Frame 1 (170 bytes on wire, 170 bytes captured) Arrival Time: Nov 24, 2004 14:36:33.371733000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xf8bffcab (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0193 (403) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9f6 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.144 (165.227.249.144) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0x8200 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x787C3CB19DB13795 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 0000 00 05 30 01 80 af 00 0c 29 00 82 53 08 00 45 00 ..0.....)..S..E. 0010 00 98 01 93 00 00 80 11 f9 f6 a5 e3 f9 73 a5 e3 .............s.. 0020 f9 90 01 f4 01 f4 00 84 82 00 78 7c 3c b1 9d b1 ..........x|<... 0030 37 95 00 00 00 00 00 00 00 00 01 10 02 00 00 00 7............... 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 ..D..-.......F.y 0090 dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 ..........>.in.c 00a0 81 b5 ec 42 7b 1f f8 bf fc ab ...B{..... Frame 2 (130 bytes on wire, 130 bytes captured) Arrival Time: Nov 24, 2004 14:36:33.375184000 Time delta from previous packet: 0.003451000 seconds Time since reference or first frame: 0.003451000 seconds Frame Number: 2 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0xd86ef26e (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bb2 (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x6a14 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x787C3CB19DB13795 Responder cookie: 0x65D9EA287E8B64AB Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) 0000 00 0c 29 00 82 53 00 05 30 01 80 af 08 00 45 00 ..)..S..0.....E. 0010 00 70 00 00 00 00 40 11 3b b2 a5 e3 f9 90 a5 e3 .p....@.;....... 0020 f9 73 01 f4 01 f4 00 5c 6a 14 78 7c 3c b1 9d b1 .s.....\j.x|<... 0030 37 95 65 d9 ea 28 7e 8b 64 ab 01 10 02 00 00 00 7.e..(~.d....... 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 d8 6e ...............n 0080 f2 6e .n Frame 3 (302 bytes on wire, 302 bytes captured) Arrival Time: Nov 24, 2004 14:36:35.627007000 Time delta from previous packet: 2.251823000 seconds Time since reference or first frame: 2.255274000 seconds Frame Number: 3 Packet Length: 302 bytes Capture Length: 302 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x2d6cce0e (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x0194 (404) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf971 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.144 (165.227.249.144) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0xd451 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x787C3CB19DB13795 Responder cookie: 0x65D9EA287E8B64AB Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E5... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 05 30 01 80 af 00 0c 29 00 82 53 08 00 45 00 ..0.....)..S..E. 0010 01 1c 01 94 00 00 80 11 f9 71 a5 e3 f9 73 a5 e3 .........q...s.. 0020 f9 90 01 f4 01 f4 01 08 d4 51 78 7c 3c b1 9d b1 .........Qx|<... 0030 37 95 65 d9 ea 28 7e 8b 64 ab 04 10 02 00 00 00 7.e..(~.d....... 0040 00 00 00 00 01 00 0a 00 00 84 c7 e2 28 da fc 54 ............(..T 0050 70 91 bb 46 73 50 b4 91 2f 26 0a a8 ba a3 4d 81 p..FsP../&....M. 0060 eb ba 9b 7e b1 8f 64 e0 43 3d 0a 12 bf f5 56 b9 ...~..d.C=....V. 0070 b3 b9 96 bf 1b b2 de c3 ba 69 9e 40 14 5f 40 80 .........i.@._@. 0080 1e 00 39 a1 d3 b3 30 43 75 96 50 b2 53 f4 65 f4 ..9...0Cu.P.S.e. 0090 23 bc 3b 92 d6 9d 98 ce 3d 11 d4 b9 db b1 55 4f #.;.....=.....UO 00a0 c2 fb b5 12 8e 54 ca 02 eb fb 37 2b c6 8b d1 30 .....T....7+...0 00b0 58 d2 4e b5 b2 63 ee a7 be cb 8a 33 62 e7 23 b3 X.N..c.....3b.#. 00c0 3a 39 e8 88 97 36 35 dc 3c bc 0d 00 00 18 50 91 :9...65.<.....P. 00d0 03 f3 53 60 27 f1 01 bb 80 4c 34 4c f9 b5 b5 ee ..S`'....L4L.... 00e0 ca 05 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .....0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 2d 6c ce 0e ....&.....-l.. Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Nov 24, 2004 14:36:35.650256000 Time delta from previous packet: 0.023249000 seconds Time since reference or first frame: 2.278523000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0xc7160a9f (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b52 (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x3676 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x787C3CB19DB13795 Responder cookie: 0x65D9EA287E8B64AB Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 00 82 53 00 05 30 01 80 af 08 00 45 00 ..)..S..0.....E. 0010 00 d0 00 00 00 00 40 11 3b 52 a5 e3 f9 90 a5 e3 ......@.;R...... 0020 f9 73 01 f4 01 f4 00 bc 36 76 78 7c 3c b1 9d b1 .s......6vx|<... 0030 37 95 65 d9 ea 28 7e 8b 64 ab 04 10 02 00 00 00 7.e..(~.d....... 0040 00 00 00 00 00 b4 0a 00 00 84 5e 41 eb 28 08 bc ..........^A.(.. 0050 21 9f 0a 97 f0 df b3 26 8b cd 8a 7f 25 ab 6f 0f !......&....%.o. 0060 4f 6a 21 5d ee c7 ee 12 6b a5 88 21 3f 20 d9 27 Oj!]....k..!? .' 0070 69 01 ec d0 50 3d 8e cb a0 e5 59 2b dc 6a 7f 7f i...P=....Y+.j.. 0080 40 f0 11 62 af bf 5f 67 1a 81 5e 52 5b 89 be 10 @..b.._g..^R[... 0090 16 07 0f dc 49 47 fc 50 43 70 52 60 55 4b 37 1f ....IG.PCpR`UK7. 00a0 b7 83 de 7c 2c 0c 7a af 72 e7 a3 bf 97 c5 dd 4a ...|,.z.r......J 00b0 d9 5e 85 24 28 40 d6 08 ed ee 49 82 06 3a 60 1c .^.$(@....I..:`. 00c0 fc 91 7d aa ee 72 5d e6 40 c9 00 00 00 14 dd fb ..}..r].@....... 00d0 91 0f 2c 1a 89 b0 6b 5f 29 84 85 87 79 0a c7 16 ..,...k_)...y... 00e0 0a 9f .. Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: Nov 24, 2004 14:36:36.735073000 Time delta from previous packet: 1.084817000 seconds Time since reference or first frame: 3.363340000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x9dde6cde (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0195 (405) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa14 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.144 (165.227.249.144) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xa18b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x787C3CB19DB13795 Responder cookie: 0x65D9EA287E8B64AB Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 05 30 01 80 af 00 0c 29 00 82 53 08 00 45 00 ..0.....)..S..E. 0010 00 78 01 95 00 00 80 11 fa 14 a5 e3 f9 73 a5 e3 .x...........s.. 0020 f9 90 01 f4 01 f4 00 64 a1 8b 78 7c 3c b1 9d b1 .......d..x|<... 0030 37 95 65 d9 ea 28 7e 8b 64 ab 05 10 02 01 00 00 7.e..(~.d....... 0040 00 00 00 00 00 5c 86 0c b9 d9 21 88 26 9c 05 e8 .....\....!.&... 0050 76 b3 c0 7f fd 85 b0 80 c9 ce e2 ae 57 df 3e 68 v...........W.>h 0060 fe 96 e8 e9 55 27 15 a2 af ad 98 a0 0c 65 07 e5 ....U'.......e.. 0070 f5 df cc 06 00 2c c9 c0 0d 3e 9d 1e 7b dc c9 b1 .....,...>..{... 0080 87 d5 52 08 9b 5b 9d de 6c de ..R..[..l. Frame 6 (122 bytes on wire, 122 bytes captured) Arrival Time: Nov 24, 2004 14:36:36.738033000 Time delta from previous packet: 0.002960000 seconds Time since reference or first frame: 3.366300000 seconds Frame Number: 6 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0x6742d238 (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bba (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xa6e7 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x787C3CB19DB13795 Responder cookie: 0x65D9EA287E8B64AB Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 00 82 53 00 05 30 01 80 af 08 00 45 00 ..)..S..0.....E. 0010 00 68 00 00 00 00 40 11 3b ba a5 e3 f9 90 a5 e3 .h....@.;....... 0020 f9 73 01 f4 01 f4 00 54 a6 e7 78 7c 3c b1 9d b1 .s.....T..x|<... 0030 37 95 65 d9 ea 28 7e 8b 64 ab 05 10 02 01 00 00 7.e..(~.d....... 0040 00 00 00 00 00 4c 2d 96 85 ac 70 ae 22 49 e0 e3 .....L-...p."I.. 0050 ca 8f 0d 93 36 c9 bb 54 a9 7f d8 02 41 09 c7 92 ....6..T....A... 0060 c3 9f 09 4c 59 08 3c eb a8 75 91 c3 9c 8d e0 1c ...LY.<..u...... 0070 31 41 b3 a9 d6 74 67 42 d2 38 1A...tgB.8 Frame 7 (138 bytes on wire, 138 bytes captured) Arrival Time: Nov 24, 2004 14:36:36.740379000 Time delta from previous packet: 0.002346000 seconds Time since reference or first frame: 3.368646000 seconds Frame Number: 7 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0xd75f39f5 (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3baa (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xb4d6 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x787C3CB19DB13795 Responder cookie: 0x65D9EA287E8B64AB Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xF2208AF4 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 00 82 53 00 05 30 01 80 af 08 00 45 00 ..)..S..0.....E. 0010 00 78 00 00 00 00 40 11 3b aa a5 e3 f9 90 a5 e3 .x....@.;....... 0020 f9 73 01 f4 01 f4 00 64 b4 d6 78 7c 3c b1 9d b1 .s.....d..x|<... 0030 37 95 65 d9 ea 28 7e 8b 64 ab 08 10 05 01 f2 20 7.e..(~.d...... 0040 8a f4 00 00 00 5c f9 6d fd 8a 87 b5 68 7e 65 07 .....\.m....h~e. 0050 49 f9 cd 11 6f 52 c6 f4 f2 4d b0 cb fc b4 7a 8a I...oR...M....z. 0060 21 90 44 c8 33 20 e4 91 5b d5 0b e7 49 24 1c f8 !.D.3 ..[...I$.. 0070 65 e3 30 a5 19 21 a8 d7 c8 91 be 1e fd 8b 5a 25 e.0..!........Z% 0080 c8 10 dd f7 e2 bc d7 5f 39 f5 ......._9. Frame 8 (346 bytes on wire, 346 bytes captured) Arrival Time: Nov 24, 2004 14:36:38.897167000 Time delta from previous packet: 2.156788000 seconds Time since reference or first frame: 5.525434000 seconds Frame Number: 8 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x50cb5963 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0197 (407) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf942 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.144 (165.227.249.144) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x70a2 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x787C3CB19DB13795 Responder cookie: 0x65D9EA287E8B64AB Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x499297A3 Length: 300 Encrypted payload (272 bytes) 0000 00 05 30 01 80 af 00 0c 29 00 82 53 08 00 45 00 ..0.....)..S..E. 0010 01 48 01 97 00 00 80 11 f9 42 a5 e3 f9 73 a5 e3 .H.......B...s.. 0020 f9 90 01 f4 01 f4 01 34 70 a2 78 7c 3c b1 9d b1 .......4p.x|<... 0030 37 95 65 d9 ea 28 7e 8b 64 ab 08 10 20 01 49 92 7.e..(~.d... .I. 0040 97 a3 00 00 01 2c e4 7b 82 dd 92 a5 f3 fd ec fe .....,.{........ 0050 90 7a 8e cc 9e de 44 02 ed b1 01 ae 3e 75 55 67 .z....D.....>uUg 0060 bc 81 5c ed 32 b8 ac 29 f6 3e c7 a1 0f d3 20 62 ..\.2..).>.... b 0070 c4 ba ad 01 16 3e df 3b 13 ce cd df 6e 47 29 15 .....>.;....nG). 0080 85 b5 1c 43 ea 36 4c 8e 33 76 6c 01 b4 78 6a 47 ...C.6L.3vl..xjG 0090 a9 87 12 fb 6a 7c f2 72 ce c3 77 49 c3 00 d3 b9 ....j|.r..wI.... 00a0 5a ca df 58 45 70 eb 2b 0a 76 35 ea a7 0a 4f 20 Z..XEp.+.v5...O 00b0 78 ba a2 6e 10 97 ae a7 12 33 58 7d 6c 4f 6c 9e x..n.....3X}lOl. 00c0 6f db 86 fe 3f 5f dd 77 5a 34 6b 4c 28 87 c6 00 o...?_.wZ4kL(... 00d0 de 19 ab e4 55 84 60 34 57 99 9a 02 b6 59 e8 df ....U.`4W....Y.. 00e0 c9 26 6d 77 1d 65 03 85 11 77 18 e5 8c 22 51 e6 .&mw.e...w..."Q. 00f0 8c 32 1f e8 a5 fc 6d d9 53 94 ec ee 44 97 6d 23 .2....m.S...D.m# 0100 be 3c bc 34 71 7c 4f dc 44 e9 70 a7 eb b2 39 11 .<.4q|O.D.p...9. 0110 97 3f 64 34 85 3c 1f 93 f2 77 9e 36 6a 38 40 6e .?d4.<...w.6j8@n 0120 d7 20 2b 01 57 d0 e7 3c 95 a0 fe 4e 1e 52 21 6f . +.W..<...N.R!o 0130 42 a4 8b c9 65 de 91 64 da 61 de 0a 52 03 56 f5 B...e..d.a..R.V. 0140 3f 93 c8 13 f8 be aa 67 96 01 14 c1 af 1b 99 5f ?......g......._ 0150 c1 6f 11 30 c5 ca 50 cb 59 63 .o.0..P.Yc Frame 9 (346 bytes on wire, 346 bytes captured) Arrival Time: Nov 24, 2004 14:36:38.969848000 Time delta from previous packet: 0.072681000 seconds Time since reference or first frame: 5.598115000 seconds Frame Number: 9 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0xf00b12f8 (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ada (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xdf9e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x787C3CB19DB13795 Responder cookie: 0x65D9EA287E8B64AB Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x499297A3 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 00 82 53 00 05 30 01 80 af 08 00 45 00 ..)..S..0.....E. 0010 01 48 00 00 00 00 40 11 3a da a5 e3 f9 90 a5 e3 .H....@.:....... 0020 f9 73 01 f4 01 f4 01 34 df 9e 78 7c 3c b1 9d b1 .s.....4..x|<... 0030 37 95 65 d9 ea 28 7e 8b 64 ab 08 10 20 01 49 92 7.e..(~.d... .I. 0040 97 a3 00 00 01 2c 88 c9 f7 85 73 43 51 70 28 61 .....,....sCQp(a 0050 cc 55 a5 5c 44 16 65 c1 b1 b8 0c 3c 0f a6 bf f6 .U.\D.e....<.... 0060 b1 84 e4 28 b3 2f 8b 43 0e e0 2c d9 18 07 a2 30 ...(./.C..,....0 0070 05 8b 7a 8c 4e 40 c8 27 5a 33 5f 1e b8 fc 1e c9 ..z.N@.'Z3_..... 0080 aa eb 09 d9 3b d3 e6 be dd f0 5b 0c 77 e7 e1 05 ....;.....[.w... 0090 b4 7f b5 e5 2c 92 4d 0c a0 97 1d 17 fb 35 01 5c ....,.M......5.\ 00a0 a8 99 94 f7 92 2c e9 e8 4b b1 a7 c6 44 e9 ad 37 .....,..K...D..7 00b0 35 02 48 f9 e3 68 96 b0 38 fc f7 71 80 42 ea 6a 5.H..h..8..q.B.j 00c0 55 e9 59 c7 e4 91 aa 17 09 44 b4 35 da dd ec 08 U.Y......D.5.... 00d0 b3 5f 3f 0d 99 c8 70 5e c4 6b 0b 89 e2 fb 2b d0 ._?...p^.k....+. 00e0 d0 73 ed dd 50 02 b6 1f 7f f6 f0 dc 28 18 56 17 .s..P.......(.V. 00f0 5d 52 b9 45 42 b9 99 67 a3 5e 5e 29 f4 38 8a 8e ]R.EB..g.^^).8.. 0100 fd c2 a2 2b 52 e8 d2 20 ed ad 43 88 e6 d9 b7 47 ...+R.. ..C....G 0110 7e 77 ed b2 1a c4 c1 b3 2d 0b af c2 fd b8 36 7b ~w......-.....6{ 0120 3f 52 84 73 fd ab 37 f8 10 bc df 9e 4a 5d 4f f9 ?R.s..7.....J]O. 0130 77 9c a6 6c 76 6c 62 17 a8 a9 5c bc c4 c7 bd 84 w..lvlb...\..... 0140 a7 17 d0 0b 1a 8f a2 88 d8 b6 64 10 9c 5b 48 a7 ..........d..[H. 0150 00 4f 97 c4 2d fd f0 0b 12 f8 .O..-..... Frame 10 (106 bytes on wire, 106 bytes captured) Arrival Time: Nov 24, 2004 14:36:38.975981000 Time delta from previous packet: 0.006133000 seconds Time since reference or first frame: 5.604248000 seconds Frame Number: 10 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xb9e425a2 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0199 (409) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xfa30 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.144 (165.227.249.144) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x07c2 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x787C3CB19DB13795 Responder cookie: 0x65D9EA287E8B64AB Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x499297A3 Length: 60 Encrypted payload (32 bytes) 0000 00 05 30 01 80 af 00 0c 29 00 82 53 08 00 45 00 ..0.....)..S..E. 0010 00 58 01 99 00 00 80 11 fa 30 a5 e3 f9 73 a5 e3 .X.......0...s.. 0020 f9 90 01 f4 01 f4 00 44 07 c2 78 7c 3c b1 9d b1 .......D..x|<... 0030 37 95 65 d9 ea 28 7e 8b 64 ab 08 10 20 01 49 92 7.e..(~.d... .I. 0040 97 a3 00 00 00 3c fb fc 19 35 25 ec 95 9e b1 2f .....<...5%..../ 0050 c5 17 39 de cd dd 62 dc 68 b7 b2 8d 8a 83 85 db ..9...b.h....... 0060 00 b0 8c ed 82 e1 b9 e4 25 a2 ........%. Frame 11 (138 bytes on wire, 138 bytes captured) Arrival Time: Nov 24, 2004 14:36:43.424190000 Time delta from previous packet: 4.448209000 seconds Time since reference or first frame: 10.052457000 seconds Frame Number: 11 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0x05a9a658 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb87 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.144 (165.227.249.144) Encapsulating Security Payload SPI: 0x08297201 Sequence: 1 Data (92 bytes) 0000 00 05 30 01 80 af 00 0c 29 00 82 53 08 00 45 00 ..0.....)..S..E. 0010 00 78 00 01 00 00 80 32 fb 87 a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 90 08 29 72 01 00 00 00 01 d8 6e 80 28 8f de ...)r......n.(.. 0030 02 30 4a 68 a0 f8 c0 2e 27 a8 87 31 a4 4d 67 0b .0Jh....'..1.Mg. 0040 52 a1 b0 37 ae b0 85 c1 66 46 fb c0 0a 75 af 19 R..7....fF...u.. 0050 c5 98 02 b5 c1 ec 09 2a d5 3d 1a 3d e2 21 86 1d .......*.=.=.!.. 0060 e1 92 fa ea 13 5b f3 f9 e1 a2 c1 74 33 a5 73 35 .....[.....t3.s5 0070 33 33 1a f3 76 8a a4 dd 0b 76 b7 de f4 47 68 a0 33..v....v...Gh. 0080 cf 89 63 8a 2b dc 05 a9 a6 58 ..c.+....X Frame 12 (138 bytes on wire, 138 bytes captured) Arrival Time: Nov 24, 2004 14:36:43.424321000 Time delta from previous packet: 0.000131000 seconds Time since reference or first frame: 10.052588000 seconds Frame Number: 12 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0x4313cbf8 (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3b89 (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xed963cd6 Sequence: 2 Data (92 bytes) 0000 00 0c 29 00 82 53 00 05 30 01 80 af 08 00 45 00 ..)..S..0.....E. 0010 00 78 00 00 00 00 40 32 3b 89 a5 e3 f9 90 a5 e3 .x....@2;....... 0020 f9 73 ed 96 3c d6 00 00 00 02 1a 2b d7 c7 3b d4 .s..<......+..;. 0030 9f e8 68 af 5f 1f 6f 52 7f a0 c7 b2 b2 90 d1 9d ..h._.oR........ 0040 b8 9b 4c 25 8a de 85 29 72 8f eb d1 dd dd 17 fb ..L%...)r....... 0050 7a 7a 45 1b 09 58 57 9b 92 3a 6b 00 14 f1 31 e4 zzE..XW..:k...1. 0060 c4 40 8a f6 a5 fa 6f 20 d5 61 d2 9b 1e f1 53 d6 .@....o .a....S. 0070 b1 3c 9c 8b 5d 7f 29 c6 33 70 c3 30 b7 95 ba ac .<..].).3p.0.... 0080 a3 bb 22 1f 72 a0 43 13 cb f8 ..".r.C... Frame 13 (138 bytes on wire, 138 bytes captured) Arrival Time: Nov 24, 2004 14:36:44.430850000 Time delta from previous packet: 1.006529000 seconds Time since reference or first frame: 11.059117000 seconds Frame Number: 13 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:0c:29:00:82:53, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Type: IP (0x0800) Frame check sequence: 0xbb4aec91 (correct) Internet Protocol, Src Addr: 165.227.249.115 (165.227.249.115), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0002 (2) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb86 (correct) Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.144 (165.227.249.144) Encapsulating Security Payload SPI: 0x08297201 Sequence: 2 Data (92 bytes) 0000 00 05 30 01 80 af 00 0c 29 00 82 53 08 00 45 00 ..0.....)..S..E. 0010 00 78 00 02 00 00 80 32 fb 86 a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 90 08 29 72 01 00 00 00 02 c1 74 33 a5 73 35 ...)r......t3.s5 0030 33 33 1a f3 76 8a a4 dd 0b 76 3c d0 76 b1 f6 31 33..v....v<.v..1 0040 0d 31 7e 7e ac 43 a7 e0 13 14 ea 98 da 5b 8a db .1~~.C.......[.. 0050 c1 4f 8c f8 30 c6 92 3a f5 49 9a a7 cb 14 35 51 .O..0..:.I....5Q 0060 b5 30 5c e7 c4 71 94 26 a8 fa 07 db 3f a1 ae 8f .0\..q.&....?... 0070 06 9d 38 96 47 d1 3f 39 f6 49 26 42 3e 2e 3c e0 ..8.G.?9.I&B>.<. 0080 54 9d e1 33 f2 6d bb 4a ec 91 T..3.m.J.. Frame 14 (138 bytes on wire, 138 bytes captured) Arrival Time: Nov 24, 2004 14:36:44.430943000 Time delta from previous packet: 0.000093000 seconds Time since reference or first frame: 11.059210000 seconds Frame Number: 14 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:00:82:53 Destination: 00:0c:29:00:82:53 (00:0c:29:00:82:53) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0xcec418d1 (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3b88 (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0xed963cd6 Sequence: 3 Data (92 bytes) 0000 00 0c 29 00 82 53 00 05 30 01 80 af 08 00 45 00 ..)..S..0.....E. 0010 00 78 00 01 00 00 40 32 3b 88 a5 e3 f9 90 a5 e3 .x....@2;....... 0020 f9 73 ed 96 3c d6 00 00 00 03 1c 7d 76 b2 7d ee .s..<......}v.}. 0030 a9 f9 71 f5 da cd 77 ba a7 e4 c8 99 91 f3 b7 11 ..q...w......... 0040 ad eb ec fe d5 1e a5 93 3b be 66 3d 99 3c 9b 0c ........;.f=.<.. 0050 1d 3a 3c 5c 46 a1 07 9e 93 9c c8 c5 90 cf c6 44 .:<\F..........D 0060 bb c7 73 37 43 64 f8 f6 fc c2 82 25 6f ea 44 4d ..s7Cd.....%o.DM 0070 cf 92 e7 85 c4 94 e2 1b 00 68 cb c4 b8 2d 0f 0c .........h...-.. 0080 62 26 f9 33 e5 3c ce c4 18 d1 b&.3.<....