Frame 1 (166 bytes on wire, 166 bytes captured) Arrival Time: Jun 16, 2010 14:30:47.304235000 [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 166 bytes Capture Length: 166 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) Destination: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) Address: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.148 (165.227.249.148) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x01c3 (451) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9c2 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.148 (165.227.249.148) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0x3724 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 18B2C511075F8DB9 Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Next payload: NONE (0) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n 0000 00 0c 29 dc 1d a7 00 0c 29 6d a9 a5 08 00 45 00 ..).....)m....E. 0010 00 98 01 c3 00 00 80 11 f9 c2 a5 e3 f9 73 a5 e3 .............s.. 0020 f9 94 01 f4 01 f4 00 84 37 24 18 b2 c5 11 07 5f ........7$....._ 0030 8d b9 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 ..D..-.......F.y 0090 dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 ..........>.in.c 00a0 81 b5 ec 42 7b 1f ...B{. Frame 2 (166 bytes on wire, 166 bytes captured) Arrival Time: Jun 16, 2010 14:30:47.304253000 [Time delta from previous captured frame: 0.000018000 seconds] [Time delta from previous displayed frame: 0.000018000 seconds] [Time since reference or first frame: 0.000018000 seconds] Frame Number: 2 Frame Length: 166 bytes Capture Length: 166 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) Destination: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) Address: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.148 (165.227.249.148) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x01c3 (451) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9c2 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.148 (165.227.249.148) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 132 Checksum: 0x3724 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 18B2C511075F8DB9 Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 124 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Next payload: NONE (0) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n 0000 00 0c 29 dc 1d a7 00 0c 29 6d a9 a5 08 00 45 00 ..).....)m....E. 0010 00 98 01 c3 00 00 80 11 f9 c2 a5 e3 f9 73 a5 e3 .............s.. 0020 f9 94 01 f4 01 f4 00 84 37 24 18 b2 c5 11 07 5f ........7$....._ 0030 8d b9 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00 .....|...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 ..D..-.......F.y 0090 dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 ..........>.in.c 00a0 81 b5 ec 42 7b 1f ...B{. Frame 3 (206 bytes on wire, 206 bytes captured) Arrival Time: Jun 16, 2010 14:30:47.307588000 [Time delta from previous captured frame: 0.003335000 seconds] [Time delta from previous displayed frame: 0.003335000 seconds] [Time since reference or first frame: 0.003353000 seconds] Frame Number: 3 Frame Length: 206 bytes Capture Length: 206 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) Address: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.148 (165.227.249.148), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 192 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb5d [correct] [Good: True] [Bad : False] Source: 165.227.249.148 (165.227.249.148) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 172 Checksum: 0x3118 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 18B2C511075F8DB9 Responder cookie: EAE441F8AF4D38D0 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 164 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Next payload: Vendor ID (13) Payload length: 20 Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Next payload: NONE (0) Payload length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 0c 29 6d a9 a5 00 0c 29 dc 1d a7 08 00 45 00 ..)m....).....E. 0010 00 c0 00 00 40 00 40 11 fb 5d a5 e3 f9 94 a5 e3 ....@.@..]...... 0020 f9 73 01 f4 01 f4 00 ac 31 18 18 b2 c5 11 07 5f .s......1......_ 0030 8d b9 ea e4 41 f8 af 4d 38 d0 01 10 02 00 00 00 ....A..M8....... 0040 00 00 00 00 00 a4 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 0090 7b 1f 0d 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 00a0 9d 92 15 52 9d 56 0d 00 00 14 4a 13 1c 81 07 03 ...R.V....J..... 00b0 58 45 5c 57 28 f2 0e 95 45 2f 00 00 00 14 af ca XE\W(...E/...... 00c0 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 4 (206 bytes on wire, 206 bytes captured) Arrival Time: Jun 16, 2010 14:30:47.307605000 [Time delta from previous captured frame: 0.000017000 seconds] [Time delta from previous displayed frame: 0.000017000 seconds] [Time since reference or first frame: 0.003370000 seconds] Frame Number: 4 Frame Length: 206 bytes Capture Length: 206 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) Address: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.148 (165.227.249.148), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 192 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb5d [correct] [Good: True] [Bad : False] Source: 165.227.249.148 (165.227.249.148) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 172 Checksum: 0x3118 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 18B2C511075F8DB9 Responder cookie: EAE441F8AF4D38D0 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 164 Security Association payload Next payload: Vendor ID (13) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Group-Description (4): Alternate 1024-bit MODP group (2) Authentication-Method (3): PSK (1) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Next payload: Vendor ID (13) Payload length: 20 Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Next payload: NONE (0) Payload length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 0c 29 6d a9 a5 00 0c 29 dc 1d a7 08 00 45 00 ..)m....).....E. 0010 00 c0 00 00 40 00 40 11 fb 5d a5 e3 f9 94 a5 e3 ....@.@..]...... 0020 f9 73 01 f4 01 f4 00 ac 31 18 18 b2 c5 11 07 5f .s......1......_ 0030 8d b9 ea e4 41 f8 af 4d 38 d0 01 10 02 00 00 00 ....A..M8....... 0040 00 00 00 00 00 a4 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04 ................ 0070 00 02 80 03 00 01 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 ......>.in.c...B 0090 7b 1f 0d 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 {.....}...S..o,. 00a0 9d 92 15 52 9d 56 0d 00 00 14 4a 13 1c 81 07 03 ...R.V....J..... 00b0 58 45 5c 57 28 f2 0e 95 45 2f 00 00 00 14 af ca XE\W(...E/...... 00c0 d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00 ..h...k...wW.. Frame 5 (346 bytes on wire, 346 bytes captured) Arrival Time: Jun 16, 2010 14:30:49.107353000 [Time delta from previous captured frame: 1.799748000 seconds] [Time delta from previous displayed frame: 1.799748000 seconds] [Time since reference or first frame: 1.803118000 seconds] Frame Number: 5 Frame Length: 346 bytes Capture Length: 346 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) Destination: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) Address: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.148 (165.227.249.148) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x01c7 (455) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf90a [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.148 (165.227.249.148) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0xc25a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 18B2C511075F8DB9 Responder cookie: EAE441F8AF4D38D0 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 304 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Payload length: 24 Nonce Data NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Payload length: 24 Hash of address and port: 70B6F109BCEC09A0104F6C6EE001608FBDA8FDDB NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: Vendor ID (13) Payload length: 24 Hash of address and port: A5EF62A54CF7282571AC579063A0EC85E373CDD2 Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Next payload: Vendor ID (13) Payload length: 48 Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Vendor ID: DA8E937880010000 Next payload: Vendor ID (13) Payload length: 12 Vendor ID: DA8E937880010000 Vendor ID: draft-beaulieu-ike-xauth-02.txt Next payload: NONE (0) Payload length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 0c 29 dc 1d a7 00 0c 29 6d a9 a5 08 00 45 00 ..).....)m....E. 0010 01 4c 01 c7 00 00 80 11 f9 0a a5 e3 f9 73 a5 e3 .L...........s.. 0020 f9 94 01 f4 01 f4 01 38 c2 5a 18 b2 c5 11 07 5f .......8.Z....._ 0030 8d b9 ea e4 41 f8 af 4d 38 d0 04 10 02 00 00 00 ....A..M8....... 0040 00 00 00 00 01 30 0a 00 00 84 17 fd b3 91 2b 7f .....0........+. 0050 91 6c 9b fb 1f 4a ff b9 f8 86 c0 d9 65 5f 3d 75 .l...J......e_=u 0060 35 cb fc d8 aa d4 7a d9 19 c8 fd c0 5f b8 72 81 5.....z....._.r. 0070 73 ec d3 6a 92 8a 2b 42 28 df 19 ac bf 51 a4 bb s..j..+B(....Q.. 0080 e2 b4 57 87 1a 36 70 32 56 ba 60 4d 06 81 2a 28 ..W..6p2V.`M..*( 0090 68 48 5a c7 39 bd 58 c5 e2 4f a8 e6 e0 b1 6e c4 hHZ.9.X..O....n. 00a0 a9 64 ca db c4 c8 7e 37 2a 63 93 07 11 96 70 95 .d....~7*c....p. 00b0 c0 5c e9 c4 48 81 aa 2f 7c 48 5d 5a 98 ae 75 67 .\..H../|H]Z..ug 00c0 be 04 4a ee 4c 3c 0b 05 b7 2a 82 00 00 18 92 ce ..J.L<...*...... 00d0 ce f3 4a dc 05 d5 f5 3a 4f ee e4 e0 35 cc 47 a9 ..J....:O...5.G. 00e0 36 ce 82 00 00 18 70 b6 f1 09 bc ec 09 a0 10 4f 6.....p........O 00f0 6c 6e e0 01 60 8f bd a8 fd db 0d 00 00 18 a5 ef ln..`........... 0100 62 a5 4c f7 28 25 71 ac 57 90 63 a0 ec 85 e3 73 b.L.(%q.W.c....s 0110 cd d2 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .....0G......... 0120 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0130 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0140 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0150 00 0c 09 00 26 89 df d6 b7 12 ....&..... Frame 6 (346 bytes on wire, 346 bytes captured) Arrival Time: Jun 16, 2010 14:30:49.107369000 [Time delta from previous captured frame: 0.000016000 seconds] [Time delta from previous displayed frame: 0.000016000 seconds] [Time since reference or first frame: 1.803134000 seconds] Frame Number: 6 Frame Length: 346 bytes Capture Length: 346 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) Destination: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) Address: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.148 (165.227.249.148) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 332 Identification: 0x01c7 (455) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf90a [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.148 (165.227.249.148) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 312 Checksum: 0xc25a [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 18B2C511075F8DB9 Responder cookie: EAE441F8AF4D38D0 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 304 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Payload length: 24 Nonce Data NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Payload length: 24 Hash of address and port: 70B6F109BCEC09A0104F6C6EE001608FBDA8FDDB NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: Vendor ID (13) Payload length: 24 Hash of address and port: A5EF62A54CF7282571AC579063A0EC85E373CDD2 Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Next payload: Vendor ID (13) Payload length: 48 Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103... Vendor ID: DA8E937880010000 Next payload: Vendor ID (13) Payload length: 12 Vendor ID: DA8E937880010000 Vendor ID: draft-beaulieu-ike-xauth-02.txt Next payload: NONE (0) Payload length: 12 Vendor ID: draft-beaulieu-ike-xauth-02.txt 0000 00 0c 29 dc 1d a7 00 0c 29 6d a9 a5 08 00 45 00 ..).....)m....E. 0010 01 4c 01 c7 00 00 80 11 f9 0a a5 e3 f9 73 a5 e3 .L...........s.. 0020 f9 94 01 f4 01 f4 01 38 c2 5a 18 b2 c5 11 07 5f .......8.Z....._ 0030 8d b9 ea e4 41 f8 af 4d 38 d0 04 10 02 00 00 00 ....A..M8....... 0040 00 00 00 00 01 30 0a 00 00 84 17 fd b3 91 2b 7f .....0........+. 0050 91 6c 9b fb 1f 4a ff b9 f8 86 c0 d9 65 5f 3d 75 .l...J......e_=u 0060 35 cb fc d8 aa d4 7a d9 19 c8 fd c0 5f b8 72 81 5.....z....._.r. 0070 73 ec d3 6a 92 8a 2b 42 28 df 19 ac bf 51 a4 bb s..j..+B(....Q.. 0080 e2 b4 57 87 1a 36 70 32 56 ba 60 4d 06 81 2a 28 ..W..6p2V.`M..*( 0090 68 48 5a c7 39 bd 58 c5 e2 4f a8 e6 e0 b1 6e c4 hHZ.9.X..O....n. 00a0 a9 64 ca db c4 c8 7e 37 2a 63 93 07 11 96 70 95 .d....~7*c....p. 00b0 c0 5c e9 c4 48 81 aa 2f 7c 48 5d 5a 98 ae 75 67 .\..H../|H]Z..ug 00c0 be 04 4a ee 4c 3c 0b 05 b7 2a 82 00 00 18 92 ce ..J.L<...*...... 00d0 ce f3 4a dc 05 d5 f5 3a 4f ee e4 e0 35 cc 47 a9 ..J....:O...5.G. 00e0 36 ce 82 00 00 18 70 b6 f1 09 bc ec 09 a0 10 4f 6.....p........O 00f0 6c 6e e0 01 60 8f bd a8 fd db 0d 00 00 18 a5 ef ln..`........... 0100 62 a5 4c f7 28 25 71 ac 57 90 63 a0 ec 85 e3 73 b.L.(%q.W.c....s 0110 cd d2 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6 .....0G......... 0120 d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31 ..V\h..........1 0130 30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29 0.1.1 (Build 10) 0140 00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00 .........x...... 0150 00 0c 09 00 26 89 df d6 b7 12 ....&..... Frame 7 (274 bytes on wire, 274 bytes captured) Arrival Time: Jun 16, 2010 14:30:49.124236000 [Time delta from previous captured frame: 0.016867000 seconds] [Time delta from previous displayed frame: 0.016867000 seconds] [Time since reference or first frame: 1.820001000 seconds] Frame Number: 7 Frame Length: 274 bytes Capture Length: 274 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) Address: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.148 (165.227.249.148), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 260 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb19 [correct] [Good: True] [Bad : False] Source: 165.227.249.148 (165.227.249.148) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 240 Checksum: 0xc1d6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 18B2C511075F8DB9 Responder cookie: EAE441F8AF4D38D0 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 232 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Payload length: 24 Nonce Data NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Payload length: 24 Hash of address and port: A5EF62A54CF7282571AC579063A0EC85E373CDD2 NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NONE (0) Payload length: 24 Hash of address and port: 70B6F109BCEC09A0104F6C6EE001608FBDA8FDDB 0000 00 0c 29 6d a9 a5 00 0c 29 dc 1d a7 08 00 45 00 ..)m....).....E. 0010 01 04 00 00 40 00 40 11 fb 19 a5 e3 f9 94 a5 e3 ....@.@......... 0020 f9 73 01 f4 01 f4 00 f0 c1 d6 18 b2 c5 11 07 5f .s............._ 0030 8d b9 ea e4 41 f8 af 4d 38 d0 04 10 02 00 00 00 ....A..M8....... 0040 00 00 00 00 00 e8 0a 00 00 84 01 9f 53 08 1e 7a ............S..z 0050 74 ff 4c e5 cf a2 ba a1 8c 78 86 56 c5 78 fc 9b t.L......x.V.x.. 0060 14 3b ab f6 89 76 8b 6a 70 c3 91 05 ed 3d 7d 5d .;...v.jp....=}] 0070 35 79 df 5e 5c 84 d6 12 62 64 36 3d 4f d9 be ac 5y.^\...bd6=O... 0080 98 4b 95 44 ac 26 20 34 c4 e0 6c 81 ac 9f e9 73 .K.D.& 4..l....s 0090 67 4f d6 31 a7 e9 d9 6a 86 8b 5d d1 fc ff e4 4e gO.1...j..]....N 00a0 37 d8 7c 77 f7 97 8e 0c db 3a 3c 97 fd 27 6a 17 7.|w.....:<..'j. 00b0 a1 cd 26 98 f0 46 69 5c 6e fc 7f 39 e7 bc 48 bf ..&..Fi\n..9..H. 00c0 37 68 b8 86 e4 6a 2d d1 bb a4 82 00 00 18 0d 42 7h...j-........B 00d0 83 17 9c 1a 34 95 c1 34 82 25 b5 e0 02 ed cb 82 ....4..4.%...... 00e0 88 03 82 00 00 18 a5 ef 62 a5 4c f7 28 25 71 ac ........b.L.(%q. 00f0 57 90 63 a0 ec 85 e3 73 cd d2 00 00 00 18 70 b6 W.c....s......p. 0100 f1 09 bc ec 09 a0 10 4f 6c 6e e0 01 60 8f bd a8 .......Oln..`... 0110 fd db .. Frame 8 (274 bytes on wire, 274 bytes captured) Arrival Time: Jun 16, 2010 14:30:49.124247000 [Time delta from previous captured frame: 0.000011000 seconds] [Time delta from previous displayed frame: 0.000011000 seconds] [Time since reference or first frame: 1.820012000 seconds] Frame Number: 8 Frame Length: 274 bytes Capture Length: 274 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) Address: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.148 (165.227.249.148), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 260 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb19 [correct] [Good: True] [Bad : False] Source: 165.227.249.148 (165.227.249.148) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 240 Checksum: 0xc1d6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 18B2C511075F8DB9 Responder cookie: EAE441F8AF4D38D0 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 232 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Payload length: 24 Nonce Data NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) (130) Payload length: 24 Hash of address and port: A5EF62A54CF7282571AC579063A0EC85E373CDD2 NAT-D (draft-ietf-ipsec-nat-t-ike-01 to 03) payload Next payload: NONE (0) Payload length: 24 Hash of address and port: 70B6F109BCEC09A0104F6C6EE001608FBDA8FDDB 0000 00 0c 29 6d a9 a5 00 0c 29 dc 1d a7 08 00 45 00 ..)m....).....E. 0010 01 04 00 00 40 00 40 11 fb 19 a5 e3 f9 94 a5 e3 ....@.@......... 0020 f9 73 01 f4 01 f4 00 f0 c1 d6 18 b2 c5 11 07 5f .s............._ 0030 8d b9 ea e4 41 f8 af 4d 38 d0 04 10 02 00 00 00 ....A..M8....... 0040 00 00 00 00 00 e8 0a 00 00 84 01 9f 53 08 1e 7a ............S..z 0050 74 ff 4c e5 cf a2 ba a1 8c 78 86 56 c5 78 fc 9b t.L......x.V.x.. 0060 14 3b ab f6 89 76 8b 6a 70 c3 91 05 ed 3d 7d 5d .;...v.jp....=}] 0070 35 79 df 5e 5c 84 d6 12 62 64 36 3d 4f d9 be ac 5y.^\...bd6=O... 0080 98 4b 95 44 ac 26 20 34 c4 e0 6c 81 ac 9f e9 73 .K.D.& 4..l....s 0090 67 4f d6 31 a7 e9 d9 6a 86 8b 5d d1 fc ff e4 4e gO.1...j..]....N 00a0 37 d8 7c 77 f7 97 8e 0c db 3a 3c 97 fd 27 6a 17 7.|w.....:<..'j. 00b0 a1 cd 26 98 f0 46 69 5c 6e fc 7f 39 e7 bc 48 bf ..&..Fi\n..9..H. 00c0 37 68 b8 86 e4 6a 2d d1 bb a4 82 00 00 18 0d 42 7h...j-........B 00d0 83 17 9c 1a 34 95 c1 34 82 25 b5 e0 02 ed cb 82 ....4..4.%...... 00e0 88 03 82 00 00 18 a5 ef 62 a5 4c f7 28 25 71 ac ........b.L.(%q. 00f0 57 90 63 a0 ec 85 e3 73 cd d2 00 00 00 18 70 b6 W.c....s......p. 0100 f1 09 bc ec 09 a0 10 4f 6c 6e e0 01 60 8f bd a8 .......Oln..`... 0110 fd db .. Frame 9 (134 bytes on wire, 134 bytes captured) Arrival Time: Jun 16, 2010 14:30:50.160948000 [Time delta from previous captured frame: 1.036701000 seconds] [Time delta from previous displayed frame: 1.036701000 seconds] [Time since reference or first frame: 2.856713000 seconds] Frame Number: 9 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) Destination: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) Address: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.148 (165.227.249.148) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x01ca (458) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9db [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.148 (165.227.249.148) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xb11f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 18B2C511075F8DB9 Responder cookie: EAE441F8AF4D38D0 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 dc 1d a7 00 0c 29 6d a9 a5 08 00 45 00 ..).....)m....E. 0010 00 78 01 ca 00 00 80 11 f9 db a5 e3 f9 73 a5 e3 .x...........s.. 0020 f9 94 01 f4 01 f4 00 64 b1 1f 18 b2 c5 11 07 5f .......d......._ 0030 8d b9 ea e4 41 f8 af 4d 38 d0 05 10 02 01 00 00 ....A..M8....... 0040 00 00 00 00 00 5c 5a 24 21 b6 de 09 50 ac 0f db .....\Z$!...P... 0050 fd 8b 5b a1 d9 5d de 98 60 08 67 27 b1 aa 99 b6 ..[..]..`.g'.... 0060 01 99 0e 43 2a de 53 b5 a1 aa 2d a3 0e b2 58 07 ...C*.S...-...X. 0070 ee 89 e2 5b 2c cb 09 ce 09 fe 22 0f 95 cd c8 e2 ...[,....."..... 0080 69 28 04 f0 d9 1d i(.... Frame 10 (134 bytes on wire, 134 bytes captured) Arrival Time: Jun 16, 2010 14:30:50.160966000 [Time delta from previous captured frame: 0.000018000 seconds] [Time delta from previous displayed frame: 0.000018000 seconds] [Time since reference or first frame: 2.856731000 seconds] Frame Number: 10 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) Destination: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) Address: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.148 (165.227.249.148) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x01ca (458) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9db [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.148 (165.227.249.148) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xb11f [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 18B2C511075F8DB9 Responder cookie: EAE441F8AF4D38D0 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 dc 1d a7 00 0c 29 6d a9 a5 08 00 45 00 ..).....)m....E. 0010 00 78 01 ca 00 00 80 11 f9 db a5 e3 f9 73 a5 e3 .x...........s.. 0020 f9 94 01 f4 01 f4 00 64 b1 1f 18 b2 c5 11 07 5f .......d......._ 0030 8d b9 ea e4 41 f8 af 4d 38 d0 05 10 02 01 00 00 ....A..M8....... 0040 00 00 00 00 00 5c 5a 24 21 b6 de 09 50 ac 0f db .....\Z$!...P... 0050 fd 8b 5b a1 d9 5d de 98 60 08 67 27 b1 aa 99 b6 ..[..]..`.g'.... 0060 01 99 0e 43 2a de 53 b5 a1 aa 2d a3 0e b2 58 07 ...C*.S...-...X. 0070 ee 89 e2 5b 2c cb 09 ce 09 fe 22 0f 95 cd c8 e2 ...[,....."..... 0080 69 28 04 f0 d9 1d i(.... Frame 11 (134 bytes on wire, 134 bytes captured) Arrival Time: Jun 16, 2010 14:30:50.161756000 [Time delta from previous captured frame: 0.000790000 seconds] [Time delta from previous displayed frame: 0.000790000 seconds] [Time since reference or first frame: 2.857521000 seconds] Frame Number: 11 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) Address: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.148 (165.227.249.148), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfba5 [correct] [Good: True] [Bad : False] Source: 165.227.249.148 (165.227.249.148) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xcf31 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 18B2C511075F8DB9 Responder cookie: EAE441F8AF4D38D0 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 6d a9 a5 00 0c 29 dc 1d a7 08 00 45 00 ..)m....).....E. 0010 00 78 00 00 40 00 40 11 fb a5 a5 e3 f9 94 a5 e3 .x..@.@......... 0020 f9 73 01 f4 01 f4 00 64 cf 31 18 b2 c5 11 07 5f .s.....d.1....._ 0030 8d b9 ea e4 41 f8 af 4d 38 d0 05 10 02 01 00 00 ....A..M8....... 0040 00 00 00 00 00 5c af 65 4c 4f c0 9a 22 8d 02 bd .....\.eLO.."... 0050 04 a7 6b a7 10 24 95 86 60 e1 02 f7 fd fc d2 43 ..k..$..`......C 0060 25 6a 29 8e 5a 4f f9 e8 17 4a cc 84 b2 4a 65 1a %j).ZO...J...Je. 0070 02 2f 57 32 85 84 cd 7c 2e 0f 20 fb 5d 4c eb 1b ./W2...|.. .]L.. 0080 3a dc 98 8b 7c aa :...|. Frame 12 (134 bytes on wire, 134 bytes captured) Arrival Time: Jun 16, 2010 14:30:50.161769000 [Time delta from previous captured frame: 0.000013000 seconds] [Time delta from previous displayed frame: 0.000013000 seconds] [Time since reference or first frame: 2.857534000 seconds] Frame Number: 12 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) Address: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.148 (165.227.249.148), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfba5 [correct] [Good: True] [Bad : False] Source: 165.227.249.148 (165.227.249.148) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xcf31 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 18B2C511075F8DB9 Responder cookie: EAE441F8AF4D38D0 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 6d a9 a5 00 0c 29 dc 1d a7 08 00 45 00 ..)m....).....E. 0010 00 78 00 00 40 00 40 11 fb a5 a5 e3 f9 94 a5 e3 .x..@.@......... 0020 f9 73 01 f4 01 f4 00 64 cf 31 18 b2 c5 11 07 5f .s.....d.1....._ 0030 8d b9 ea e4 41 f8 af 4d 38 d0 05 10 02 01 00 00 ....A..M8....... 0040 00 00 00 00 00 5c af 65 4c 4f c0 9a 22 8d 02 bd .....\.eLO.."... 0050 04 a7 6b a7 10 24 95 86 60 e1 02 f7 fd fc d2 43 ..k..$..`......C 0060 25 6a 29 8e 5a 4f f9 e8 17 4a cc 84 b2 4a 65 1a %j).ZO...J...Je. 0070 02 2f 57 32 85 84 cd 7c 2e 0f 20 fb 5d 4c eb 1b ./W2...|.. .]L.. 0080 3a dc 98 8b 7c aa :...|. Frame 13 (342 bytes on wire, 342 bytes captured) Arrival Time: Jun 16, 2010 14:30:52.330425000 [Time delta from previous captured frame: 2.168656000 seconds] [Time delta from previous displayed frame: 2.168656000 seconds] [Time since reference or first frame: 5.026190000 seconds] Frame Number: 13 Frame Length: 342 bytes Capture Length: 342 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) Destination: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) Address: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.148 (165.227.249.148) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x01d3 (467) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf902 [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.148 (165.227.249.148) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x2880 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 18B2C511075F8DB9 Responder cookie: EAE441F8AF4D38D0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x9c9d3100 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 dc 1d a7 00 0c 29 6d a9 a5 08 00 45 00 ..).....)m....E. 0010 01 48 01 d3 00 00 80 11 f9 02 a5 e3 f9 73 a5 e3 .H...........s.. 0020 f9 94 01 f4 01 f4 01 34 28 80 18 b2 c5 11 07 5f .......4(......_ 0030 8d b9 ea e4 41 f8 af 4d 38 d0 08 10 20 01 9c 9d ....A..M8... ... 0040 31 00 00 00 01 2c f3 2a 2b 4a 6c 0b 24 b6 de 77 1....,.*+Jl.$..w 0050 6d 71 7c 51 a8 b3 f9 12 bb 06 e5 e5 71 61 b6 ce mq|Q........qa.. 0060 5e b0 b6 aa e3 8a c5 38 7a 22 a4 86 39 20 90 38 ^......8z"..9 .8 0070 73 6f 18 6a 4f d4 47 bf 74 59 bf 70 4f 61 bd 66 so.jO.G.tY.pOa.f 0080 31 d6 76 dd 50 57 e5 2a 83 0c 9d d0 22 ab 3b 2c 1.v.PW.*....".;, 0090 50 b2 0f df a3 08 66 b6 97 22 2f ac de e7 1a 14 P.....f.."/..... 00a0 cc 97 a5 00 e6 9c 96 71 dc a3 a6 6c 97 39 f3 a2 .......q...l.9.. 00b0 5d 1a a7 95 a2 8f 7b 20 18 52 d4 a5 0e f6 cc b0 ].....{ .R...... 00c0 45 86 44 11 57 c5 be e1 75 cf 65 91 23 34 bb e1 E.D.W...u.e.#4.. 00d0 0c 40 71 72 eb 51 05 65 df b4 bb 1e dd 30 52 15 .@qr.Q.e.....0R. 00e0 76 8b 55 a8 9c 30 0b 94 6a dc 50 ca 19 2a 43 cd v.U..0..j.P..*C. 00f0 14 28 f5 20 5f 92 1d 48 79 1a 3c 73 64 be 1d 31 .(. _..Hy..|.. 0140 8f 51 78 88 7b d4 75 a6 ba a5 37 52 c3 ea 6e 8e .Qx.{.u...7R..n. 0150 a0 27 2f 74 dd d8 .'/t.. Frame 16 (342 bytes on wire, 342 bytes captured) Arrival Time: Jun 16, 2010 14:30:52.359413000 [Time delta from previous captured frame: 0.000012000 seconds] [Time delta from previous displayed frame: 0.000012000 seconds] [Time since reference or first frame: 5.055178000 seconds] Frame Number: 16 Frame Length: 342 bytes Capture Length: 342 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7), Dst: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Destination: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) Address: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.148 (165.227.249.148), Dst: 165.227.249.115 (165.227.249.115) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfad5 [correct] [Good: True] [Bad : False] Source: 165.227.249.148 (165.227.249.148) Destination: 165.227.249.115 (165.227.249.115) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x07b1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 18B2C511075F8DB9 Responder cookie: EAE441F8AF4D38D0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x9c9d3100 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 6d a9 a5 00 0c 29 dc 1d a7 08 00 45 00 ..)m....).....E. 0010 01 48 00 00 40 00 40 11 fa d5 a5 e3 f9 94 a5 e3 .H..@.@......... 0020 f9 73 01 f4 01 f4 01 34 07 b1 18 b2 c5 11 07 5f .s.....4......._ 0030 8d b9 ea e4 41 f8 af 4d 38 d0 08 10 20 01 9c 9d ....A..M8... ... 0040 31 00 00 00 01 2c ca ba fa ca f9 06 23 ce 20 77 1....,......#. w 0050 5e fc bf 4e 73 a9 3d bb 62 a0 7b 8e f4 30 ef f4 ^..Ns.=.b.{..0.. 0060 59 a7 09 6b 84 47 d7 2a 15 30 0b af bf 59 93 92 Y..k.G.*.0...Y.. 0070 2f 53 30 55 13 1d 15 59 45 9d 11 6a 75 56 6f 5f /S0U...YE..juVo_ 0080 50 e1 a6 75 d2 8f 71 08 cf a3 5c fe 43 a6 31 4e P..u..q...\.C.1N 0090 8a 8c 36 1b 86 9d 1c 35 47 58 3f bc b5 99 4e 7f ..6....5GX?...N. 00a0 54 ec 5d 4f 2b 9d 04 e4 8a 36 74 35 18 ea 49 42 T.]O+....6t5..IB 00b0 5c 65 58 1c e6 a6 e5 67 c0 86 45 0c 99 94 d9 6e \eX....g..E....n 00c0 a4 00 f6 d0 69 12 3c bd ce 36 b8 0f 63 9d f5 94 ....i.<..6..c... 00d0 46 e9 49 ae 5d c8 ca b1 54 7b 58 20 58 02 8e 28 F.I.]...T{X X..( 00e0 5e a2 d0 3f bb 2b e6 aa 75 bc 88 14 46 a2 c1 a0 ^..?.+..u...F... 00f0 3a ac 05 89 5a a2 9b 40 98 a4 21 51 4e 5d b6 e9 :...Z..@..!QN].. 0100 b1 e4 7c 00 a3 96 58 cc 1f e1 c8 86 e0 7b 1a 7c ..|...X......{.| 0110 30 76 f1 e7 ac 62 3a 66 5c b4 26 18 ce 6f b9 8a 0v...b:f\.&..o.. 0120 79 eb 11 a2 2e ac 5b 04 c5 fc 83 f3 73 69 77 63 y.....[.....siwc 0130 69 c7 e8 43 19 04 de 7e 0f 9e 30 3e 8c 7c 1c f7 i..C...~..0>.|.. 0140 8f 51 78 88 7b d4 75 a6 ba a5 37 52 c3 ea 6e 8e .Qx.{.u...7R..n. 0150 a0 27 2f 74 dd d8 .'/t.. Frame 17 (102 bytes on wire, 102 bytes captured) Arrival Time: Jun 16, 2010 14:30:52.361478000 [Time delta from previous captured frame: 0.002065000 seconds] [Time delta from previous displayed frame: 0.002065000 seconds] [Time since reference or first frame: 5.057243000 seconds] Frame Number: 17 Frame Length: 102 bytes Capture Length: 102 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5), Dst: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) Destination: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) Address: 00:0c:29:dc:1d:a7 (00:0c:29:dc:1d:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) Address: 00:0c:29:6d:a9:a5 (00:0c:29:6d:a9:a5) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.148 (165.227.249.148) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x01d8 (472) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 128 Protocol: UDP (0x11) Header checksum: 0xf9ed [correct] [Good: True] [Bad : False] Source: 165.227.249.115 (165.227.249.115) Destination: 165.227.249.148 (165.227.249.148) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x7ef1 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 18B2C511075F8DB9 Responder cookie: EAE441F8AF4D38D0 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x9c9d3100 Length: 60 Encrypted payload (32 bytes) 0000 00 0c 29 dc 1d a7 00 0c 29 6d a9 a5 08 00 45 00 ..).....)m....E. 0010 00 58 01 d8 00 00 80 11 f9 ed a5 e3 f9 73 a5 e3 .X...........s.. 0020 f9 94 01 f4 01 f4 00 44 7e f1 18 b2 c5 11 07 5f .......D~......_ 0030 8d b9 ea e4 41 f8 af 4d 38 d0 08 10 20 01 9c 9d ....A..M8... ... 0040 31 00 00 00 00 3c 53 72 6e b1 7c 9f 2d ba b7 a8 1....