Frame 1 (170 bytes on wire, 170 bytes captured) Arrival Time: Oct 22, 2004 14:58:09.220480000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xb9c51b64 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x011d (285) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa6e (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0x1e4b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9283FB97AA5BB5B4 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 0000 00 0f 3d 10 fc 2c 00 0c 29 00 82 53 08 00 45 00 ..=..,..)..S..E. 0010 00 98 01 1d 00 00 80 11 fa 6e a5 e3 f9 73 a5 e3 .........n...s.. 0020 f9 8e 01 f4 01 f4 00 84 1e 4b 92 83 fb 97 aa 5b .........K.....[ 0030 b5 b4 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 ..D..-.......F.y 0090 dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 ..........>.in.c 00a0 81 b5 ec 42 7b 1f b9 c5 1b 64 ...B{....d Frame 2 (270 bytes on wire, 270 bytes captured) Arrival Time: Oct 22, 2004 14:58:09.226186000 Time delta from previous packet: 0.005706000 seconds Time since reference or first frame: 0.005706000 seconds Frame Number: 2 Packet Length: 270 bytes Capture Length: 270 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x67da4f79 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x6f10 (28432) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x0d17 (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0x68bd (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9283FB97AA5BB5B4 Responder cookie: 0xD8BDC879F6835BF7 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 29 00 82 53 00 0f 3d 10 fc 2c 08 00 45 00 ..)..S..=..,..E. 0010 00 fc 6f 10 00 00 ff 11 0d 17 a5 e3 f9 8e a5 e3 ..o............. 0020 f9 73 01 f4 01 f4 00 e8 68 bd 92 83 fb 97 aa 5b .s......h......[ 0030 b5 b4 d8 bd c8 79 f6 83 5b f7 01 10 02 00 00 00 .....y..[....... 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 0090 01 00 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e ......'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 67 da 4f 79 .o,....R.Vg.Oy Frame 3 (270 bytes on wire, 270 bytes captured) Arrival Time: Oct 22, 2004 14:58:09.723941000 Time delta from previous packet: 0.497755000 seconds Time since reference or first frame: 0.503461000 seconds Frame Number: 3 Packet Length: 270 bytes Capture Length: 270 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x2c30c296 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x2210 (8720) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x5a17 (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0x68bd (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9283FB97AA5BB5B4 Responder cookie: 0xD8BDC879F6835BF7 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 29 00 82 53 00 0f 3d 10 fc 2c 08 00 45 00 ..)..S..=..,..E. 0010 00 fc 22 10 00 00 ff 11 5a 17 a5 e3 f9 8e a5 e3 ..".....Z....... 0020 f9 73 01 f4 01 f4 00 e8 68 bd 92 83 fb 97 aa 5b .s......h......[ 0030 b5 b4 d8 bd c8 79 f6 83 5b f7 01 10 02 00 00 00 .....y..[....... 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 0090 01 00 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e ......'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 2c 30 c2 96 .o,....R.V,0.. Frame 4 (270 bytes on wire, 270 bytes captured) Arrival Time: Oct 22, 2004 14:58:10.723588000 Time delta from previous packet: 0.999647000 seconds Time since reference or first frame: 1.503108000 seconds Frame Number: 4 Packet Length: 270 bytes Capture Length: 270 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x5509f2c6 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0xd811 (55313) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0xa415 (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0x68bd (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9283FB97AA5BB5B4 Responder cookie: 0xD8BDC879F6835BF7 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 29 00 82 53 00 0f 3d 10 fc 2c 08 00 45 00 ..)..S..=..,..E. 0010 00 fc d8 11 00 00 ff 11 a4 15 a5 e3 f9 8e a5 e3 ................ 0020 f9 73 01 f4 01 f4 00 e8 68 bd 92 83 fb 97 aa 5b .s......h......[ 0030 b5 b4 d8 bd c8 79 f6 83 5b f7 01 10 02 00 00 00 .....y..[....... 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 0090 01 00 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e ......'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 55 09 f2 c6 .o,....R.VU... Frame 5 (350 bytes on wire, 350 bytes captured) Arrival Time: Oct 22, 2004 14:58:11.230981000 Time delta from previous packet: 0.507393000 seconds Time since reference or first frame: 2.010501000 seconds Frame Number: 5 Packet Length: 350 bytes Capture Length: 350 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xe8813620 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x0120 (288) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9b7 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0x6ccf (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9283FB97AA5BB5B4 Responder cookie: 0xD8BDC879F6835BF7 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 304 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 24 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Vendor ID (13) Length: 24 Payload Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 0f 3d 10 fc 2c 00 0c 29 00 82 53 08 00 45 00 ..=..,..)..S..E. 0010 01 4c 01 20 00 00 80 11 f9 b7 a5 e3 f9 73 a5 e3 .L. .........s.. 0020 f9 8e 01 f4 01 f4 01 38 6c cf 92 83 fb 97 aa 5b .......8l......[ 0030 b5 b4 d8 bd c8 79 f6 83 5b f7 04 10 02 00 00 00 .....y..[....... 0040 00 00 00 00 01 30 0a 00 00 84 c6 29 3a 15 d2 9a .....0.....):... 0050 60 d6 e3 f7 f1 e8 03 69 12 20 6a 39 88 47 73 7b `......i. j9.Gs{ 0060 2f 65 5a b9 31 cf 96 4b 19 2d df 85 bc 7f af 62 /eZ.1..K.-.....b 0070 a0 90 56 e9 55 94 ce 6c 24 0d c4 b6 06 37 dc c6 ..V.U..l$....7.. 0080 20 f3 5c 5a bc 26 7d 31 a8 b7 41 3a 63 4c 48 d7 .\Z.&}1..A:cLH. 0090 09 fc c2 1f 37 a2 c1 11 d7 66 82 bb 05 5b 61 2a ....7....f...[a* 00a0 08 00 4f 92 df fa 37 70 66 5f 3a cf a7 bb f2 4c ..O...7pf_:....L 00b0 d7 1e 62 72 5e de 9d 85 53 25 6b 7c 85 26 0b 66 ..br^...S%k|.&.f 00c0 58 ca 32 7b 7d 33 7e 31 d8 f3 82 00 00 18 0b 89 X.2{}3~1........ 00d0 d2 51 0c 7a 95 dd 76 76 8e 0a bb 37 f7 a2 3f 5b .Q.z..vv...7..?[ 00e0 d7 4f 82 00 00 18 b0 19 29 71 2d 2b 3e 65 47 c1 .O......)q-+>eG. 00f0 f9 b7 31 d7 08 42 0c ce a4 5d 0d 00 00 18 10 24 ..1..B...].....$ 0100 b2 a2 9e 2d 2d e1 6d a1 6e 91 98 7e c0 b1 ed 6a ...--.m.n..~...j 0110 7c 9d 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 |....0G......... 0120 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0130 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0140 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0150 00 0c 09 00 26 89 df d6 b7 12 e8 81 36 20 ....&.......6 Frame 6 (350 bytes on wire, 350 bytes captured) Arrival Time: Oct 22, 2004 14:58:11.231632000 Time delta from previous packet: 0.000651000 seconds Time since reference or first frame: 2.011152000 seconds Frame Number: 6 Packet Length: 350 bytes Capture Length: 350 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xf78dadbd (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x0121 (289) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9b6 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0x6ccf (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9283FB97AA5BB5B4 Responder cookie: 0xD8BDC879F6835BF7 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 304 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 24 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Vendor ID (13) Length: 24 Payload Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 0f 3d 10 fc 2c 00 0c 29 00 82 53 08 00 45 00 ..=..,..)..S..E. 0010 01 4c 01 21 00 00 80 11 f9 b6 a5 e3 f9 73 a5 e3 .L.!.........s.. 0020 f9 8e 01 f4 01 f4 01 38 6c cf 92 83 fb 97 aa 5b .......8l......[ 0030 b5 b4 d8 bd c8 79 f6 83 5b f7 04 10 02 00 00 00 .....y..[....... 0040 00 00 00 00 01 30 0a 00 00 84 c6 29 3a 15 d2 9a .....0.....):... 0050 60 d6 e3 f7 f1 e8 03 69 12 20 6a 39 88 47 73 7b `......i. j9.Gs{ 0060 2f 65 5a b9 31 cf 96 4b 19 2d df 85 bc 7f af 62 /eZ.1..K.-.....b 0070 a0 90 56 e9 55 94 ce 6c 24 0d c4 b6 06 37 dc c6 ..V.U..l$....7.. 0080 20 f3 5c 5a bc 26 7d 31 a8 b7 41 3a 63 4c 48 d7 .\Z.&}1..A:cLH. 0090 09 fc c2 1f 37 a2 c1 11 d7 66 82 bb 05 5b 61 2a ....7....f...[a* 00a0 08 00 4f 92 df fa 37 70 66 5f 3a cf a7 bb f2 4c ..O...7pf_:....L 00b0 d7 1e 62 72 5e de 9d 85 53 25 6b 7c 85 26 0b 66 ..br^...S%k|.&.f 00c0 58 ca 32 7b 7d 33 7e 31 d8 f3 82 00 00 18 0b 89 X.2{}3~1........ 00d0 d2 51 0c 7a 95 dd 76 76 8e 0a bb 37 f7 a2 3f 5b .Q.z..vv...7..?[ 00e0 d7 4f 82 00 00 18 b0 19 29 71 2d 2b 3e 65 47 c1 .O......)q-+>eG. 00f0 f9 b7 31 d7 08 42 0c ce a4 5d 0d 00 00 18 10 24 ..1..B...].....$ 0100 b2 a2 9e 2d 2d e1 6d a1 6e 91 98 7e c0 b1 ed 6a ...--.m.n..~...j 0110 7c 9d 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 |....0G......... 0120 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0130 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0140 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0150 00 0c 09 00 26 89 df d6 b7 12 f7 8d ad bd ....&......... Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Oct 22, 2004 14:58:11.535631000 Time delta from previous packet: 0.303999000 seconds Time since reference or first frame: 2.315151000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x49f26231 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0xb511 (46353) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0xc6c9 (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x3f51 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9283FB97AA5BB5B4 Responder cookie: 0xD8BDC879F6835BF7 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 300 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0c 29 00 82 53 00 0f 3d 10 fc 2c 08 00 45 00 ..)..S..=..,..E. 0010 01 48 b5 11 00 00 ff 11 c6 c9 a5 e3 f9 8e a5 e3 .H.............. 0020 f9 73 01 f4 01 f4 01 34 3f 51 92 83 fb 97 aa 5b .s.....4?Q.....[ 0030 b5 b4 d8 bd c8 79 f6 83 5b f7 04 10 02 00 00 00 .....y..[....... 0040 00 00 00 00 01 2c 0a 00 00 84 da 63 7f 52 51 d7 .....,.....c.RQ. 0050 c4 53 f2 8f 75 92 ce ad ba 2e 9d 2f cb 12 41 09 .S..u....../..A. 0060 5d 8d be 1f f6 36 4c c1 42 ed 52 5b 48 d2 9d 18 ]....6L.B.R[H... 0070 34 91 b5 9f 76 cc 99 17 55 db 62 6c 08 e7 1c d7 4...v...U.bl.... 0080 1a a9 1f 39 44 52 6c 92 a7 8b 71 a4 a0 65 23 75 ...9DRl...q..e#u 0090 9e 82 94 2a e9 54 a3 19 f7 51 6f 04 0f ac 8b fa ...*.T...Qo..... 00a0 7b 85 43 63 dd 19 a4 06 37 44 15 9b d3 24 45 d3 {.Cc....7D...$E. 00b0 38 33 36 09 e5 20 cc 19 51 77 a5 90 eb 3d 32 20 836.. ..Qw...=2 00c0 4f 91 41 ac 37 41 b6 70 38 9e 82 00 00 14 a1 4d O.A.7A.p8......M 00d0 36 1c 59 21 12 2a 50 9e 9b b5 dc 9a f6 a0 82 00 6.Y!.*P......... 00e0 00 18 10 24 b2 a2 9e 2d 2d e1 6d a1 6e 91 98 7e ...$...--.m.n..~ 00f0 c0 b1 ed 6a 7c 9d 82 00 00 18 03 d3 1d b0 e3 15 ...j|........... 0100 ee 94 07 13 5f 54 91 ac 0a 0c 67 cf c7 3d 82 00 ...._T....g..=.. 0110 00 18 cb 6f fc 5e 21 06 d5 d6 f7 78 20 b9 c8 a6 ...o.^!....x ... 0120 fc 38 0b b5 94 77 82 00 00 18 b0 19 29 71 2d 2b .8...w......)q-+ 0130 3e 65 47 c1 f9 b7 31 d7 08 42 0c ce a4 5d 00 00 >eG...1..B...].. 0140 00 18 03 d3 1d b0 e3 15 ee 94 07 13 5f 54 91 ac ............_T.. 0150 0a 0c 67 cf c7 3d 49 f2 62 31 ..g..=I.b1 Frame 8 (346 bytes on wire, 346 bytes captured) Arrival Time: Oct 22, 2004 14:58:12.033350000 Time delta from previous packet: 0.497719000 seconds Time since reference or first frame: 2.812870000 seconds Frame Number: 8 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0xf92d6260 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0xf912 (63762) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x82c8 (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x3f51 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9283FB97AA5BB5B4 Responder cookie: 0xD8BDC879F6835BF7 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 300 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0c 29 00 82 53 00 0f 3d 10 fc 2c 08 00 45 00 ..)..S..=..,..E. 0010 01 48 f9 12 00 00 ff 11 82 c8 a5 e3 f9 8e a5 e3 .H.............. 0020 f9 73 01 f4 01 f4 01 34 3f 51 92 83 fb 97 aa 5b .s.....4?Q.....[ 0030 b5 b4 d8 bd c8 79 f6 83 5b f7 04 10 02 00 00 00 .....y..[....... 0040 00 00 00 00 01 2c 0a 00 00 84 da 63 7f 52 51 d7 .....,.....c.RQ. 0050 c4 53 f2 8f 75 92 ce ad ba 2e 9d 2f cb 12 41 09 .S..u....../..A. 0060 5d 8d be 1f f6 36 4c c1 42 ed 52 5b 48 d2 9d 18 ]....6L.B.R[H... 0070 34 91 b5 9f 76 cc 99 17 55 db 62 6c 08 e7 1c d7 4...v...U.bl.... 0080 1a a9 1f 39 44 52 6c 92 a7 8b 71 a4 a0 65 23 75 ...9DRl...q..e#u 0090 9e 82 94 2a e9 54 a3 19 f7 51 6f 04 0f ac 8b fa ...*.T...Qo..... 00a0 7b 85 43 63 dd 19 a4 06 37 44 15 9b d3 24 45 d3 {.Cc....7D...$E. 00b0 38 33 36 09 e5 20 cc 19 51 77 a5 90 eb 3d 32 20 836.. ..Qw...=2 00c0 4f 91 41 ac 37 41 b6 70 38 9e 82 00 00 14 a1 4d O.A.7A.p8......M 00d0 36 1c 59 21 12 2a 50 9e 9b b5 dc 9a f6 a0 82 00 6.Y!.*P......... 00e0 00 18 10 24 b2 a2 9e 2d 2d e1 6d a1 6e 91 98 7e ...$...--.m.n..~ 00f0 c0 b1 ed 6a 7c 9d 82 00 00 18 03 d3 1d b0 e3 15 ...j|........... 0100 ee 94 07 13 5f 54 91 ac 0a 0c 67 cf c7 3d 82 00 ...._T....g..=.. 0110 00 18 cb 6f fc 5e 21 06 d5 d6 f7 78 20 b9 c8 a6 ...o.^!....x ... 0120 fc 38 0b b5 94 77 82 00 00 18 b0 19 29 71 2d 2b .8...w......)q-+ 0130 3e 65 47 c1 f9 b7 31 d7 08 42 0c ce a4 5d 00 00 >eG...1..B...].. 0140 00 18 03 d3 1d b0 e3 15 ee 94 07 13 5f 54 91 ac ............_T.. 0150 0a 0c 67 cf c7 3d f9 2d 62 60 ..g..=.-b` Frame 9 (350 bytes on wire, 350 bytes captured) Arrival Time: Oct 22, 2004 14:58:12.571647000 Time delta from previous packet: 0.538297000 seconds Time since reference or first frame: 3.351167000 seconds Frame Number: 9 Packet Length: 350 bytes Capture Length: 350 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x979f71c0 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x0122 (290) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9b5 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0x6ccf (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9283FB97AA5BB5B4 Responder cookie: 0xD8BDC879F6835BF7 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 304 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 24 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: Vendor ID (13) Length: 24 Payload Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 0f 3d 10 fc 2c 00 0c 29 00 82 53 08 00 45 00 ..=..,..)..S..E. 0010 01 4c 01 22 00 00 80 11 f9 b5 a5 e3 f9 73 a5 e3 .L.".........s.. 0020 f9 8e 01 f4 01 f4 01 38 6c cf 92 83 fb 97 aa 5b .......8l......[ 0030 b5 b4 d8 bd c8 79 f6 83 5b f7 04 10 02 00 00 00 .....y..[....... 0040 00 00 00 00 01 30 0a 00 00 84 c6 29 3a 15 d2 9a .....0.....):... 0050 60 d6 e3 f7 f1 e8 03 69 12 20 6a 39 88 47 73 7b `......i. j9.Gs{ 0060 2f 65 5a b9 31 cf 96 4b 19 2d df 85 bc 7f af 62 /eZ.1..K.-.....b 0070 a0 90 56 e9 55 94 ce 6c 24 0d c4 b6 06 37 dc c6 ..V.U..l$....7.. 0080 20 f3 5c 5a bc 26 7d 31 a8 b7 41 3a 63 4c 48 d7 .\Z.&}1..A:cLH. 0090 09 fc c2 1f 37 a2 c1 11 d7 66 82 bb 05 5b 61 2a ....7....f...[a* 00a0 08 00 4f 92 df fa 37 70 66 5f 3a cf a7 bb f2 4c ..O...7pf_:....L 00b0 d7 1e 62 72 5e de 9d 85 53 25 6b 7c 85 26 0b 66 ..br^...S%k|.&.f 00c0 58 ca 32 7b 7d 33 7e 31 d8 f3 82 00 00 18 0b 89 X.2{}3~1........ 00d0 d2 51 0c 7a 95 dd 76 76 8e 0a bb 37 f7 a2 3f 5b .Q.z..vv...7..?[ 00e0 d7 4f 82 00 00 18 b0 19 29 71 2d 2b 3e 65 47 c1 .O......)q-+>eG. 00f0 f9 b7 31 d7 08 42 0c ce a4 5d 0d 00 00 18 10 24 ..1..B...].....$ 0100 b2 a2 9e 2d 2d e1 6d a1 6e 91 98 7e c0 b1 ed 6a ...--.m.n..~...j 0110 7c 9d 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 |....0G......... 0120 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0130 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0140 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0150 00 0c 09 00 26 89 df d6 b7 12 97 9f 71 c0 ....&.......q. Frame 10 (138 bytes on wire, 138 bytes captured) Arrival Time: Oct 22, 2004 14:58:12.572179000 Time delta from previous packet: 0.000532000 seconds Time since reference or first frame: 3.351699000 seconds Frame Number: 10 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x793a63e8 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0123 (291) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa88 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x2613 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9283FB97AA5BB5B4 Responder cookie: 0xD8BDC879F6835BF7 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 00 82 53 08 00 45 00 ..=..,..)..S..E. 0010 00 78 01 23 00 00 80 11 fa 88 a5 e3 f9 73 a5 e3 .x.#.........s.. 0020 f9 8e 01 f4 01 f4 00 64 26 13 92 83 fb 97 aa 5b .......d&......[ 0030 b5 b4 d8 bd c8 79 f6 83 5b f7 05 10 02 01 00 00 .....y..[....... 0040 00 00 00 00 00 5c 38 51 f4 30 d5 99 55 02 9a 27 .....\8Q.0..U..' 0050 23 ba aa b7 e4 39 0a 4f 23 05 10 0a ab b0 1c 6f #....9.O#......o 0060 d0 c8 a9 f1 29 70 8a bd 0e 5d 90 46 02 63 4a 44 ....)p...].F.cJD 0070 b2 92 ed 5d 1b 29 7f fc 5f cf 21 e8 57 e7 0d 0a ...].).._.!.W... 0080 96 6e 28 e3 08 62 79 3a 63 e8 .n(..by:c. Frame 11 (122 bytes on wire, 122 bytes captured) Arrival Time: Oct 22, 2004 14:58:12.582468000 Time delta from previous packet: 0.010289000 seconds Time since reference or first frame: 3.361988000 seconds Frame Number: 11 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x8f51ffd9 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0xda12 (55826) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0xa2a8 (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x1b6f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9283FB97AA5BB5B4 Responder cookie: 0xD8BDC879F6835BF7 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 00 82 53 00 0f 3d 10 fc 2c 08 00 45 00 ..)..S..=..,..E. 0010 00 68 da 12 00 00 ff 11 a2 a8 a5 e3 f9 8e a5 e3 .h.............. 0020 f9 73 01 f4 01 f4 00 54 1b 6f 92 83 fb 97 aa 5b .s.....T.o.....[ 0030 b5 b4 d8 bd c8 79 f6 83 5b f7 05 10 02 01 00 00 .....y..[....... 0040 00 00 00 00 00 4c 41 4e 04 3c 60 e3 a0 2e 7e ff .....LAN.<`...~. 0050 17 40 b1 e9 a5 3b cc de 81 4c ae 4b 75 c4 5f 90 .@...;...L.Ku._. 0060 36 53 c1 8b cb 48 0a 3c d1 b4 3d 5c a3 49 db bf 6S...H.<..=\.I.. 0070 95 56 3f ee 81 59 8f 51 ff d9 .V?..Y.Q.. Frame 12 (138 bytes on wire, 138 bytes captured) Arrival Time: Oct 22, 2004 14:58:14.805380000 Time delta from previous packet: 2.222912000 seconds Time since reference or first frame: 5.584900000 seconds Frame Number: 12 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xf37fc550 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0124 (292) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa87 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x2613 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9283FB97AA5BB5B4 Responder cookie: 0xD8BDC879F6835BF7 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 00 82 53 08 00 45 00 ..=..,..)..S..E. 0010 00 78 01 24 00 00 80 11 fa 87 a5 e3 f9 73 a5 e3 .x.$.........s.. 0020 f9 8e 01 f4 01 f4 00 64 26 13 92 83 fb 97 aa 5b .......d&......[ 0030 b5 b4 d8 bd c8 79 f6 83 5b f7 05 10 02 01 00 00 .....y..[....... 0040 00 00 00 00 00 5c 38 51 f4 30 d5 99 55 02 9a 27 .....\8Q.0..U..' 0050 23 ba aa b7 e4 39 0a 4f 23 05 10 0a ab b0 1c 6f #....9.O#......o 0060 d0 c8 a9 f1 29 70 8a bd 0e 5d 90 46 02 63 4a 44 ....)p...].F.cJD 0070 b2 92 ed 5d 1b 29 7f fc 5f cf 21 e8 57 e7 0d 0a ...].).._.!.W... 0080 96 6e 28 e3 08 62 f3 7f c5 50 .n(..b...P Frame 13 (346 bytes on wire, 346 bytes captured) Arrival Time: Oct 22, 2004 14:58:14.808737000 Time delta from previous packet: 0.003357000 seconds Time since reference or first frame: 5.588257000 seconds Frame Number: 13 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x2ae98f88 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0126 (294) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9b5 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xe8e0 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9283FB97AA5BB5B4 Responder cookie: 0xD8BDC879F6835BF7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDB7174BB Length: 300 Encrypted payload (272 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 00 82 53 08 00 45 00 ..=..,..)..S..E. 0010 01 48 01 26 00 00 80 11 f9 b5 a5 e3 f9 73 a5 e3 .H.&.........s.. 0020 f9 8e 01 f4 01 f4 01 34 e8 e0 92 83 fb 97 aa 5b .......4.......[ 0030 b5 b4 d8 bd c8 79 f6 83 5b f7 08 10 20 01 db 71 .....y..[... ..q 0040 74 bb 00 00 01 2c 81 08 3f 38 45 00 a3 5c 97 30 t....,..?8E..\.0 0050 d9 c4 0a 52 99 4e ee 14 28 19 9c 68 57 76 c3 23 ...R.N..(..hWv.# 0060 89 fd 51 8c d5 98 2f 34 96 6c b9 f0 ed 18 75 08 ..Q.../4.l....u. 0070 4b 05 5d 62 6f 41 ad 17 93 01 d2 c9 b7 a7 0f df K.]boA.......... 0080 60 37 ba e3 2b 2b c6 8f 43 be 75 af 41 86 6c c8 `7..++..C.u.A.l. 0090 e3 05 48 c5 f8 a6 31 00 07 ba 7c b4 f9 89 55 ff ..H...1...|...U. 00a0 44 14 41 6c 7f f5 0e 5a 94 0d 1f 5f 8c 3a 8d fd D.Al...Z..._.:.. 00b0 da 38 97 cc f9 07 02 ee 76 44 5e 7c 4f 71 27 46 .8......vD^|Oq'F 00c0 66 99 e8 b6 05 96 84 1f 8f 32 9a 3a 4a f0 8f fd f........2.:J... 00d0 6f 26 8b da ee 59 10 57 0d d8 5c 2f 3c fd aa e2 o&...Y.W..\/<... 00e0 66 47 73 67 d0 d7 65 4c ec ed e4 5a 2d a2 0a 8b fGsg..eL...Z-... 00f0 ff f3 cf fd ac 37 31 37 e4 af c8 f3 a6 0a f8 f1 .....717........ 0100 eb 48 fa f5 35 b2 f6 3c 93 bb 2d 9c 53 1c 62 e6 .H..5..<..-.S.b. 0110 46 b7 36 ca a8 dd bb 1d 34 44 25 3a 46 69 ed 07 F.6.....4D%:Fi.. 0120 03 b1 ed e9 51 1a 46 bc 7d 84 2f ac 91 db 2d 82 ....Q.F.}./...-. 0130 79 df 62 b7 bc 33 f7 35 3c a1 c1 9c 24 b9 fe d0 y.b..3.5<...$... 0140 8d fc 7e c4 54 ce 67 60 b5 a3 9e 65 75 3b 49 22 ..~.T.g`...eu;I" 0150 5b 08 96 9d 85 79 2a e9 8f 88 [....y*... Frame 14 (122 bytes on wire, 122 bytes captured) Arrival Time: Oct 22, 2004 14:58:14.809695000 Time delta from previous packet: 0.000958000 seconds Time since reference or first frame: 5.589215000 seconds Frame Number: 14 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x84b6c143 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x2811 (10257) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x54aa (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x1b6f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9283FB97AA5BB5B4 Responder cookie: 0xD8BDC879F6835BF7 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 00 82 53 00 0f 3d 10 fc 2c 08 00 45 00 ..)..S..=..,..E. 0010 00 68 28 11 00 00 ff 11 54 aa a5 e3 f9 8e a5 e3 .h(.....T....... 0020 f9 73 01 f4 01 f4 00 54 1b 6f 92 83 fb 97 aa 5b .s.....T.o.....[ 0030 b5 b4 d8 bd c8 79 f6 83 5b f7 05 10 02 01 00 00 .....y..[....... 0040 00 00 00 00 00 4c 41 4e 04 3c 60 e3 a0 2e 7e ff .....LAN.<`...~. 0050 17 40 b1 e9 a5 3b cc de 81 4c ae 4b 75 c4 5f 90 .@...;...L.Ku._. 0060 36 53 c1 8b cb 48 0a 3c d1 b4 3d 5c a3 49 db bf 6S...H.<..=\.I.. 0070 95 56 3f ee 81 59 84 b6 c1 43 .V?..Y...C Frame 15 (346 bytes on wire, 346 bytes captured) Arrival Time: Oct 22, 2004 14:58:14.965228000 Time delta from previous packet: 0.155533000 seconds Time since reference or first frame: 5.744748000 seconds Frame Number: 15 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x565097a7 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x4213 (16915) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x39c8 (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x0e94 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9283FB97AA5BB5B4 Responder cookie: 0xD8BDC879F6835BF7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDB7174BB Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 00 82 53 00 0f 3d 10 fc 2c 08 00 45 00 ..)..S..=..,..E. 0010 01 48 42 13 00 00 ff 11 39 c8 a5 e3 f9 8e a5 e3 .HB.....9....... 0020 f9 73 01 f4 01 f4 01 34 0e 94 92 83 fb 97 aa 5b .s.....4.......[ 0030 b5 b4 d8 bd c8 79 f6 83 5b f7 08 10 20 01 db 71 .....y..[... ..q 0040 74 bb 00 00 01 2c 89 4a 05 f6 52 8a 11 52 80 c3 t....,.J..R..R.. 0050 74 08 f0 87 b2 46 7d 5d a2 52 b5 49 e7 2f 27 67 t....F}].R.I./'g 0060 fa b0 a3 1f 49 b6 98 3e c2 de 58 91 53 fd 06 76 ....I..>..X.S..v 0070 34 aa e7 1a 82 07 bf ad a3 71 df 3b a1 d3 9b 31 4........q.;...1 0080 ae 14 5c ab ea a4 5a 13 ed 73 51 77 83 3a ed 6a ..\...Z..sQw.:.j 0090 db 96 0d cd a6 45 a0 36 99 e3 eb 56 2d 52 b0 a3 .....E.6...V-R.. 00a0 54 e6 5d 7b 06 53 fd ae c1 0f 2d d1 b8 08 83 a2 T.]{.S....-..... 00b0 e6 5a 07 21 31 5e a9 98 67 f8 4c 6e db 05 0e 7c .Z.!1^..g.Ln...| 00c0 0e 15 c0 a4 33 26 46 b6 7d ba b3 0a 1a bb 8d 14 ....3&F.}....... 00d0 d8 7b 9b 2b a0 d6 cb 69 d7 6c 02 f3 d5 de 0a 5f .{.+...i.l....._ 00e0 9f 0c a1 85 b0 dd 30 e5 ac f9 16 fd 80 22 62 0a ......0......"b. 00f0 d9 0e 81 90 78 1f 7d 1d ac af 37 04 0b a1 50 70 ....x.}...7...Pp 0100 eb 22 36 1d 5a 65 31 1d 7c 46 8d 59 5d e8 22 88 ."6.Ze1.|F.Y].". 0110 ff 22 72 67 1a 59 4f f5 3c 3a cf 68 67 49 f9 c2 ."rg.YO.<:.hgI.. 0120 3a 85 22 93 c0 a6 fa 66 92 cd 48 ec 9f 5a bf 7a :."....f..H..Z.z 0130 f2 99 58 11 b5 9e 7d a7 29 05 f1 d8 ca aa f8 0d ..X...}.)....... 0140 89 93 91 00 1a 71 78 95 e8 ed bb fb 4f e7 03 fb .....qx.....O... 0150 a5 68 77 54 f1 eb 56 50 97 a7 .hwT..VP.. Frame 16 (346 bytes on wire, 346 bytes captured) Arrival Time: Oct 22, 2004 14:58:15.462391000 Time delta from previous packet: 0.497163000 seconds Time since reference or first frame: 6.241911000 seconds Frame Number: 16 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0xaf2a48d6 (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x6110 (24848) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x1acb (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x0e94 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9283FB97AA5BB5B4 Responder cookie: 0xD8BDC879F6835BF7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDB7174BB Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 00 82 53 00 0f 3d 10 fc 2c 08 00 45 00 ..)..S..=..,..E. 0010 01 48 61 10 00 00 ff 11 1a cb a5 e3 f9 8e a5 e3 .Ha............. 0020 f9 73 01 f4 01 f4 01 34 0e 94 92 83 fb 97 aa 5b .s.....4.......[ 0030 b5 b4 d8 bd c8 79 f6 83 5b f7 08 10 20 01 db 71 .....y..[... ..q 0040 74 bb 00 00 01 2c 89 4a 05 f6 52 8a 11 52 80 c3 t....,.J..R..R.. 0050 74 08 f0 87 b2 46 7d 5d a2 52 b5 49 e7 2f 27 67 t....F}].R.I./'g 0060 fa b0 a3 1f 49 b6 98 3e c2 de 58 91 53 fd 06 76 ....I..>..X.S..v 0070 34 aa e7 1a 82 07 bf ad a3 71 df 3b a1 d3 9b 31 4........q.;...1 0080 ae 14 5c ab ea a4 5a 13 ed 73 51 77 83 3a ed 6a ..\...Z..sQw.:.j 0090 db 96 0d cd a6 45 a0 36 99 e3 eb 56 2d 52 b0 a3 .....E.6...V-R.. 00a0 54 e6 5d 7b 06 53 fd ae c1 0f 2d d1 b8 08 83 a2 T.]{.S....-..... 00b0 e6 5a 07 21 31 5e a9 98 67 f8 4c 6e db 05 0e 7c .Z.!1^..g.Ln...| 00c0 0e 15 c0 a4 33 26 46 b6 7d ba b3 0a 1a bb 8d 14 ....3&F.}....... 00d0 d8 7b 9b 2b a0 d6 cb 69 d7 6c 02 f3 d5 de 0a 5f .{.+...i.l....._ 00e0 9f 0c a1 85 b0 dd 30 e5 ac f9 16 fd 80 22 62 0a ......0......"b. 00f0 d9 0e 81 90 78 1f 7d 1d ac af 37 04 0b a1 50 70 ....x.}...7...Pp 0100 eb 22 36 1d 5a 65 31 1d 7c 46 8d 59 5d e8 22 88 ."6.Ze1.|F.Y].". 0110 ff 22 72 67 1a 59 4f f5 3c 3a cf 68 67 49 f9 c2 ."rg.YO.<:.hgI.. 0120 3a 85 22 93 c0 a6 fa 66 92 cd 48 ec 9f 5a bf 7a :."....f..H..Z.z 0130 f2 99 58 11 b5 9e 7d a7 29 05 f1 d8 ca aa f8 0d ..X...}.)....... 0140 89 93 91 00 1a 71 78 95 e8 ed bb fb 4f e7 03 fb .....qx.....O... 0150 a5 68 77 54 f1 eb af 2a 48 d6 .hwT...*H. Frame 17 (346 bytes on wire, 346 bytes captured) Arrival Time: Oct 22, 2004 14:58:16.462077000 Time delta from previous packet: 0.999686000 seconds Time since reference or first frame: 7.241597000 seconds Frame Number: 17 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0f:3d:10:fc:2c, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Type: IP (0x0800) Frame check sequence: 0x4d3cb5ae (correct) Internet Protocol, Src Addr: 165.227.249.142 (165.227.249.142), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0xb612 (46610) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0xc5c8 (correct) Source: 165.227.249.142 (165.227.249.142) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x0e94 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9283FB97AA5BB5B4 Responder cookie: 0xD8BDC879F6835BF7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDB7174BB Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 00 82 53 00 0f 3d 10 fc 2c 08 00 45 00 ..)..S..=..,..E. 0010 01 48 b6 12 00 00 ff 11 c5 c8 a5 e3 f9 8e a5 e3 .H.............. 0020 f9 73 01 f4 01 f4 01 34 0e 94 92 83 fb 97 aa 5b .s.....4.......[ 0030 b5 b4 d8 bd c8 79 f6 83 5b f7 08 10 20 01 db 71 .....y..[... ..q 0040 74 bb 00 00 01 2c 89 4a 05 f6 52 8a 11 52 80 c3 t....,.J..R..R.. 0050 74 08 f0 87 b2 46 7d 5d a2 52 b5 49 e7 2f 27 67 t....F}].R.I./'g 0060 fa b0 a3 1f 49 b6 98 3e c2 de 58 91 53 fd 06 76 ....I..>..X.S..v 0070 34 aa e7 1a 82 07 bf ad a3 71 df 3b a1 d3 9b 31 4........q.;...1 0080 ae 14 5c ab ea a4 5a 13 ed 73 51 77 83 3a ed 6a ..\...Z..sQw.:.j 0090 db 96 0d cd a6 45 a0 36 99 e3 eb 56 2d 52 b0 a3 .....E.6...V-R.. 00a0 54 e6 5d 7b 06 53 fd ae c1 0f 2d d1 b8 08 83 a2 T.]{.S....-..... 00b0 e6 5a 07 21 31 5e a9 98 67 f8 4c 6e db 05 0e 7c .Z.!1^..g.Ln...| 00c0 0e 15 c0 a4 33 26 46 b6 7d ba b3 0a 1a bb 8d 14 ....3&F.}....... 00d0 d8 7b 9b 2b a0 d6 cb 69 d7 6c 02 f3 d5 de 0a 5f .{.+...i.l....._ 00e0 9f 0c a1 85 b0 dd 30 e5 ac f9 16 fd 80 22 62 0a ......0......"b. 00f0 d9 0e 81 90 78 1f 7d 1d ac af 37 04 0b a1 50 70 ....x.}...7...Pp 0100 eb 22 36 1d 5a 65 31 1d 7c 46 8d 59 5d e8 22 88 ."6.Ze1.|F.Y].". 0110 ff 22 72 67 1a 59 4f f5 3c 3a cf 68 67 49 f9 c2 ."rg.YO.<:.hgI.. 0120 3a 85 22 93 c0 a6 fa 66 92 cd 48 ec 9f 5a bf 7a :."....f..H..Z.z 0130 f2 99 58 11 b5 9e 7d a7 29 05 f1 d8 ca aa f8 0d ..X...}.)....... 0140 89 93 91 00 1a 71 78 95 e8 ed bb fb 4f e7 03 fb .....qx.....O... 0150 a5 68 77 54 f1 eb 4d 3c b5 ae .hwT..M<.. Frame 18 (106 bytes on wire, 106 bytes captured) Arrival Time: Oct 22, 2004 14:58:17.695378000 Time delta from previous packet: 1.233301000 seconds Time since reference or first frame: 8.474898000 seconds Frame Number: 18 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xf9f24af2 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0128 (296) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfaa3 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x6bb9 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9283FB97AA5BB5B4 Responder cookie: 0xD8BDC879F6835BF7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDB7174BB Length: 60 Encrypted payload (32 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 00 82 53 08 00 45 00 ..=..,..)..S..E. 0010 00 58 01 28 00 00 80 11 fa a3 a5 e3 f9 73 a5 e3 .X.(.........s.. 0020 f9 8e 01 f4 01 f4 00 44 6b b9 92 83 fb 97 aa 5b .......Dk......[ 0030 b5 b4 d8 bd c8 79 f6 83 5b f7 08 10 20 01 db 71 .....y..[... ..q 0040 74 bb 00 00 00 3c b0 f9 15 db ad 44 41 0f 1f 2e t....<.....DA... 0050 8a 91 78 d2 76 cf 02 fd 0e 5d 12 bb 93 a8 bc 90 ..x.v....]...... 0060 b3 6d 25 99 5a c2 f9 f2 4a f2 .m%.Z...J. Frame 19 (106 bytes on wire, 106 bytes captured) Arrival Time: Oct 22, 2004 14:58:17.695877000 Time delta from previous packet: 0.000499000 seconds Time since reference or first frame: 8.475397000 seconds Frame Number: 19 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x70e31aa6 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x012a (298) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfaa1 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x6bb9 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9283FB97AA5BB5B4 Responder cookie: 0xD8BDC879F6835BF7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDB7174BB Length: 60 Encrypted payload (32 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 00 82 53 08 00 45 00 ..=..,..)..S..E. 0010 00 58 01 2a 00 00 80 11 fa a1 a5 e3 f9 73 a5 e3 .X.*.........s.. 0020 f9 8e 01 f4 01 f4 00 44 6b b9 92 83 fb 97 aa 5b .......Dk......[ 0030 b5 b4 d8 bd c8 79 f6 83 5b f7 08 10 20 01 db 71 .....y..[... ..q 0040 74 bb 00 00 00 3c b0 f9 15 db ad 44 41 0f 1f 2e t....<.....DA... 0050 8a 91 78 d2 76 cf 02 fd 0e 5d 12 bb 93 a8 bc 90 ..x.v....]...... 0060 b3 6d 25 99 5a c2 70 e3 1a a6 .m%.Z.p... Frame 20 (106 bytes on wire, 106 bytes captured) Arrival Time: Oct 22, 2004 14:58:18.655366000 Time delta from previous packet: 0.959489000 seconds Time since reference or first frame: 9.434886000 seconds Frame Number: 20 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x94688a61 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x012b (299) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfaa0 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.142 (165.227.249.142) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x6bb9 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x9283FB97AA5BB5B4 Responder cookie: 0xD8BDC879F6835BF7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xDB7174BB Length: 60 Encrypted payload (32 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 00 82 53 08 00 45 00 ..=..,..)..S..E. 0010 00 58 01 2b 00 00 80 11 fa a0 a5 e3 f9 73 a5 e3 .X.+.........s.. 0020 f9 8e 01 f4 01 f4 00 44 6b b9 92 83 fb 97 aa 5b .......Dk......[ 0030 b5 b4 d8 bd c8 79 f6 83 5b f7 08 10 20 01 db 71 .....y..[... ..q 0040 74 bb 00 00 00 3c b0 f9 15 db ad 44 41 0f 1f 2e t....<.....DA... 0050 8a 91 78 d2 76 cf 02 fd 0e 5d 12 bb 93 a8 bc 90 ..x.v....]...... 0060 b3 6d 25 99 5a c2 94 68 8a 61 .m%.Z..h.a Frame 21 (138 bytes on wire, 138 bytes captured) Arrival Time: Oct 22, 2004 14:58:19.805400000 Time delta from previous packet: 1.150034000 seconds Time since reference or first frame: 10.584920000 seconds Frame Number: 21 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xc83286fd (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb89 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.142 (165.227.249.142) Encapsulating Security Payload SPI: 0x831a8e8d Sequence: 1 Data (92 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 00 82 53 08 00 45 00 ..=..,..)..S..E. 0010 00 78 00 01 00 00 80 32 fb 89 a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 8e 83 1a 8e 8d 00 00 00 01 cb fd b5 7d 73 e5 .............}s. 0030 79 3b 78 d7 38 d6 c5 d6 bf 47 7d dc 5b 03 cb bc y;x.8....G}.[... 0040 dc 23 39 1f 0b bd 28 ae 27 fc ba 39 25 79 dc 88 .#9...(.'..9%y.. 0050 00 c7 1d 88 99 83 70 1a b9 8d 4c 68 c5 8f 98 1d ......p...Lh.... 0060 86 98 fe 16 35 ce 5f 95 b3 f9 a2 e9 08 f1 dc 89 ....5._......... 0070 09 fd c3 36 ce 95 f2 4c 9d 96 b3 9a 28 d8 34 dc ...6...L....(.4. 0080 c5 39 4e bb 99 8a c8 32 86 fd .9N....2.. Frame 22 (138 bytes on wire, 138 bytes captured) Arrival Time: Oct 22, 2004 14:58:24.781320000 Time delta from previous packet: 4.975920000 seconds Time since reference or first frame: 15.560840000 seconds Frame Number: 22 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x4021e221 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb88 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.142 (165.227.249.142) Encapsulating Security Payload SPI: 0x831a8e8d Sequence: 2 Data (92 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 00 82 53 08 00 45 00 ..=..,..)..S..E. 0010 00 78 00 02 00 00 80 32 fb 88 a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 8e 83 1a 8e 8d 00 00 00 02 a2 e9 08 f1 dc 89 ................ 0030 09 fd c3 36 ce 95 f2 4c 9d 96 57 8a 32 9d 43 ad ...6...L..W.2.C. 0040 0d 47 58 39 5f 60 61 d8 21 4d 23 eb e0 40 d5 33 .GX9_`a.!M#..@.3 0050 d2 b9 27 53 2a 22 63 98 a4 b3 69 e6 63 0b 74 6c ..'S*"c...i.c.tl 0060 63 d7 ec 21 1e 00 f4 aa fb be de f8 71 33 d7 8a c..!........q3.. 0070 47 12 59 ac 49 ca 91 ea 0b 85 e1 49 fd 6e 59 94 G.Y.I......I.nY. 0080 aa a1 78 50 24 6f 40 21 e2 21 ..xP$o@!.! Frame 23 (138 bytes on wire, 138 bytes captured) Arrival Time: Oct 22, 2004 14:58:29.776921000 Time delta from previous packet: 4.995601000 seconds Time since reference or first frame: 20.556441000 seconds Frame Number: 23 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x445e5042 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0003 (3) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb87 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.142 (165.227.249.142) Encapsulating Security Payload SPI: 0x831a8e8d Sequence: 3 Data (92 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 00 82 53 08 00 45 00 ..=..,..)..S..E. 0010 00 78 00 03 00 00 80 32 fb 87 a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 8e 83 1a 8e 8d 00 00 00 03 de f8 71 33 d7 8a ............q3.. 0030 47 12 59 ac 49 ca 91 ea 0b 85 b7 17 0f ab 73 d1 G.Y.I.........s. 0040 6f 53 71 8a 4f aa b9 df 0d 9c 70 71 55 c1 4c 97 oSq.O.....pqU.L. 0050 6d 42 81 87 21 62 49 23 7c 64 0f dc 55 46 cd 13 mB..!bI#|d..UF.. 0060 c4 bd 2e 59 cc 60 08 a3 19 93 6e 33 56 63 5e 31 ...Y.`....n3Vc^1 0070 3e 34 1e f8 af b7 ac 92 71 a9 82 9a ec b9 31 71 >4......q.....1q 0080 34 ec c8 15 f6 8f 44 5e 50 42 4.....D^PB Frame 24 (138 bytes on wire, 138 bytes captured) Arrival Time: Oct 22, 2004 14:58:34.831226000 Time delta from previous packet: 5.054305000 seconds Time since reference or first frame: 25.610746000 seconds Frame Number: 24 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xeb81654e (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0004 (4) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb86 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.142 (165.227.249.142) Encapsulating Security Payload SPI: 0x831a8e8d Sequence: 4 Data (92 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 00 82 53 08 00 45 00 ..=..,..)..S..E. 0010 00 78 00 04 00 00 80 32 fb 86 a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 8e 83 1a 8e 8d 00 00 00 04 6e 33 56 63 5e 31 ..........n3Vc^1 0030 3e 34 1e f8 af b7 ac 92 71 a9 82 a8 da 30 68 b1 >4......q....0h. 0040 14 60 69 58 09 f3 46 d2 58 ad c2 0f 4f 17 e6 84 .`iX..F.X...O... 0050 0e d9 38 af 14 31 f1 7d c6 15 ed 38 18 34 f5 90 ..8..1.}...8.4.. 0060 88 8a 02 d3 5d 6b ba 9a ae bf 1e 7c c0 be 52 34 ....]k.....|..R4 0070 33 62 46 33 da a7 ed b8 d7 56 3c d4 fb 1b 76 12 3bF3.....V<...v. 0080 d1 74 37 e6 86 7f eb 81 65 4e .t7.....eN Frame 25 (138 bytes on wire, 138 bytes captured) Arrival Time: Oct 22, 2004 14:58:39.842446000 Time delta from previous packet: 5.011220000 seconds Time since reference or first frame: 30.621966000 seconds Frame Number: 25 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:0f:3d:10:fc:2c Destination: 00:0f:3d:10:fc:2c (00:0f:3d:10:fc:2c) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xb2fba9ab (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.142 (165.227.249.142) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0005 (5) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb85 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.142 (165.227.249.142) Encapsulating Security Payload SPI: 0x831a8e8d Sequence: 5 Data (92 bytes) 0000 00 0f 3d 10 fc 2c 00 0c 29 00 82 53 08 00 45 00 ..=..,..)..S..E. 0010 00 78 00 05 00 00 80 32 fb 85 a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 8e 83 1a 8e 8d 00 00 00 05 1e 7c c0 be 52 34 ...........|..R4 0030 33 62 46 33 da a7 ed b8 d7 56 ca 85 23 e6 c7 26 3bF3.....V..#..& 0040 36 89 21 81 a1 b7 3f 59 88 fb 05 5f ab d7 b1 28 6.!...?Y..._...( 0050 3c 3d 2a 7b 56 59 e1 fc ef 73 ee 35 e6 51 3b 42 <=*{VY...s.5.Q;B 0060 f0 10 70 d2 28 07 f0 47 01 5c d5 20 18 6c 59 5a ..p.(..G.\. .lYZ 0070 25 13 c8 35 41 b9 e9 74 39 ae 40 ff bd 70 91 f0 %..5A..t9.@..p.. 0080 84 63 38 54 a0 9f b2 fb a9 ab .c8T......