Frame 1 (166 bytes on wire, 166 bytes captured)
    Arrival Time: Aug 12, 2011 14:30:43.906842000
    [Time delta from previous captured frame: 0.000000000 seconds]
    [Time delta from previous displayed frame: 0.000000000 seconds]
    [Time since reference or first frame: 0.000000000 seconds]
    Frame Number: 1
    Frame Length: 166 bytes
    Capture Length: 166 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77), Dst: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
    Destination: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        Address: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.152 (165.227.249.152)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 152
    Identification: 0x03ee (1006)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf793 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.152 (165.227.249.152)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 132
    Checksum: 0xa4d0 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: EBBB70F939D9D10D
    Responder cookie: 0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 124
    Security Association payload
        Next payload: Vendor ID (13)
        Payload length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Payload length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI Size: 0
            Proposal transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Payload length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (3600)
    Vendor ID: draft-ietf-ipsec-nat-t-ike-00
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-00
    Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n
        Next payload: NONE (0)
        Payload length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n

0000  c4 3d c7 cc fa 50 00 0c 29 3f 71 77 08 00 45 00   .=...P..)?qw..E.
0010  00 98 03 ee 00 00 80 11 f7 93 a5 e3 f9 73 a5 e3   .............s..
0020  f9 98 01 f4 01 f4 00 84 a4 d0 eb bb 70 f9 39 d9   ............p.9.
0030  d1 0d 00 00 00 00 00 00 00 00 01 10 02 00 00 00   ................
0040  00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00   .....|...8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04   ................
0070  00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00   ................
0080  00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79   ..D..-.......F.y
0090  dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63   ..........>.in.c
00a0  81 b5 ec 42 7b 1f                                 ...B{.

Frame 2 (166 bytes on wire, 166 bytes captured)
    Arrival Time: Aug 12, 2011 14:30:43.906871000
    [Time delta from previous captured frame: 0.000029000 seconds]
    [Time delta from previous displayed frame: 0.000029000 seconds]
    [Time since reference or first frame: 0.000029000 seconds]
    Frame Number: 2
    Frame Length: 166 bytes
    Capture Length: 166 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77), Dst: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
    Destination: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        Address: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.152 (165.227.249.152)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 152
    Identification: 0x03ee (1006)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf793 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.152 (165.227.249.152)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 132
    Checksum: 0xa4d0 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: EBBB70F939D9D10D
    Responder cookie: 0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 124
    Security Association payload
        Next payload: Vendor ID (13)
        Payload length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Payload length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI Size: 0
            Proposal transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Payload length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (3600)
    Vendor ID: draft-ietf-ipsec-nat-t-ike-00
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-00
    Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n
        Next payload: NONE (0)
        Payload length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n

0000  c4 3d c7 cc fa 50 00 0c 29 3f 71 77 08 00 45 00   .=...P..)?qw..E.
0010  00 98 03 ee 00 00 80 11 f7 93 a5 e3 f9 73 a5 e3   .............s..
0020  f9 98 01 f4 01 f4 00 84 a4 d0 eb bb 70 f9 39 d9   ............p.9.
0030  d1 0d 00 00 00 00 00 00 00 00 01 10 02 00 00 00   ................
0040  00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00   .....|...8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04   ................
0070  00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00   ................
0080  00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79   ..D..-.......F.y
0090  dd cc 00 00 00 14 90 cb 80 91 3e bb 69 6e 08 63   ..........>.in.c
00a0  81 b5 ec 42 7b 1f                                 ...B{.

Frame 3 (166 bytes on wire, 166 bytes captured)
    Arrival Time: Aug 12, 2011 14:30:43.955141000
    [Time delta from previous captured frame: 0.048270000 seconds]
    [Time delta from previous displayed frame: 0.048270000 seconds]
    [Time since reference or first frame: 0.048299000 seconds]
    Frame Number: 3
    Frame Length: 166 bytes
    Capture Length: 166 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50), Dst: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
    Destination: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        Address: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.152 (165.227.249.152), Dst: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 152
    Identification: 0x0000 (0)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb81 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.152 (165.227.249.152)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 132
    Checksum: 0x71ba [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: EBBB70F939D9D10D
    Responder cookie: DC1D26B14C6E9526
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 124
    Security Association payload
        Next payload: Vendor ID (13)
        Payload length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 1
            Next payload: NONE (0)
            Payload length: 44
            Proposal number: 1
            Protocol ID: ISAKMP (1)
            SPI Size: 0
            Proposal transforms: 1
            Transform payload # 1
                Next payload: NONE (0)
                Payload length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Authentication-Method (3): PSK (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (3600)
    Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)
    Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35
        Next payload: NONE (0)
        Payload length: 20
        Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35

0000  00 0c 29 3f 71 77 c4 3d c7 cc fa 50 08 00 45 00   ..)?qw.=...P..E.
0010  00 98 00 00 40 00 40 11 fb 81 a5 e3 f9 98 a5 e3   ....@.@.........
0020  f9 73 01 f4 01 f4 00 84 71 ba eb bb 70 f9 39 d9   .s......q...p.9.
0030  d1 0d dc 1d 26 b1 4c 6e 95 26 01 10 02 00 00 00   ....&.Ln.&......
0040  00 00 00 00 00 7c 0d 00 00 38 00 00 00 01 00 00   .....|...8......
0050  00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 04   ................
0070  00 02 80 03 00 01 80 0b 00 01 80 0c 0e 10 0d 00   ................
0080  00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57   ......h...k...wW
0090  01 00 00 00 00 14 70 03 cb c1 09 7d be 9c 26 00   ......p....}..&.
00a0  ba 69 83 bc 8b 35                                 .i...5

Frame 4 (298 bytes on wire, 298 bytes captured)
    Arrival Time: Aug 12, 2011 14:30:46.108543000
    [Time delta from previous captured frame: 2.153402000 seconds]
    [Time delta from previous displayed frame: 2.153402000 seconds]
    [Time since reference or first frame: 2.201701000 seconds]
    Frame Number: 4
    Frame Length: 298 bytes
    Capture Length: 298 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77), Dst: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
    Destination: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        Address: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.152 (165.227.249.152)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 284
    Identification: 0x03f1 (1009)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf70c [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.152 (165.227.249.152)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 264
    Checksum: 0xe7fc [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: EBBB70F939D9D10D
    Responder cookie: DC1D26B14C6E9526
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 256
    Key Exchange payload
        Next payload: Nonce (10)
        Payload length: 132
        Key Exchange Data (128 bytes / 1024 bits)
    Nonce payload
        Next payload: Vendor ID (13)
        Payload length: 24
        Nonce Data
    Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103...
        Next payload: Vendor ID (13)
        Payload length: 48
        Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103...
    Vendor ID: DA8E937880010000
        Next payload: Vendor ID (13)
        Payload length: 12
        Vendor ID: DA8E937880010000
    Vendor ID: draft-beaulieu-ike-xauth-02.txt
        Next payload: NONE (0)
        Payload length: 12
        Vendor ID: draft-beaulieu-ike-xauth-02.txt

0000  c4 3d c7 cc fa 50 00 0c 29 3f 71 77 08 00 45 00   .=...P..)?qw..E.
0010  01 1c 03 f1 00 00 80 11 f7 0c a5 e3 f9 73 a5 e3   .............s..
0020  f9 98 01 f4 01 f4 01 08 e7 fc eb bb 70 f9 39 d9   ............p.9.
0030  d1 0d dc 1d 26 b1 4c 6e 95 26 04 10 02 00 00 00   ....&.Ln.&......
0040  00 00 00 00 01 00 0a 00 00 84 63 a6 99 e3 c2 1a   ..........c.....
0050  23 1f bc ea 0c a6 06 ef c3 b5 cb e2 35 95 28 12   #...........5.(.
0060  2a 93 03 32 37 13 2e 92 73 ac fe 40 03 61 28 cb   *..27...s..@.a(.
0070  48 f2 11 25 68 92 55 3d e0 2c 1e c2 9b a0 bb 0a   H..%h.U=.,......
0080  c3 6a dd 5c 7d 83 07 46 9b f9 b9 d7 09 09 63 b7   .j.\}..F......c.
0090  4f 05 c2 43 f7 ae 97 5c 0b c9 4b bc 85 4b 2b f8   O..C...\..K..K+.
00a0  f1 1b 27 aa 3e 1e e1 21 46 4a a9 3b b3 df c8 fd   ..'.>..!FJ.;....
00b0  f9 29 2a eb 36 d8 eb b2 76 2c 44 d5 92 46 60 17   .)*.6...v,D..F`.
00c0  4b e5 3c ef e5 e6 18 b0 c9 9f 0d 00 00 18 23 45   K.<...........#E
00d0  fe fe b2 03 41 23 ff 86 de 3a 72 1a ef 71 03 f0   ....A#...:r..q..
00e0  7f 1f 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6   .....0G.........
00f0  d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31   ..V\h..........1
0100  30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29   0.1.1 (Build 10)
0110  00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00   .........x......
0120  00 0c 09 00 26 89 df d6 b7 12                     ....&.....

Frame 5 (298 bytes on wire, 298 bytes captured)
    Arrival Time: Aug 12, 2011 14:30:46.108572000
    [Time delta from previous captured frame: 0.000029000 seconds]
    [Time delta from previous displayed frame: 0.000029000 seconds]
    [Time since reference or first frame: 2.201730000 seconds]
    Frame Number: 5
    Frame Length: 298 bytes
    Capture Length: 298 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77), Dst: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
    Destination: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        Address: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.152 (165.227.249.152)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 284
    Identification: 0x03f1 (1009)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf70c [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.152 (165.227.249.152)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 264
    Checksum: 0xe7fc [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: EBBB70F939D9D10D
    Responder cookie: DC1D26B14C6E9526
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 256
    Key Exchange payload
        Next payload: Nonce (10)
        Payload length: 132
        Key Exchange Data (128 bytes / 1024 bits)
    Nonce payload
        Next payload: Vendor ID (13)
        Payload length: 24
        Nonce Data
    Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103...
        Next payload: Vendor ID (13)
        Payload length: 48
        Vendor ID: 47BBE7C993F1FC13B4E6D0DB565C68E50102010102010103...
    Vendor ID: DA8E937880010000
        Next payload: Vendor ID (13)
        Payload length: 12
        Vendor ID: DA8E937880010000
    Vendor ID: draft-beaulieu-ike-xauth-02.txt
        Next payload: NONE (0)
        Payload length: 12
        Vendor ID: draft-beaulieu-ike-xauth-02.txt

0000  c4 3d c7 cc fa 50 00 0c 29 3f 71 77 08 00 45 00   .=...P..)?qw..E.
0010  01 1c 03 f1 00 00 80 11 f7 0c a5 e3 f9 73 a5 e3   .............s..
0020  f9 98 01 f4 01 f4 01 08 e7 fc eb bb 70 f9 39 d9   ............p.9.
0030  d1 0d dc 1d 26 b1 4c 6e 95 26 04 10 02 00 00 00   ....&.Ln.&......
0040  00 00 00 00 01 00 0a 00 00 84 63 a6 99 e3 c2 1a   ..........c.....
0050  23 1f bc ea 0c a6 06 ef c3 b5 cb e2 35 95 28 12   #...........5.(.
0060  2a 93 03 32 37 13 2e 92 73 ac fe 40 03 61 28 cb   *..27...s..@.a(.
0070  48 f2 11 25 68 92 55 3d e0 2c 1e c2 9b a0 bb 0a   H..%h.U=.,......
0080  c3 6a dd 5c 7d 83 07 46 9b f9 b9 d7 09 09 63 b7   .j.\}..F......c.
0090  4f 05 c2 43 f7 ae 97 5c 0b c9 4b bc 85 4b 2b f8   O..C...\..K..K+.
00a0  f1 1b 27 aa 3e 1e e1 21 46 4a a9 3b b3 df c8 fd   ..'.>..!FJ.;....
00b0  f9 29 2a eb 36 d8 eb b2 76 2c 44 d5 92 46 60 17   .)*.6...v,D..F`.
00c0  4b e5 3c ef e5 e6 18 b0 c9 9f 0d 00 00 18 23 45   K.<...........#E
00d0  fe fe b2 03 41 23 ff 86 de 3a 72 1a ef 71 03 f0   ....A#...:r..q..
00e0  7f 1f 0d 00 00 30 47 bb e7 c9 93 f1 fc 13 b4 e6   .....0G.........
00f0  d0 db 56 5c 68 e5 01 02 01 01 02 01 01 03 11 31   ..V\h..........1
0100  30 2e 31 2e 31 20 28 42 75 69 6c 64 20 31 30 29   0.1.1 (Build 10)
0110  00 00 0d 00 00 0c da 8e 93 78 80 01 00 00 00 00   .........x......
0120  00 0c 09 00 26 89 df d6 b7 12                     ....&.....

Frame 6 (242 bytes on wire, 242 bytes captured)
    Arrival Time: Aug 12, 2011 14:30:46.210522000
    [Time delta from previous captured frame: 0.101950000 seconds]
    [Time delta from previous displayed frame: 0.101950000 seconds]
    [Time since reference or first frame: 2.303680000 seconds]
    Frame Number: 6
    Frame Length: 242 bytes
    Capture Length: 242 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50), Dst: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
    Destination: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        Address: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.152 (165.227.249.152), Dst: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 228
    Identification: 0x0000 (0)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb35 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.152 (165.227.249.152)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 208
    Checksum: 0xdd89 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: EBBB70F939D9D10D
    Responder cookie: DC1D26B14C6E9526
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 200
    Key Exchange payload
        Next payload: Nonce (10)
        Payload length: 132
        Key Exchange Data (128 bytes / 1024 bits)
    Nonce payload
        Next payload: Vendor ID (13)
        Payload length: 20
        Nonce Data
    Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35
        Next payload: NONE (0)
        Payload length: 20
        Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35

0000  00 0c 29 3f 71 77 c4 3d c7 cc fa 50 08 00 45 00   ..)?qw.=...P..E.
0010  00 e4 00 00 40 00 40 11 fb 35 a5 e3 f9 98 a5 e3   ....@.@..5......
0020  f9 73 01 f4 01 f4 00 d0 dd 89 eb bb 70 f9 39 d9   .s..........p.9.
0030  d1 0d dc 1d 26 b1 4c 6e 95 26 04 10 02 00 00 00   ....&.Ln.&......
0040  00 00 00 00 00 c8 0a 00 00 84 e4 04 16 eb 6a 27   ..............j'
0050  5b e6 79 de de 56 e4 ba 10 e2 f5 f2 cf b5 5f ba   [.y..V........_.
0060  f8 d4 4b 6e d9 a8 eb 9f 69 d6 3d 6b 6d b8 e6 74   ..Kn....i.=km..t
0070  a5 f5 44 9f 78 b7 9c 81 84 e2 f5 28 55 1f ba 43   ..D.x......(U..C
0080  4f c5 93 78 7b 25 8e 0b a7 8f bd 17 a6 05 6e b6   O..x{%........n.
0090  7d 1f 0c 47 83 7d 47 b3 85 59 e3 a7 ee 79 55 17   }..G.}G..Y...yU.
00a0  e6 77 fa be c0 ed 88 33 3f e3 89 c2 4a 76 03 29   .w.....3?...Jv.)
00b0  84 d4 f5 e5 81 dd 4e a5 df 25 0a 47 30 56 61 4f   ......N..%.G0VaO
00c0  2c e2 51 ff bf 90 c5 63 c3 fa 0d 00 00 14 e0 70   ,.Q....c.......p
00d0  de 80 32 68 02 80 13 42 2d 77 7c 83 d6 0d 00 00   ..2h...B-w|.....
00e0  00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc   ..p....}..&..i..
00f0  8b 35                                             .5

Frame 7 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Aug 12, 2011 14:30:47.246573000
    [Time delta from previous captured frame: 1.036051000 seconds]
    [Time delta from previous displayed frame: 1.036051000 seconds]
    [Time since reference or first frame: 3.339731000 seconds]
    Frame Number: 7
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77), Dst: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
    Destination: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        Address: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.152 (165.227.249.152)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x03f4 (1012)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf7ad [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.152 (165.227.249.152)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 100
    Checksum: 0xaa42 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: EBBB70F939D9D10D
    Responder cookie: DC1D26B14C6E9526
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 92
    Encrypted payload (64 bytes)

0000  c4 3d c7 cc fa 50 00 0c 29 3f 71 77 08 00 45 00   .=...P..)?qw..E.
0010  00 78 03 f4 00 00 80 11 f7 ad a5 e3 f9 73 a5 e3   .x...........s..
0020  f9 98 01 f4 01 f4 00 64 aa 42 eb bb 70 f9 39 d9   .......d.B..p.9.
0030  d1 0d dc 1d 26 b1 4c 6e 95 26 05 10 02 01 00 00   ....&.Ln.&......
0040  00 00 00 00 00 5c 04 e3 eb 7b b5 e0 b9 42 38 38   .....\...{...B88
0050  01 4f 70 25 95 40 d9 76 45 48 73 c2 5d b1 92 5e   .Op%.@.vEHs.]..^
0060  23 c3 95 2c 0e a5 9a b9 af f4 e3 bc 69 98 b4 87   #..,........i...
0070  a6 00 44 16 cb 8b c5 27 8d 7d 82 1b 45 27 d4 b1   ..D....'.}..E'..
0080  4a 40 a0 48 fa d3                                 J@.H..

Frame 8 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Aug 12, 2011 14:30:47.246600000
    [Time delta from previous captured frame: 0.000027000 seconds]
    [Time delta from previous displayed frame: 0.000027000 seconds]
    [Time since reference or first frame: 3.339758000 seconds]
    Frame Number: 8
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77), Dst: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
    Destination: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        Address: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.152 (165.227.249.152)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x03f4 (1012)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf7ad [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.152 (165.227.249.152)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 100
    Checksum: 0xaa42 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: EBBB70F939D9D10D
    Responder cookie: DC1D26B14C6E9526
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 92
    Encrypted payload (64 bytes)

0000  c4 3d c7 cc fa 50 00 0c 29 3f 71 77 08 00 45 00   .=...P..)?qw..E.
0010  00 78 03 f4 00 00 80 11 f7 ad a5 e3 f9 73 a5 e3   .x...........s..
0020  f9 98 01 f4 01 f4 00 64 aa 42 eb bb 70 f9 39 d9   .......d.B..p.9.
0030  d1 0d dc 1d 26 b1 4c 6e 95 26 05 10 02 01 00 00   ....&.Ln.&......
0040  00 00 00 00 00 5c 04 e3 eb 7b b5 e0 b9 42 38 38   .....\...{...B88
0050  01 4f 70 25 95 40 d9 76 45 48 73 c2 5d b1 92 5e   .Op%.@.vEHs.]..^
0060  23 c3 95 2c 0e a5 9a b9 af f4 e3 bc 69 98 b4 87   #..,........i...
0070  a6 00 44 16 cb 8b c5 27 8d 7d 82 1b 45 27 d4 b1   ..D....'.}..E'..
0080  4a 40 a0 48 fa d3                                 J@.H..

Frame 9 (118 bytes on wire, 118 bytes captured)
    Arrival Time: Aug 12, 2011 14:30:47.272364000
    [Time delta from previous captured frame: 0.025764000 seconds]
    [Time delta from previous displayed frame: 0.025764000 seconds]
    [Time since reference or first frame: 3.365522000 seconds]
    Frame Number: 9
    Frame Length: 118 bytes
    Capture Length: 118 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50), Dst: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
    Destination: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        Address: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.152 (165.227.249.152), Dst: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0x0000 (0)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbb1 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.152 (165.227.249.152)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 84
    Checksum: 0x2dd1 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: EBBB70F939D9D10D
    Responder cookie: DC1D26B14C6E9526
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 76
    Encrypted payload (48 bytes)

0000  00 0c 29 3f 71 77 c4 3d c7 cc fa 50 08 00 45 00   ..)?qw.=...P..E.
0010  00 68 00 00 40 00 40 11 fb b1 a5 e3 f9 98 a5 e3   .h..@.@.........
0020  f9 73 01 f4 01 f4 00 54 2d d1 eb bb 70 f9 39 d9   .s.....T-...p.9.
0030  d1 0d dc 1d 26 b1 4c 6e 95 26 05 10 02 01 00 00   ....&.Ln.&......
0040  00 00 00 00 00 4c 7d 1a 54 4f 8f d7 37 62 21 ec   .....L}.TO..7b!.
0050  8a 18 63 8b 91 95 90 79 11 9e df 8e 29 96 1c cf   ..c....y....)...
0060  7e 53 1a 4c 7d 2e 68 b2 f4 09 32 b2 35 63 84 bb   ~S.L}.h...2.5c..
0070  48 3c be a5 d3 49                                 H<...I

Frame 10 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Aug 12, 2011 14:30:47.289880000
    [Time delta from previous captured frame: 0.017516000 seconds]
    [Time delta from previous displayed frame: 0.017516000 seconds]
    [Time since reference or first frame: 3.383038000 seconds]
    Frame Number: 10
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50), Dst: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
    Destination: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        Address: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.152 (165.227.249.152), Dst: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0000 (0)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfba1 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.152 (165.227.249.152)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 100
    Checksum: 0x9cdf [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: EBBB70F939D9D10D
    Responder cookie: DC1D26B14C6E9526
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x99d22473
    Length: 92
    Encrypted payload (64 bytes)

0000  00 0c 29 3f 71 77 c4 3d c7 cc fa 50 08 00 45 00   ..)?qw.=...P..E.
0010  00 78 00 00 40 00 40 11 fb a1 a5 e3 f9 98 a5 e3   .x..@.@.........
0020  f9 73 01 f4 01 f4 00 64 9c df eb bb 70 f9 39 d9   .s.....d....p.9.
0030  d1 0d dc 1d 26 b1 4c 6e 95 26 08 10 05 01 99 d2   ....&.Ln.&......
0040  24 73 00 00 00 5c 88 d7 e8 4f 0b f0 bc dd 62 bc   $s...\...O....b.
0050  c6 9f 4a 5b 20 85 4e ec 7e c9 f2 19 d1 a3 31 33   ..J[ .N.~.....13
0060  bd da 67 f0 37 8e 45 e4 0f 03 03 9a fc 6b ce 5d   ..g.7.E......k.]
0070  86 82 11 cd be 0f 9b aa 4a 73 c0 42 02 4e 17 18   ........Js.B.N..
0080  ec e3 20 d1 d2 7f                                 .. ...

Frame 11 (342 bytes on wire, 342 bytes captured)
    Arrival Time: Aug 12, 2011 14:30:49.404530000
    [Time delta from previous captured frame: 2.114650000 seconds]
    [Time delta from previous displayed frame: 2.114650000 seconds]
    [Time since reference or first frame: 5.497688000 seconds]
    Frame Number: 11
    Frame Length: 342 bytes
    Capture Length: 342 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77), Dst: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
    Destination: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        Address: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.152 (165.227.249.152)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 328
    Identification: 0x03fd (1021)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf6d4 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.152 (165.227.249.152)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 308
    Checksum: 0x3522 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: EBBB70F939D9D10D
    Responder cookie: DC1D26B14C6E9526
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x1137b39f
    Length: 300
    Encrypted payload (272 bytes)

0000  c4 3d c7 cc fa 50 00 0c 29 3f 71 77 08 00 45 00   .=...P..)?qw..E.
0010  01 48 03 fd 00 00 80 11 f6 d4 a5 e3 f9 73 a5 e3   .H...........s..
0020  f9 98 01 f4 01 f4 01 34 35 22 eb bb 70 f9 39 d9   .......45"..p.9.
0030  d1 0d dc 1d 26 b1 4c 6e 95 26 08 10 20 01 11 37   ....&.Ln.&.. ..7
0040  b3 9f 00 00 01 2c 35 88 28 6b 26 a4 09 dc 78 28   .....,5.(k&...x(
0050  50 e5 6c 25 e7 47 bf 6d d3 b9 58 a4 3f b3 9f cb   P.l%.G.m..X.?...
0060  91 fb a9 28 2e 51 92 96 40 d4 5a 4e ef f4 b2 46   ...(.Q..@.ZN...F
0070  6e d8 94 36 ec 31 3a 7b 44 b4 c8 22 24 66 9a 53   n..6.1:{D.."$f.S
0080  4a 0b 66 4a a7 04 a5 cd 82 0e 7b a9 ee 8f ea 6e   J.fJ......{....n
0090  1b 61 d0 5e a5 0c 12 30 c4 f0 1d a4 0c 9e c1 ba   .a.^...0........
00a0  f1 57 56 99 30 2b 72 2e 26 9c f5 ca 09 30 58 55   .WV.0+r.&....0XU
00b0  e9 34 97 4f f6 3c 16 b9 9c d1 12 fb 7a 6a ef 26   .4.O.<......zj.&
00c0  1d c7 98 5c ae 5d 0c a3 88 9b 31 47 f2 b0 bd 46   ...\.]....1G...F
00d0  79 74 24 95 ad 7d f5 4c 6e 05 ea 63 6c 2a 6f b8   yt$..}.Ln..cl*o.
00e0  ed 16 4c d6 ac f0 c9 80 d5 a7 4a 1e 38 56 00 1c   ..L.......J.8V..
00f0  0d e2 b3 28 7f 19 19 a6 5a b1 2b 74 db 96 aa b8   ...(....Z.+t....
0100  06 dd 51 e7 e8 a6 d0 9b d7 e1 6d 56 b4 15 2b 49   ..Q.......mV..+I
0110  89 c8 59 ee e3 6c 56 03 00 9d dd 36 b7 3b 1d fb   ..Y..lV....6.;..
0120  d2 78 a3 56 be fc de bf 55 b6 63 37 bf cc 01 43   .x.V....U.c7...C
0130  dd 21 d7 99 07 7a 6e 54 9e 3c 75 02 92 f7 d8 94   .!...znT.<u.....
0140  8d b7 13 92 53 e3 49 85 1b 5c 79 8c 0a ab ff 67   ....S.I..\y....g
0150  3d 22 4b f8 0c 5d                                 ="K..]

Frame 12 (342 bytes on wire, 342 bytes captured)
    Arrival Time: Aug 12, 2011 14:30:49.404560000
    [Time delta from previous captured frame: 0.000030000 seconds]
    [Time delta from previous displayed frame: 0.000030000 seconds]
    [Time since reference or first frame: 5.497718000 seconds]
    Frame Number: 12
    Frame Length: 342 bytes
    Capture Length: 342 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77), Dst: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
    Destination: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        Address: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.152 (165.227.249.152)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 328
    Identification: 0x03fd (1021)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf6d4 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.152 (165.227.249.152)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 308
    Checksum: 0x3522 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: EBBB70F939D9D10D
    Responder cookie: DC1D26B14C6E9526
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x1137b39f
    Length: 300
    Encrypted payload (272 bytes)

0000  c4 3d c7 cc fa 50 00 0c 29 3f 71 77 08 00 45 00   .=...P..)?qw..E.
0010  01 48 03 fd 00 00 80 11 f6 d4 a5 e3 f9 73 a5 e3   .H...........s..
0020  f9 98 01 f4 01 f4 01 34 35 22 eb bb 70 f9 39 d9   .......45"..p.9.
0030  d1 0d dc 1d 26 b1 4c 6e 95 26 08 10 20 01 11 37   ....&.Ln.&.. ..7
0040  b3 9f 00 00 01 2c 35 88 28 6b 26 a4 09 dc 78 28   .....,5.(k&...x(
0050  50 e5 6c 25 e7 47 bf 6d d3 b9 58 a4 3f b3 9f cb   P.l%.G.m..X.?...
0060  91 fb a9 28 2e 51 92 96 40 d4 5a 4e ef f4 b2 46   ...(.Q..@.ZN...F
0070  6e d8 94 36 ec 31 3a 7b 44 b4 c8 22 24 66 9a 53   n..6.1:{D.."$f.S
0080  4a 0b 66 4a a7 04 a5 cd 82 0e 7b a9 ee 8f ea 6e   J.fJ......{....n
0090  1b 61 d0 5e a5 0c 12 30 c4 f0 1d a4 0c 9e c1 ba   .a.^...0........
00a0  f1 57 56 99 30 2b 72 2e 26 9c f5 ca 09 30 58 55   .WV.0+r.&....0XU
00b0  e9 34 97 4f f6 3c 16 b9 9c d1 12 fb 7a 6a ef 26   .4.O.<......zj.&
00c0  1d c7 98 5c ae 5d 0c a3 88 9b 31 47 f2 b0 bd 46   ...\.]....1G...F
00d0  79 74 24 95 ad 7d f5 4c 6e 05 ea 63 6c 2a 6f b8   yt$..}.Ln..cl*o.
00e0  ed 16 4c d6 ac f0 c9 80 d5 a7 4a 1e 38 56 00 1c   ..L.......J.8V..
00f0  0d e2 b3 28 7f 19 19 a6 5a b1 2b 74 db 96 aa b8   ...(....Z.+t....
0100  06 dd 51 e7 e8 a6 d0 9b d7 e1 6d 56 b4 15 2b 49   ..Q.......mV..+I
0110  89 c8 59 ee e3 6c 56 03 00 9d dd 36 b7 3b 1d fb   ..Y..lV....6.;..
0120  d2 78 a3 56 be fc de bf 55 b6 63 37 bf cc 01 43   .x.V....U.c7...C
0130  dd 21 d7 99 07 7a 6e 54 9e 3c 75 02 92 f7 d8 94   .!...znT.<u.....
0140  8d b7 13 92 53 e3 49 85 1b 5c 79 8c 0a ab ff 67   ....S.I..\y....g
0150  3d 22 4b f8 0c 5d                                 ="K..]

Frame 13 (342 bytes on wire, 342 bytes captured)
    Arrival Time: Aug 12, 2011 14:30:49.599317000
    [Time delta from previous captured frame: 0.194757000 seconds]
    [Time delta from previous displayed frame: 0.194757000 seconds]
    [Time since reference or first frame: 5.692475000 seconds]
    Frame Number: 13
    Frame Length: 342 bytes
    Capture Length: 342 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50), Dst: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
    Destination: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        Address: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.152 (165.227.249.152), Dst: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 328
    Identification: 0x0000 (0)
    Flags: 0x02 (Don't Fragment)
        0.. = Reserved bit: Not Set
        .1. = Don't fragment: Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfad1 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.152 (165.227.249.152)
    Destination: 165.227.249.115 (165.227.249.115)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 308
    Checksum: 0x519a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: EBBB70F939D9D10D
    Responder cookie: DC1D26B14C6E9526
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x1137b39f
    Length: 300
    Encrypted payload (272 bytes)

0000  00 0c 29 3f 71 77 c4 3d c7 cc fa 50 08 00 45 00   ..)?qw.=...P..E.
0010  01 48 00 00 40 00 40 11 fa d1 a5 e3 f9 98 a5 e3   .H..@.@.........
0020  f9 73 01 f4 01 f4 01 34 51 9a eb bb 70 f9 39 d9   .s.....4Q...p.9.
0030  d1 0d dc 1d 26 b1 4c 6e 95 26 08 10 20 01 11 37   ....&.Ln.&.. ..7
0040  b3 9f 00 00 01 2c 3c 62 1d a4 12 bc 7c f8 99 f2   .....,<b....|...
0050  87 53 57 85 e5 77 b6 fc 97 27 85 f9 00 b5 e4 7a   .SW..w...'.....z
0060  ef b0 4d 19 62 8b 6a c1 79 ae 45 79 97 1d 56 57   ..M.b.j.y.Ey..VW
0070  6d f6 89 e1 5c a0 02 26 6e a1 1e 41 b8 35 d6 5c   m...\..&n..A.5.\
0080  d0 2d 4f 5d 1a d9 e2 c2 42 86 0d 76 4e 4b 15 6b   .-O]....B..vNK.k
0090  3d 65 ac 42 5b e7 b1 bd a9 d2 76 29 ca 4e 6b 36   =e.B[.....v).Nk6
00a0  74 76 8b 02 71 21 05 8c c1 7e d6 0b d7 2b 15 d1   tv..q!...~...+..
00b0  7f 78 c0 78 ec 4f 3a df 3a 9d c4 e5 b1 f0 3b 24   .x.x.O:.:.....;$
00c0  02 f0 ac a2 95 d7 fc 47 28 e0 ab 93 fa f4 b0 d0   .......G(.......
00d0  1c 03 b7 bf 6f 1f 05 fe c6 6d 64 02 ac a5 67 ac   ....o....md...g.
00e0  e7 3c 9c cc 07 ad 80 d9 94 ca 36 a4 d4 40 52 0a   .<........6..@R.
00f0  70 6b ac db 30 5a ff 30 6f ad 5b e4 61 66 45 24   pk..0Z.0o.[.afE$
0100  5f ee 40 b8 e0 80 d7 21 28 35 a6 11 e1 00 1f 66   _.@....!(5.....f
0110  71 1e 76 6a cd 30 70 b1 8e 48 9b a7 c1 e7 1f 1c   q.vj.0p..H......
0120  e2 b2 30 66 bc d6 b3 64 25 cb 6a eb a7 27 38 82   ..0f...d%.j..'8.
0130  cf e2 88 51 7a d9 ec 05 98 68 b3 91 a5 83 af 86   ...Qz....h......
0140  dc bd fa c0 74 40 b0 e8 fb 87 57 bf 8f 32 63 6a   ....t@....W..2cj
0150  1c 29 6d 8c 1a ce                                 .)m...

Frame 14 (102 bytes on wire, 102 bytes captured)
    Arrival Time: Aug 12, 2011 14:30:49.603630000
    [Time delta from previous captured frame: 0.004313000 seconds]
    [Time delta from previous displayed frame: 0.004313000 seconds]
    [Time since reference or first frame: 5.696788000 seconds]
    Frame Number: 14
    Frame Length: 102 bytes
    Capture Length: 102 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77), Dst: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
    Destination: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        Address: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.152 (165.227.249.152)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 88
    Identification: 0x0403 (1027)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf7be [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.152 (165.227.249.152)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 68
    Checksum: 0xa793 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: EBBB70F939D9D10D
    Responder cookie: DC1D26B14C6E9526
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x1137b39f
    Length: 60
    Encrypted payload (32 bytes)

0000  c4 3d c7 cc fa 50 00 0c 29 3f 71 77 08 00 45 00   .=...P..)?qw..E.
0010  00 58 04 03 00 00 80 11 f7 be a5 e3 f9 73 a5 e3   .X...........s..
0020  f9 98 01 f4 01 f4 00 44 a7 93 eb bb 70 f9 39 d9   .......D....p.9.
0030  d1 0d dc 1d 26 b1 4c 6e 95 26 08 10 20 01 11 37   ....&.Ln.&.. ..7
0040  b3 9f 00 00 00 3c ad 90 d3 96 13 c9 14 7e ec 4f   .....<.......~.O
0050  34 92 aa 21 10 ce 98 8d 59 cc 5d 85 26 e4 39 8e   4..!....Y.].&.9.
0060  e9 24 78 df 44 5c                                 .$x.D\

Frame 15 (102 bytes on wire, 102 bytes captured)
    Arrival Time: Aug 12, 2011 14:30:49.603658000
    [Time delta from previous captured frame: 0.000028000 seconds]
    [Time delta from previous displayed frame: 0.000028000 seconds]
    [Time since reference or first frame: 5.696816000 seconds]
    Frame Number: 15
    Frame Length: 102 bytes
    Capture Length: 102 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77), Dst: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
    Destination: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        Address: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.152 (165.227.249.152)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 88
    Identification: 0x0403 (1027)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xf7be [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.152 (165.227.249.152)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 68
    Checksum: 0xa793 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: EBBB70F939D9D10D
    Responder cookie: DC1D26B14C6E9526
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x1137b39f
    Length: 60
    Encrypted payload (32 bytes)

0000  c4 3d c7 cc fa 50 00 0c 29 3f 71 77 08 00 45 00   .=...P..)?qw..E.
0010  00 58 04 03 00 00 80 11 f7 be a5 e3 f9 73 a5 e3   .X...........s..
0020  f9 98 01 f4 01 f4 00 44 a7 93 eb bb 70 f9 39 d9   .......D....p.9.
0030  d1 0d dc 1d 26 b1 4c 6e 95 26 08 10 20 01 11 37   ....&.Ln.&.. ..7
0040  b3 9f 00 00 00 3c ad 90 d3 96 13 c9 14 7e ec 4f   .....<.......~.O
0050  34 92 aa 21 10 ce 98 8d 59 cc 5d 85 26 e4 39 8e   4..!....Y.].&.9.
0060  e9 24 78 df 44 5c                                 .$x.D\

Frame 16 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Aug 12, 2011 14:30:58.011588000
    [Time delta from previous captured frame: 8.407930000 seconds]
    [Time delta from previous displayed frame: 8.407930000 seconds]
    [Time since reference or first frame: 14.104746000 seconds]
    Frame Number: 16
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77), Dst: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
    Destination: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        Address: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.152 (165.227.249.152)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0001 (1)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: ESP (0x32)
    Header checksum: 0xfb7f [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.152 (165.227.249.152)
Encapsulating Security Payload
    ESP SPI: 0x01349d69
    ESP Sequence: 1

0000  c4 3d c7 cc fa 50 00 0c 29 3f 71 77 08 00 45 00   .=...P..)?qw..E.
0010  00 78 00 01 00 00 80 32 fb 7f a5 e3 f9 73 a5 e3   .x.....2.....s..
0020  f9 98 01 34 9d 69 00 00 00 01 20 30 27 5e f3 71   ...4.i.... 0'^.q
0030  d2 20 fc 78 38 37 9a 24 21 f6 00 29 84 6b 44 ef   . .x87.$!..).kD.
0040  a1 1f f6 34 73 db 0c 3a ac b0 6a 27 d3 c3 22 93   ...4s..:..j'..".
0050  1f 45 be 51 25 02 9a 63 f6 f1 02 f9 dd 7c 86 f1   .E.Q%..c.....|..
0060  0e a0 5e a2 39 55 09 82 ab 33 c4 b5 1d 5e 81 0a   ..^.9U...3...^..
0070  8b 1e 50 35 f4 84 8e 5f 37 7a 12 f5 d3 82 35 e7   ..P5..._7z....5.
0080  4a 47 d9 c0 81 b2                                 JG....

Frame 17 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Aug 12, 2011 14:30:58.011605000
    [Time delta from previous captured frame: 0.000017000 seconds]
    [Time delta from previous displayed frame: 0.000017000 seconds]
    [Time since reference or first frame: 14.104763000 seconds]
    Frame Number: 17
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77), Dst: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
    Destination: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        Address: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.115 (165.227.249.115), Dst: 165.227.249.152 (165.227.249.152)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0001 (1)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: ESP (0x32)
    Header checksum: 0xfb7f [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.115 (165.227.249.115)
    Destination: 165.227.249.152 (165.227.249.152)
Encapsulating Security Payload
    ESP SPI: 0x01349d69
    ESP Sequence: 1

0000  c4 3d c7 cc fa 50 00 0c 29 3f 71 77 08 00 45 00   .=...P..)?qw..E.
0010  00 78 00 01 00 00 80 32 fb 7f a5 e3 f9 73 a5 e3   .x.....2.....s..
0020  f9 98 01 34 9d 69 00 00 00 01 20 30 27 5e f3 71   ...4.i.... 0'^.q
0030  d2 20 fc 78 38 37 9a 24 21 f6 00 29 84 6b 44 ef   . .x87.$!..).kD.
0040  a1 1f f6 34 73 db 0c 3a ac b0 6a 27 d3 c3 22 93   ...4s..:..j'..".
0050  1f 45 be 51 25 02 9a 63 f6 f1 02 f9 dd 7c 86 f1   .E.Q%..c.....|..
0060  0e a0 5e a2 39 55 09 82 ab 33 c4 b5 1d 5e 81 0a   ..^.9U...3...^..
0070  8b 1e 50 35 f4 84 8e 5f 37 7a 12 f5 d3 82 35 e7   ..P5..._7z....5.
0080  4a 47 d9 c0 81 b2                                 JG....

Frame 18 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Aug 12, 2011 14:30:58.014646000
    [Time delta from previous captured frame: 0.003041000 seconds]
    [Time delta from previous displayed frame: 0.003041000 seconds]
    [Time since reference or first frame: 14.107804000 seconds]
    Frame Number: 18
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50), Dst: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
    Destination: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        Address: 00:0c:29:3f:71:77 (00:0c:29:3f:71:77)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        Address: c4:3d:c7:cc:fa:50 (c4:3d:c7:cc:fa:50)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.152 (165.227.249.152), Dst: 165.227.249.115 (165.227.249.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x9c64 (40036)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0x9f1c [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.152 (165.227.249.152)
    Destination: 165.227.249.115 (165.227.249.115)
Encapsulating Security Payload
    ESP SPI: 0x8a7ba98c
    ESP Sequence: 1

0000  00 0c 29 3f 71 77 c4 3d c7 cc fa 50 08 00 45 00   ..)?qw.=...P..E.
0010  00 78 9c 64 00 00 40 32 9f 1c a5 e3 f9 98 a5 e3   .x.d..@2........
0020  f9 73 8a 7b a9 8c 00 00 00 01 55 13 df 34 f9 4a   .s.{......U..4.J
0030  09 7a a9 ff d7 a7 6a f8 58 41 ff 3e 2c e5 d5 24   .z....j.XA.>,..$
0040  50 c0 d0 37 c9 75 a5 a0 16 3d e7 7d 7d 2c 5e 93   P..7.u...=.}},^.
0050  81 61 55 f0 71 f6 30 65 e9 25 e6 ac 16 cf 81 2c   .aU.q.0e.%.....,
0060  d1 eb 46 91 cf d1 46 5d b3 62 31 26 da ac 15 7d   ..F...F].b1&...}
0070  94 10 df e9 07 17 ca bb 00 dd f8 9e 4f 27 a4 ed   ............O'..
0080  05 44 c8 14 79 21                                 .D..y!