Frame 1 (326 bytes on wire, 326 bytes captured)
    Arrival Time: Feb 22, 2010 14:49:34.750044000
    [Time delta from previous captured frame: 0.000000000 seconds]
    [Time delta from previous displayed frame: 0.000000000 seconds]
    [Time since reference or first frame: 0.000000000 seconds]
    Frame Number: 1
    Frame Length: 326 bytes
    Capture Length: 326 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02)
    Destination: 00:00:00:00:00:02 (00:00:00:00:00:02)
        Address: 00:00:00:00:00:02 (00:00:00:00:00:02)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.103 (165.227.249.103)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 312
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb09 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.103 (165.227.249.103)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 292
    Checksum: 0x521a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0AFBF96E4B6E906A
    Responder cookie: 0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 284
    Security Association payload
        Next payload: Vendor ID (13)
        Payload length: 136
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 0
            Next payload: NONE (0)
            Payload length: 124
            Proposal number: 0
            Protocol ID: ISAKMP (1)
            SPI Size: 8
            Proposal transforms: 3
            SPI: 0x0AFBF96E4B6E906A
            Transform payload # 0
                Next payload: Transform (3)
                Payload length: 36
                Transform number: 0
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
            Transform payload # 1
                Next payload: Transform (3)
                Payload length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (192)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
            Transform payload # 2
                Next payload: NONE (0)
                Payload length: 36
                Transform number: 2
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (256)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
    Vendor ID: F758F22668750F03B08DF6EBE1D00500
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: F758F22668750F03B08DF6EBE1D00500
    Vendor ID: draft-ietf-ipsec-nat-t-ike-02
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02
    Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n
    Vendor ID: draft-ietf-ipsec-nat-t-ike-03
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-03
    Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE
    Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)
        Next payload: NONE (0)
        Payload length: 20
        Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)

0000  00 00 00 00 00 02 00 0c 29 48 f8 2f 08 00 45 00   ........)H./..E.
0010  01 38 00 00 40 00 40 11 fb 09 a5 e3 f9 7c a5 e3   .8..@.@......|..
0020  f9 67 01 f4 01 f4 01 24 52 1a 0a fb f9 6e 4b 6e   .g.....$R....nKn
0030  90 6a 00 00 00 00 00 00 00 00 01 10 02 00 00 00   .j..............
0040  00 00 00 00 01 1c 0d 00 00 88 00 00 00 01 00 00   ................
0050  00 01 00 00 00 7c 00 01 08 03 0a fb f9 6e 4b 6e   .....|.......nKn
0060  90 6a 03 00 00 24 00 01 00 00 80 01 00 07 80 0e   .j...$..........
0070  00 80 80 02 00 02 80 03 00 01 80 04 00 02 80 0b   ................
0080  00 01 80 0c 70 80 03 00 00 24 01 01 00 00 80 01   ....p....$......
0090  00 07 80 0e 00 c0 80 02 00 02 80 03 00 01 80 04   ................
00a0  00 02 80 0b 00 01 80 0c 70 80 00 00 00 24 02 01   ........p....$..
00b0  00 00 80 01 00 07 80 0e 01 00 80 02 00 02 80 03   ................
00c0  00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00   ............p...
00d0  00 14 f7 58 f2 26 68 75 0f 03 b0 8d f6 eb e1 d0   ...X.&hu........
00e0  05 00 0d 00 00 14 cd 60 46 43 35 df 21 f8 7c fd   .......`FC5.!.|.
00f0  b2 fc 68 b6 a4 48 0d 00 00 14 90 cb 80 91 3e bb   ..h..H........>.
0100  69 6e 08 63 81 b5 ec 42 7b 1f 0d 00 00 14 7d 94   in.c...B{.....}.
0110  19 a6 53 10 ca 6f 2c 17 9d 92 15 52 9d 56 0d 00   ..S..o,....R.V..
0120  00 14 4a 13 1c 81 07 03 58 45 5c 57 28 f2 0e 95   ..J.....XE\W(...
0130  45 2f 00 00 00 14 af ca d7 13 68 a1 f1 c9 6b 86   E/........h...k.
0140  96 fc 77 57 01 00                                 ..wW..

Frame 2 (326 bytes on wire, 326 bytes captured)
    Arrival Time: Feb 22, 2010 14:49:34.750055000
    [Time delta from previous captured frame: 0.000011000 seconds]
    [Time delta from previous displayed frame: 0.000011000 seconds]
    [Time since reference or first frame: 0.000011000 seconds]
    Frame Number: 2
    Frame Length: 326 bytes
    Capture Length: 326 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02)
    Destination: 00:00:00:00:00:02 (00:00:00:00:00:02)
        Address: 00:00:00:00:00:02 (00:00:00:00:00:02)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.103 (165.227.249.103)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 312
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb09 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.103 (165.227.249.103)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 292
    Checksum: 0x521a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0AFBF96E4B6E906A
    Responder cookie: 0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 284
    Security Association payload
        Next payload: Vendor ID (13)
        Payload length: 136
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 0
            Next payload: NONE (0)
            Payload length: 124
            Proposal number: 0
            Protocol ID: ISAKMP (1)
            SPI Size: 8
            Proposal transforms: 3
            SPI: 0x0AFBF96E4B6E906A
            Transform payload # 0
                Next payload: Transform (3)
                Payload length: 36
                Transform number: 0
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
            Transform payload # 1
                Next payload: Transform (3)
                Payload length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (192)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
            Transform payload # 2
                Next payload: NONE (0)
                Payload length: 36
                Transform number: 2
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (256)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
    Vendor ID: F758F22668750F03B08DF6EBE1D00500
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: F758F22668750F03B08DF6EBE1D00500
    Vendor ID: draft-ietf-ipsec-nat-t-ike-02
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02
    Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n
    Vendor ID: draft-ietf-ipsec-nat-t-ike-03
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-03
    Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE
    Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)
        Next payload: NONE (0)
        Payload length: 20
        Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)

0000  00 00 00 00 00 02 00 0c 29 48 f8 2f 08 00 45 00   ........)H./..E.
0010  01 38 00 00 40 00 40 11 fb 09 a5 e3 f9 7c a5 e3   .8..@.@......|..
0020  f9 67 01 f4 01 f4 01 24 52 1a 0a fb f9 6e 4b 6e   .g.....$R....nKn
0030  90 6a 00 00 00 00 00 00 00 00 01 10 02 00 00 00   .j..............
0040  00 00 00 00 01 1c 0d 00 00 88 00 00 00 01 00 00   ................
0050  00 01 00 00 00 7c 00 01 08 03 0a fb f9 6e 4b 6e   .....|.......nKn
0060  90 6a 03 00 00 24 00 01 00 00 80 01 00 07 80 0e   .j...$..........
0070  00 80 80 02 00 02 80 03 00 01 80 04 00 02 80 0b   ................
0080  00 01 80 0c 70 80 03 00 00 24 01 01 00 00 80 01   ....p....$......
0090  00 07 80 0e 00 c0 80 02 00 02 80 03 00 01 80 04   ................
00a0  00 02 80 0b 00 01 80 0c 70 80 00 00 00 24 02 01   ........p....$..
00b0  00 00 80 01 00 07 80 0e 01 00 80 02 00 02 80 03   ................
00c0  00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00   ............p...
00d0  00 14 f7 58 f2 26 68 75 0f 03 b0 8d f6 eb e1 d0   ...X.&hu........
00e0  05 00 0d 00 00 14 cd 60 46 43 35 df 21 f8 7c fd   .......`FC5.!.|.
00f0  b2 fc 68 b6 a4 48 0d 00 00 14 90 cb 80 91 3e bb   ..h..H........>.
0100  69 6e 08 63 81 b5 ec 42 7b 1f 0d 00 00 14 7d 94   in.c...B{.....}.
0110  19 a6 53 10 ca 6f 2c 17 9d 92 15 52 9d 56 0d 00   ..S..o,....R.V..
0120  00 14 4a 13 1c 81 07 03 58 45 5c 57 28 f2 0e 95   ..J.....XE\W(...
0130  45 2f 00 00 00 14 af ca d7 13 68 a1 f1 c9 6b 86   E/........h...k.
0140  96 fc 77 57 01 00                                 ..wW..

Frame 3 (174 bytes on wire, 174 bytes captured)
    Arrival Time: Feb 22, 2010 14:49:34.851686000
    [Time delta from previous captured frame: 0.101631000 seconds]
    [Time delta from previous displayed frame: 0.101631000 seconds]
    [Time since reference or first frame: 0.101642000 seconds]
    Frame Number: 3
    Frame Length: 174 bytes
    Capture Length: 174 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:00:00:00:00:02 (00:00:00:00:00:02), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
    Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:00:00:00:00:02 (00:00:00:00:00:02)
        Address: 00:00:00:00:00:02 (00:00:00:00:00:02)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 160
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfba1 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.103 (165.227.249.103)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 140
    Checksum: 0x2e9c [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0AFBF96E4B6E906A
    Responder cookie: DF00F28CCD38A7A4
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 132
    Security Association payload
        Next payload: Vendor ID (13)
        Payload length: 64
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 0
            Next payload: NONE (0)
            Payload length: 52
            Proposal number: 0
            Protocol ID: ISAKMP (1)
            SPI Size: 8
            Proposal transforms: 1
            SPI: 0x0000000000000000
            Transform payload # 0
                Next payload: NONE (0)
                Payload length: 36
                Transform number: 0
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
    Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)
    Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35
        Next payload: NONE (0)
        Payload length: 20
        Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35

0000  00 0c 29 48 f8 2f 00 00 00 00 00 02 08 00 45 00   ..)H./........E.
0010  00 a0 00 00 40 00 40 11 fb a1 a5 e3 f9 67 a5 e3   ....@.@......g..
0020  f9 7c 01 f4 01 f4 00 8c 2e 9c 0a fb f9 6e 4b 6e   .|...........nKn
0030  90 6a df 00 f2 8c cd 38 a7 a4 01 10 02 00 00 00   .j.....8........
0040  00 00 00 00 00 84 0d 00 00 40 00 00 00 01 00 00   .........@......
0050  00 01 00 00 00 34 00 01 08 01 00 00 00 00 00 00   .....4..........
0060  00 00 00 00 00 24 00 01 00 00 80 01 00 07 80 0e   .....$..........
0070  00 80 80 02 00 02 80 03 00 01 80 04 00 02 80 0b   ................
0080  00 01 80 0c 70 80 0d 00 00 14 af ca d7 13 68 a1   ....p.........h.
0090  f1 c9 6b 86 96 fc 77 57 01 00 00 00 00 14 70 03   ..k...wW......p.
00a0  cb c1 09 7d be 9c 26 00 ba 69 83 bc 8b 35         ...}..&..i...5

Frame 4 (222 bytes on wire, 222 bytes captured)
    Arrival Time: Feb 22, 2010 14:49:34.858716000
    [Time delta from previous captured frame: 0.007030000 seconds]
    [Time delta from previous displayed frame: 0.007030000 seconds]
    [Time since reference or first frame: 0.108672000 seconds]
    Frame Number: 4
    Frame Length: 222 bytes
    Capture Length: 222 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02)
    Destination: 00:00:00:00:00:02 (00:00:00:00:00:02)
        Address: 00:00:00:00:00:02 (00:00:00:00:00:02)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.103 (165.227.249.103)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 208
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb71 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.103 (165.227.249.103)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 188
    Checksum: 0x777f [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0AFBF96E4B6E906A
    Responder cookie: DF00F28CCD38A7A4
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 180
    Key Exchange payload
        Next payload: Nonce (10)
        Payload length: 132
        Key Exchange Data (128 bytes / 1024 bits)
    Nonce payload
        Next payload: NONE (0)
        Payload length: 20
        Nonce Data

0000  00 00 00 00 00 02 00 0c 29 48 f8 2f 08 00 45 00   ........)H./..E.
0010  00 d0 00 00 40 00 40 11 fb 71 a5 e3 f9 7c a5 e3   ....@.@..q...|..
0020  f9 67 01 f4 01 f4 00 bc 77 7f 0a fb f9 6e 4b 6e   .g......w....nKn
0030  90 6a df 00 f2 8c cd 38 a7 a4 04 10 02 00 00 00   .j.....8........
0040  00 00 00 00 00 b4 0a 00 00 84 49 f2 c8 72 76 4e   ..........I..rvN
0050  de 79 66 92 84 05 6f 39 8e 8d 60 f5 c8 28 ca ca   .yf...o9..`..(..
0060  05 e9 70 1d 06 5e 21 20 d0 1e 70 ff de 1f fb fa   ..p..^! ..p.....
0070  c1 98 e0 08 b6 46 c0 9b e9 24 e6 f1 7e 63 92 3d   .....F...$..~c.=
0080  5c 74 c0 71 93 af f7 47 e4 68 bb ae 9d 15 f4 c6   \t.q...G.h......
0090  1c e2 e5 bb 3b 5b d3 26 43 25 e5 0d cd d9 72 f9   ....;[.&C%....r.
00a0  a6 f2 b8 dc b0 14 f4 22 81 79 f6 cf de d4 d4 c4   .......".y......
00b0  94 9b 2b db 0b 5f 5f 30 53 44 71 3e e1 00 8f 0e   ..+..__0SDq>....
00c0  b6 87 b3 66 6c 66 c1 12 94 d0 00 00 00 14 a1 c0   ...flf..........
00d0  75 ee 30 ab 48 d2 33 9d a9 6e 09 91 8f 6d         u.0.H.3..n...m

Frame 5 (222 bytes on wire, 222 bytes captured)
    Arrival Time: Feb 22, 2010 14:49:34.858730000
    [Time delta from previous captured frame: 0.000014000 seconds]
    [Time delta from previous displayed frame: 0.000014000 seconds]
    [Time since reference or first frame: 0.108686000 seconds]
    Frame Number: 5
    Frame Length: 222 bytes
    Capture Length: 222 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02)
    Destination: 00:00:00:00:00:02 (00:00:00:00:00:02)
        Address: 00:00:00:00:00:02 (00:00:00:00:00:02)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.103 (165.227.249.103)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 208
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb71 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.103 (165.227.249.103)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 188
    Checksum: 0x777f [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0AFBF96E4B6E906A
    Responder cookie: DF00F28CCD38A7A4
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 180
    Key Exchange payload
        Next payload: Nonce (10)
        Payload length: 132
        Key Exchange Data (128 bytes / 1024 bits)
    Nonce payload
        Next payload: NONE (0)
        Payload length: 20
        Nonce Data

0000  00 00 00 00 00 02 00 0c 29 48 f8 2f 08 00 45 00   ........)H./..E.
0010  00 d0 00 00 40 00 40 11 fb 71 a5 e3 f9 7c a5 e3   ....@.@..q...|..
0020  f9 67 01 f4 01 f4 00 bc 77 7f 0a fb f9 6e 4b 6e   .g......w....nKn
0030  90 6a df 00 f2 8c cd 38 a7 a4 04 10 02 00 00 00   .j.....8........
0040  00 00 00 00 00 b4 0a 00 00 84 49 f2 c8 72 76 4e   ..........I..rvN
0050  de 79 66 92 84 05 6f 39 8e 8d 60 f5 c8 28 ca ca   .yf...o9..`..(..
0060  05 e9 70 1d 06 5e 21 20 d0 1e 70 ff de 1f fb fa   ..p..^! ..p.....
0070  c1 98 e0 08 b6 46 c0 9b e9 24 e6 f1 7e 63 92 3d   .....F...$..~c.=
0080  5c 74 c0 71 93 af f7 47 e4 68 bb ae 9d 15 f4 c6   \t.q...G.h......
0090  1c e2 e5 bb 3b 5b d3 26 43 25 e5 0d cd d9 72 f9   ....;[.&C%....r.
00a0  a6 f2 b8 dc b0 14 f4 22 81 79 f6 cf de d4 d4 c4   .......".y......
00b0  94 9b 2b db 0b 5f 5f 30 53 44 71 3e e1 00 8f 0e   ..+..__0SDq>....
00c0  b6 87 b3 66 6c 66 c1 12 94 d0 00 00 00 14 a1 c0   ...flf..........
00d0  75 ee 30 ab 48 d2 33 9d a9 6e 09 91 8f 6d         u.0.H.3..n...m

Frame 6 (242 bytes on wire, 242 bytes captured)
    Arrival Time: Feb 22, 2010 14:49:35.024576000
    [Time delta from previous captured frame: 0.165846000 seconds]
    [Time delta from previous displayed frame: 0.165846000 seconds]
    [Time since reference or first frame: 0.274532000 seconds]
    Frame Number: 6
    Frame Length: 242 bytes
    Capture Length: 242 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:00:00:00:00:02 (00:00:00:00:00:02), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
    Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:00:00:00:00:02 (00:00:00:00:00:02)
        Address: 00:00:00:00:00:02 (00:00:00:00:00:02)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 228
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb5d [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.103 (165.227.249.103)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 208
    Checksum: 0xbb3e [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0AFBF96E4B6E906A
    Responder cookie: DF00F28CCD38A7A4
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 200
    Key Exchange payload
        Next payload: Nonce (10)
        Payload length: 132
        Key Exchange Data (128 bytes / 1024 bits)
    Nonce payload
        Next payload: Vendor ID (13)
        Payload length: 20
        Nonce Data
    Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35
        Next payload: NONE (0)
        Payload length: 20
        Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35

0000  00 0c 29 48 f8 2f 00 00 00 00 00 02 08 00 45 00   ..)H./........E.
0010  00 e4 00 00 40 00 40 11 fb 5d a5 e3 f9 67 a5 e3   ....@.@..]...g..
0020  f9 7c 01 f4 01 f4 00 d0 bb 3e 0a fb f9 6e 4b 6e   .|.......>...nKn
0030  90 6a df 00 f2 8c cd 38 a7 a4 04 10 02 00 00 00   .j.....8........
0040  00 00 00 00 00 c8 0a 00 00 84 ff 0a 7e a5 ef 97   ............~...
0050  8d 33 46 e1 81 81 4a 93 41 5d 8a 88 fe cb ee bb   .3F...J.A]......
0060  bd dc b8 f6 85 3b 4b de a0 67 e2 1d ae 87 f7 ea   .....;K..g......
0070  71 9c 9b b4 02 03 a5 d1 b1 57 b6 df 65 c8 20 0c   q........W..e. .
0080  05 68 a6 a7 3b 01 67 cb 06 9a 94 0b 71 47 82 ee   .h..;.g.....qG..
0090  44 49 e3 ed e7 3e 02 cd 50 23 41 fa a5 02 fd 86   DI...>..P#A.....
00a0  df ee 7f 74 ba 12 17 50 cd 40 4d f6 f5 b9 ce 23   ...t...P.@M....#
00b0  d1 7b 42 43 89 c4 7f e2 cb d8 02 10 d4 68 f6 f0   .{BC.........h..
00c0  42 75 6c 2f 56 e1 28 31 ab 2a 0d 00 00 14 c1 8f   Bul/V.(1.*......
00d0  d5 fb c9 b3 d1 2f c7 5f 8f dd bb 7e e3 e4 00 00   ...../._...~....
00e0  00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc   ..p....}..&..i..
00f0  8b 35                                             .5

Frame 7 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Feb 22, 2010 14:49:35.029734000
    [Time delta from previous captured frame: 0.005158000 seconds]
    [Time delta from previous displayed frame: 0.005158000 seconds]
    [Time since reference or first frame: 0.279690000 seconds]
    Frame Number: 7
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02)
    Destination: 00:00:00:00:00:02 (00:00:00:00:00:02)
        Address: 00:00:00:00:00:02 (00:00:00:00:00:02)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.103 (165.227.249.103)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbc9 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.103 (165.227.249.103)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 100
    Checksum: 0x5954 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0AFBF96E4B6E906A
    Responder cookie: DF00F28CCD38A7A4
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 92
    Encrypted payload (64 bytes)

0000  00 00 00 00 00 02 00 0c 29 48 f8 2f 08 00 45 00   ........)H./..E.
0010  00 78 00 00 40 00 40 11 fb c9 a5 e3 f9 7c a5 e3   .x..@.@......|..
0020  f9 67 01 f4 01 f4 00 64 59 54 0a fb f9 6e 4b 6e   .g.....dYT...nKn
0030  90 6a df 00 f2 8c cd 38 a7 a4 05 10 02 01 00 00   .j.....8........
0040  00 00 00 00 00 5c e5 02 2d b0 58 28 a6 0a 41 56   .....\..-.X(..AV
0050  00 35 5c 78 09 53 30 e9 14 15 10 36 6e d7 71 ae   .5\x.S0....6n.q.
0060  1a 9d 92 9f bc 15 9c ee c7 0a 37 f8 ee 75 01 dc   ..........7..u..
0070  5f 7f 9b e8 10 bb 44 b8 26 8a 77 a2 db b5 99 cb   _.....D.&.w.....
0080  d5 14 19 cf fe 28                                 .....(

Frame 8 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Feb 22, 2010 14:49:35.029750000
    [Time delta from previous captured frame: 0.000016000 seconds]
    [Time delta from previous displayed frame: 0.000016000 seconds]
    [Time since reference or first frame: 0.279706000 seconds]
    Frame Number: 8
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02)
    Destination: 00:00:00:00:00:02 (00:00:00:00:00:02)
        Address: 00:00:00:00:00:02 (00:00:00:00:00:02)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.103 (165.227.249.103)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbc9 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.103 (165.227.249.103)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 100
    Checksum: 0x5954 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0AFBF96E4B6E906A
    Responder cookie: DF00F28CCD38A7A4
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 92
    Encrypted payload (64 bytes)

0000  00 00 00 00 00 02 00 0c 29 48 f8 2f 08 00 45 00   ........)H./..E.
0010  00 78 00 00 40 00 40 11 fb c9 a5 e3 f9 7c a5 e3   .x..@.@......|..
0020  f9 67 01 f4 01 f4 00 64 59 54 0a fb f9 6e 4b 6e   .g.....dYT...nKn
0030  90 6a df 00 f2 8c cd 38 a7 a4 05 10 02 01 00 00   .j.....8........
0040  00 00 00 00 00 5c e5 02 2d b0 58 28 a6 0a 41 56   .....\..-.X(..AV
0050  00 35 5c 78 09 53 30 e9 14 15 10 36 6e d7 71 ae   .5\x.S0....6n.q.
0060  1a 9d 92 9f bc 15 9c ee c7 0a 37 f8 ee 75 01 dc   ..........7..u..
0070  5f 7f 9b e8 10 bb 44 b8 26 8a 77 a2 db b5 99 cb   _.....D.&.w.....
0080  d5 14 19 cf fe 28                                 .....(

Frame 9 (118 bytes on wire, 118 bytes captured)
    Arrival Time: Feb 22, 2010 14:49:35.267172000
    [Time delta from previous captured frame: 0.237422000 seconds]
    [Time delta from previous displayed frame: 0.237422000 seconds]
    [Time since reference or first frame: 0.517128000 seconds]
    Frame Number: 9
    Frame Length: 118 bytes
    Capture Length: 118 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:00:00:00:00:02 (00:00:00:00:00:02), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
    Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:00:00:00:00:02 (00:00:00:00:00:02)
        Address: 00:00:00:00:00:02 (00:00:00:00:00:02)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbd9 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.103 (165.227.249.103)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 84
    Checksum: 0xfc30 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0AFBF96E4B6E906A
    Responder cookie: DF00F28CCD38A7A4
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 76
    Encrypted payload (48 bytes)

0000  00 0c 29 48 f8 2f 00 00 00 00 00 02 08 00 45 00   ..)H./........E.
0010  00 68 00 00 40 00 40 11 fb d9 a5 e3 f9 67 a5 e3   .h..@.@......g..
0020  f9 7c 01 f4 01 f4 00 54 fc 30 0a fb f9 6e 4b 6e   .|.....T.0...nKn
0030  90 6a df 00 f2 8c cd 38 a7 a4 05 10 02 01 00 00   .j.....8........
0040  00 00 00 00 00 4c ed 69 82 3c 8c 43 ac 10 c0 ce   .....L.i.<.C....
0050  06 06 88 09 98 b0 c4 dd 50 b2 86 e9 e1 d9 15 51   ........P......Q
0060  ce 09 46 48 e0 bc 10 0e 2b ea 70 3e 94 54 61 78   ..FH....+.p>.Tax
0070  26 94 ab 4e 06 53                                 &..N.S

Frame 10 (518 bytes on wire, 518 bytes captured)
    Arrival Time: Feb 22, 2010 14:49:35.287812000
    [Time delta from previous captured frame: 0.020640000 seconds]
    [Time delta from previous displayed frame: 0.020640000 seconds]
    [Time since reference or first frame: 0.537768000 seconds]
    Frame Number: 10
    Frame Length: 518 bytes
    Capture Length: 518 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02)
    Destination: 00:00:00:00:00:02 (00:00:00:00:00:02)
        Address: 00:00:00:00:00:02 (00:00:00:00:00:02)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.103 (165.227.249.103)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 504
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfa49 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.103 (165.227.249.103)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 484
    Checksum: 0x2b66 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0AFBF96E4B6E906A
    Responder cookie: DF00F28CCD38A7A4
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x47dbb226
    Length: 476
    Encrypted payload (448 bytes)

0000  00 00 00 00 00 02 00 0c 29 48 f8 2f 08 00 45 00   ........)H./..E.
0010  01 f8 00 00 40 00 40 11 fa 49 a5 e3 f9 7c a5 e3   ....@.@..I...|..
0020  f9 67 01 f4 01 f4 01 e4 2b 66 0a fb f9 6e 4b 6e   .g......+f...nKn
0030  90 6a df 00 f2 8c cd 38 a7 a4 08 10 20 01 47 db   .j.....8.... .G.
0040  b2 26 00 00 01 dc 6c 84 fc f4 23 a4 52 9f d2 7b   .&....l...#.R..{
0050  da 3a 4c 53 d6 88 16 e8 e7 0d 9b eb e1 a7 94 dd   .:LS............
0060  5b cd 3a 78 be d3 a1 dd 04 ca 4e 88 67 aa ae 39   [.:x......N.g..9
0070  39 66 f2 55 4f 95 7e c3 a9 4b eb 5d 91 d4 d5 39   9f.UO.~..K.]...9
0080  de d7 a2 e8 60 2b b4 92 94 5b 86 56 19 10 fb 26   ....`+...[.V...&
0090  57 9e 88 2a b1 bf 7f 35 4f a3 95 de 1b c0 55 44   W..*...5O.....UD
00a0  31 ad eb 51 74 cd 8c 42 f8 9a d1 a3 02 93 f6 32   1..Qt..B.......2
00b0  c1 a2 29 0d 12 46 5d 86 b7 53 c4 69 d1 b1 fa 6b   ..)..F]..S.i...k
00c0  f8 f2 28 92 23 77 95 6f 4a 09 16 56 c2 b3 11 55   ..(.#w.oJ..V...U
00d0  1b 73 ce 7f 7b 27 ed 1e 4d 37 2f 17 13 8d d7 a7   .s..{'..M7/.....
00e0  72 ae 4a 24 00 ce a7 09 a9 b8 39 2f 36 15 14 3e   r.J$......9/6..>
00f0  cd 40 63 6a 10 ef cf 71 84 cc de 0a 28 18 ce c8   .@cj...q....(...
0100  cd 4b 7d f5 fb 0c 69 e6 a2 07 14 7a 67 4e 13 56   .K}...i....zgN.V
0110  e3 b5 4e 1a 27 d9 fe 23 36 a3 ea ae d0 94 8d ff   ..N.'..#6.......
0120  da 40 45 42 20 b1 49 33 b8 62 f4 6f 94 a5 e9 ad   .@EB .I3.b.o....
0130  4d ae 9d b4 9a 42 3d 10 8f 66 29 62 f3 5d fb 78   M....B=..f)b.].x
0140  56 e4 be 40 b1 50 e8 15 2d c4 ab 9d 96 4b ee 8d   V..@.P..-....K..
0150  bf 26 d0 5c 69 58 80 e9 ac c8 5f 82 e2 11 87 76   .&.\iX...._....v
0160  9f 3d e4 f1 10 71 73 20 98 af 37 1a 78 3b 91 aa   .=...qs ..7.x;..
0170  46 d6 5a 1f 56 5f ee 52 7f f0 91 09 0d 6e 4c b9   F.Z.V_.R.....nL.
0180  a6 c0 23 b7 c5 e1 b1 ca 67 e4 7c 87 e1 21 89 b1   ..#.....g.|..!..
0190  ad 49 c4 cc 63 b8 50 f4 a1 23 6c ec 86 3e d5 1a   .I..c.P..#l..>..
01a0  15 3c e5 c2 8a 49 44 9f 29 c1 86 06 80 7d 8d b5   .<...ID.)....}..
01b0  73 da 0f 68 b1 04 4a 54 e9 14 3b 39 e4 64 2f 73   s..h..JT..;9.d/s
01c0  27 0b f0 60 3d 6f 94 21 eb e8 99 c5 9f c0 da 36   '..`=o.!.......6
01d0  be 40 0a 79 c9 2e 78 65 f4 7a 9f 8c c0 cc 67 b2   .@.y..xe.z....g.
01e0  3c 4f 96 c7 7f f9 b9 6e dc b5 f9 6e 36 eb 1b 6b   <O.....n...n6..k
01f0  91 4a 64 2f 8b 10 4a b1 c4 72 cb ef e4 43 22 86   .Jd/..J..r...C".
0200  0f 5b cd 13 2e 82                                 .[....

Frame 11 (518 bytes on wire, 518 bytes captured)
    Arrival Time: Feb 22, 2010 14:49:35.287829000
    [Time delta from previous captured frame: 0.000017000 seconds]
    [Time delta from previous displayed frame: 0.000017000 seconds]
    [Time since reference or first frame: 0.537785000 seconds]
    Frame Number: 11
    Frame Length: 518 bytes
    Capture Length: 518 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02)
    Destination: 00:00:00:00:00:02 (00:00:00:00:00:02)
        Address: 00:00:00:00:00:02 (00:00:00:00:00:02)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.103 (165.227.249.103)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 504
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfa49 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.103 (165.227.249.103)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 484
    Checksum: 0x2b66 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0AFBF96E4B6E906A
    Responder cookie: DF00F28CCD38A7A4
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x47dbb226
    Length: 476
    Encrypted payload (448 bytes)

0000  00 00 00 00 00 02 00 0c 29 48 f8 2f 08 00 45 00   ........)H./..E.
0010  01 f8 00 00 40 00 40 11 fa 49 a5 e3 f9 7c a5 e3   ....@.@..I...|..
0020  f9 67 01 f4 01 f4 01 e4 2b 66 0a fb f9 6e 4b 6e   .g......+f...nKn
0030  90 6a df 00 f2 8c cd 38 a7 a4 08 10 20 01 47 db   .j.....8.... .G.
0040  b2 26 00 00 01 dc 6c 84 fc f4 23 a4 52 9f d2 7b   .&....l...#.R..{
0050  da 3a 4c 53 d6 88 16 e8 e7 0d 9b eb e1 a7 94 dd   .:LS............
0060  5b cd 3a 78 be d3 a1 dd 04 ca 4e 88 67 aa ae 39   [.:x......N.g..9
0070  39 66 f2 55 4f 95 7e c3 a9 4b eb 5d 91 d4 d5 39   9f.UO.~..K.]...9
0080  de d7 a2 e8 60 2b b4 92 94 5b 86 56 19 10 fb 26   ....`+...[.V...&
0090  57 9e 88 2a b1 bf 7f 35 4f a3 95 de 1b c0 55 44   W..*...5O.....UD
00a0  31 ad eb 51 74 cd 8c 42 f8 9a d1 a3 02 93 f6 32   1..Qt..B.......2
00b0  c1 a2 29 0d 12 46 5d 86 b7 53 c4 69 d1 b1 fa 6b   ..)..F]..S.i...k
00c0  f8 f2 28 92 23 77 95 6f 4a 09 16 56 c2 b3 11 55   ..(.#w.oJ..V...U
00d0  1b 73 ce 7f 7b 27 ed 1e 4d 37 2f 17 13 8d d7 a7   .s..{'..M7/.....
00e0  72 ae 4a 24 00 ce a7 09 a9 b8 39 2f 36 15 14 3e   r.J$......9/6..>
00f0  cd 40 63 6a 10 ef cf 71 84 cc de 0a 28 18 ce c8   .@cj...q....(...
0100  cd 4b 7d f5 fb 0c 69 e6 a2 07 14 7a 67 4e 13 56   .K}...i....zgN.V
0110  e3 b5 4e 1a 27 d9 fe 23 36 a3 ea ae d0 94 8d ff   ..N.'..#6.......
0120  da 40 45 42 20 b1 49 33 b8 62 f4 6f 94 a5 e9 ad   .@EB .I3.b.o....
0130  4d ae 9d b4 9a 42 3d 10 8f 66 29 62 f3 5d fb 78   M....B=..f)b.].x
0140  56 e4 be 40 b1 50 e8 15 2d c4 ab 9d 96 4b ee 8d   V..@.P..-....K..
0150  bf 26 d0 5c 69 58 80 e9 ac c8 5f 82 e2 11 87 76   .&.\iX...._....v
0160  9f 3d e4 f1 10 71 73 20 98 af 37 1a 78 3b 91 aa   .=...qs ..7.x;..
0170  46 d6 5a 1f 56 5f ee 52 7f f0 91 09 0d 6e 4c b9   F.Z.V_.R.....nL.
0180  a6 c0 23 b7 c5 e1 b1 ca 67 e4 7c 87 e1 21 89 b1   ..#.....g.|..!..
0190  ad 49 c4 cc 63 b8 50 f4 a1 23 6c ec 86 3e d5 1a   .I..c.P..#l..>..
01a0  15 3c e5 c2 8a 49 44 9f 29 c1 86 06 80 7d 8d b5   .<...ID.)....}..
01b0  73 da 0f 68 b1 04 4a 54 e9 14 3b 39 e4 64 2f 73   s..h..JT..;9.d/s
01c0  27 0b f0 60 3d 6f 94 21 eb e8 99 c5 9f c0 da 36   '..`=o.!.......6
01d0  be 40 0a 79 c9 2e 78 65 f4 7a 9f 8c c0 cc 67 b2   .@.y..xe.z....g.
01e0  3c 4f 96 c7 7f f9 b9 6e dc b5 f9 6e 36 eb 1b 6b   <O.....n...n6..k
01f0  91 4a 64 2f 8b 10 4a b1 c4 72 cb ef e4 43 22 86   .Jd/..J..r...C".
0200  0f 5b cd 13 2e 82                                 .[....

Frame 12 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Feb 22, 2010 14:49:35.293090000
    [Time delta from previous captured frame: 0.005261000 seconds]
    [Time delta from previous displayed frame: 0.005261000 seconds]
    [Time since reference or first frame: 0.543046000 seconds]
    Frame Number: 12
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:00:00:00:00:02 (00:00:00:00:00:02), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
    Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:00:00:00:00:02 (00:00:00:00:00:02)
        Address: 00:00:00:00:00:02 (00:00:00:00:00:02)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbc9 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.103 (165.227.249.103)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 100
    Checksum: 0x6393 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0AFBF96E4B6E906A
    Responder cookie: DF00F28CCD38A7A4
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xa9512f95
    Length: 92
    Encrypted payload (64 bytes)

0000  00 0c 29 48 f8 2f 00 00 00 00 00 02 08 00 45 00   ..)H./........E.
0010  00 78 00 00 40 00 40 11 fb c9 a5 e3 f9 67 a5 e3   .x..@.@......g..
0020  f9 7c 01 f4 01 f4 00 64 63 93 0a fb f9 6e 4b 6e   .|.....dc....nKn
0030  90 6a df 00 f2 8c cd 38 a7 a4 08 10 05 01 a9 51   .j.....8.......Q
0040  2f 95 00 00 00 5c d8 50 22 54 ef 6d 0a 85 cb ed   /....\.P"T.m....
0050  86 b9 cd 6f e8 57 70 17 44 fe 1d dc 8f 84 9e 27   ...o.Wp.D......'
0060  42 26 01 c8 53 c9 a6 d0 f8 f0 96 33 af f9 e1 8d   B&..S......3....
0070  db bb 55 24 00 fa 5e a2 e6 93 5f dc 99 59 49 26   ..U$..^..._..YI&
0080  ec 42 01 3d 48 37                                 .B.=H7

Frame 13 (342 bytes on wire, 342 bytes captured)
    Arrival Time: Feb 22, 2010 14:49:35.699111000
    [Time delta from previous captured frame: 0.406021000 seconds]
    [Time delta from previous displayed frame: 0.406021000 seconds]
    [Time since reference or first frame: 0.949067000 seconds]
    Frame Number: 13
    Frame Length: 342 bytes
    Capture Length: 342 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:00:00:00:00:02 (00:00:00:00:00:02), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
    Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:00:00:00:00:02 (00:00:00:00:00:02)
        Address: 00:00:00:00:00:02 (00:00:00:00:00:02)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 328
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfaf9 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.103 (165.227.249.103)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 308
    Checksum: 0x871a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0AFBF96E4B6E906A
    Responder cookie: DF00F28CCD38A7A4
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x47dbb226
    Length: 300
    Encrypted payload (272 bytes)

0000  00 0c 29 48 f8 2f 00 00 00 00 00 02 08 00 45 00   ..)H./........E.
0010  01 48 00 00 40 00 40 11 fa f9 a5 e3 f9 67 a5 e3   .H..@.@......g..
0020  f9 7c 01 f4 01 f4 01 34 87 1a 0a fb f9 6e 4b 6e   .|.....4.....nKn
0030  90 6a df 00 f2 8c cd 38 a7 a4 08 10 20 01 47 db   .j.....8.... .G.
0040  b2 26 00 00 01 2c 47 62 5d c6 99 1d 26 b6 1f 78   .&...,Gb]...&..x
0050  a7 a2 c2 aa ee a6 ca 5a 65 e1 5f e8 c4 d1 29 a4   .......Ze._...).
0060  9f 6e 48 a3 5c 15 e2 6e e6 fc 3c 69 aa 12 c3 d7   .nH.\..n..<i....
0070  d9 49 b0 e4 01 ea 0c 53 a5 a6 8f 27 bf b4 1d 5b   .I.....S...'...[
0080  07 52 36 74 a1 ef 36 96 4f ac 53 34 89 76 c5 34   .R6t..6.O.S4.v.4
0090  9a f2 63 44 65 76 2b e7 e1 0b fd 94 f3 f6 0f 6a   ..cDev+........j
00a0  83 38 6e 79 08 05 91 3d bd 1d 34 1e e7 a0 a3 f4   .8ny...=..4.....
00b0  89 fb 84 26 3d 6d e6 d3 6e 06 83 18 61 e5 ae 93   ...&=m..n...a...
00c0  b5 9e 84 38 db 56 a4 ac 51 16 65 d1 8c d6 e1 82   ...8.V..Q.e.....
00d0  68 be 3d 30 21 ba 75 b9 0d f1 4b 8f 71 ea 18 30   h.=0!.u...K.q..0
00e0  89 1e bb 45 fb 39 ae c9 ab 44 32 00 4c 8b 01 77   ...E.9...D2.L..w
00f0  b2 20 bb dc 5b 2b 0d bc b0 44 6d e9 75 14 d5 2a   . ..[+...Dm.u..*
0100  e3 99 6c 63 c7 c1 12 76 54 ab 36 43 88 3e e5 f8   ..lc...vT.6C.>..
0110  b2 9c 77 94 89 3f 49 3e 19 b4 f5 1d 1e 03 91 fd   ..w..?I>........
0120  fe e9 f9 49 20 4c a2 73 d4 b2 d1 63 3c 03 6d 90   ...I L.s...c<.m.
0130  57 ba 57 6d ec 02 5f d6 a3 b4 cc ab aa 2f 96 58   W.Wm.._....../.X
0140  bb 8a 47 f0 8a dd 8b 0d ac d6 55 60 45 30 2d 83   ..G.......U`E0-.
0150  94 b6 4d 36 17 cb                                 ..M6..

Frame 14 (102 bytes on wire, 102 bytes captured)
    Arrival Time: Feb 22, 2010 14:49:35.703743000
    [Time delta from previous captured frame: 0.004632000 seconds]
    [Time delta from previous displayed frame: 0.004632000 seconds]
    [Time since reference or first frame: 0.953699000 seconds]
    Frame Number: 14
    Frame Length: 102 bytes
    Capture Length: 102 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02)
    Destination: 00:00:00:00:00:02 (00:00:00:00:00:02)
        Address: 00:00:00:00:00:02 (00:00:00:00:00:02)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.103 (165.227.249.103)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 88
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbe9 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.103 (165.227.249.103)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 68
    Checksum: 0xb6f4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0AFBF96E4B6E906A
    Responder cookie: DF00F28CCD38A7A4
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x47dbb226
    Length: 60
    Encrypted payload (32 bytes)

0000  00 00 00 00 00 02 00 0c 29 48 f8 2f 08 00 45 00   ........)H./..E.
0010  00 58 00 00 40 00 40 11 fb e9 a5 e3 f9 7c a5 e3   .X..@.@......|..
0020  f9 67 01 f4 01 f4 00 44 b6 f4 0a fb f9 6e 4b 6e   .g.....D.....nKn
0030  90 6a df 00 f2 8c cd 38 a7 a4 08 10 20 01 47 db   .j.....8.... .G.
0040  b2 26 00 00 00 3c 31 ab 73 1d 5c f9 1b 6c cb ee   .&...<1.s.\..l..
0050  42 d9 8f 76 a1 9c 16 ce 1f bd 2f 84 ac c5 37 e4   B..v....../...7.
0060  07 c6 f8 16 15 41                                 .....A

Frame 15 (102 bytes on wire, 102 bytes captured)
    Arrival Time: Feb 22, 2010 14:49:35.703756000
    [Time delta from previous captured frame: 0.000013000 seconds]
    [Time delta from previous displayed frame: 0.000013000 seconds]
    [Time since reference or first frame: 0.953712000 seconds]
    Frame Number: 15
    Frame Length: 102 bytes
    Capture Length: 102 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02)
    Destination: 00:00:00:00:00:02 (00:00:00:00:00:02)
        Address: 00:00:00:00:00:02 (00:00:00:00:00:02)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.103 (165.227.249.103)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 88
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbe9 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.103 (165.227.249.103)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 68
    Checksum: 0xb6f4 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 0AFBF96E4B6E906A
    Responder cookie: DF00F28CCD38A7A4
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x47dbb226
    Length: 60
    Encrypted payload (32 bytes)

0000  00 00 00 00 00 02 00 0c 29 48 f8 2f 08 00 45 00   ........)H./..E.
0010  00 58 00 00 40 00 40 11 fb e9 a5 e3 f9 7c a5 e3   .X..@.@......|..
0020  f9 67 01 f4 01 f4 00 44 b6 f4 0a fb f9 6e 4b 6e   .g.....D.....nKn
0030  90 6a df 00 f2 8c cd 38 a7 a4 08 10 20 01 47 db   .j.....8.... .G.
0040  b2 26 00 00 00 3c 31 ab 73 1d 5c f9 1b 6c cb ee   .&...<1.s.\..l..
0050  42 d9 8f 76 a1 9c 16 ce 1f bd 2f 84 ac c5 37 e4   B..v....../...7.
0060  07 c6 f8 16 15 41                                 .....A

Frame 16 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Feb 22, 2010 14:49:35.981451000
    [Time delta from previous captured frame: 0.277695000 seconds]
    [Time delta from previous displayed frame: 0.277695000 seconds]
    [Time since reference or first frame: 1.231407000 seconds]
    Frame Number: 16
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02)
    Destination: 00:00:00:00:00:02 (00:00:00:00:00:02)
        Address: 00:00:00:00:00:02 (00:00:00:00:00:02)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.103 (165.227.249.103)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0026 (38)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 240
    Protocol: ESP (0x32)
    Header checksum: 0x8b82 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.103 (165.227.249.103)
Encapsulating Security Payload
    ESP SPI: 0x0b123f4a
    ESP Sequence: 1

0000  00 00 00 00 00 02 00 0c 29 48 f8 2f 08 00 45 00   ........)H./..E.
0010  00 78 00 26 00 00 f0 32 8b 82 a5 e3 f9 7c a5 e3   .x.&...2.....|..
0020  f9 67 0b 12 3f 4a 00 00 00 01 7b 94 7a 55 08 bf   .g..?J....{.zU..
0030  d6 9d 92 d0 69 5e 29 8c 8f 7d 45 5a 02 61 5a 37   ....i^)..}EZ.aZ7
0040  49 6e ec fa c4 cc cd 5f 13 00 b4 72 76 66 42 63   In....._...rvfBc
0050  92 1a 7b 80 66 5b 12 da f0 ef e6 06 58 88 9e 98   ..{.f[......X...
0060  91 fb 68 3d f7 05 78 4a da b0 1b 1c 63 02 37 b1   ..h=..xJ....c.7.
0070  34 7f 38 fe 5b 13 3f e9 a6 c2 62 56 4c a8 45 32   4.8.[.?...bVL.E2
0080  0b 88 48 8e ea 7e                                 ..H..~

Frame 17 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Feb 22, 2010 14:49:35.981467000
    [Time delta from previous captured frame: 0.000016000 seconds]
    [Time delta from previous displayed frame: 0.000016000 seconds]
    [Time since reference or first frame: 1.231423000 seconds]
    Frame Number: 17
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02)
    Destination: 00:00:00:00:00:02 (00:00:00:00:00:02)
        Address: 00:00:00:00:00:02 (00:00:00:00:00:02)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.103 (165.227.249.103)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0026 (38)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 240
    Protocol: ESP (0x32)
    Header checksum: 0x8b82 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.103 (165.227.249.103)
Encapsulating Security Payload
    ESP SPI: 0x0b123f4a
    ESP Sequence: 1

0000  00 00 00 00 00 02 00 0c 29 48 f8 2f 08 00 45 00   ........)H./..E.
0010  00 78 00 26 00 00 f0 32 8b 82 a5 e3 f9 7c a5 e3   .x.&...2.....|..
0020  f9 67 0b 12 3f 4a 00 00 00 01 7b 94 7a 55 08 bf   .g..?J....{.zU..
0030  d6 9d 92 d0 69 5e 29 8c 8f 7d 45 5a 02 61 5a 37   ....i^)..}EZ.aZ7
0040  49 6e ec fa c4 cc cd 5f 13 00 b4 72 76 66 42 63   In....._...rvfBc
0050  92 1a 7b 80 66 5b 12 da f0 ef e6 06 58 88 9e 98   ..{.f[......X...
0060  91 fb 68 3d f7 05 78 4a da b0 1b 1c 63 02 37 b1   ..h=..xJ....c.7.
0070  34 7f 38 fe 5b 13 3f e9 a6 c2 62 56 4c a8 45 32   4.8.[.?...bVL.E2
0080  0b 88 48 8e ea 7e                                 ..H..~

Frame 18 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Feb 22, 2010 14:49:35.983252000
    [Time delta from previous captured frame: 0.001785000 seconds]
    [Time delta from previous displayed frame: 0.001785000 seconds]
    [Time since reference or first frame: 1.233208000 seconds]
    Frame Number: 18
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:00:00:00:00:02 (00:00:00:00:00:02), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
    Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:00:00:00:00:02 (00:00:00:00:00:02)
        Address: 00:00:00:00:00:02 (00:00:00:00:00:02)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x8dc3 (36291)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xade5 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.103 (165.227.249.103)
    Destination: 165.227.249.124 (165.227.249.124)
Encapsulating Security Payload
    ESP SPI: 0xbe69db79
    ESP Sequence: 1

0000  00 0c 29 48 f8 2f 00 00 00 00 00 02 08 00 45 00   ..)H./........E.
0010  00 78 8d c3 00 00 40 32 ad e5 a5 e3 f9 67 a5 e3   .x....@2.....g..
0020  f9 7c be 69 db 79 00 00 00 01 d9 c0 db 48 20 d1   .|.i.y.......H .
0030  66 93 dc 75 94 59 ca 21 1b de d9 c9 9a bf 15 52   f..u.Y.!.......R
0040  c1 94 ab 7c d3 66 2a ce 7a 68 3d 9b d9 ed 36 80   ...|.f*.zh=...6.
0050  b3 3c 5c 55 f3 66 80 78 d5 c9 d2 4c f0 ae 57 de   .<\U.f.x...L..W.
0060  83 87 ec 1b 38 75 e1 1a 6f 9c 32 33 e1 2b 5f 32   ....8u..o.23.+_2
0070  a8 47 de 28 84 59 74 7a e5 17 94 03 fc 78 b2 bb   .G.(.Ytz.....x..
0080  ff ff 80 b7 09 50                                 .....P

Frame 19 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Feb 22, 2010 14:49:35.991749000
    [Time delta from previous captured frame: 0.008497000 seconds]
    [Time delta from previous displayed frame: 0.008497000 seconds]
    [Time since reference or first frame: 1.241705000 seconds]
    Frame Number: 19
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02)
    Destination: 00:00:00:00:00:02 (00:00:00:00:00:02)
        Address: 00:00:00:00:00:02 (00:00:00:00:00:02)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.103 (165.227.249.103)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0027 (39)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 240
    Protocol: ESP (0x32)
    Header checksum: 0x8b81 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.103 (165.227.249.103)
Encapsulating Security Payload
    ESP SPI: 0x0b123f4a
    ESP Sequence: 2

0000  00 00 00 00 00 02 00 0c 29 48 f8 2f 08 00 45 00   ........)H./..E.
0010  00 78 00 27 00 00 f0 32 8b 81 a5 e3 f9 7c a5 e3   .x.'...2.....|..
0020  f9 67 0b 12 3f 4a 00 00 00 02 bf 14 de 13 bc 99   .g..?J..........
0030  65 be 28 40 38 e5 aa de 8f 64 4f fd 9c 78 4f 9c   e.(@8....dO..xO.
0040  dc 08 5d a3 c5 2f 22 2e e9 35 60 48 85 aa eb 94   ..]../"..5`H....
0050  58 d4 f2 a7 0e fb 8d 1c 84 27 6c 33 6c 6a 14 af   X........'l3lj..
0060  f3 f1 c5 77 08 3a 5b be 5c 93 94 32 a1 50 09 8b   ...w.:[.\..2.P..
0070  85 ff 4a 1c 82 2d a3 5d 39 52 7a 1a a3 54 02 6b   ..J..-.]9Rz..T.k
0080  ca b8 22 40 25 b1                                 .."@%.

Frame 20 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Feb 22, 2010 14:49:35.991766000
    [Time delta from previous captured frame: 0.000017000 seconds]
    [Time delta from previous displayed frame: 0.000017000 seconds]
    [Time since reference or first frame: 1.241722000 seconds]
    Frame Number: 20
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:00:00:00:00:02 (00:00:00:00:00:02)
    Destination: 00:00:00:00:00:02 (00:00:00:00:00:02)
        Address: 00:00:00:00:00:02 (00:00:00:00:00:02)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.103 (165.227.249.103)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0027 (39)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 240
    Protocol: ESP (0x32)
    Header checksum: 0x8b81 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.103 (165.227.249.103)
Encapsulating Security Payload
    ESP SPI: 0x0b123f4a
    ESP Sequence: 2

0000  00 00 00 00 00 02 00 0c 29 48 f8 2f 08 00 45 00   ........)H./..E.
0010  00 78 00 27 00 00 f0 32 8b 81 a5 e3 f9 7c a5 e3   .x.'...2.....|..
0020  f9 67 0b 12 3f 4a 00 00 00 02 bf 14 de 13 bc 99   .g..?J..........
0030  65 be 28 40 38 e5 aa de 8f 64 4f fd 9c 78 4f 9c   e.(@8....dO..xO.
0040  dc 08 5d a3 c5 2f 22 2e e9 35 60 48 85 aa eb 94   ..]../"..5`H....
0050  58 d4 f2 a7 0e fb 8d 1c 84 27 6c 33 6c 6a 14 af   X........'l3lj..
0060  f3 f1 c5 77 08 3a 5b be 5c 93 94 32 a1 50 09 8b   ...w.:[.\..2.P..
0070  85 ff 4a 1c 82 2d a3 5d 39 52 7a 1a a3 54 02 6b   ..J..-.]9Rz..T.k
0080  ca b8 22 40 25 b1                                 .."@%.

Frame 21 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Feb 22, 2010 14:49:35.993307000
    [Time delta from previous captured frame: 0.001541000 seconds]
    [Time delta from previous displayed frame: 0.001541000 seconds]
    [Time since reference or first frame: 1.243263000 seconds]
    Frame Number: 21
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:00:00:00:00:02 (00:00:00:00:00:02), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
    Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:00:00:00:00:02 (00:00:00:00:00:02)
        Address: 00:00:00:00:00:02 (00:00:00:00:00:02)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.103 (165.227.249.103), Dst: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x1151 (4433)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0x2a58 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.103 (165.227.249.103)
    Destination: 165.227.249.124 (165.227.249.124)
Encapsulating Security Payload
    ESP SPI: 0xbe69db79
    ESP Sequence: 2

0000  00 0c 29 48 f8 2f 00 00 00 00 00 02 08 00 45 00   ..)H./........E.
0010  00 78 11 51 00 00 40 32 2a 58 a5 e3 f9 67 a5 e3   .x.Q..@2*X...g..
0020  f9 7c be 69 db 79 00 00 00 02 20 cc 27 a6 dd 2e   .|.i.y.... .'...
0030  ed b8 bf 35 c5 1d 7c 71 95 01 c7 0d 9e 5a a9 ef   ...5..|q.....Z..
0040  27 5f e7 37 dd 31 9c 84 a3 a2 d1 b8 e4 64 b9 89   '_.7.1.......d..
0050  e2 63 98 40 b9 17 ca 43 7b 87 c6 79 38 cc 1d 3b   .c.@...C{..y8..;
0060  de b0 f5 91 51 b6 de 1d af 5a 99 77 43 f7 a3 2e   ....Q....Z.wC...
0070  6e 9d 84 00 24 f5 cd 81 68 1e 75 3e 29 b7 d8 c7   n...$...h.u>)...
0080  2b 98 ad 74 06 d4                                 +..t..