Frame 1 (170 bytes on wire, 170 bytes captured) Arrival Time: Feb 10, 2006 10:47:19.407078000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 170 bytes Capture Length: 170 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc), Dst: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa) Destination: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Trailer: 43852793 Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.147 (165.227.249.147) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x08b0 (2224) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf2d6 [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.147 (165.227.249.147) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0x2773 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x1DF7E0556DED78C4 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 0000 00 13 c4 80 d3 aa 00 0c 29 1d cf fc 08 00 45 00 ........).....E. 0010 00 98 08 b0 00 00 80 11 f2 d6 a5 e3 f9 73 a5 e3 .............s.. 0020 f9 93 01 f4 01 f4 00 84 27 73 1d f7 e0 55 6d ed ........'s...Um. 0030 78 c4 00 00 00 00 00 00 00 00 01 10 02 00 00 00 x............... 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00 ................ 0080 00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 ..D..-.......F.y 0090 dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 ..........>.in.c 00a0 81 b5 ec 42 7b 1f 43 85 27 93 ...B{.C.'. Frame 2 (154 bytes on wire, 154 bytes captured) Arrival Time: Feb 10, 2006 10:47:19.407616000 Time delta from previous packet: 0.000538000 seconds Time since reference or first frame: 0.000538000 seconds Frame Number: 2 Packet Length: 154 bytes Capture Length: 154 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa), Dst: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa) Type: IP (0x0800) Trailer: 34C33CE9 Internet Protocol, Src: 165.227.249.147 (165.227.249.147), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 136 Identification: 0x262d (9773) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x5669 [correct] Good: True Bad : False Source: 165.227.249.147 (165.227.249.147) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 116 Checksum: 0xe164 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x1DF7E0556DED78C4 Responder cookie: 0x00FDF1352A1B603B Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 108 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (3600) Vendor ID payload Next payload: NONE (0) Length: 24 Vendor ID: Microsoft L2TP/IPSec VPN Client 0000 00 0c 29 1d cf fc 00 13 c4 80 d3 aa 08 00 45 00 ..)...........E. 0010 00 88 26 2d 00 00 ff 11 56 69 a5 e3 f9 93 a5 e3 ..&-....Vi...... 0020 f9 73 01 f4 01 f4 00 74 e1 64 1d f7 e0 55 6d ed .s.....t.d...Um. 0030 78 c4 00 fd f1 35 2a 1b 60 3b 01 10 02 00 00 00 x....5*.`;...... 0040 00 00 00 00 00 6c 0d 00 00 38 00 00 00 01 00 00 .....l...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 00 00 ................ 0080 00 18 40 48 b7 d5 6e bc e8 85 25 e7 de 7f 00 d6 ..@H..n...%..... 0090 c2 d3 c0 00 00 00 34 c3 3c e9 ......4.<. Frame 3 (302 bytes on wire, 302 bytes captured) Arrival Time: Feb 10, 2006 10:47:21.391479000 Time delta from previous packet: 1.983863000 seconds Time since reference or first frame: 1.984401000 seconds Frame Number: 3 Packet Length: 302 bytes Capture Length: 302 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc), Dst: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa) Destination: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Trailer: 59885F7E Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.147 (165.227.249.147) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x08b1 (2225) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf251 [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.147 (165.227.249.147) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0x49e7 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x1DF7E0556DED78C4 Responder cookie: 0x00FDF1352A1B603B Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 48 Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: unknown vendor ID: 0xDA8E937880010000 Vendor ID payload Next payload: NONE (0) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 13 c4 80 d3 aa 00 0c 29 1d cf fc 08 00 45 00 ........).....E. 0010 01 1c 08 b1 00 00 80 11 f2 51 a5 e3 f9 73 a5 e3 .........Q...s.. 0020 f9 93 01 f4 01 f4 01 08 49 e7 1d f7 e0 55 6d ed ........I....Um. 0030 78 c4 00 fd f1 35 2a 1b 60 3b 04 10 02 00 00 00 x....5*.`;...... 0040 00 00 00 00 01 00 0a 00 00 84 5f 48 13 fd 16 8d .........._H.... 0050 73 c3 48 c7 0e bc d1 d1 96 df 26 5e f2 74 c3 e3 s.H.......&^.t.. 0060 0a 76 9c 4f 8c 5d e6 c7 2e ab 24 11 91 81 bc 38 .v.O.]....$....8 0070 fd d5 00 a8 d7 5d 26 8f 2e 09 33 54 76 09 3a 1d .....]&...3Tv.:. 0080 06 0d 0a 95 52 8a 77 8a 96 95 ba 67 bb db 8c 06 ....R.w....g.... 0090 93 78 00 b1 68 c4 a6 92 b7 01 16 01 81 c2 2a 7e .x..h.........*~ 00a0 d0 b7 5e 3a 0e 7c 73 f7 ec 75 b1 3d e0 37 87 1b ..^:.|s..u.=.7.. 00b0 4e ae fd 57 43 6e ed 0e b7 6c 74 35 43 c6 e0 56 N..WCn...lt5C..V 00c0 56 d5 bb b7 83 6a 39 37 8c f3 0d 00 00 18 15 28 V....j97.......( 00d0 00 33 2b ea a4 1d f1 9b ed 73 14 b9 7c 07 af 7a .3+......s..|..z 00e0 43 ed 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 C....0G......... 00f0 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0100 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0110 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0120 00 0c 09 00 26 89 df d6 b7 12 59 88 5f 7e ....&.....Y._~ Frame 4 (302 bytes on wire, 302 bytes captured) Arrival Time: Feb 10, 2006 10:47:21.393252000 Time delta from previous packet: 0.001773000 seconds Time since reference or first frame: 1.986174000 seconds Frame Number: 4 Packet Length: 302 bytes Capture Length: 302 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa), Dst: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa) Type: IP (0x0800) Trailer: FF0E1D0D Internet Protocol, Src: 165.227.249.147 (165.227.249.147), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 284 Identification: 0x2631 (9777) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x55d1 [correct] Good: True Bad : False Source: 165.227.249.147 (165.227.249.147) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 264 Checksum: 0x4e73 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x1DF7E0556DED78C4 Responder cookie: 0x00FDF1352A1B603B Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 256 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 24 Nonce Data Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x12F5F28C457168A9702D9FE274CC0100 Vendor ID payload Next payload: Vendor ID (13) Length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0xF53A56282A1A603B78DE32983E584F28 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x1F07F70EAA6514D3B0FA96542A500100 0000 00 0c 29 1d cf fc 00 13 c4 80 d3 aa 08 00 45 00 ..)...........E. 0010 01 1c 26 31 00 00 ff 11 55 d1 a5 e3 f9 93 a5 e3 ..&1....U....... 0020 f9 73 01 f4 01 f4 01 08 4e 73 1d f7 e0 55 6d ed .s......Ns...Um. 0030 78 c4 00 fd f1 35 2a 1b 60 3b 04 10 02 00 00 00 x....5*.`;...... 0040 00 00 00 00 01 00 0a 00 00 84 4a 10 43 63 d8 8e ..........J.Cc.. 0050 a5 ce 92 34 f1 9d ec bd c8 a4 fb bd e1 1b 32 bd ...4..........2. 0060 68 ef ac b9 bd af d1 0f 2a c3 29 25 f5 1e 1b ff h.......*.)%.... 0070 05 9f fb 3a a6 1e 23 e1 d1 7d 0a 2f 6d a9 ae 40 ...:..#..}./m..@ 0080 50 2d 00 58 2b b3 55 92 99 83 d9 0a e3 cc cc ee P-.X+.U......... 0090 be 16 25 34 58 ae 70 86 a9 a5 02 c4 22 b3 a4 3f ..%4X.p....."..? 00a0 c1 29 6e 4a a6 01 0c fe 9e 94 d2 68 a7 57 1f 88 .)nJ.......h.W.. 00b0 70 d7 4e 8c 42 fb c4 27 c2 2f 93 00 55 7e b8 86 p.N.B..'./..U~.. 00c0 b2 53 4b 7d dd d1 a0 4d 2d 18 0d 00 00 18 48 99 .SK}...M-.....H. 00d0 53 15 61 e9 3b 1e b2 43 28 87 38 6e 3b e5 3a 4e S.a.;..C(.8n;.:N 00e0 8a 06 0d 00 00 14 12 f5 f2 8c 45 71 68 a9 70 2d ..........Eqh.p- 00f0 9f e2 74 cc 01 00 0d 00 00 0c 09 00 26 89 df d6 ..t.........&... 0100 b7 12 0d 00 00 14 f5 3a 56 28 2a 1a 60 3b 78 de .......:V(*.`;x. 0110 32 98 3e 58 4f 28 00 00 00 14 1f 07 f7 0e aa 65 2.>XO(.........e 0120 14 d3 b0 fa 96 54 2a 50 01 00 ff 0e 1d 0d .....T*P...... Frame 5 (138 bytes on wire, 138 bytes captured) Arrival Time: Feb 10, 2006 10:47:22.382933000 Time delta from previous packet: 0.989681000 seconds Time since reference or first frame: 2.975855000 seconds Frame Number: 5 Packet Length: 138 bytes Capture Length: 138 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc), Dst: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa) Destination: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Trailer: 814F2EB4 Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.147 (165.227.249.147) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x08b3 (2227) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf2f3 [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.147 (165.227.249.147) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xc866 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x1DF7E0556DED78C4 Responder cookie: 0x00FDF1352A1B603B Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 13 c4 80 d3 aa 00 0c 29 1d cf fc 08 00 45 00 ........).....E. 0010 00 78 08 b3 00 00 80 11 f2 f3 a5 e3 f9 73 a5 e3 .x...........s.. 0020 f9 93 01 f4 01 f4 00 64 c8 66 1d f7 e0 55 6d ed .......d.f...Um. 0030 78 c4 00 fd f1 35 2a 1b 60 3b 05 10 02 01 00 00 x....5*.`;...... 0040 00 00 00 00 00 5c f8 d5 1b 3b 28 4d 8e 1b 77 c6 .....\...;(M..w. 0050 33 bd 9b a4 c1 6e 60 a7 a9 16 60 ea 68 c3 cf 53 3....n`...`.h..S 0060 d1 25 00 05 1d da 8e 81 cb 3b d8 6d f2 22 16 ff .%.......;.m.".. 0070 9d 2f 53 26 c4 c2 d1 d6 2d ca 9f a3 b3 e6 56 34 ./S&....-.....V4 0080 df 9a fa 9d b2 3f 81 4f 2e b4 .....?.O.. Frame 6 (138 bytes on wire, 138 bytes captured) Arrival Time: Feb 10, 2006 10:47:22.384084000 Time delta from previous packet: 0.001151000 seconds Time since reference or first frame: 2.977006000 seconds Frame Number: 6 Packet Length: 138 bytes Capture Length: 138 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa), Dst: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa) Type: IP (0x0800) Trailer: EB14BDDC Internet Protocol, Src: 165.227.249.147 (165.227.249.147), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x2637 (9783) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x566f [correct] Good: True Bad : False Source: 165.227.249.147 (165.227.249.147) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xc333 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x1DF7E0556DED78C4 Responder cookie: 0x00FDF1352A1B603B Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 1d cf fc 00 13 c4 80 d3 aa 08 00 45 00 ..)...........E. 0010 00 78 26 37 00 00 ff 11 56 6f a5 e3 f9 93 a5 e3 .x&7....Vo...... 0020 f9 73 01 f4 01 f4 00 64 c3 33 1d f7 e0 55 6d ed .s.....d.3...Um. 0030 78 c4 00 fd f1 35 2a 1b 60 3b 05 10 02 01 00 00 x....5*.`;...... 0040 00 00 00 00 00 5c ed c0 e0 d5 c2 fa c1 1c 57 9d .....\........W. 0050 21 08 c2 89 06 80 71 68 31 20 45 ad 58 46 ab 90 !.....qh1 E.XF.. 0060 65 0e f7 43 a0 3f f2 81 74 77 2b cb 44 27 35 21 e..C.?..tw+.D'5! 0070 dc 7f b8 3e 2d bb 51 8d 17 ea 41 43 ef 19 cf ff ...>-.Q...AC.... 0080 b2 48 7b b0 ac f5 eb 14 bd dc .H{....... Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Feb 10, 2006 10:47:24.619822000 Time delta from previous packet: 2.235738000 seconds Time since reference or first frame: 5.212744000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc), Dst: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa) Destination: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Trailer: EAE8E39D Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.147 (165.227.249.147) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x08b5 (2229) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf221 [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.147 (165.227.249.147) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xffd4 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x1DF7E0556DED78C4 Responder cookie: 0x00FDF1352A1B603B Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xA21957F1 Length: 300 Encrypted payload (272 bytes) 0000 00 13 c4 80 d3 aa 00 0c 29 1d cf fc 08 00 45 00 ........).....E. 0010 01 48 08 b5 00 00 80 11 f2 21 a5 e3 f9 73 a5 e3 .H.......!...s.. 0020 f9 93 01 f4 01 f4 01 34 ff d4 1d f7 e0 55 6d ed .......4.....Um. 0030 78 c4 00 fd f1 35 2a 1b 60 3b 08 10 20 01 a2 19 x....5*.`;.. ... 0040 57 f1 00 00 01 2c 80 48 cd c1 a1 32 2d 58 b7 26 W....,.H...2-X.& 0050 20 b3 06 9f 5a 67 83 07 86 2e 46 62 9c a1 d0 eb ...Zg....Fb.... 0060 36 82 32 98 7d 90 cd d1 6a 18 78 dc 3d 18 85 10 6.2.}...j.x.=... 0070 97 5c d4 7b 2f a5 ae f5 0e 33 d4 3b f8 10 85 bc .\.{/....3.;.... 0080 5a 20 82 6e 99 f3 95 92 a2 f4 64 d8 ef 56 85 31 Z .n......d..V.1 0090 27 3c 09 86 35 cd 80 90 ee 3f 64 83 4b b1 7a e6 '<..5....?d.K.z. 00a0 fe 7a 5c b2 a2 60 83 a0 c9 1b ce 5e 5b 58 dc fd .z\..`.....^[X.. 00b0 cc b0 bc e2 c5 7f 5b e4 8e 1f 0d 42 22 44 6b c1 ......[....B"Dk. 00c0 96 86 32 b7 2e e2 85 b8 35 a6 c8 1d 85 97 ec 65 ..2.....5......e 00d0 4f 4e 7b 4f 8d f3 a4 35 42 47 da fc 78 a4 af 81 ON{O...5BG..x... 00e0 d3 d9 c4 e6 47 10 dc 9c 92 84 b1 6d 2c 8b bc f4 ....G......m,... 00f0 cd 19 16 4e 56 41 5b 21 f8 4b 31 70 39 10 0f 09 ...NVA[!.K1p9... 0100 f9 df f7 5a 49 6e ef 59 bf 3e f3 6b ad 76 41 93 ...ZIn.Y.>.k.vA. 0110 a5 9b a9 1f 44 95 63 20 9e 99 3e 35 31 14 32 c8 ....D.c ..>51.2. 0120 0e e8 fe 20 ac 01 25 4e 3b 2b 8f e3 08 a7 f4 a3 ... ..%N;+...... 0130 67 09 77 e7 ee 34 ba 62 70 d2 4e 33 a1 9e 57 0c g.w..4.bp.N3..W. 0140 d0 e7 f7 78 86 bc af ac d9 4c f8 32 87 2f 90 e8 ...x.....L.2./.. 0150 29 52 bf fd 96 44 ea e8 e3 9d )R...D.... Frame 8 (346 bytes on wire, 346 bytes captured) Arrival Time: Feb 10, 2006 10:47:24.622811000 Time delta from previous packet: 0.002989000 seconds Time since reference or first frame: 5.215733000 seconds Frame Number: 8 Packet Length: 346 bytes Capture Length: 346 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa), Dst: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa) Type: IP (0x0800) Trailer: D8D124EC Internet Protocol, Src: 165.227.249.147 (165.227.249.147), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x263b (9787) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x559b [correct] Good: True Bad : False Source: 165.227.249.147 (165.227.249.147) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xb079 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x1DF7E0556DED78C4 Responder cookie: 0x00FDF1352A1B603B Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xA21957F1 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 1d cf fc 00 13 c4 80 d3 aa 08 00 45 00 ..)...........E. 0010 01 48 26 3b 00 00 ff 11 55 9b a5 e3 f9 93 a5 e3 .H&;....U....... 0020 f9 73 01 f4 01 f4 01 34 b0 79 1d f7 e0 55 6d ed .s.....4.y...Um. 0030 78 c4 00 fd f1 35 2a 1b 60 3b 08 10 20 01 a2 19 x....5*.`;.. ... 0040 57 f1 00 00 01 2c 47 d0 08 63 08 1d 7c cf 68 61 W....,G..c..|.ha 0050 34 e8 0f f9 a9 c8 83 af 29 dd f6 fd 52 28 85 01 4.......)...R(.. 0060 f4 c1 e2 f4 21 3d 1d a5 f8 ca 1d d7 b4 7d 3b c0 ....!=.......};. 0070 39 03 d9 26 42 3a e3 4a 0f c3 d6 12 13 96 61 0b 9..&B:.J......a. 0080 ce 1b 0e 27 8e 0b d8 4d b5 b3 63 e1 8a 61 22 6f ...'...M..c..a"o 0090 f3 0c 68 c0 3f b2 df 56 5b d7 29 aa 69 05 ff 43 ..h.?..V[.).i..C 00a0 4f 6c 09 e7 09 3f 82 b0 e8 05 66 04 a3 06 20 c5 Ol...?....f... . 00b0 57 3b 0e ab 2f c3 33 45 fd c3 51 19 aa df 8b 94 W;../.3E..Q..... 00c0 ac c1 e8 1a c1 c7 12 3d cc 75 78 76 80 78 cb f2 .......=.uxv.x.. 00d0 ba 32 22 20 39 a4 22 a6 bd f4 42 ad 2b e1 a0 94 .2" 9."...B.+... 00e0 78 06 2e 29 e9 3f 94 99 1b 5b 6d 36 06 c1 5b cd x..).?...[m6..[. 00f0 b0 fe 78 d9 67 0a 4a 55 2a 02 3c 1a 41 0b a8 08 ..x.g.JU*.<.A... 0100 d0 06 10 45 91 3b 92 3e 86 5e 65 ef b0 eb 5e f3 ...E.;.>.^e...^. 0110 1c 97 69 46 01 03 88 04 08 2a f4 2b f5 3e 53 1d ..iF.....*.+.>S. 0120 85 70 ec 48 e0 06 6a fe d3 fe 2b 27 0d c9 4e f5 .p.H..j...+'..N. 0130 4e 9c 7e c1 dc 2b 26 08 b3 6a c5 ad 86 0d 2c 1b N.~..+&..j....,. 0140 a0 0d 0d ba 38 68 40 3e 80 10 b0 69 84 3f ca fd ....8h@>...i.?.. 0150 51 df 55 ef 88 95 d8 d1 24 ec Q.U.....$. Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Feb 10, 2006 10:47:24.640974000 Time delta from previous packet: 0.018163000 seconds Time since reference or first frame: 5.233896000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc), Dst: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa) Destination: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Trailer: B16634C6 Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.147 (165.227.249.147) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x08b6 (2230) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf310 [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.147 (165.227.249.147) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x3a58 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x1DF7E0556DED78C4 Responder cookie: 0x00FDF1352A1B603B Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xA21957F1 Length: 60 Encrypted payload (32 bytes) 0000 00 13 c4 80 d3 aa 00 0c 29 1d cf fc 08 00 45 00 ........).....E. 0010 00 58 08 b6 00 00 80 11 f3 10 a5 e3 f9 73 a5 e3 .X...........s.. 0020 f9 93 01 f4 01 f4 00 44 3a 58 1d f7 e0 55 6d ed .......D:X...Um. 0030 78 c4 00 fd f1 35 2a 1b 60 3b 08 10 20 01 a2 19 x....5*.`;.. ... 0040 57 f1 00 00 00 3c 3c 96 20 e7 64 15 ab f1 82 22 W....<<. .d...." 0050 25 62 39 18 b1 f0 d0 8c 83 08 95 39 28 e9 cd bc %b9........9(... 0060 20 6e 05 44 f9 3d b1 66 34 c6 n.D.=.f4. Frame 10 (138 bytes on wire, 138 bytes captured) Arrival Time: Feb 10, 2006 10:47:30.021825000 Time delta from previous packet: 5.380851000 seconds Time since reference or first frame: 10.614747000 seconds Frame Number: 10 Packet Length: 138 bytes Capture Length: 138 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc), Dst: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa) Destination: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Trailer: 4C53F002 Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.147 (165.227.249.147) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0001 (1) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb84 [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.147 (165.227.249.147) Encapsulating Security Payload SPI: 0xe6d92dc1 Sequence: 1 Data (92 bytes) 0000 00 13 c4 80 d3 aa 00 0c 29 1d cf fc 08 00 45 00 ........).....E. 0010 00 78 00 01 00 00 80 32 fb 84 a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 93 e6 d9 2d c1 00 00 00 01 d5 02 4b 49 11 1b ....-.......KI.. 0030 8c 80 ee 66 67 92 92 89 20 f7 6c 60 f2 2c 0f 3a ...fg... .l`.,.: 0040 17 32 73 23 a9 34 72 f1 40 b8 e0 ee 35 1c 3c a5 .2s#.4r.@...5.<. 0050 0c c9 0a 2b 4f 77 8d 30 a8 d1 4b 6b 49 f3 be b2 ...+Ow.0..KkI... 0060 10 73 48 34 72 61 1c d8 20 c3 e2 7a 85 f7 95 73 .sH4ra.. ..z...s 0070 6a 71 5a ea 42 62 69 28 9b 2e 2b f1 7f 03 4d 9a jqZ.Bbi(..+...M. 0080 f3 6e 5a 86 92 63 4c 53 f0 02 .nZ..cLS.. Frame 11 (138 bytes on wire, 138 bytes captured) Arrival Time: Feb 10, 2006 10:47:30.022803000 Time delta from previous packet: 0.000978000 seconds Time since reference or first frame: 10.615725000 seconds Frame Number: 11 Packet Length: 138 bytes Capture Length: 138 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa), Dst: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa) Type: IP (0x0800) Trailer: 66CCDEBD Internet Protocol, Src: 165.227.249.147 (165.227.249.147), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x5426 (21542) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xe75f [correct] Good: True Bad : False Source: 165.227.249.147 (165.227.249.147) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0x406d2c7d Sequence: 1 Data (92 bytes) 0000 00 0c 29 1d cf fc 00 13 c4 80 d3 aa 08 00 45 00 ..)...........E. 0010 00 78 54 26 00 00 40 32 e7 5f a5 e3 f9 93 a5 e3 .xT&..@2._...... 0020 f9 73 40 6d 2c 7d 00 00 00 01 c4 aa a3 31 df 83 .s@m,}.......1.. 0030 72 9f 26 c1 f2 11 57 68 08 e8 0c bc 45 e6 df 7d r.&...Wh....E..} 0040 03 03 e1 38 d2 65 08 7a b1 cd bd 22 ee 1a cd b6 ...8.e.z...".... 0050 ef de 8f b7 f3 4d ea e4 e2 0f 7a 2d 5b 19 d6 dd .....M....z-[... 0060 3a 33 89 20 e4 92 e4 d4 1d aa e4 9b 0f eb f3 3f :3. ...........? 0070 b6 ad ee d0 dc 04 fa 28 18 25 1d 16 21 4b a6 da .......(.%..!K.. 0080 bf 2e d1 a1 c6 57 66 cc de bd .....Wf... Frame 12 (138 bytes on wire, 138 bytes captured) Arrival Time: Feb 10, 2006 10:47:31.055115000 Time delta from previous packet: 1.032312000 seconds Time since reference or first frame: 11.648037000 seconds Frame Number: 12 Packet Length: 138 bytes Capture Length: 138 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc), Dst: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa) Destination: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa) Source: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Type: IP (0x0800) Trailer: 0F1A1200 Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.147 (165.227.249.147) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0002 (2) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: ESP (0x32) Header checksum: 0xfb83 [correct] Good: True Bad : False Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.147 (165.227.249.147) Encapsulating Security Payload SPI: 0xe6d92dc1 Sequence: 2 Data (92 bytes) 0000 00 13 c4 80 d3 aa 00 0c 29 1d cf fc 08 00 45 00 ........).....E. 0010 00 78 00 02 00 00 80 32 fb 83 a5 e3 f9 73 a5 e3 .x.....2.....s.. 0020 f9 93 e6 d9 2d c1 00 00 00 02 e2 7a 85 f7 95 73 ....-......z...s 0030 6a 71 5a ea 42 62 69 28 9b 2e 3b 12 47 a8 6e 06 jqZ.Bbi(..;.G.n. 0040 95 6b 0e b4 a8 06 26 7b 73 e5 93 18 79 81 94 4b .k....&{s...y..K 0050 64 47 b2 c1 d2 27 9c 39 b0 d4 92 76 27 50 0b 72 dG...'.9...v'P.r 0060 33 10 c8 43 ba 06 ac 75 ff c0 09 15 f7 32 b3 fa 3..C...u.....2.. 0070 63 c7 16 e2 28 28 ad 13 43 7f 4e 18 35 c4 33 90 c...((..C.N.5.3. 0080 36 72 a3 5c 90 1b 0f 1a 12 00 6r.\...... Frame 13 (138 bytes on wire, 138 bytes captured) Arrival Time: Feb 10, 2006 10:47:31.055697000 Time delta from previous packet: 0.000582000 seconds Time since reference or first frame: 11.648619000 seconds Frame Number: 13 Packet Length: 138 bytes Capture Length: 138 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa), Dst: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Destination: 00:0c:29:1d:cf:fc (00:0c:29:1d:cf:fc) Source: 00:13:c4:80:d3:aa (00:13:c4:80:d3:aa) Type: IP (0x0800) Trailer: 5D86144F Internet Protocol, Src: 165.227.249.147 (165.227.249.147), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x5826 (22566) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xe35f [correct] Good: True Bad : False Source: 165.227.249.147 (165.227.249.147) Destination: 165.227.249.115 (165.227.249.115) Encapsulating Security Payload SPI: 0x406d2c7d Sequence: 2 Data (92 bytes) 0000 00 0c 29 1d cf fc 00 13 c4 80 d3 aa 08 00 45 00 ..)...........E. 0010 00 78 58 26 00 00 40 32 e3 5f a5 e3 f9 93 a5 e3 .xX&..@2._...... 0020 f9 73 40 6d 2c 7d 00 00 00 02 c1 73 20 ab e9 da .s@m,}.....s ... 0030 c3 b2 99 1b 84 31 f6 19 08 fc 85 69 62 92 a2 e7 .....1.....ib... 0040 6c 7a 06 c9 99 b6 15 90 a3 78 c2 f9 82 8d 19 31 lz.......x.....1 0050 eb 08 63 9b c7 14 3a cb eb 15 ec 23 e1 64 3c 07 ..c...:....#.d<. 0060 55 28 21 04 d7 a7 d2 cb a6 ba 4c ed e7 18 4e 88 U(!.......L...N. 0070 e8 f1 8f ad 50 e2 9a e2 9f ba 4b e7 e5 1c a1 02 ....P.....K..... 0080 aa ed e9 30 21 e7 5d 86 14 4f ...0!.]..O