Frame 1 (166 bytes on wire, 166 bytes captured)
    Arrival Time: Mar 24, 2008 12:57:39.675544000
    Time delta from previous packet: 0.000000000 seconds
    Time since reference or first frame: 0.000000000 seconds
    Frame Number: 1
    Packet Length: 166 bytes
    Capture Length: 166 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01)
    Destination: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01)
    Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.149 (165.227.249.149)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 152
    Identification: 0x03ef (1007)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf795 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.149 (165.227.249.149)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 132
    Checksum: 0x17f3 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x982912908466C55C
    Responder cookie: 0x0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 124
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (3600)
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-00
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02

0000  00 17 c5 0f 77 01 00 0c 29 ab 06 ab 08 00 45 00   ....w...).....E.
0010  00 98 03 ef 00 00 80 11 f7 95 a5 e3 f9 73 a5 e3   .............s..
0020  f9 95 01 f4 01 f4 00 84 17 f3 98 29 12 90 84 66   ...........)...f
0030  c5 5c 00 00 00 00 00 00 00 00 01 10 02 00 00 00   .\..............
0040  00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00   .....|...8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04   ................
0070  00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00   ................
0080  00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79   ..D..-.......F.y
0090  dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63   ..........>.in.c
00a0  81 b5 ec 42 7b 1f                                 ...B{.

Frame 2 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Mar 24, 2008 12:57:39.676681000
    Time delta from previous packet: 0.001137000 seconds
    Time since reference or first frame: 0.001137000 seconds
    Frame Number: 2
    Packet Length: 138 bytes
    Capture Length: 138 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Source: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.149 (165.227.249.149), Dst: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 124
    Identification: 0x0d10 (3344)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: UDP (0x11)
    Header checksum: 0x6f90 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.149 (165.227.249.149)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 104
    Checksum: 0x60a2 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x982912908466C55C
    Responder cookie: 0x6D6798B9B3AA63A6
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 96
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (3600)
    Vendor ID payload
        Next payload: NONE (0)
        Length: 12
        Vendor ID: unknown vendor ID: 0x5B362BC820F60007

0000  00 0c 29 ab 06 ab 00 17 c5 0f 77 01 08 00 45 00   ..).......w...E.
0010  00 7c 0d 10 00 00 ff 11 6f 90 a5 e3 f9 95 a5 e3   .|......o.......
0020  f9 73 01 f4 01 f4 00 68 60 a2 98 29 12 90 84 66   .s.....h`..)...f
0030  c5 5c 6d 67 98 b9 b3 aa 63 a6 01 10 02 00 00 00   .\mg....c.......
0040  00 00 00 00 00 60 0d 00 00 38 00 00 00 01 00 00   .....`...8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04   ................
0070  00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 00 00   ................
0080  00 0c 5b 36 2b c8 20 f6 00 07                     ..[6+. ...

Frame 3 (298 bytes on wire, 298 bytes captured)
    Arrival Time: Mar 24, 2008 12:57:41.569895000
    Time delta from previous packet: 1.893214000 seconds
    Time since reference or first frame: 1.894351000 seconds
    Frame Number: 3
    Packet Length: 298 bytes
    Capture Length: 298 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01)
    Destination: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01)
    Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.149 (165.227.249.149)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 284
    Identification: 0x03f2 (1010)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf70e [correct]
        Good: True
        Bad : False
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.149 (165.227.249.149)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 264
    Checksum: 0x691e [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x982912908466C55C
    Responder cookie: 0x6D6798B9B3AA63A6
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 256
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: Vendor ID (13)
        Length: 24
        Nonce Data
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 48
        Vendor ID: unknown vendor ID: 0x47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103...
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 12
        Vendor ID: unknown vendor ID: 0xDA8E937880010000
    Vendor ID payload
        Next payload: NONE (0)
        Length: 12
        Vendor ID: draft-beaulieu-ike-xauth-02.txt

0000  00 17 c5 0f 77 01 00 0c 29 ab 06 ab 08 00 45 00   ....w...).....E.
0010  01 1c 03 f2 00 00 80 11 f7 0e a5 e3 f9 73 a5 e3   .............s..
0020  f9 95 01 f4 01 f4 01 08 69 1e 98 29 12 90 84 66   ........i..)...f
0030  c5 5c 6d 67 98 b9 b3 aa 63 a6 04 10 02 00 00 00   .\mg....c.......
0040  00 00 00 00 01 00 0a 00 00 84 a5 00 51 39 2d 7a   ............Q9-z
0050  f2 c5 c7 f0 15 cf d6 e6 71 0f 05 62 23 e4 8d 6d   ........q..b#..m
0060  3b d3 b2 32 92 43 75 f6 46 67 c7 8a 91 b9 b4 0c   ;..2.Cu.Fg......
0070  f5 08 41 47 71 39 2e fb 4a ef d0 34 b6 ac 1a e3   ..AGq9..J..4....
0080  90 da bf 20 60 86 39 73 d2 41 d2 05 7c f3 f0 be   ... `.9s.A..|...
0090  bc 1e 50 d9 ed ec 73 eb 9b 36 11 69 27 3b 66 af   ..P...s..6.i';f.
00a0  66 e9 3d 58 89 72 70 37 72 0f a0 58 06 c7 55 c2   f.=X.rp7r..X..U.
00b0  30 ac a2 5f b7 d6 45 f5 90 ac 82 17 ef ec 49 0f   0.._..E.......I.
00c0  1d a3 7c ef 2b 7d da 25 d0 79 0d 00 00 18 21 c9   ..|.+}.%.y....!.
00d0  9d 85 5d 08 94 a7 d5 8e 99 89 8f 0b 84 85 c1 60   ..]............`
00e0  16 6e 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6   .n...0G.........
00f0  d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31   ..V\h..........1
0100  30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29   0.1.1 (Build 10)
0110  00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00   .........x......
0120  00 0c 09 00 26 89 df d6 b7 12                     ....&.....

Frame 4 (262 bytes on wire, 262 bytes captured)
    Arrival Time: Mar 24, 2008 12:57:41.606862000
    Time delta from previous packet: 0.036967000 seconds
    Time since reference or first frame: 1.931318000 seconds
    Frame Number: 4
    Packet Length: 262 bytes
    Capture Length: 262 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Source: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.149 (165.227.249.149), Dst: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 248
    Identification: 0x0d14 (3348)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: UDP (0x11)
    Header checksum: 0x6f10 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.149 (165.227.249.149)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 228
    Checksum: 0x7976 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x982912908466C55C
    Responder cookie: 0x6D6798B9B3AA63A6
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 220
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: Vendor ID (13)
        Length: 24
        Nonce Data
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 12
        Vendor ID: unknown vendor ID: 0x404BF439522CA3F6
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 12
        Vendor ID: draft-beaulieu-ike-xauth-02.txt
    Vendor ID payload
        Next payload: NONE (0)
        Length: 12
        Vendor ID: unknown vendor ID: 0xDA8E937880010000

0000  00 0c 29 ab 06 ab 00 17 c5 0f 77 01 08 00 45 00   ..).......w...E.
0010  00 f8 0d 14 00 00 ff 11 6f 10 a5 e3 f9 95 a5 e3   ........o.......
0020  f9 73 01 f4 01 f4 00 e4 79 76 98 29 12 90 84 66   .s......yv.)...f
0030  c5 5c 6d 67 98 b9 b3 aa 63 a6 04 10 02 00 00 00   .\mg....c.......
0040  00 00 00 00 00 dc 0a 00 00 84 21 72 9c 1c 1e e0   ..........!r....
0050  08 4f 2f 1d 20 00 89 b1 d4 59 ff c3 38 4d 7a d3   .O/. ....Y..8Mz.
0060  0b 35 40 fe c1 19 4f f0 31 f5 d7 a8 87 28 c4 85   .5@...O.1....(..
0070  36 4f 02 fd 08 85 22 d5 ad 76 a9 e2 72 83 90 87   6O...."..v..r...
0080  88 b6 d5 3f d8 75 b8 ed ae 34 ec e1 e7 89 8d 46   ...?.u...4.....F
0090  1b af 58 e7 6d 5d cb 74 dc 38 5f 75 55 4f 47 d8   ..X.m].t.8_uUOG.
00a0  97 3d fe a9 00 38 23 e6 c3 96 72 26 d8 39 f1 da   .=...8#...r&.9..
00b0  98 b3 f0 4f fd 32 6c 9f f2 6a 63 58 45 93 1b c3   ...O.2l..jcXE...
00c0  71 6d b6 3d d8 66 b0 d6 0e 06 0d 00 00 18 b0 46   qm.=.f.........F
00d0  26 7a c8 c7 ef 95 ef e3 ed 38 10 5a 4e f4 23 03   &z.......8.ZN.#.
00e0  cb 15 0d 00 00 0c 40 4b f4 39 52 2c a3 f6 0d 00   ......@K.9R,....
00f0  00 0c 09 00 26 89 df d6 b7 12 00 00 00 0c da 8e   ....&...........
0100  93 78 80 01 00 00                                 .x....

Frame 5 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Mar 24, 2008 12:57:42.462671000
    Time delta from previous packet: 0.855809000 seconds
    Time since reference or first frame: 2.787127000 seconds
    Frame Number: 5
    Packet Length: 134 bytes
    Capture Length: 134 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01)
    Destination: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01)
    Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.149 (165.227.249.149)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x03f5 (1013)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf7af [correct]
        Good: True
        Bad : False
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.149 (165.227.249.149)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 100
    Checksum: 0x3105 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x982912908466C55C
    Responder cookie: 0x6D6798B9B3AA63A6
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 92
    Encrypted payload (64 bytes)

0000  00 17 c5 0f 77 01 00 0c 29 ab 06 ab 08 00 45 00   ....w...).....E.
0010  00 78 03 f5 00 00 80 11 f7 af a5 e3 f9 73 a5 e3   .x...........s..
0020  f9 95 01 f4 01 f4 00 64 31 05 98 29 12 90 84 66   .......d1..)...f
0030  c5 5c 6d 67 98 b9 b3 aa 63 a6 05 10 02 01 00 00   .\mg....c.......
0040  00 00 00 00 00 5c 98 b8 c7 0c d9 8e 4c bc 03 ce   .....\......L...
0050  d8 d1 fe 57 4c 3d 60 e0 34 e3 fc 97 a1 f4 2b 3d   ...WL=`.4.....+=
0060  cb f3 79 36 90 35 25 61 eb f1 d5 d0 64 ed 94 a9   ..y6.5%a....d...
0070  ee e6 e2 9c 6d 5c f9 3a d7 31 e8 c7 51 f6 a8 27   ....m\.:.1..Q..'
0080  05 da bd 7b f9 95                                 ...{..

Frame 6 (118 bytes on wire, 118 bytes captured)
    Arrival Time: Mar 24, 2008 12:57:42.462673000
    Time delta from previous packet: 0.000002000 seconds
    Time since reference or first frame: 2.787129000 seconds
    Frame Number: 6
    Packet Length: 118 bytes
    Capture Length: 118 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Source: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.149 (165.227.249.149), Dst: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0x0d14 (3348)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: UDP (0x11)
    Header checksum: 0x6fa0 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.149 (165.227.249.149)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 84
    Checksum: 0xd4ee [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x982912908466C55C
    Responder cookie: 0x6D6798B9B3AA63A6
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 76
    Encrypted payload (48 bytes)

0000  00 0c 29 ab 06 ab 00 17 c5 0f 77 01 08 00 45 00   ..).......w...E.
0010  00 68 0d 14 00 00 ff 11 6f a0 a5 e3 f9 95 a5 e3   .h......o.......
0020  f9 73 01 f4 01 f4 00 54 d4 ee 98 29 12 90 84 66   .s.....T...)...f
0030  c5 5c 6d 67 98 b9 b3 aa 63 a6 05 10 02 01 00 00   .\mg....c.......
0040  00 00 00 00 00 4c c6 12 51 69 bc 07 4c c1 75 20   .....L..Qi..L.u 
0050  48 c7 b9 19 b3 fb 40 8f 4b d2 4c 49 86 1d 05 a6   H.....@.K.LI....
0060  2e 63 f3 62 a7 e4 85 f4 df 7b 57 96 b8 cf 27 6f   .c.b.....{W...'o
0070  40 26 fa 97 7c f3                                 @&..|.

Frame 7 (342 bytes on wire, 342 bytes captured)
    Arrival Time: Mar 24, 2008 12:57:44.755678000
    Time delta from previous packet: 2.293005000 seconds
    Time since reference or first frame: 5.080134000 seconds
    Frame Number: 7
    Packet Length: 342 bytes
    Capture Length: 342 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01)
    Destination: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01)
    Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.149 (165.227.249.149)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 328
    Identification: 0x03fe (1022)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf6d6 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.149 (165.227.249.149)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 308
    Checksum: 0xd8ed [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x982912908466C55C
    Responder cookie: 0x6D6798B9B3AA63A6
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x73EA7902
    Length: 300
    Encrypted payload (272 bytes)

0000  00 17 c5 0f 77 01 00 0c 29 ab 06 ab 08 00 45 00   ....w...).....E.
0010  01 48 03 fe 00 00 80 11 f6 d6 a5 e3 f9 73 a5 e3   .H...........s..
0020  f9 95 01 f4 01 f4 01 34 d8 ed 98 29 12 90 84 66   .......4...)...f
0030  c5 5c 6d 67 98 b9 b3 aa 63 a6 08 10 20 01 73 ea   .\mg....c... .s.
0040  79 02 00 00 01 2c 06 7d 99 33 fd 5e f0 2f 3f 92   y....,.}.3.^./?.
0050  90 b5 e2 61 95 3f c6 b3 95 a8 4d cb 54 82 4a 21   ...a.?....M.T.J!
0060  75 4d d2 a7 68 2b fb 92 be b5 ac 54 93 a5 7f 3c   uM..h+.....T...<
0070  5a eb ea 32 fb 84 6f fc e4 18 0b 2f 4a 42 e6 b8   Z..2..o..../JB..
0080  90 45 89 19 86 0a 23 46 5f c9 17 dd b6 bc 88 9b   .E....#F_.......
0090  a3 f1 60 d0 2c 8f d6 6d d7 60 a5 6b fc 98 40 ef   ..`.,..m.`.k..@.
00a0  1b d8 61 33 b0 a7 94 9d 3f 92 17 f6 51 b4 15 2b   ..a3....?...Q..+
00b0  06 36 1a 57 e5 71 64 2a 40 3f 8e e0 25 fb 9d 4e   .6.W.qd*@?..%..N
00c0  7c 0f 60 47 25 de a0 41 9f f0 e2 af 4e 8d a9 f5   |.`G%..A....N...
00d0  e2 82 dd c2 c3 53 ba 56 51 f4 39 dc 85 8f f9 e8   .....S.VQ.9.....
00e0  dd 97 a5 4f 5d 72 60 61 ab 94 bf 89 27 59 21 cd   ...O]r`a....'Y!.
00f0  c5 08 fd 07 75 11 6a b6 15 27 84 91 f3 f2 ae 97   ....u.j..'......
0100  76 ce 99 2a 1e 3c 41 d0 2f 34 b4 63 33 4d 6d 2f   v..*.<A./4.c3Mm/
0110  1b 51 4d be c7 28 70 22 1c e7 24 84 f2 cd be 27   .QM..(p"..$....'
0120  ea 46 89 0d c6 42 31 a0 15 99 c8 28 50 8b 2c 74   .F...B1....(P.,t
0130  6b 90 70 60 f6 4b 7f 97 2c 3d 19 7f 64 cd b8 35   k.p`.K..,=..d..5
0140  f3 8e cb 79 b9 8e 04 f9 3b 27 65 fc 26 54 c3 b1   ...y....;'e.&T..
0150  d4 65 26 11 a9 bf                                 .e&...

Frame 8 (342 bytes on wire, 342 bytes captured)
    Arrival Time: Mar 24, 2008 12:57:44.776516000
    Time delta from previous packet: 0.020838000 seconds
    Time since reference or first frame: 5.100972000 seconds
    Frame Number: 8
    Packet Length: 342 bytes
    Capture Length: 342 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Source: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.149 (165.227.249.149), Dst: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 328
    Identification: 0x0d1a (3354)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: UDP (0x11)
    Header checksum: 0x6eba [correct]
        Good: True
        Bad : False
    Source: 165.227.249.149 (165.227.249.149)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 308
    Checksum: 0x73a9 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x982912908466C55C
    Responder cookie: 0x6D6798B9B3AA63A6
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x73EA7902
    Length: 300
    Encrypted payload (272 bytes)

0000  00 0c 29 ab 06 ab 00 17 c5 0f 77 01 08 00 45 00   ..).......w...E.
0010  01 48 0d 1a 00 00 ff 11 6e ba a5 e3 f9 95 a5 e3   .H......n.......
0020  f9 73 01 f4 01 f4 01 34 73 a9 98 29 12 90 84 66   .s.....4s..)...f
0030  c5 5c 6d 67 98 b9 b3 aa 63 a6 08 10 20 01 73 ea   .\mg....c... .s.
0040  79 02 00 00 01 2c c0 f9 ed 67 09 2f 33 1b 4a 1e   y....,...g./3.J.
0050  18 71 c7 ef 23 4b 59 82 af 67 ae 17 17 82 ee 61   .q..#KY..g.....a
0060  ea a3 6d 56 57 b8 df 07 9f 34 d6 e1 3c 96 fb ab   ..mVW....4..<...
0070  15 e4 29 f0 dc 9e 59 5c 12 ce eb 54 2f 5a b7 d2   ..)...Y\...T/Z..
0080  50 cc c5 6d 58 16 14 b5 c1 90 91 72 65 8d 70 bc   P..mX......re.p.
0090  49 b6 a6 ad 52 de 6c dd ec 22 24 98 d5 0f 1d e0   I...R.l.."$.....
00a0  f6 d5 2d 8c b7 31 67 68 63 12 8c f3 45 90 dd e2   ..-..1ghc...E...
00b0  f1 e1 48 d6 b1 09 2d be 9a bb 54 ef c5 1f 0a 74   ..H...-...T....t
00c0  4c 80 8e 85 8c a8 97 7a a7 d7 bc 50 7c f1 7a e8   L......z...P|.z.
00d0  a8 d5 ae 29 c9 4b 83 1d 70 eb 52 9c 1a e9 a6 38   ...).K..p.R....8
00e0  51 7e 65 16 f8 43 1e 52 17 ab 40 b0 e4 82 b9 6a   Q~e..C.R..@....j
00f0  f5 17 63 31 07 cc d0 5c a8 13 92 80 ff 27 63 4e   ..c1...\.....'cN
0100  d1 5e 54 f5 b4 e9 93 64 d0 ab 0d 4e 38 ed fb 18   .^T....d...N8...
0110  2d 23 21 ba 36 f2 03 90 e8 ae a3 57 05 54 29 6d   -#!.6......W.T)m
0120  c4 4a ad c8 88 56 aa eb 76 60 b1 6f 02 de 2f 35   .J...V..v`.o../5
0130  cd 4b 83 bd a1 5b 2b c8 7f 2b 93 22 52 06 14 73   .K...[+..+."R..s
0140  58 e5 ec 6b 56 ea 4c 26 a7 a4 63 e3 07 de 45 d7   X..kV.L&..c...E.
0150  37 d4 f6 ee 22 a3                                 7...".

Frame 9 (102 bytes on wire, 102 bytes captured)
    Arrival Time: Mar 24, 2008 12:57:44.781563000
    Time delta from previous packet: 0.005047000 seconds
    Time since reference or first frame: 5.106019000 seconds
    Frame Number: 9
    Packet Length: 102 bytes
    Capture Length: 102 bytes
    Protocols in frame: eth:ip:udp:isakmp
Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01)
    Destination: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01)
    Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.149 (165.227.249.149)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 88
    Identification: 0x0403 (1027)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf7c1 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.149 (165.227.249.149)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 68
    Checksum: 0xdd55 [correct]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x982912908466C55C
    Responder cookie: 0x6D6798B9B3AA63A6
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x73EA7902
    Length: 60
    Encrypted payload (32 bytes)

0000  00 17 c5 0f 77 01 00 0c 29 ab 06 ab 08 00 45 00   ....w...).....E.
0010  00 58 04 03 00 00 80 11 f7 c1 a5 e3 f9 73 a5 e3   .X...........s..
0020  f9 95 01 f4 01 f4 00 44 dd 55 98 29 12 90 84 66   .......D.U.)...f
0030  c5 5c 6d 67 98 b9 b3 aa 63 a6 08 10 20 01 73 ea   .\mg....c... .s.
0040  79 02 00 00 00 3c af 45 ff 04 86 b6 66 08 db 9c   y....<.E....f...
0050  ca d2 5e b1 34 d5 f8 19 30 22 1e 40 1d b1 c5 c3   ..^.4...0".@....
0060  14 95 61 29 43 7f                                 ..a)C.

Frame 10 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Mar 24, 2008 12:57:54.747298000
    Time delta from previous packet: 9.965735000 seconds
    Time since reference or first frame: 15.071754000 seconds
    Frame Number: 10
    Packet Length: 134 bytes
    Capture Length: 134 bytes
    Protocols in frame: eth:ip:esp:data
Ethernet II, Src: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab), Dst: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01)
    Destination: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01)
    Source: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.149 (165.227.249.149)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0001 (1)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: ESP (0x32)
    Header checksum: 0xfb82 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.149 (165.227.249.149)
Encapsulating Security Payload
    SPI: 0x2f2b8128
    Sequence: 1
    Data (92 bytes)

0000  00 17 c5 0f 77 01 00 0c 29 ab 06 ab 08 00 45 00   ....w...).....E.
0010  00 78 00 01 00 00 80 32 fb 82 a5 e3 f9 73 a5 e3   .x.....2.....s..
0020  f9 95 2f 2b 81 28 00 00 00 01 48 49 ed cb 70 70   ../+.(....HI..pp
0030  b0 af 38 e5 a0 bb 63 d5 20 d0 ac 1d 39 61 e2 f3   ..8...c. ...9a..
0040  0e 37 ff 77 20 fb cb 80 29 81 c1 34 c4 9d af 2a   .7.w ...)..4...*
0050  a0 ea 6e d5 a8 37 48 ce 5a 57 d8 0f 11 0a 79 ba   ..n..7H.ZW....y.
0060  20 d5 96 5b 8f f3 c2 48 3d 62 ec f1 a4 05 3f 11    ..[...H=b....?.
0070  f3 ae 0b 89 aa 31 64 ea 21 89 5a d4 d6 f7 bc 18   .....1d.!.Z.....
0080  22 f3 da 18 96 df                                 ".....

Frame 11 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Mar 24, 2008 12:57:54.752330000
    Time delta from previous packet: 0.005032000 seconds
    Time since reference or first frame: 15.076786000 seconds
    Frame Number: 11
    Packet Length: 134 bytes
    Capture Length: 134 bytes
    Protocols in frame: eth:ip:esp:data
Ethernet II, Src: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01), Dst: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Destination: 00:0c:29:ab:06:ab (00:0c:29:ab:06:ab)
    Source: 00:17:c5:0f:77:01 (00:17:c5:0f:77:01)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.149 (165.227.249.149), Dst: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0xd75d (55133)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0x6426 [correct]
        Good: True
        Bad : False
    Source: 165.227.249.149 (165.227.249.149)
    Destination: 165.227.249.115 (165.227.249.115)
Encapsulating Security Payload
    SPI: 0xb5ae1b72
    Sequence: 1
    Data (92 bytes)

0000  00 0c 29 ab 06 ab 00 17 c5 0f 77 01 08 00 45 00   ..).......w...E.
0010  00 78 d7 5d 00 00 40 32 64 26 a5 e3 f9 95 a5 e3   .x.]..@2d&......
0020  f9 73 b5 ae 1b 72 00 00 00 01 4a f7 1f d7 fb be   .s...r....J.....
0030  ad 4d ff bd cf ae 3e ff bf ff 05 f5 d5 54 85 dc   .M....>......T..
0040  e9 9b 18 27 c7 5b 57 2b 79 08 35 3b 7f 0a d5 39   ...'.[W+y.5;...9
0050  06 9b c5 f2 37 f6 f1 fa 7e de fc 14 9b f2 84 05   ....7...~.......
0060  79 dc 2a d4 87 b2 71 0f 1c 00 ba 35 e5 42 13 ff   y.*...q....5.B..
0070  0f 7a 24 80 d6 64 f4 06 85 94 10 5c 9a fa 89 0c   .z$..d.....\....
0080  d5 f7 3b dd 34 c4                                 ..;.4.