 (454) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf94c [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.131 (165.227.249.131) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0xb869 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 62DDAE39801F6DFE Responder cookie: 9AE8963F3F9BE375 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: Vendor ID (13) Payload length: 24 Nonce Data Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Next payload: Vendor ID (13) Payload length: 48 Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Vendor ID: DA8E937880010000 Next payload: Vendor ID (13) Payload length: 12 Vendor ID: DA8E937880010000 Vendor ID: draft-beaulieu-ike-xauth-02.txt Next payload: NONE (0) Payload length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 1e 2a d4 6e b1 00 0c 29 6d a9 a5 08 00 45 00 ..*.n...)m....E. 0010 01 1c 01 c6 00 00 80 11 f9 4c a5 e3 f9 73 a5 e3 .........L...s.. 0020 f9 83 01 f4 01 f4 01 08 b8 69 62 dd ae 39 80 1f .........ib..9.. 0030 6d fe 9a e8 96 3f 3f 9b e3 75 04 10 02 00 00 00 m....??..u...... 0040 00 00 00 00 01 00 0a 00 00 84 a7 d7 c4 e8 d0 f4 ................ 0050 4f 25 06 62 98 23 8a 47 99 56 4a 70 b9 2b 58 01 O%.b.#.G.VJp.+X. 0060 27 fd 04 a5 3d 5a 1a 70 aa dd d2 4d 62 90 8e a7 '...=Z.p...Mb... 0070 8b 53 ec 96 10 74 68 0b e6 22 8d 68 51 24 00 49 .S...th..".hQ$.I 0080 51 58 01 63 16 95 cb 3d e5 21 b8 69 72 ce 12 ba QX.c...=.!.ir... 0090 59 a8 ff 96 80 97 2b 31 db 9e e7 6f 86 7d 85 13 Y.....+1...o.}.. 00a0 ee dc 92 da f4 65 f8 df b7 ae 5c f0 8c c2 31 8b .....e....\...1. 00b0 9a c7 f1 21 f8 32 98 66 4d b6 49 10 a8 fd 5c c7 ...!.2.fM.I...\. 00c0 b0 99 77 de f7 c9 8d c3 33 6a 0d 00 00 18 bd ea ..w.....3j...... 00d0 7e b7 60 77 56 89 13 71 40 55 55 9a 7b 55 bc 60 ~.`wV..q@UU.{U.` 00e0 8b 06 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .....0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 ....&..... Frame 6 (242 bytes on wire, 242 bytes captured) Arrival Time: Aug 29, 2009 11:53:56.547212000 [Time delta from previous captured frame: 0.072579000 seconds] [Time delta from previous displayed frame: 0.072579000 seconds] [Time since reference or first frame: 2.263890000 seconds] Frame Number: 6 Frame Length: 242 bytes Capture Length: 242 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 228 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb4a [correct] [Good: True] [Bad : False] Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 208 Checksum: 0x9439 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 62DDAE39801F6DFE Responder cookie: 9AE8963F3F9BE375 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 200 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: Vendor ID (13) Payload length: 20 Nonce Data Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35 Next payload: NONE (0) Payload length: 20 Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 6d a9 a5 00 1e 2a d4 6e b1 08 00 45 00 ..)m....*.n...E. 0010 00 e4 00 00 40 00 40 11 fb 4a a5 e3 f9 83 a5 e3 ....@.@..J...... 0020 f9 73 01 f4 01 f4 00 d0 94 39 62 dd ae 39 80 1f .s.......9b..9.. 0030 6d fe 9a e8 96 3f 3f 9b e3 75 04 10 02 00 00 00 m....??..u...... 0040 00 00 00 00 00 c8 0a 00 00 84 c6 59 8d 86 ce 60 ...........Y...` 0050 d5 4b 7b ef fc b7 90 26 fb f3 93 40 91 b9 29 44 .K{....&...@..)D 0060 be 92 1d 2d 8b a5 84 ba 36 74 45 f5 33 89 81 bb ...-....6tE.3... 0070 7f 1f c3 28 32 19 3b df 71 37 e0 0e 75 a1 9a d5 ...(2.;.q7..u... 0080 e1 a8 1a c6 f7 60 9c cd fd 44 95 ae 26 2d bb 1e .....`...D..&-.. 0090 97 0b 10 9e 39 7e d9 9e 65 50 7d c2 d8 ae 0f 2a ....9~..eP}....* 00a0 6a c8 bf 84 68 b1 f7 f1 33 4b b2 e1 29 0d 24 2c j...h...3K..).$, 00b0 39 8c 55 74 14 ac bc 08 69 40 cd 97 81 1a e2 88 9.Ut....i@...... 00c0 eb f8 96 64 91 88 9d b3 ec 50 0d 00 00 14 ef db ...d.....P...... 00d0 64 90 1f e0 e7 da 7d 39 b2 3c a5 6b 35 dc 00 00 d.....}9.<.k5... 00e0 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 00f0 8b 35 .5 Frame 7 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 29, 2009 11:53:57.350494000 [Time delta from previous captured frame: 0.803282000 seconds] [Time delta from previous displayed frame: 0.803282000 seconds] [Time since reference or first frame: 3.067172000 seconds] Frame Number: 7 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x01ca (458) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9ec [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.131 (165.227.249.131) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x63c2 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 62DDAE39801F6DFE Responder cookie: 9AE8963F3F9BE375 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 1e 2a d4 6e b1 00 0c 29 6d a9 a5 08 00 45 00 ..*.n...)m....E. 0010 00 78 01 ca 00 00 80 11 f9 ec a5 e3 f9 73 a5 e3 .x...........s.. 0020 f9 83 01 f4 01 f4 00 64 63 c2 62 dd ae 39 80 1f .......dc.b..9.. 0030 6d fe 9a e8 96 3f 3f 9b e3 75 05 10 02 01 00 00 m....??..u...... 0040 00 00 00 00 00 5c 99 dd a9 63 ee 60 2f 58 ad 59 .....\...c.`/X.Y 0050 80 ab 00 30 40 63 15 6a 11 a8 a4 ba 20 8a b6 71 ...0@c.j.... ..q 0060 5c 29 30 e6 4b 00 e6 74 7a 1f 0b cf f0 4d 94 44 \)0.K..tz....M.D 0070 41 4a 67 c4 47 ef 7f b0 c9 fc 1a 44 2c 78 33 25 AJg.G......D,x3% 0080 45 d5 dd c6 ea 57 E....W Frame 8 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 29, 2009 11:53:57.350511000 [Time delta from previous captured frame: 0.000017000 seconds] [Time delta from previous displayed frame: 0.000017000 seconds] [Time since reference or first frame: 3.067189000 seconds] Frame Number: 8 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x01ca (458) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9ec [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.131 (165.227.249.131) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x63c2 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 62DDAE39801F6DFE Responder cookie: 9AE8963F3F9BE375 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 1e 2a d4 6e b1 00 0c 29 6d a9 a5 08 00 45 00 ..*.n...)m....E. 0010 00 78 01 ca 00 00 80 11 f9 ec a5 e3 f9 73 a5 e3 .x...........s.. 0020 f9 83 01 f4 01 f4 00 64 63 c2 62 dd ae 39 80 1f .......dc.b..9.. 0030 6d fe 9a e8 96 3f 3f 9b e3 75 05 10 02 01 00 00 m....??..u...... 0040 00 00 00 00 00 5c 99 dd a9 63 ee 60 2f 58 ad 59 .....\...c.`/X.Y 0050 80 ab 00 30 40 63 15 6a 11 a8 a4 ba 20 8a b6 71 ...0@c.j.... ..q 0060 5c 29 30 e6 4b 00 e6 74 7a 1f 0b cf f0 4d 94 44 \)0.K..tz....M.D 0070 41 4a 67 c4 47 ef 7f b0 c9 fc 1a 44 2c 78 33 25 AJg.G......D,x3% 0080 45 d5 dd c6 ea 57 E....W Frame 9 (118 bytes on wire, 118 bytes captured) Arrival Time: Aug 29, 2009 11:53:57.373574000 [Time delta from previous captured frame: 0.023063000 seconds] [Time delta from previous displayed frame: 0.023063000 seconds] [Time since reference or first frame: 3.090252000 seconds] Frame Number: 9 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc6 [correct] [Good: True] [Bad : False] Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x99cc [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 62DDAE39801F6DFE Responder cookie: 9AE8963F3F9BE375 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 6d a9 a5 00 1e 2a d4 6e b1 08 00 45 00 ..)m....*.n...E. 0010 00 68 00 00 40 00 40 11 fb c6 a5 e3 f9 83 a5 e3 .h..@.@......... 0020 f9 73 01 f4 01 f4 00 54 99 cc 62 dd ae 39 80 1f .s.....T..b..9.. 0030 6d fe 9a e8 96 3f 3f 9b e3 75 05 10 02 01 00 00 m....??..u...... 0040 00 00 00 00 00 4c d6 a3 d9 59 f7 b4 4b 4c ec 83 .....L...Y..KL.. 0050 2a 10 8d b1 38 8e af ec 99 71 83 95 6c 0b 8a 2d *...8....q..l..- 0060 99 72 31 e4 3f 0f 8c 8e 0b c7 9f 46 d1 7c 66 7f .r1.?......F.|f. 0070 b7 1d 9f 7a 64 71 ...zdq Frame 10 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 29, 2009 11:53:57.384456000 [Time delta from previous captured frame: 0.010882000 seconds] [Time delta from previous displayed frame: 0.010882000 seconds] [Time since reference or first frame: 3.101134000 seconds] Frame Number: 10 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbb6 [correct] [Good: True] [Bad : False] Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xc3a5 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 62DDAE39801F6DFE Responder cookie: 9AE8963F3F9BE375 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xb23d3a5d Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 6d a9 a5 00 1e 2a d4 6e b1 08 00 45 00 ..)m....*.n...E. 0010 00 78 00 00 40 00 40 11 fb b6 a5 e3 f9 83 a5 e3 .x..@.@......... 0020 f9 73 01 f4 01 f4 00 64 c3 a5 62 dd ae 39 80 1f .s.....d..b..9.. 0030 6d fe 9a e8 96 3f 3f 9b e3 75 08 10 05 01 b2 3d m....??..u.....= 0040 3a 5d 00 00 00 5c e5 93 66 cf 8e d0 fa 85 73 3d :]...\..f.....s= 0050 07 e7 8d ce 1e f5 06 9b 15 44 24 87 fe 52 ad b8 .........D$..R.. 0060 fc 9c a5 10 ac bc d3 0b ac 8e fd 81 87 8a f0 7a ...............z 0070 d6 2b dc c0 8f 06 7b 13 42 4c 49 29 42 c2 2a a4 .+....{.BLI)B.*. 0080 d2 c5 df 22 15 f8 ...".. Frame 11 (342 bytes on wire, 342 bytes captured) Arrival Time: Aug 29, 2009 11:53:59.639294000 [Time delta from previous captured frame: 2.254838000 seconds] [Time delta from previous displayed frame: 2.254838000 seconds] [Time since reference or first frame: 5.355972000 seconds] Frame Number: 11 Frame Length: 342 bytes Capture Length: 342 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x01d3 (467) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf913 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.131 (165.227.249.131) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xedd3 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 62DDAE39801F6DFE Responder cookie: 9AE8963F3F9BE375 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x77b9d199 Length: 300 Encrypted payload (272 bytes) 0000 00 1e 2a d4 6e b1 00 0c 29 6d a9 a5 08 00 45 00 ..*.n...)m....E. 0010 01 48 01 d3 00 00 80 11 f9 13 a5 e3 f9 73 a5 e3 .H...........s.. 0020 f9 83 01 f4 01 f4 01 34 ed d3 62 dd ae 39 80 1f .......4..b..9.. 0030 6d fe 9a e8 96 3f 3f 9b e3 75 08 10 20 01 77 b9 m....??..u.. .w. 0040 d1 99 00 00 01 2c 5f aa 4f bb 09 53 60 2d 48 0e .....,_.O..S`-H. 0050 7f 8c 9f 55 e0 7b c4 a6 11 e5 01 3e cf 23 c9 ab ...U.{.....>.#.. 0060 c6 5d af 17 32 03 af e9 5d c8 37 ad 2a 5e 54 97 .]..2...].7.*^T. 0070 c9 cb 5d d7 52 3b 1e c6 4f 0b cb 41 a1 d1 b0 cc ..].R;..O..A.... 0080 58 4a 75 ce 07 d1 1a 8c b8 60 d8 cf ba 58 8c 47 XJu......`...X.G 0090 8e d6 3d bc b1 5b e0 c2 cf cc c9 91 28 d7 10 b8 ..=..[......(... 00a0 65 5b 51 4b 20 c2 cf 2e 68 e9 81 de e2 37 e1 6e e[QK ...h....7.n 00b0 2f 64 b5 ac dd c4 a5 5f d3 0b e5 e9 84 dc b2 8d /d....._........ 00c0 e9 d0 51 fd 0f ed bf bc 39 99 0f fc 4e c7 fe 19 ..Q.....9...N... 00d0 20 99 c8 74 24 1e 17 bc 5f 5c 09 b9 5c 7c ac 96 ..t$..._\..\|.. 00e0 2b 4c be 61 c4 10 db 49 98 8a 5d 07 da 9d d1 05 +L.a...I..]..... 00f0 19 2e 03 d8 94 21 ba f5 ad 1c cb ef 32 9b 52 df .....!......2.R. 0100 b3 48 6a 68 28 dc bc e1 5c cf 23 6b c4 00 7f 58 .Hjh(...\.#k...X 0110 de 12 08 bb ba 1a ea f2 d5 11 d2 f2 13 b5 e0 06 ................ 0120 66 c4 e6 3c 6f d6 36 4f 12 3a 62 69 c2 ae 78 e7 f... 0150 97 ae a1 93 6b 08 ....k. Frame 12 (342 bytes on wire, 342 bytes captured) Arrival Time: Aug 29, 2009 11:53:59.639312000 [Time delta from previous captured frame: 0.000018000 seconds] [Time delta from previous displayed frame: 0.000018000 seconds] [Time since reference or first frame: 5.355990000 seconds] Frame Number: 12 Frame Length: 342 bytes Capture Length: 342 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x01d3 (467) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf913 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.131 (165.227.249.131) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xedd3 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 62DDAE39801F6DFE Responder cookie: 9AE8963F3F9BE375 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x77b9d199 Length: 300 Encrypted payload (272 bytes) 0000 00 1e 2a d4 6e b1 00 0c 29 6d a9 a5 08 00 45 00 ..*.n...)m....E. 0010 01 48 01 d3 00 00 80 11 f9 13 a5 e3 f9 73 a5 e3 .H...........s.. 0020 f9 83 01 f4 01 f4 01 34 ed d3 62 dd ae 39 80 1f .......4..b..9.. 0030 6d fe 9a e8 96 3f 3f 9b e3 75 08 10 20 01 77 b9 m....??..u.. .w. 0040 d1 99 00 00 01 2c 5f aa 4f bb 09 53 60 2d 48 0e .....,_.O..S`-H. 0050 7f 8c 9f 55 e0 7b c4 a6 11 e5 01 3e cf 23 c9 ab ...U.{.....>.#.. 0060 c6 5d af 17 32 03 af e9 5d c8 37 ad 2a 5e 54 97 .]..2...].7.*^T. 0070 c9 cb 5d d7 52 3b 1e c6 4f 0b cb 41 a1 d1 b0 cc ..].R;..O..A.... 0080 58 4a 75 ce 07 d1 1a 8c b8 60 d8 cf ba 58 8c 47 XJu......`...X.G 0090 8e d6 3d bc b1 5b e0 c2 cf cc c9 91 28 d7 10 b8 ..=..[......(... 00a0 65 5b 51 4b 20 c2 cf 2e 68 e9 81 de e2 37 e1 6e e[QK ...h....7.n 00b0 2f 64 b5 ac dd c4 a5 5f d3 0b e5 e9 84 dc b2 8d /d....._........ 00c0 e9 d0 51 fd 0f ed bf bc 39 99 0f fc 4e c7 fe 19 ..Q.....9...N... 00d0 20 99 c8 74 24 1e 17 bc 5f 5c 09 b9 5c 7c ac 96 ..t$..._\..\|.. 00e0 2b 4c be 61 c4 10 db 49 98 8a 5d 07 da 9d d1 05 +L.a...I..]..... 00f0 19 2e 03 d8 94 21 ba f5 ad 1c cb ef 32 9b 52 df .....!......2.R. 0100 b3 48 6a 68 28 dc bc e1 5c cf 23 6b c4 00 7f 58 .Hjh(...\.#k...X 0110 de 12 08 bb ba 1a ea f2 d5 11 d2 f2 13 b5 e0 06 ................ 0120 66 c4 e6 3c 6f d6 36 4f 12 3a 62 69 c2 ae 78 e7 f... 0150 97 ae a1 93 6b 08 ....k. Frame 13 (342 bytes on wire, 342 bytes captured) Arrival Time: Aug 29, 2009 11:53:59.787355000 [Time delta from previous captured frame: 0.148043000 seconds] [Time delta from previous displayed frame: 0.148043000 seconds] [Time since reference or first frame: 5.504033000 seconds] Frame Number: 13 Frame Length: 342 bytes Capture Length: 342 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfae6 [correct] [Good: True] [Bad : False] Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xac30 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 62DDAE39801F6DFE Responder cookie: 9AE8963F3F9BE375 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x77b9d199 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 6d a9 a5 00 1e 2a d4 6e b1 08 00 45 00 ..)m....*.n...E. 0010 01 48 00 00 40 00 40 11 fa e6 a5 e3 f9 83 a5 e3 .H..@.@......... 0020 f9 73 01 f4 01 f4 01 34 ac 30 62 dd ae 39 80 1f .s.....4.0b..9.. 0030 6d fe 9a e8 96 3f 3f 9b e3 75 08 10 20 01 77 b9 m....??..u.. .w. 0040 d1 99 00 00 01 2c 0e 19 d9 ac e4 61 f4 47 bd 6a .....,.....a.G.j 0050 72 e8 31 e6 8c 08 3a 04 21 26 51 96 60 5b 9f 01 r.1...:.!&Q.`[.. 0060 f6 aa ac df 34 be 97 f3 d8 5c 90 41 12 86 8a 5b ....4....\.A...[ 0070 9a ac 05 1b 99 7d 14 37 28 36 4f 79 b0 f1 2d 08 .....}.7(6Oy..-. 0080 bc d1 05 8e 71 52 c9 71 3d 6f 4c 0e b0 32 c1 38 ....qR.q=oL..2.8 0090 ba c8 1f 0d 73 60 19 cc dc a0 66 2a 4d 71 4f 7d ....s`....f*MqO} 00a0 f4 3a 4d 27 cc ee f6 8d 7c f4 8c 1d 43 d1 13 2a .:M'....|...C..* 00b0 6c 0f 15 7d 42 06 38 6f 1f b1 0b fe a4 e8 a6 c4 l..}B.8o........ 00c0 fa 7a 5b dd d4 d7 15 80 4e be 29 89 d2 28 63 7c .z[.....N.)..(c| 00d0 53 06 c0 27 1a 3e 3e b3 af 2f db 72 b3 76 28 89 S..'.>>../.r.v(. 00e0 6a b3 22 eb 88 18 0a e0 8b 71 d7 ef 73 1e a2 80 j."......q..s... 00f0 2f 88 22 08 d1 3c 32 02 6c 50 83 a5 00 2f be ee /."..<2.lP.../.. 0100 b3 78 54 dd 4d e6 2d 2a c4 66 65 d4 a1 fd 88 92 .xT.M.-*.fe..... 0110 22 aa 08 2a 13 ab 97 a4 5a 6f 8c 79 ef b0 cb 78 "..*....Zo.y...x 0120 db cc 65 4e af 13 d1 f1 3b 8a 69 97 a3 25 24 79 ..eN....;.i..%$y 0130 77 bf 2b ca c7 d7 a5 a4 6f f5 3d 00 e5 8f 66 35 w.+.....o.=...f5 0140 eb 53 e3 4a 2f e8 09 75 26 a3 06 8e 38 65 8b 60 .S.J/..u&...8e.` 0150 ce ec 3b e3 d2 43 ..;..C Frame 14 (102 bytes on wire, 102 bytes captured) Arrival Time: Aug 29, 2009 11:53:59.791656000 [Time delta from previous captured frame: 0.004301000 seconds] [Time delta from previous displayed frame: 0.004301000 seconds] [Time since reference or first frame: 5.508334000 seconds] Frame Number: 14 Frame Length: 102 bytes Capture Length: 102 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x01d8 (472) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9fe [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.131 (165.227.249.131) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x2244 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 62DDAE39801F6DFE Responder cookie: 9AE8963F3F9BE375 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x77b9d199 Length: 60 Encrypted payload (32 bytes) 0000 00 1e 2a d4 6e b1 00 0c 29 6d a9 a5 08 00 45 00 ..*.n...)m....E. 0010 00 58 01 d8 00 00 80 11 f9 fe a5 e3 f9 73 a5 e3 .X...........s.. 0020 f9 83 01 f4 01 f4 00 44 22 44 62 dd ae 39 80 1f .......D"Db..9.. 0030 6d fe 9a e8 96 3f 3f 9b e3 75 08 10 20 01 77 b9 m....??..u.. .w. 0040 d1 99 00 00 00 3c de 9e 17 fe 09 6b e7 4c 21 e4 .....<.....k.L!. 0050 f6 fd 42 4b 9a 42 98 01 f7 3c 1f 9d 8d c3 0f 4f ..BK.B...<.....O 0060 d3 e2 c0 74 18 62 ...t.b Frame 15 (102 bytes on wire, 102 bytes captured) Arrival Time: Aug 29, 2009 11:53:59.791671000 [Time delta from previous captured frame: 0.000015000 seconds] [Time delta from previous displayed frame: 0.000015000 seconds] [Time since reference or first frame: 5.508349000 seconds] Frame Number: 15 Frame Length: 102 bytes Capture Length: 102 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x01d8 (472) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9fe [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.131 (165.227.249.131) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x2244 [correct] [Good Checksum: True] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 62DDAE39801F6DFE Responder cookie: 9AE8963F3F9BE375 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x77b9d199 Length: 60 Encrypted payload (32 bytes) 0000 00 1e 2a d4 6e b1 00 0c 29 6d a9 a5 08 00 45 00 ..*.n...)m....E. 0010 00 58 01 d8 00 00 80 11 f9 fe a5 e3 f9 73 a5 e3 .X...........s.. 0020 f9 83 01 f4 01 f4 00 44 22 44 62 dd ae 39 80 1f .......D"Db..9.. 0030 6d fe 9a e8 96 3f 3f 9b e3 75 08 10 20 01 77 b9 m....??..u.. .w. 0040 d1 99 00 00 00 3c de 9e 17 fe 09 6b e7 4c 21 e4 .....<.....k.L!. 0050 f6 fd 42 4b 9a 42 98 01 f7 3c 1f 9d 8d c3 0f 4f ..BK.B...<.....O 0060 d3 e2 c0 74 18 62 ...t.b Frame 16 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 29, 2009 11:54:10.752988000 [Time delta from previous captured frame: 10.961317000 seconds] [Time delta from previous displayed frame: 10.961317000 seconds] [Time since reference or first frame: 16.469666000 seconds] Frame Number: 16 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb94 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.131 (165.227.249.131) Encapsulating Security Payload ESP SPI: 0x02a5bbe3 ESP Sequence: 1 0000 00 1e 2a d4 6e b1 00 0c 29 6d a9 a5 08 00 45 00 ..*.n...)m....E. 0010 00 78 00 01 00 00 80 32 fb 94 a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 83 02 a5 bb e3 00 00 00 01 00 29 65 f3 f2 22 ...........)e.." 0030 1b b1 42 95 72 e9 e3 c1 08 cd 35 a9 15 c4 82 7a ..B.r.....5....z 0040 60 89 d1 8b 76 84 60 5d b6 f5 9a 46 b4 ec 02 46 `...v.`]...F...F 0050 03 c4 57 97 ff ef 37 d2 d9 2e c6 c8 3d fb 5f 10 ..W...7.....=._. 0060 00 5e e1 9a cf f7 ef 61 f8 b4 20 c3 a3 ed 34 98 .^.....a.. ...4. 0070 9c 2f 74 c2 15 79 ac 5e a2 85 6e 54 34 43 06 8f ./t..y.^..nT4C.. 0080 64 4b c6 9f 53 ba dK..S. Frame 17 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 29, 2009 11:54:10.753004000 [Time delta from previous captured frame: 0.000016000 seconds] [Time delta from previous displayed frame: 0.000016000 seconds] [Time since reference or first frame: 16.469682000 seconds] Frame Number: 17 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.131 (165.227.249.131) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb94 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.131 (165.227.249.131) Encapsulating Security Payload ESP SPI: 0x02a5bbe3 ESP Sequence: 1 0000 00 1e 2a d4 6e b1 00 0c 29 6d a9 a5 08 00 45 00 ..*.n...)m....E. 0010 00 78 00 01 00 00 80 32 fb 94 a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 83 02 a5 bb e3 00 00 00 01 00 29 65 f3 f2 22 ...........)e.." 0030 1b b1 42 95 72 e9 e3 c1 08 cd 35 a9 15 c4 82 7a ..B.r.....5....z 0040 60 89 d1 8b 76 84 60 5d b6 f5 9a 46 b4 ec 02 46 `...v.`]...F...F 0050 03 c4 57 97 ff ef 37 d2 d9 2e c6 c8 3d fb 5f 10 ..W...7.....=._. 0060 00 5e e1 9a cf f7 ef 61 f8 b4 20 c3 a3 ed 34 98 .^.....a.. ...4. 0070 9c 2f 74 c2 15 79 ac 5e a2 85 6e 54 34 43 06 8f ./t..y.^..nT4C.. 0080 64 4b c6 9f 53 ba dK..S. Frame 18 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 29, 2009 11:54:10.754418000 [Time delta from previous captured frame: 0.001414000 seconds] [Time delta from previous displayed frame: 0.001414000 seconds] [Time since reference or first frame: 16.471096000 seconds] Frame Number: 18 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x4ca1 (19617) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xeef4 [correct] [Good: True] [Bad : False] Source: 165.227.249.131 (165.227.249.131) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload ESP SPI: 0xb6eca5d1 ESP Sequence: 1 0000 00 0c 29 6d a9 a5 00 1e 2a d4 6e b1 08 00 45 00 ..)m....*.n...E. 0010 00 78 4c a1 00 00 40 32 ee f4 a5 e3 f9 83 a5 e3 .xL...@2........ 0020 f9 73 b6 ec a5 d1 00 00 00 01 41 f3 5f 4a fe 29 .s........A._J.) 0030 cb 38 59 2d 1d d7 ac 20 b0 e0 07 49 cc bf 73 66 .8Y-... ...I..sf 0040 f3 2b b6 9f 57 d1 d3 c6 9a 85 d0 3e c7 13 7c 90 .+..W......>..|. 0050 0c cb e5 ad 02 29 c6 ab 12 4f 4e 7b 65 9a 2c ab .....)...ON{e.,. 0060 c4 1d 2e 98 93 2f 7b 6a 5b 86 c6 2e 6b 14 e7 69 ...../{j[...k..i 0070 c3 e4 51 52 9f 65 22 72 de 05 42 58 03 a9 84 a3 ..QR.e"r..BX.... 0080 af 38 9c 34 20 85 .8.4 .