Frame 1 (270 bytes on wire, 270 bytes captured) Arrival Time: Sep 29, 2005 10:52:34.849409000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 270 bytes Capture Length: 270 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x1717f679 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x003b (59) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b0e (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0x57e8 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x14932BA24BEDE56E Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0f b5 5f 1b 8f 00 0c 29 f4 af 90 08 00 45 00 ..._....).....E. 0010 00 fc 00 3b 00 00 40 11 3b 0e a5 e3 f9 7c a5 e3 ...;..@.;....|.. 0020 f9 64 01 f4 01 f4 00 e8 57 e8 14 93 2b a2 4b ed .d......W...+.K. 0030 e5 6e 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .n.............. 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b .....N.$...GYL(K 0090 21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e !;....'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 17 17 f6 79 .o,....R.V...y Frame 2 (130 bytes on wire, 130 bytes captured) Arrival Time: Sep 29, 2005 10:52:34.854269000 Time delta from previous packet: 0.004860000 seconds Time since reference or first frame: 0.004860000 seconds Frame Number: 2 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x39c9f0b8 (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x00be (190) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b17 (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0xbbb8 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x14932BA24BEDE56E Responder cookie: 0xE75C6602B4359895 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 f4 af 90 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 00 70 00 be 00 00 40 11 3b 17 a5 e3 f9 64 a5 e3 .p....@.;....d.. 0020 f9 7c 01 f4 01 f4 00 5c bb b8 14 93 2b a2 4b ed .|.....\....+.K. 0030 e5 6e e7 5c 66 02 b4 35 98 95 01 10 02 00 00 00 .n.\f..5........ 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 39 c9 ............p.9. 0080 f0 b8 .. Frame 3 (226 bytes on wire, 226 bytes captured) Arrival Time: Sep 29, 2005 10:52:34.864564000 Time delta from previous packet: 0.010295000 seconds Time since reference or first frame: 0.015155000 seconds Frame Number: 3 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x4a1dbcc9 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x003c (60) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b39 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xf9c1 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x14932BA24BEDE56E Responder cookie: 0xE75C6602B4359895 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0f b5 5f 1b 8f 00 0c 29 f4 af 90 08 00 45 00 ..._....).....E. 0010 00 d0 00 3c 00 00 40 11 3b 39 a5 e3 f9 7c a5 e3 ...<..@.;9...|.. 0020 f9 64 01 f4 01 f4 00 bc f9 c1 14 93 2b a2 4b ed .d..........+.K. 0030 e5 6e e7 5c 66 02 b4 35 98 95 04 10 02 00 00 00 .n.\f..5........ 0040 00 00 00 00 00 b4 0a 00 00 84 84 b2 25 fe 47 e8 ............%.G. 0050 32 47 c3 7c 1c bb 1d 63 fe 5c a0 b4 f9 d2 3c 08 2G.|...c.\....<. 0060 30 29 d2 76 ab e3 0e c8 7b 3a 06 90 2c 66 ae 53 0).v....{:..,f.S 0070 22 d6 92 f9 77 80 9b 70 7f a7 a4 6e 57 ee 77 af "...w..p...nW.w. 0080 62 99 df f7 c5 03 72 4d 6a 32 8a 2f bd 6d c5 e8 b.....rMj2./.m.. 0090 17 0d d4 44 86 cb 29 d2 1a 9b e6 fa a3 e2 88 c3 ...D..)......... 00a0 01 81 a4 b8 e7 37 83 44 e6 e6 69 fa be df 73 ca .....7.D..i...s. 00b0 ee e5 bc 1e 0d b2 67 9e c3 3e 18 f0 12 6d 95 df ......g..>...m.. 00c0 00 9c 7a 34 ed 50 04 b3 ac 11 00 00 00 14 6e 89 ..z4.P........n. 00d0 a3 cc ae 01 2f 37 1c 31 28 73 5f 0b 36 61 4a 1d ..../7.1(s_.6aJ. 00e0 bc c9 .. Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Sep 29, 2005 10:52:35.383787000 Time delta from previous packet: 0.519223000 seconds Time since reference or first frame: 0.534378000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x64cc1725 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x003d (61) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b38 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xf9c1 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x14932BA24BEDE56E Responder cookie: 0xE75C6602B4359895 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0f b5 5f 1b 8f 00 0c 29 f4 af 90 08 00 45 00 ..._....).....E. 0010 00 d0 00 3d 00 00 40 11 3b 38 a5 e3 f9 7c a5 e3 ...=..@.;8...|.. 0020 f9 64 01 f4 01 f4 00 bc f9 c1 14 93 2b a2 4b ed .d..........+.K. 0030 e5 6e e7 5c 66 02 b4 35 98 95 04 10 02 00 00 00 .n.\f..5........ 0040 00 00 00 00 00 b4 0a 00 00 84 84 b2 25 fe 47 e8 ............%.G. 0050 32 47 c3 7c 1c bb 1d 63 fe 5c a0 b4 f9 d2 3c 08 2G.|...c.\....<. 0060 30 29 d2 76 ab e3 0e c8 7b 3a 06 90 2c 66 ae 53 0).v....{:..,f.S 0070 22 d6 92 f9 77 80 9b 70 7f a7 a4 6e 57 ee 77 af "...w..p...nW.w. 0080 62 99 df f7 c5 03 72 4d 6a 32 8a 2f bd 6d c5 e8 b.....rMj2./.m.. 0090 17 0d d4 44 86 cb 29 d2 1a 9b e6 fa a3 e2 88 c3 ...D..)......... 00a0 01 81 a4 b8 e7 37 83 44 e6 e6 69 fa be df 73 ca .....7.D..i...s. 00b0 ee e5 bc 1e 0d b2 67 9e c3 3e 18 f0 12 6d 95 df ......g..>...m.. 00c0 00 9c 7a 34 ed 50 04 b3 ac 11 00 00 00 14 6e 89 ..z4.P........n. 00d0 a3 cc ae 01 2f 37 1c 31 28 73 5f 0b 36 61 64 cc ..../7.1(s_.6ad. 00e0 17 25 .% Frame 5 (218 bytes on wire, 218 bytes captured) Arrival Time: Sep 29, 2005 10:52:36.186035000 Time delta from previous packet: 0.802248000 seconds Time since reference or first frame: 1.336626000 seconds Frame Number: 5 Packet Length: 218 bytes Capture Length: 218 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0xc5b098a8 (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 200 Identification: 0x00bf (191) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3abe (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 180 Checksum: 0x7693 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x14932BA24BEDE56E Responder cookie: 0xE75C6602B4359895 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 172 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 12 Nonce Data 0000 00 0c 29 f4 af 90 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 00 c8 00 bf 00 00 40 11 3a be a5 e3 f9 64 a5 e3 ......@.:....d.. 0020 f9 7c 01 f4 01 f4 00 b4 76 93 14 93 2b a2 4b ed .|......v...+.K. 0030 e5 6e e7 5c 66 02 b4 35 98 95 04 10 02 00 00 00 .n.\f..5........ 0040 00 00 00 00 00 ac 0a 00 00 84 29 ae c6 6e 3f 98 ..........)..n?. 0050 d7 28 7d 8d 7c 9d c1 45 82 93 cf a4 fb 11 35 12 .(}.|..E......5. 0060 0e 86 9a ad 03 b9 8d b2 56 68 00 b8 2d 2b 6c 8d ........Vh..-+l. 0070 9a 0b 50 63 8f ad 38 48 06 b1 be b9 42 0e 78 74 ..Pc..8H....B.xt 0080 03 c8 5e 14 86 0c 8f 95 2d 33 8b 82 67 fe ff ff ..^.....-3..g... 0090 b6 ba 07 62 18 92 f8 83 a6 ff 03 00 9d 53 19 8e ...b.........S.. 00a0 a2 76 b5 bb 5e 6b 2a ac 0c fc ec 1c 80 fb 68 2c .v..^k*.......h, 00b0 5e fc 9f 04 a5 6d b1 1e 33 41 74 2c ec de 90 01 ^....m..3At,.... 00c0 f1 b3 39 3c bf aa f8 80 88 93 00 00 00 0c 81 51 ..9<...........Q 00d0 25 d3 42 64 2b ff c5 b0 98 a8 %.Bd+..... Frame 6 (122 bytes on wire, 122 bytes captured) Arrival Time: Sep 29, 2005 10:52:36.193058000 Time delta from previous packet: 0.007023000 seconds Time since reference or first frame: 1.343649000 seconds Frame Number: 6 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xc880315e (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x003e (62) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b9f (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x628b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x14932BA24BEDE56E Responder cookie: 0xE75C6602B4359895 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 f4 af 90 08 00 45 00 ..._....).....E. 0010 00 68 00 3e 00 00 40 11 3b 9f a5 e3 f9 7c a5 e3 .h.>..@.;....|.. 0020 f9 64 01 f4 01 f4 00 54 62 8b 14 93 2b a2 4b ed .d.....Tb...+.K. 0030 e5 6e e7 5c 66 02 b4 35 98 95 05 10 02 01 00 00 .n.\f..5........ 0040 00 00 00 00 00 4c 7a 65 f8 60 71 06 d6 16 e2 a5 .....Lze.`q..... 0050 10 fa a6 e7 89 9c fd 69 8e 8e 39 99 92 1e d4 c9 .......i..9..... 0060 0c 63 39 07 59 27 70 79 2b 60 f8 a4 17 31 4e c4 .c9.Y'py+`...1N. 0070 b7 29 c0 da 2b 85 c8 80 31 5e .)..+...1^ Frame 7 (122 bytes on wire, 122 bytes captured) Arrival Time: Sep 29, 2005 10:52:36.704019000 Time delta from previous packet: 0.510961000 seconds Time since reference or first frame: 1.854610000 seconds Frame Number: 7 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x139b9afa (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x003f (63) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b9e (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x628b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x14932BA24BEDE56E Responder cookie: 0xE75C6602B4359895 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 f4 af 90 08 00 45 00 ..._....).....E. 0010 00 68 00 3f 00 00 40 11 3b 9e a5 e3 f9 7c a5 e3 .h.?..@.;....|.. 0020 f9 64 01 f4 01 f4 00 54 62 8b 14 93 2b a2 4b ed .d.....Tb...+.K. 0030 e5 6e e7 5c 66 02 b4 35 98 95 05 10 02 01 00 00 .n.\f..5........ 0040 00 00 00 00 00 4c 7a 65 f8 60 71 06 d6 16 e2 a5 .....Lze.`q..... 0050 10 fa a6 e7 89 9c fd 69 8e 8e 39 99 92 1e d4 c9 .......i..9..... 0060 0c 63 39 07 59 27 70 79 2b 60 f8 a4 17 31 4e c4 .c9.Y'py+`...1N. 0070 b7 29 c0 da 2b 85 13 9b 9a fa .)..+..... Frame 8 (122 bytes on wire, 122 bytes captured) Arrival Time: Sep 29, 2005 10:52:37.723547000 Time delta from previous packet: 1.019528000 seconds Time since reference or first frame: 2.874138000 seconds Frame Number: 8 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xff72a213 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0040 (64) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b9d (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x628b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x14932BA24BEDE56E Responder cookie: 0xE75C6602B4359895 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 f4 af 90 08 00 45 00 ..._....).....E. 0010 00 68 00 40 00 00 40 11 3b 9d a5 e3 f9 7c a5 e3 .h.@..@.;....|.. 0020 f9 64 01 f4 01 f4 00 54 62 8b 14 93 2b a2 4b ed .d.....Tb...+.K. 0030 e5 6e e7 5c 66 02 b4 35 98 95 05 10 02 01 00 00 .n.\f..5........ 0040 00 00 00 00 00 4c 7a 65 f8 60 71 06 d6 16 e2 a5 .....Lze.`q..... 0050 10 fa a6 e7 89 9c fd 69 8e 8e 39 99 92 1e d4 c9 .......i..9..... 0060 0c 63 39 07 59 27 70 79 2b 60 f8 a4 17 31 4e c4 .c9.Y'py+`...1N. 0070 b7 29 c0 da 2b 85 ff 72 a2 13 .)..+..r.. Frame 9 (122 bytes on wire, 122 bytes captured) Arrival Time: Sep 29, 2005 10:52:37.827466000 Time delta from previous packet: 0.103919000 seconds Time since reference or first frame: 2.978057000 seconds Frame Number: 9 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0xc01e9bce (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x00c0 (192) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b1d (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x7a95 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x14932BA24BEDE56E Responder cookie: 0xE75C6602B4359895 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 f4 af 90 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 00 68 00 c0 00 00 40 11 3b 1d a5 e3 f9 64 a5 e3 .h....@.;....d.. 0020 f9 7c 01 f4 01 f4 00 54 7a 95 14 93 2b a2 4b ed .|.....Tz...+.K. 0030 e5 6e e7 5c 66 02 b4 35 98 95 05 10 02 01 00 00 .n.\f..5........ 0040 00 00 00 00 00 4c 65 1b a6 42 d7 26 3f af 81 15 .....Le..B.&?... 0050 18 52 4e e3 c2 06 b0 41 7e cb 37 b4 fb 07 a5 2e .RN....A~.7..... 0060 77 cb 76 70 09 27 16 9b 1f 6e 6b 37 63 c9 9c 00 w.vp.'...nk7c... 0070 00 4b 7b 2e 47 a2 c0 1e 9b ce .K{.G..... Frame 10 (346 bytes on wire, 346 bytes captured) Arrival Time: Sep 29, 2005 10:52:37.840737000 Time delta from previous packet: 0.013271000 seconds Time since reference or first frame: 2.991328000 seconds Frame Number: 10 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xfa236d59 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0041 (65) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3abc (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x4aef (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x14932BA24BEDE56E Responder cookie: 0xE75C6602B4359895 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x46012BC5 Length: 300 Encrypted payload (272 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 f4 af 90 08 00 45 00 ..._....).....E. 0010 01 48 00 41 00 00 40 11 3a bc a5 e3 f9 7c a5 e3 .H.A..@.:....|.. 0020 f9 64 01 f4 01 f4 01 34 4a ef 14 93 2b a2 4b ed .d.....4J...+.K. 0030 e5 6e e7 5c 66 02 b4 35 98 95 08 10 20 01 46 01 .n.\f..5.... .F. 0040 2b c5 00 00 01 2c 03 21 21 88 bd fb d5 46 b0 b6 +....,.!!....F.. 0050 e4 af 93 9e 5a 7c 2f 3c 97 1b a6 4f 5b d3 82 5e ....Z|/<...O[..^ 0060 ae d1 f1 3d 38 96 88 41 c6 9b 04 6c a9 ff 3b 06 ...=8..A...l..;. 0070 96 f8 0f c4 32 43 87 d6 5d 74 ef 96 47 4f 9d 28 ....2C..]t..GO.( 0080 e7 f4 1e 9e 66 08 cf d0 b7 67 c2 36 d0 9b c4 70 ....f....g.6...p 0090 e3 80 24 7e 76 20 79 4c ca 0a b2 95 76 16 9c 24 ..$~v yL....v..$ 00a0 40 04 27 bc 4a 45 7d cd 16 ea b9 88 52 cf 88 11 @.'.JE}.....R... 00b0 83 17 eb 09 25 ca 88 a9 56 79 f1 28 3c 8a 0f c9 ....%...Vy.(<... 00c0 fa f4 db 7e 46 f1 56 f4 e3 67 56 8e 78 66 02 93 ...~F.V..gV.xf.. 00d0 91 99 7f ad 3f ba 93 0e 10 2a c6 8d eb b8 c6 9a ....?....*...... 00e0 60 26 44 d8 21 3a 1e 1b ac cb b4 d9 86 75 d2 a2 `&D.!:.......u.. 00f0 ea 3d ef b6 a5 1a fe ff 91 5c fa ac 8a 3c 3e 5a .=.......\...<>Z 0100 f4 3a 76 6c 1f 50 d8 2f 93 0a 3a ed 18 c3 23 4a .:vl.P./..:...#J 0110 6e 85 47 8c b7 df a8 96 a4 d6 78 68 bc df e7 12 n.G.......xh.... 0120 9d 20 e9 00 0b 58 12 a5 a3 b2 bb ce 42 69 1b c0 . ...X......Bi.. 0130 e3 0a 3b 2b 88 5a 06 59 db 14 82 07 35 b1 7a 68 ..;+.Z.Y....5.zh 0140 7a 27 1b b8 09 30 4b 32 3e 21 ba 8f 07 87 ad 07 z'...0K2>!...... 0150 d7 4d e8 8f 83 4c fa 23 6d 59 .M...L.#mY Frame 11 (346 bytes on wire, 346 bytes captured) Arrival Time: Sep 29, 2005 10:52:38.352510000 Time delta from previous packet: 0.511773000 seconds Time since reference or first frame: 3.503101000 seconds Frame Number: 11 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x5fc451c1 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0042 (66) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3abb (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x4aef (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x14932BA24BEDE56E Responder cookie: 0xE75C6602B4359895 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x46012BC5 Length: 300 Encrypted payload (272 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 f4 af 90 08 00 45 00 ..._....).....E. 0010 01 48 00 42 00 00 40 11 3a bb a5 e3 f9 7c a5 e3 .H.B..@.:....|.. 0020 f9 64 01 f4 01 f4 01 34 4a ef 14 93 2b a2 4b ed .d.....4J...+.K. 0030 e5 6e e7 5c 66 02 b4 35 98 95 08 10 20 01 46 01 .n.\f..5.... .F. 0040 2b c5 00 00 01 2c 03 21 21 88 bd fb d5 46 b0 b6 +....,.!!....F.. 0050 e4 af 93 9e 5a 7c 2f 3c 97 1b a6 4f 5b d3 82 5e ....Z|/<...O[..^ 0060 ae d1 f1 3d 38 96 88 41 c6 9b 04 6c a9 ff 3b 06 ...=8..A...l..;. 0070 96 f8 0f c4 32 43 87 d6 5d 74 ef 96 47 4f 9d 28 ....2C..]t..GO.( 0080 e7 f4 1e 9e 66 08 cf d0 b7 67 c2 36 d0 9b c4 70 ....f....g.6...p 0090 e3 80 24 7e 76 20 79 4c ca 0a b2 95 76 16 9c 24 ..$~v yL....v..$ 00a0 40 04 27 bc 4a 45 7d cd 16 ea b9 88 52 cf 88 11 @.'.JE}.....R... 00b0 83 17 eb 09 25 ca 88 a9 56 79 f1 28 3c 8a 0f c9 ....%...Vy.(<... 00c0 fa f4 db 7e 46 f1 56 f4 e3 67 56 8e 78 66 02 93 ...~F.V..gV.xf.. 00d0 91 99 7f ad 3f ba 93 0e 10 2a c6 8d eb b8 c6 9a ....?....*...... 00e0 60 26 44 d8 21 3a 1e 1b ac cb b4 d9 86 75 d2 a2 `&D.!:.......u.. 00f0 ea 3d ef b6 a5 1a fe ff 91 5c fa ac 8a 3c 3e 5a .=.......\...<>Z 0100 f4 3a 76 6c 1f 50 d8 2f 93 0a 3a ed 18 c3 23 4a .:vl.P./..:...#J 0110 6e 85 47 8c b7 df a8 96 a4 d6 78 68 bc df e7 12 n.G.......xh.... 0120 9d 20 e9 00 0b 58 12 a5 a3 b2 bb ce 42 69 1b c0 . ...X......Bi.. 0130 e3 0a 3b 2b 88 5a 06 59 db 14 82 07 35 b1 7a 68 ..;+.Z.Y....5.zh 0140 7a 27 1b b8 09 30 4b 32 3e 21 ba 8f 07 87 ad 07 z'...0K2>!...... 0150 d7 4d e8 8f 83 4c 5f c4 51 c1 .M...L_.Q. Frame 12 (330 bytes on wire, 330 bytes captured) Arrival Time: Sep 29, 2005 10:52:39.185428000 Time delta from previous packet: 0.832918000 seconds Time since reference or first frame: 4.336019000 seconds Frame Number: 12 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x8d4fe6f5 (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x00c5 (197) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a48 (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0xe280 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x14932BA24BEDE56E Responder cookie: 0xE75C6602B4359895 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x46012BC5 Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 f4 af 90 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 01 38 00 c5 00 00 40 11 3a 48 a5 e3 f9 64 a5 e3 .8....@.:H...d.. 0020 f9 7c 01 f4 01 f4 01 24 e2 80 14 93 2b a2 4b ed .|.....$....+.K. 0030 e5 6e e7 5c 66 02 b4 35 98 95 08 10 20 01 46 01 .n.\f..5.... .F. 0040 2b c5 00 00 01 1c ab 5d d2 bc b2 c8 45 62 be fc +......]....Eb.. 0050 74 ee 02 d7 83 64 23 91 8d 78 0d 86 75 b2 a6 26 t....d#..x..u..& 0060 18 13 6e c7 31 b0 0e 04 16 33 7f fd aa 67 c6 04 ..n.1....3...g.. 0070 36 af 79 6d 50 2d 97 ee 7b 84 59 14 90 b8 16 0f 6.ymP-..{.Y..... 0080 c7 60 ae cc 18 79 6b bf 55 c1 ce 22 82 8b 26 47 .`...yk.U.."..&G 0090 f8 65 6e 04 96 67 e3 28 6d 49 db f2 46 cb e1 5e .en..g.(mI..F..^ 00a0 4c 94 01 b4 a3 64 5b 6a b7 e5 85 72 83 f6 e8 34 L....d[j...r...4 00b0 ac 80 71 bd 43 56 1e 83 3d f8 fb b6 fc 14 e5 c0 ..q.CV..=....... 00c0 0b 7e 31 34 49 f4 c0 ec a6 01 d4 80 59 75 c5 ad .~14I.......Yu.. 00d0 19 33 45 4f 92 7d 74 75 fb bd 25 21 9a 7d 2d d0 .3EO.}tu..%!.}-. 00e0 fd 38 14 d3 78 9e 8c 06 f9 74 67 1a 50 ba e3 14 .8..x....tg.P... 00f0 d6 d3 4d 9c 75 b7 45 cc 7b cb 74 7a 78 a4 52 dd ..M.u.E.{.tzx.R. 0100 fb 96 89 27 19 f7 3d 4f b4 97 54 9c e8 a2 13 43 ...'..=O..T....C 0110 84 79 ca f8 2b d7 55 10 5a fd ad 67 f4 8b b0 26 .y..+.U.Z..g...& 0120 44 48 ea 8b 97 6c 3f ec 1c 3d 86 1b bd 12 a9 41 DH...l?..=.....A 0130 5f 00 e4 88 41 73 0c d0 cf cc 52 28 a5 f6 f4 67 _...As....R(...g 0140 24 c2 b8 1c 8c 85 8d 4f e6 f5 $......O.. Frame 13 (106 bytes on wire, 106 bytes captured) Arrival Time: Sep 29, 2005 10:52:39.194917000 Time delta from previous packet: 0.009489000 seconds Time since reference or first frame: 4.345508000 seconds Frame Number: 13 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xab38246c (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0043 (67) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3baa (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x5bfa (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x14932BA24BEDE56E Responder cookie: 0xE75C6602B4359895 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x46012BC5 Length: 60 Encrypted payload (32 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 f4 af 90 08 00 45 00 ..._....).....E. 0010 00 58 00 43 00 00 40 11 3b aa a5 e3 f9 7c a5 e3 .X.C..@.;....|.. 0020 f9 64 01 f4 01 f4 00 44 5b fa 14 93 2b a2 4b ed .d.....D[...+.K. 0030 e5 6e e7 5c 66 02 b4 35 98 95 08 10 20 01 46 01 .n.\f..5.... .F. 0040 2b c5 00 00 00 3c 64 70 72 01 94 9f ee 23 ef d2 +.......%.I.._.... 0070 ff 5d 38 07 a7 a5 c8 3c 66 81 6f 5b 4d a6 cf c6 .]8.......S... 00a0 4f 74 61 f9 98 6b 96 d7 fa b6 Ota..k.... Frame 15 (170 bytes on wire, 170 bytes captured) Arrival Time: Sep 29, 2005 10:52:40.846026000 Time delta from previous packet: 1.360884000 seconds Time since reference or first frame: 5.996617000 seconds Frame Number: 15 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x428d691f (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x5f99 (24473) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 30 Protocol: ESP (0x32) Header checksum: 0xfdf2 (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x586418ab Sequence: 1 Data (124 bytes) 0000 00 0c 29 f4 af 90 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 00 98 5f 99 00 00 1e 32 fd f2 a5 e3 f9 64 a5 e3 .._....2.....d.. 0020 f9 7c 58 64 18 ab 00 00 00 01 cc 1e a9 ba d4 8b .|Xd............ 0030 a1 15 00 00 00 00 00 00 00 00 5d 83 32 e5 96 7a ..........].2..z 0040 1e 58 6f d9 f8 ef fa 5c 1a c5 b4 a8 c5 e2 19 5f .Xo....\......._ 0050 4f f1 59 93 12 e2 b4 b1 2b c3 8d 67 b1 31 2d 81 O.Y.....+..g.1-. 0060 78 a6 a7 30 cd 6e 75 ad 86 5e 44 c7 72 2e aa 9b x..0.nu..^D.r... 0070 36 f0 66 f1 f5 27 5a a4 92 76 bc f9 0b 20 d4 40 6.f..'Z..v... .@ 0080 b3 76 28 21 3d f8 1a 4b 02 39 2a b7 0c 2c 71 08 .v(!=..K.9*..,q. 0090 bc c9 9f a1 e3 e9 20 b7 ff 0b ac 2f 11 32 5f 7a ...... ..../.2_z 00a0 d9 3a 97 b9 a6 b2 42 8d 69 1f .:....B.i. Frame 16 (330 bytes on wire, 330 bytes captured) Arrival Time: Sep 29, 2005 10:52:45.822594000 Time delta from previous packet: 4.976568000 seconds Time since reference or first frame: 10.973185000 seconds Frame Number: 16 Packet Length: 330 bytes Capture Length: 330 bytes Ethernet II, Src: 00:0f:b5:5f:1b:8f, Dst: 00:0c:29:f4:af:90 Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Type: IP (0x0800) Frame check sequence: 0x1fcc871f (correct) Internet Protocol, Src Addr: 165.227.249.100 (165.227.249.100), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x00c7 (199) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a46 (correct) Source: 165.227.249.100 (165.227.249.100) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0xe280 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x14932BA24BEDE56E Responder cookie: 0xE75C6602B4359895 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x46012BC5 Length: 284 Encrypted payload (256 bytes) 0000 00 0c 29 f4 af 90 00 0f b5 5f 1b 8f 08 00 45 00 ..)......_....E. 0010 01 38 00 c7 00 00 40 11 3a 46 a5 e3 f9 64 a5 e3 .8....@.:F...d.. 0020 f9 7c 01 f4 01 f4 01 24 e2 80 14 93 2b a2 4b ed .|.....$....+.K. 0030 e5 6e e7 5c 66 02 b4 35 98 95 08 10 20 01 46 01 .n.\f..5.... .F. 0040 2b c5 00 00 01 1c ab 5d d2 bc b2 c8 45 62 be fc +......]....Eb.. 0050 74 ee 02 d7 83 64 23 91 8d 78 0d 86 75 b2 a6 26 t....d#..x..u..& 0060 18 13 6e c7 31 b0 0e 04 16 33 7f fd aa 67 c6 04 ..n.1....3...g.. 0070 36 af 79 6d 50 2d 97 ee 7b 84 59 14 90 b8 16 0f 6.ymP-..{.Y..... 0080 c7 60 ae cc 18 79 6b bf 55 c1 ce 22 82 8b 26 47 .`...yk.U.."..&G 0090 f8 65 6e 04 96 67 e3 28 6d 49 db f2 46 cb e1 5e .en..g.(mI..F..^ 00a0 4c 94 01 b4 a3 64 5b 6a b7 e5 85 72 83 f6 e8 34 L....d[j...r...4 00b0 ac 80 71 bd 43 56 1e 83 3d f8 fb b6 fc 14 e5 c0 ..q.CV..=....... 00c0 0b 7e 31 34 49 f4 c0 ec a6 01 d4 80 59 75 c5 ad .~14I.......Yu.. 00d0 19 33 45 4f 92 7d 74 75 fb bd 25 21 9a 7d 2d d0 .3EO.}tu..%!.}-. 00e0 fd 38 14 d3 78 9e 8c 06 f9 74 67 1a 50 ba e3 14 .8..x....tg.P... 00f0 d6 d3 4d 9c 75 b7 45 cc 7b cb 74 7a 78 a4 52 dd ..M.u.E.{.tzx.R. 0100 fb 96 89 27 19 f7 3d 4f b4 97 54 9c e8 a2 13 43 ...'..=O..T....C 0110 84 79 ca f8 2b d7 55 10 5a fd ad 67 f4 8b b0 26 .y..+.U.Z..g...& 0120 44 48 ea 8b 97 6c 3f ec 1c 3d 86 1b bd 12 a9 41 DH...l?..=.....A 0130 5f 00 e4 88 41 73 0c d0 cf cc 52 28 a5 f6 f4 67 _...As....R(...g 0140 24 c2 b8 1c 8c 85 1f cc 87 1f $......... Frame 17 (106 bytes on wire, 106 bytes captured) Arrival Time: Sep 29, 2005 10:52:45.823793000 Time delta from previous packet: 0.001199000 seconds Time since reference or first frame: 10.974384000 seconds Frame Number: 17 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:5f:1b:8f Destination: 00:0f:b5:5f:1b:8f (00:0f:b5:5f:1b:8f) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x3ef11be6 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.100 (165.227.249.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0044 (68) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ba9 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.100 (165.227.249.100) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x5bfa (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x14932BA24BEDE56E Responder cookie: 0xE75C6602B4359895 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x46012BC5 Length: 60 Encrypted payload (32 bytes) 0000 00 0f b5 5f 1b 8f 00 0c 29 f4 af 90 08 00 45 00 ..._....).....E. 0010 00 58 00 44 00 00 40 11 3b a9 a5 e3 f9 7c a5 e3 .X.D..@.;....|.. 0020 f9 64 01 f4 01 f4 00 44 5b fa 14 93 2b a2 4b ed .d.....D[...+.K. 0030 e5 6e e7 5c 66 02 b4 35 98 95 08 10 20 01 46 01 .n.\f..5.... .F. 0040 2b c5 00 00 00 3c 64 70 72 01 94 9f ee 23 ef d2 +.......