Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Oct 27, 2006 14:54:43.045782000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x00f4 (244) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a54 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.101 (165.227.249.101) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0x178b [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x2C9C3269C6618C86 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0f b5 4b 45 e0 00 0c 29 f4 af 90 08 00 45 00 ...KE...).....E. 0010 00 fc 00 f4 00 00 40 11 3a 54 a5 e3 f9 7c a5 e3 ......@.:T...|.. 0020 f9 65 01 f4 01 f4 00 e8 17 8b 2c 9c 32 69 c6 61 .e........,.2i.a 0030 8c 86 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b .....N.$...GYL(K 0090 21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e !;....'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 .o,....R.V Frame 2 (146 bytes on wire, 146 bytes captured) Arrival Time: Oct 27, 2006 14:54:43.255007000 Time delta from previous packet: 0.209225000 seconds Time since reference or first frame: 0.209225000 seconds Frame Number: 2 Packet Length: 146 bytes Capture Length: 146 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.101 (165.227.249.101), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 132 Identification: 0x000a (10) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbb5 [correct] Good: True Bad : False Source: 165.227.249.101 (165.227.249.101) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 112 Checksum: 0x049a [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x2C9C3269C6618C86 Responder cookie: 0x694AED74E316D68A Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 104 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 f4 af 90 00 0f b5 4b 45 e0 08 00 45 00 ..)......KE...E. 0010 00 84 00 0a 40 00 40 11 fb b5 a5 e3 f9 65 a5 e3 ....@.@......e.. 0020 f9 7c 01 f4 01 f4 00 70 04 9a 2c 9c 32 69 c6 61 .|.....p..,.2i.a 0030 8c 86 69 4a ed 74 e3 16 d6 8a 01 10 02 00 00 00 ..iJ.t.......... 0040 00 00 00 00 00 68 0d 00 00 38 00 00 00 01 00 00 .....h...8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 00 00 ............p... 0080 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 0090 8b 35 .5 Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Oct 27, 2006 14:54:43.255009000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.209227000 seconds Frame Number: 3 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x00f5 (245) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a7f [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.101 (165.227.249.101) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xc59f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x2C9C3269C6618C86 Responder cookie: 0x694AED74E316D68A Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0f b5 4b 45 e0 00 0c 29 f4 af 90 08 00 45 00 ...KE...).....E. 0010 00 d0 00 f5 00 00 40 11 3a 7f a5 e3 f9 7c a5 e3 ......@.:....|.. 0020 f9 65 01 f4 01 f4 00 bc c5 9f 2c 9c 32 69 c6 61 .e........,.2i.a 0030 8c 86 69 4a ed 74 e3 16 d6 8a 04 10 02 00 00 00 ..iJ.t.......... 0040 00 00 00 00 00 b4 0a 00 00 84 cb 56 11 45 7a 06 ...........V.Ez. 0050 04 24 17 a7 b7 29 e6 33 80 3b 61 27 29 4a e5 9c .$...).3.;a')J.. 0060 bc 38 7e da 49 1d 3c ac a4 6b 7b 7d f8 d5 8c 70 .8~.I.<..k{}...p 0070 79 b0 4b 93 37 f0 fa d8 4b 16 f1 79 f5 b2 81 dd y.K.7...K..y.... 0080 9f f0 26 fe ca 45 51 0d d1 bd 03 50 d3 4b 56 f2 ..&..EQ....P.KV. 0090 14 83 72 c5 82 81 3f e1 0f 3f 78 20 ff be 07 14 ..r...?..?x .... 00a0 a1 78 6b d2 e8 eb 9f 83 1b 8c fd cc dc c5 37 d0 .xk...........7. 00b0 80 ff 29 1d 20 9c e7 25 e1 2d 61 ab b6 2c fa fd ..). ..%.-a..,.. 00c0 ac ef ea aa 26 b5 65 e3 da de 00 00 00 14 a2 89 ....&.e......... 00d0 d8 b1 d0 0c 06 82 97 67 0b bd 3b 40 be 11 .......g..;@.. Frame 4 (242 bytes on wire, 242 bytes captured) Arrival Time: Oct 27, 2006 14:54:43.474032000 Time delta from previous packet: 0.219023000 seconds Time since reference or first frame: 0.428250000 seconds Frame Number: 4 Packet Length: 242 bytes Capture Length: 242 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.101 (165.227.249.101), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 228 Identification: 0x000b (11) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb54 [correct] Good: True Bad : False Source: 165.227.249.101 (165.227.249.101) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 208 Checksum: 0x68cc [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x2C9C3269C6618C86 Responder cookie: 0x694AED74E316D68A Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 200 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 20 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 f4 af 90 00 0f b5 4b 45 e0 08 00 45 00 ..)......KE...E. 0010 00 e4 00 0b 40 00 40 11 fb 54 a5 e3 f9 65 a5 e3 ....@.@..T...e.. 0020 f9 7c 01 f4 01 f4 00 d0 68 cc 2c 9c 32 69 c6 61 .|......h.,.2i.a 0030 8c 86 69 4a ed 74 e3 16 d6 8a 04 10 02 00 00 00 ..iJ.t.......... 0040 00 00 00 00 00 c8 0a 00 00 84 47 5e 01 ed 25 62 ..........G^..%b 0050 0b 80 d0 34 ba 79 5d b6 4f fa 2d ee 4d cb 3f 59 ...4.y].O.-.M.?Y 0060 20 c6 14 d4 06 58 22 a4 5b 4c a0 9c 73 3e c1 b9 ....X".[L..s>.. 0070 4c e5 eb c5 69 86 98 50 1b fa f2 79 56 0c e6 87 L...i..P...yV... 0080 06 02 6b c6 f3 47 07 8f 46 0d 69 a0 e8 24 4c 43 ..k..G..F.i..$LC 0090 76 d3 7f 59 ee c1 5e f7 77 b7 c4 c1 69 8c e4 d1 v..Y..^.w...i... 00a0 ae 9c 56 e6 e2 83 64 12 8a 43 fd 3a 77 28 35 a5 ..V...d..C.:w(5. 00b0 9c f6 17 d7 ba 4d 02 bc e5 2d 56 cc bd 03 c3 89 .....M...-V..... 00c0 32 b5 66 1b f4 a0 6c ea f6 0c 0d 00 00 14 82 d1 2.f...l......... 00d0 25 94 6e 92 25 d7 ab e1 f0 d0 ca 27 99 f6 00 00 %.n.%......'.... 00e0 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 00f0 8b 35 .5 Frame 5 (118 bytes on wire, 118 bytes captured) Arrival Time: Oct 27, 2006 14:54:43.476982000 Time delta from previous packet: 0.002950000 seconds Time since reference or first frame: 0.431200000 seconds Frame Number: 5 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x00f6 (246) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ae6 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.101 (165.227.249.101) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xa6b5 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x2C9C3269C6618C86 Responder cookie: 0x694AED74E316D68A Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0f b5 4b 45 e0 00 0c 29 f4 af 90 08 00 45 00 ...KE...).....E. 0010 00 68 00 f6 00 00 40 11 3a e6 a5 e3 f9 7c a5 e3 .h....@.:....|.. 0020 f9 65 01 f4 01 f4 00 54 a6 b5 2c 9c 32 69 c6 61 .e.....T..,.2i.a 0030 8c 86 69 4a ed 74 e3 16 d6 8a 05 10 02 01 00 00 ..iJ.t.......... 0040 00 00 00 00 00 4c e0 68 89 b7 3c 6e 45 20 48 fa .....L.h..FU...Y 0060 73 69 87 0f 6e 18 c8 6c be 32 2d 1e 60 39 d8 d6 si..n..l.2-.`9.. 0070 7e a2 e1 13 f3 d6 ~..... Frame 7 (342 bytes on wire, 342 bytes captured) Arrival Time: Oct 27, 2006 14:54:43.829746000 Time delta from previous packet: 0.000001000 seconds Time since reference or first frame: 0.783964000 seconds Frame Number: 7 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x00f7 (247) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a05 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.101 (165.227.249.101) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xbe7f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x2C9C3269C6618C86 Responder cookie: 0x694AED74E316D68A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x64B4B7B6 Length: 300 Encrypted payload (272 bytes) 0000 00 0f b5 4b 45 e0 00 0c 29 f4 af 90 08 00 45 00 ...KE...).....E. 0010 01 48 00 f7 00 00 40 11 3a 05 a5 e3 f9 7c a5 e3 .H....@.:....|.. 0020 f9 65 01 f4 01 f4 01 34 be 7f 2c 9c 32 69 c6 61 .e.....4..,.2i.a 0030 8c 86 69 4a ed 74 e3 16 d6 8a 08 10 20 01 64 b4 ..iJ.t...... .d. 0040 b7 b6 00 00 01 2c e7 c2 b8 c0 69 1c 65 51 25 3f .....,....i.eQ%? 0050 c6 54 85 e2 8b 3d 3e d0 92 23 ac d0 72 34 4e 92 .T...=>..#..r4N. 0060 27 40 e8 57 ae 3c 05 a8 93 b0 e3 f1 46 c1 f9 8d '@.W.<......F... 0070 8a 5d fb da ae 08 64 a6 2f 11 ab 38 8f fa bf 40 .]....d./..8...@ 0080 5c 37 27 00 0f 27 7f c3 be 87 bf 48 a2 e0 dc c9 \7'..'.....H.... 0090 95 3e 4f 36 f6 b4 23 7c b9 d4 67 3f c7 4f 19 71 .>O6..#|..g?.O.q 00a0 00 7c 7f 15 e9 38 01 f2 11 af 3d be a9 d1 98 d9 .|...8....=..... 00b0 ef 34 80 37 8c 1d 61 5d 44 ff c5 a9 10 6b 3c 72 .4.7..a]D....kB.......*.2Dv 0100 5b 71 3a b1 38 1a 1b fa 39 0e ce 38 ac 6b 5d f7 [q:.8...9..8.k]. 0110 ca 8f 67 80 ae 11 97 58 09 29 e5 8d f9 00 01 39 ..g....X.).....9 0120 34 93 eb 4c 38 83 04 8d 59 a4 3e 7c ed af 50 21 4..L8...Y.>|..P! 0130 aa b8 c7 f2 70 37 ad 2e e4 d2 96 69 d0 1b bb 6c ....p7.....i...l 0140 82 42 d1 46 a3 c8 72 9c 5f 81 d3 57 b8 23 2b 06 .B.F..r._..W.#+. 0150 f6 4d dc a7 39 c9 .M..9. Frame 8 (134 bytes on wire, 134 bytes captured) Arrival Time: Oct 27, 2006 14:54:43.872453000 Time delta from previous packet: 0.042707000 seconds Time since reference or first frame: 0.826671000 seconds Frame Number: 8 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.101 (165.227.249.101), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x000d (13) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbbe [correct] Good: True Bad : False Source: 165.227.249.101 (165.227.249.101) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x15bb [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x2C9C3269C6618C86 Responder cookie: 0x694AED74E316D68A Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xC5A29E4D Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 f4 af 90 00 0f b5 4b 45 e0 08 00 45 00 ..)......KE...E. 0010 00 78 00 0d 40 00 40 11 fb be a5 e3 f9 65 a5 e3 .x..@.@......e.. 0020 f9 7c 01 f4 01 f4 00 64 15 bb 2c 9c 32 69 c6 61 .|.....d..,.2i.a 0030 8c 86 69 4a ed 74 e3 16 d6 8a 08 10 05 01 c5 a2 ..iJ.t.......... 0040 9e 4d 00 00 00 5c e6 c0 e8 3a d7 7c 1e 2a c7 2e .M...\...:.|.*.. 0050 b3 8c 98 97 8a b9 c6 c4 1d 2a 64 af 09 33 53 f0 .........*d..3S. 0060 10 22 fe 09 e8 e0 79 24 17 87 e6 cc a2 1a 7f d3 ."....y$........ 0070 dc 03 dd 79 d7 02 d3 29 43 dd dc 2d 62 76 00 24 ...y...)C..-bv.$ 0080 bb f7 7e a3 b9 5d ..~..] Frame 9 (342 bytes on wire, 342 bytes captured) Arrival Time: Oct 27, 2006 14:54:44.319166000 Time delta from previous packet: 0.446713000 seconds Time since reference or first frame: 1.273384000 seconds Frame Number: 9 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x00f8 (248) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a04 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.101 (165.227.249.101) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xbe7f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x2C9C3269C6618C86 Responder cookie: 0x694AED74E316D68A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x64B4B7B6 Length: 300 Encrypted payload (272 bytes) 0000 00 0f b5 4b 45 e0 00 0c 29 f4 af 90 08 00 45 00 ...KE...).....E. 0010 01 48 00 f8 00 00 40 11 3a 04 a5 e3 f9 7c a5 e3 .H....@.:....|.. 0020 f9 65 01 f4 01 f4 01 34 be 7f 2c 9c 32 69 c6 61 .e.....4..,.2i.a 0030 8c 86 69 4a ed 74 e3 16 d6 8a 08 10 20 01 64 b4 ..iJ.t...... .d. 0040 b7 b6 00 00 01 2c e7 c2 b8 c0 69 1c 65 51 25 3f .....,....i.eQ%? 0050 c6 54 85 e2 8b 3d 3e d0 92 23 ac d0 72 34 4e 92 .T...=>..#..r4N. 0060 27 40 e8 57 ae 3c 05 a8 93 b0 e3 f1 46 c1 f9 8d '@.W.<......F... 0070 8a 5d fb da ae 08 64 a6 2f 11 ab 38 8f fa bf 40 .]....d./..8...@ 0080 5c 37 27 00 0f 27 7f c3 be 87 bf 48 a2 e0 dc c9 \7'..'.....H.... 0090 95 3e 4f 36 f6 b4 23 7c b9 d4 67 3f c7 4f 19 71 .>O6..#|..g?.O.q 00a0 00 7c 7f 15 e9 38 01 f2 11 af 3d be a9 d1 98 d9 .|...8....=..... 00b0 ef 34 80 37 8c 1d 61 5d 44 ff c5 a9 10 6b 3c 72 .4.7..a]D....kB.......*.2Dv 0100 5b 71 3a b1 38 1a 1b fa 39 0e ce 38 ac 6b 5d f7 [q:.8...9..8.k]. 0110 ca 8f 67 80 ae 11 97 58 09 29 e5 8d f9 00 01 39 ..g....X.).....9 0120 34 93 eb 4c 38 83 04 8d 59 a4 3e 7c ed af 50 21 4..L8...Y.>|..P! 0130 aa b8 c7 f2 70 37 ad 2e e4 d2 96 69 d0 1b bb 6c ....p7.....i...l 0140 82 42 d1 46 a3 c8 72 9c 5f 81 d3 57 b8 23 2b 06 .B.F..r._..W.#+. 0150 f6 4d dc a7 39 c9 .M..9. Frame 10 (342 bytes on wire, 342 bytes captured) Arrival Time: Oct 27, 2006 14:54:44.364411000 Time delta from previous packet: 0.045245000 seconds Time since reference or first frame: 1.318629000 seconds Frame Number: 10 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.101 (165.227.249.101), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x000e (14) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfaed [correct] Good: True Bad : False Source: 165.227.249.101 (165.227.249.101) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x56e6 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x2C9C3269C6618C86 Responder cookie: 0x694AED74E316D68A Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x64B4B7B6 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 f4 af 90 00 0f b5 4b 45 e0 08 00 45 00 ..)......KE...E. 0010 01 48 00 0e 40 00 40 11 fa ed a5 e3 f9 65 a5 e3 .H..@.@......e.. 0020 f9 7c 01 f4 01 f4 01 34 56 e6 2c 9c 32 69 c6 61 .|.....4V.,.2i.a 0030 8c 86 69 4a ed 74 e3 16 d6 8a 08 10 20 01 64 b4 ..iJ.t...... .d. 0040 b7 b6 00 00 01 2c 86 b6 14 96 f9 28 97 9f 14 8b .....,.....(.... 0050 68 7b 9d 7a ee 44 77 7a eb 5f 00 f1 4f 07 9b a6 h{.z.Dwz._..O... 0060 ab a6 60 29 d4 d2 8c 29 43 fc cd 30 43 58 d3 04 ..`)...)C..0CX.. 0070 14 ac 47 28 7f 48 dc a1 b9 5c cd b2 8b aa d9 d8 ..G(.H...\...... 0080 42 3b e8 0b c5 db 7b 64 53 c7 82 71 6f 9e e3 3f B;....{dS..qo..? 0090 1e 35 2a c4 cf 29 62 5f 41 91 f2 df 99 8d 6d 3b .5*..)b_A.....m; 00a0 b8 7d 4a 74 31 ec dc 56 88 40 77 fe ce 19 9a f6 .}Jt1..V.@w..... 00b0 93 70 f4 5b af c8 8d e2 0b 46 f1 dd 30 94 85 84 .p.[.....F..0... 00c0 a3 ec 4b 65 f7 80 df 62 d6 40 25 90 f4 0a 67 ae ..Ke...b.@%...g. 00d0 51 66 86 ce 80 08 d6 53 76 05 ef ed 52 3c 51 3a Qf.....Sv...R*U&..{ 0100 37 77 f3 06 24 2a 02 73 64 17 ba e7 d4 14 46 a9 7w..$*.sd.....F. 0110 5e d5 fd 6c 87 16 c9 5c 49 d8 27 4b 45 a0 7d be ^..l...\I.'KE.}. 0120 97 c7 66 47 e9 d2 a6 c2 83 c2 66 d2 32 4a cd 59 ..fG......f.2J.Y 0130 b9 72 1a 10 3c 46 50 25 05 bc 0f 50 d0 19 70 ee .r..*U&..{ 0100 37 77 f3 06 24 2a 02 73 64 17 ba e7 d4 14 46 a9 7w..$*.sd.....F. 0110 5e d5 fd 6c 87 16 c9 5c 49 d8 27 4b 45 a0 7d be ^..l...\I.'KE.}. 0120 97 c7 66 47 e9 d2 a6 c2 83 c2 66 d2 32 4a cd 59 ..fG......f.2J.Y 0130 b9 72 1a 10 3c 46 50 25 05 bc 0f 50 d0 19 70 ee .r....../.lB.t. 0090 c2 01 61 b9 ee f0 97 c2 cf c2 50 a8 e3 cb f7 51 ..a.......P....Q 00a0 0d 87 c0 d2 45 f8 ....E. Frame 16 (166 bytes on wire, 166 bytes captured) Arrival Time: Oct 27, 2006 14:54:46.091564000 Time delta from previous packet: 0.977695000 seconds Time since reference or first frame: 3.045782000 seconds Frame Number: 16 Packet Length: 166 bytes Capture Length: 166 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Destination: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.101 (165.227.249.101) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0021 (33) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b69 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.101 (165.227.249.101) Encapsulating Security Payload SPI: 0x03d36c58 Sequence: 4 Data (124 bytes) 0000 00 0f b5 4b 45 e0 00 0c 29 f4 af 90 08 00 45 00 ...KE...).....E. 0010 00 98 00 21 00 00 f0 32 8b 69 a5 e3 f9 7c a5 e3 ...!...2.i...|.. 0020 f9 65 03 d3 6c 58 00 00 00 04 27 3c 36 d8 2c ba .e..lX....'<6.,. 0030 48 05 18 b3 7b 8e bb 44 5c d1 3b 4e f9 84 e7 42 H...{..D\.;N...B 0040 0f 76 7d fd c7 38 05 74 58 9c 1b 90 d5 35 e9 1a .v}..8.tX....5.. 0050 b0 57 fd ac ee 9d ce e8 a8 cb 4a 8d 7b 08 6e fa .W........J.{.n. 0060 e3 ea 82 66 08 50 a5 9b 58 89 7a 04 48 71 c8 13 ...f.P..X.z.Hq.. 0070 da b4 4e 24 2a 35 86 4a 01 b8 36 a9 a7 68 e6 80 ..N$*5.J..6..h.. 0080 c2 d5 82 71 83 c7 da 58 f1 00 8e 25 24 3c 5b 80 ...q...X...%$<[. 0090 df de 57 a8 9c 9c 99 48 e3 23 6c 2d c0 52 af 77 ..W....H.#l-.R.w 00a0 06 85 38 97 92 76 ..8..v Frame 17 (166 bytes on wire, 166 bytes captured) Arrival Time: Oct 27, 2006 14:54:46.093476000 Time delta from previous packet: 0.001912000 seconds Time since reference or first frame: 3.047694000 seconds Frame Number: 17 Packet Length: 166 bytes Capture Length: 166 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0f:b5:4b:45:e0 (00:0f:b5:4b:45:e0) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.101 (165.227.249.101), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x09fe (2558) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x318d [correct] Good: True Bad : False Source: 165.227.249.101 (165.227.249.101) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x169366a2 Sequence: 2 Data (124 bytes) 0000 00 0c 29 f4 af 90 00 0f b5 4b 45 e0 08 00 45 00 ..)......KE...E. 0010 00 98 09 fe 00 00 40 32 31 8d a5 e3 f9 65 a5 e3 ......@21....e.. 0020 f9 7c 16 93 66 a2 00 00 00 02 ab 3d 98 80 45 cd .|..f......=..E. 0030 1f 30 76 43 5f 4b c5 ae 42 d3 53 84 8f c9 a9 28 .0vC_K..B.S....( 0040 75 fa ae cf 03 b0 c3 0b 25 1e a3 8b 1e 83 ec d5 u.......%....... 0050 43 17 10 a8 46 d2 43 aa 60 5b 75 87 47 cd cf b9 C...F.C.`[u.G... 0060 a8 ba 21 7c f9 bd 53 e1 78 0b a9 d5 0b 73 a8 6e ..!|..S.x....s.n 0070 8b 90 d6 fe 62 82 6d 3d 0b 96 60 45 10 9b 27 34 ....b.m=..`E..'4 0080 ab 00 f8 49 1e 20 c1 3d 9a e6 9e 34 10 0b 1f c5 ...I. .=...4.... 0090 b8 99 57 fe 03 f4 79 16 f2 8c 2a e5 95 56 31 4c ..W...y...*..V1L 00a0 68 47 ca 30 a0 9e hG.0..