Frame 1 (270 bytes on wire, 270 bytes captured)
    Arrival Time: Nov 23, 2005 15:09:27.315454000
    Time delta from previous packet: 0.000000000 seconds
    Time since reference or first frame: 0.000000000 seconds
    Frame Number: 1
    Packet Length: 270 bytes
    Capture Length: 270 bytes
Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:ca:72:27
    Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90)
    Type: IP (0x0800)
    Frame check sequence: 0x71a336a4 (correct)
Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.109 (165.227.249.109)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 252
    Identification: 0x0088 (136)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3ab8 (correct)
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.109 (165.227.249.109)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 232
    Checksum: 0xf735 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x6D983E95ECF53917
    Responder cookie: 0x0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 224
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 0
            Next payload: NONE (0)
            Length: 44
            Proposal number: 0
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 0
                Next payload: NONE (0)
                Length: 36
                Transform number: 0
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-stenberg-ipsec-nat-traversal-01
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-stenberg-ipsec-nat-traversal-02
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-00
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-03

0000  00 0f b5 ca 72 27 00 0c 29 f4 af 90 08 00 45 00   ....r'..).....E.
0010  00 fc 00 88 00 00 40 11 3a b8 a5 e3 f9 7c a5 e3   ......@.:....|..
0020  f9 6d 01 f4 01 f4 00 e8 f7 35 6d 98 3e 95 ec f5   .m.......5m.>...
0030  39 17 00 00 00 00 00 00 00 00 01 10 02 00 00 00   9...............
0040  00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00   .........8......
0050  00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03   ................
0070  00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00   ............p...
0080  00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b   .....N.$...GYL(K
0090  21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e   !;....'......`.N
00a0  31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68   1..'......a..".h
00b0  47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85   G.?...........D.
00c0  15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00   .-.......F.y....
00d0  00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6   ...`FC5.!.|...h.
00e0  a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63   .H........>.in.c
00f0  81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10   ...B{.....}...S.
0100  ca 6f 2c 17 9d 92 15 52 9d 56 71 a3 36 a4         .o,....R.Vq.6.

Frame 2 (190 bytes on wire, 190 bytes captured)
    Arrival Time: Nov 23, 2005 15:09:27.328677000
    Time delta from previous packet: 0.013223000 seconds
    Time since reference or first frame: 0.013223000 seconds
    Frame Number: 2
    Packet Length: 190 bytes
    Capture Length: 190 bytes
Ethernet II, Src: 00:0f:b5:ca:72:27, Dst: 00:0c:29:f4:af:90
    Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90)
    Source: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Type: IP (0x0800)
    Frame check sequence: 0x28cd316c (correct)
Internet Protocol, Src Addr: 165.227.249.109 (165.227.249.109), Dst Addr: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 172
    Identification: 0x01c2 (450)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x39ce (correct)
    Source: 165.227.249.109 (165.227.249.109)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 152
    Checksum: 0x0f7b (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x6D983E95ECF53917
    Responder cookie: 0x6A4A30E87599156A
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 144
    Security Association payload
        Next payload: Vendor ID (13)
        Length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 0
            Next payload: NONE (0)
            Length: 44
            Proposal number: 0
            Protocol ID: ISAKMP (1)
            SPI size: 0
            Number of transforms: 1
            Transform payload # 0
                Next payload: NONE (0)
                Length: 36
                Transform number: 0
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02
    Vendor ID payload
        Next payload: Vendor ID (13)
        Length: 20
        Vendor ID: draft-ietf-ipsec-dpd-00.txt
    Vendor ID payload
        Next payload: NONE (0)
        Length: 20
        Vendor ID: unknown vendor ID: 0x648982785BEDBDD66A6DD356F0E160FD

0000  00 0c 29 f4 af 90 00 0f b5 ca 72 27 08 00 45 00   ..).......r'..E.
0010  00 ac 01 c2 00 00 40 11 39 ce a5 e3 f9 6d a5 e3   ......@.9....m..
0020  f9 7c 01 f4 01 f4 00 98 0f 7b 6d 98 3e 95 ec f5   .|.......{m.>...
0030  39 17 6a 4a 30 e8 75 99 15 6a 01 10 02 00 00 00   9.jJ0.u..j......
0040  00 00 00 00 00 90 0d 00 00 38 00 00 00 01 00 00   .........8......
0050  00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01   .....,.......$..
0060  00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03   ................
0070  00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00   ............p...
0080  00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42   ......>.in.c...B
0090  7b 1f 0d 00 00 14 af ca d7 13 68 a1 f1 c9 6b 86   {.........h...k.
00a0  96 fc 77 57 01 00 00 00 00 14 64 89 82 78 5b ed   ..wW......d..x[.
00b0  bd d6 6a 6d d3 56 f0 e1 60 fd 28 cd 31 6c         ..jm.V..`.(.1l

Frame 3 (274 bytes on wire, 274 bytes captured)
    Arrival Time: Nov 23, 2005 15:09:27.352164000
    Time delta from previous packet: 0.023487000 seconds
    Time since reference or first frame: 0.036710000 seconds
    Frame Number: 3
    Packet Length: 274 bytes
    Capture Length: 274 bytes
Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:ca:72:27
    Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90)
    Type: IP (0x0800)
    Frame check sequence: 0xea22e49d (correct)
Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.109 (165.227.249.109)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 256
    Identification: 0x0089 (137)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3ab3 (correct)
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.109 (165.227.249.109)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 236
    Checksum: 0x07dc (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x6D983E95ECF53917
    Responder cookie: 0x6A4A30E87599156A
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 228
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: Private USE (130)
        Length: 20
        Nonce Data
    Unknown payload type payload
        Next payload: Private USE (130)
        Length: 24
        Payload
    Unknown payload type payload
        Next payload: NONE (0)
        Length: 24
        Payload

0000  00 0f b5 ca 72 27 00 0c 29 f4 af 90 08 00 45 00   ....r'..).....E.
0010  01 00 00 89 00 00 40 11 3a b3 a5 e3 f9 7c a5 e3   ......@.:....|..
0020  f9 6d 01 f4 01 f4 00 ec 07 dc 6d 98 3e 95 ec f5   .m........m.>...
0030  39 17 6a 4a 30 e8 75 99 15 6a 04 10 02 00 00 00   9.jJ0.u..j......
0040  00 00 00 00 00 e4 0a 00 00 84 93 3e 76 cc 90 d6   ...........>v...
0050  da 3a cd a6 2f ca cd 28 62 45 8a 26 f4 3c 74 3b   .:../..(bE.&.<t;
0060  bc 09 65 5a 97 d1 59 e5 1b 48 e5 ed 58 7b 70 1e   ..eZ..Y..H..X{p.
0070  ff 1b dc 9d 7c 20 8a 18 82 62 db fd 89 f1 f5 c2   ....| ...b......
0080  78 e0 58 99 77 bf 73 2d 56 f9 9f ab d9 64 6e 00   x.X.w.s-V....dn.
0090  62 df de a1 f0 a7 db e4 d0 f9 be 0d 98 96 ca e8   b...............
00a0  33 3d 74 c4 fa 63 55 0b 98 a4 08 0b 80 c9 97 9d   3=t..cU.........
00b0  30 e2 ac 19 9f 98 39 04 c2 f7 9a ba a7 e5 3b 8d   0.....9.......;.
00c0  c9 d5 67 6c 50 52 20 75 27 0b 82 00 00 14 17 a5   ..glPR u'.......
00d0  c1 df 93 d6 a7 89 b5 45 81 98 7c 9e e2 6c 82 00   .......E..|..l..
00e0  00 18 1d 4f db ad 76 e9 56 e2 dc 03 73 aa c0 aa   ...O..v.V...s...
00f0  16 44 ed fb 6e a5 00 00 00 18 b9 fc b9 2c c7 58   .D..n........,.X
0100  17 37 b8 7b 92 9c 6c dd c5 5d bf 4a 85 57 ea 22   .7.{..l..].J.W."
0110  e4 9d                                             ..

Frame 4 (266 bytes on wire, 266 bytes captured)
    Arrival Time: Nov 23, 2005 15:09:27.744996000
    Time delta from previous packet: 0.392832000 seconds
    Time since reference or first frame: 0.429542000 seconds
    Frame Number: 4
    Packet Length: 266 bytes
    Capture Length: 266 bytes
Ethernet II, Src: 00:0f:b5:ca:72:27, Dst: 00:0c:29:f4:af:90
    Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90)
    Source: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Type: IP (0x0800)
    Frame check sequence: 0xd13195ab (correct)
Internet Protocol, Src Addr: 165.227.249.109 (165.227.249.109), Dst Addr: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 248
    Identification: 0x01c3 (451)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3981 (correct)
    Source: 165.227.249.109 (165.227.249.109)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 228
    Checksum: 0x3247 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x6D983E95ECF53917
    Responder cookie: 0x6A4A30E87599156A
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...0 = No encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 220
    Key Exchange payload
        Next payload: Nonce (10)
        Length: 132
        Key Exchange Data
    Nonce payload
        Next payload: Private USE (130)
        Length: 12
        Nonce Data
    Unknown payload type payload
        Next payload: Private USE (130)
        Length: 24
        Payload
    Unknown payload type payload
        Next payload: NONE (0)
        Length: 24
        Payload

0000  00 0c 29 f4 af 90 00 0f b5 ca 72 27 08 00 45 00   ..).......r'..E.
0010  00 f8 01 c3 00 00 40 11 39 81 a5 e3 f9 6d a5 e3   ......@.9....m..
0020  f9 7c 01 f4 01 f4 00 e4 32 47 6d 98 3e 95 ec f5   .|......2Gm.>...
0030  39 17 6a 4a 30 e8 75 99 15 6a 04 10 02 00 00 00   9.jJ0.u..j......
0040  00 00 00 00 00 dc 0a 00 00 84 a8 97 43 a6 60 6f   ............C.`o
0050  80 9f ee 13 90 36 f0 7d 5a 36 d0 c3 c5 ab cf 1e   .....6.}Z6......
0060  62 08 28 86 4e 18 89 7a 88 0c ff ab ac f2 eb 44   b.(.N..z.......D
0070  f3 4c 66 6c 3c 77 7c 3d e1 74 47 90 c2 0c 46 3f   .Lfl<w|=.tG...F?
0080  68 8b 2a ca 5f 9d bd 54 87 9c 97 54 4e a7 c8 25   h.*._..T...TN..%
0090  d9 b2 3a 95 77 23 63 df 05 4a 60 42 b2 8d 59 26   ..:.w#c..J`B..Y&
00a0  cf 67 8f 1b 9c f4 2c 28 b6 36 10 4f 05 9c 6b 53   .g....,(.6.O..kS
00b0  f7 de 1b 33 06 88 ed 40 10 23 26 63 b7 03 af 6e   ...3...@.#&c...n
00c0  63 1e 5d 67 5a 12 e0 df 80 81 82 00 00 0c f1 f6   c.]gZ...........
00d0  22 6a 49 30 38 c1 82 00 00 18 b9 fc b9 2c c7 58   "jI08........,.X
00e0  17 37 b8 7b 92 9c 6c dd c5 5d bf 4a 85 57 00 00   .7.{..l..].J.W..
00f0  00 18 1d 4f db ad 76 e9 56 e2 dc 03 73 aa c0 aa   ...O..v.V...s...
0100  16 44 ed fb 6e a5 d1 31 95 ab                     .D..n..1..

Frame 5 (122 bytes on wire, 122 bytes captured)
    Arrival Time: Nov 23, 2005 15:09:27.752473000
    Time delta from previous packet: 0.007477000 seconds
    Time since reference or first frame: 0.437019000 seconds
    Frame Number: 5
    Packet Length: 122 bytes
    Capture Length: 122 bytes
Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:ca:72:27
    Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90)
    Type: IP (0x0800)
    Frame check sequence: 0xf0a041f2 (correct)
Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.109 (165.227.249.109)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0x008a (138)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3b4a (correct)
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.109 (165.227.249.109)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 84
    Checksum: 0x8b45 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x6D983E95ECF53917
    Responder cookie: 0x6A4A30E87599156A
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 76
    Encrypted payload (48 bytes)

0000  00 0f b5 ca 72 27 00 0c 29 f4 af 90 08 00 45 00   ....r'..).....E.
0010  00 68 00 8a 00 00 40 11 3b 4a a5 e3 f9 7c a5 e3   .h....@.;J...|..
0020  f9 6d 01 f4 01 f4 00 54 8b 45 6d 98 3e 95 ec f5   .m.....T.Em.>...
0030  39 17 6a 4a 30 e8 75 99 15 6a 05 10 02 01 00 00   9.jJ0.u..j......
0040  00 00 00 00 00 4c 83 14 24 0d 69 1d 8d a7 9a 28   .....L..$.i....(
0050  1d 59 f8 af 6b cc a6 9b f2 0a 14 66 e5 4f bf 7b   .Y..k......f.O.{
0060  c1 dd 53 02 e6 5f cc 47 75 82 ae ef 1a 38 49 fb   ..S.._.Gu....8I.
0070  a3 17 3a 4e f8 48 f0 a0 41 f2                     ..:N.H..A.

Frame 6 (138 bytes on wire, 138 bytes captured)
    Arrival Time: Nov 23, 2005 15:09:28.211959000
    Time delta from previous packet: 0.459486000 seconds
    Time since reference or first frame: 0.896505000 seconds
    Frame Number: 6
    Packet Length: 138 bytes
    Capture Length: 138 bytes
Ethernet II, Src: 00:0f:b5:ca:72:27, Dst: 00:0c:29:f4:af:90
    Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90)
    Source: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Type: IP (0x0800)
    Frame check sequence: 0x8212d48c (correct)
Internet Protocol, Src Addr: 165.227.249.109 (165.227.249.109), Dst Addr: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x01c4 (452)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3a00 (correct)
    Source: 165.227.249.109 (165.227.249.109)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 100
    Checksum: 0x94cc (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x6D983E95ECF53917
    Responder cookie: 0x6A4A30E87599156A
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 92
    Encrypted payload (64 bytes)

0000  00 0c 29 f4 af 90 00 0f b5 ca 72 27 08 00 45 00   ..).......r'..E.
0010  00 78 01 c4 00 00 40 11 3a 00 a5 e3 f9 6d a5 e3   .x....@.:....m..
0020  f9 7c 01 f4 01 f4 00 64 94 cc 6d 98 3e 95 ec f5   .|.....d..m.>...
0030  39 17 6a 4a 30 e8 75 99 15 6a 05 10 02 01 00 00   9.jJ0.u..j......
0040  00 00 00 00 00 5c 26 43 ec 6c 01 21 b5 7c 6c 4a   .....\&C.l.!.|lJ
0050  77 79 5d de fb 66 31 78 b6 0e 4a a9 b0 b4 9f c5   wy]..f1x..J.....
0060  da 2e d6 0e 59 f1 fa e7 e0 a5 d0 5f a2 c3 a3 f0   ....Y......_....
0070  de 7f 4a fc 5c 34 2d 38 44 ea 1a af b6 f9 56 29   ..J.\4-8D.....V)
0080  2d 5e 59 c8 fb 43 82 12 d4 8c                     -^Y..C....

Frame 7 (346 bytes on wire, 346 bytes captured)
    Arrival Time: Nov 23, 2005 15:09:28.221936000
    Time delta from previous packet: 0.009977000 seconds
    Time since reference or first frame: 0.906482000 seconds
    Frame Number: 7
    Packet Length: 346 bytes
    Capture Length: 346 bytes
Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:ca:72:27
    Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90)
    Type: IP (0x0800)
    Frame check sequence: 0x3ccf8f15 (correct)
Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.109 (165.227.249.109)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 328
    Identification: 0x008b (139)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3a69 (correct)
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.109 (165.227.249.109)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 308
    Checksum: 0x3b37 (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x6D983E95ECF53917
    Responder cookie: 0x6A4A30E87599156A
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xBABBFD44
    Length: 300
    Encrypted payload (272 bytes)

0000  00 0f b5 ca 72 27 00 0c 29 f4 af 90 08 00 45 00   ....r'..).....E.
0010  01 48 00 8b 00 00 40 11 3a 69 a5 e3 f9 7c a5 e3   .H....@.:i...|..
0020  f9 6d 01 f4 01 f4 01 34 3b 37 6d 98 3e 95 ec f5   .m.....4;7m.>...
0030  39 17 6a 4a 30 e8 75 99 15 6a 08 10 20 01 ba bb   9.jJ0.u..j.. ...
0040  fd 44 00 00 01 2c cd 7a e4 2d 13 6c 2b f7 d2 93   .D...,.z.-.l+...
0050  be 05 e1 2b 43 3e 61 81 35 1a 4f 7a 3c 3c 6f 43   ...+C>a.5.Oz<<oC
0060  ed dc ef 8b 6b 05 d9 29 91 aa 3b 42 59 a1 46 98   ....k..)..;BY.F.
0070  e9 e0 5f c2 e4 20 a1 2d 7a 32 9f c3 c1 56 3a 1e   .._.. .-z2...V:.
0080  90 19 71 6c 5e a2 a5 c3 2a a5 00 0a 22 76 71 88   ..ql^...*..."vq.
0090  ad 14 52 1e 3b fd 6d 35 d5 c9 d5 39 ca fb f0 a8   ..R.;.m5...9....
00a0  f4 2f d7 73 e6 24 06 0c d1 69 24 97 58 59 12 b5   ./.s.$...i$.XY..
00b0  42 66 5c c5 4c b2 b3 f6 d1 bd 66 12 17 5f ed 11   Bf\.L.....f.._..
00c0  85 5d 04 03 7d 9b 67 bf 03 69 a9 f4 4f 4f c5 c1   .]..}.g..i..OO..
00d0  9a 0c 62 69 56 0c 39 c3 f4 8d c3 3f 0f 5f 09 71   ..biV.9....?._.q
00e0  92 c0 31 e1 e6 ee 23 a5 8b 23 65 52 4f 50 3d a5   ..1...#..#eROP=.
00f0  98 50 ba 2d fc 79 87 83 5d 68 3b e2 d4 e8 aa e6   .P.-.y..]h;.....
0100  aa bd 5d 10 06 fe 6a f9 d5 94 59 1a 8d a2 5b 04   ..]...j...Y...[.
0110  13 e2 c6 45 3b 79 f8 31 27 4e d7 e8 b7 90 9d 3a   ...E;y.1'N.....:
0120  af e8 3a 7b dd 6e 9a 52 25 12 32 c1 80 c6 f9 0c   ..:{.n.R%.2.....
0130  45 4a 37 b7 33 eb a3 45 6d f6 d7 05 d9 4b 80 ee   EJ7.3..Em....K..
0140  14 09 9f c0 3d eb 39 16 72 70 af e4 46 87 e1 6f   ....=.9.rp..F..o
0150  3b c1 36 4c 67 14 3c cf 8f 15                     ;.6Lg.<...

Frame 8 (330 bytes on wire, 330 bytes captured)
    Arrival Time: Nov 23, 2005 15:09:28.623108000
    Time delta from previous packet: 0.401172000 seconds
    Time since reference or first frame: 1.307654000 seconds
    Frame Number: 8
    Packet Length: 330 bytes
    Capture Length: 330 bytes
Ethernet II, Src: 00:0f:b5:ca:72:27, Dst: 00:0c:29:f4:af:90
    Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90)
    Source: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Type: IP (0x0800)
    Frame check sequence: 0x8f3c6627 (correct)
Internet Protocol, Src Addr: 165.227.249.109 (165.227.249.109), Dst Addr: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 312
    Identification: 0x01c9 (457)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x393b (correct)
    Source: 165.227.249.109 (165.227.249.109)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 292
    Checksum: 0x38af (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x6D983E95ECF53917
    Responder cookie: 0x6A4A30E87599156A
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xBABBFD44
    Length: 284
    Encrypted payload (256 bytes)

0000  00 0c 29 f4 af 90 00 0f b5 ca 72 27 08 00 45 00   ..).......r'..E.
0010  01 38 01 c9 00 00 40 11 39 3b a5 e3 f9 6d a5 e3   .8....@.9;...m..
0020  f9 7c 01 f4 01 f4 01 24 38 af 6d 98 3e 95 ec f5   .|.....$8.m.>...
0030  39 17 6a 4a 30 e8 75 99 15 6a 08 10 20 01 ba bb   9.jJ0.u..j.. ...
0040  fd 44 00 00 01 1c 59 aa 1e 98 83 3b 53 fc 77 cb   .D....Y....;S.w.
0050  5d bc 23 20 3d 6d f6 32 35 92 31 32 1c 5f 34 23   ].# =m.25.12._4#
0060  85 61 a2 05 18 b9 c7 a2 ae 4b 70 fe bd 84 3c f3   .a.......Kp...<.
0070  05 1a 16 c3 cd 1c e1 78 8a 8b 1b 1b 85 4c c0 e3   .......x.....L..
0080  06 6e 3f cd b5 d4 02 b2 e2 f7 bc ba af 87 07 7c   .n?............|
0090  6b 73 0a 03 59 66 c0 c9 2c ef d9 cb 7c d9 43 c4   ks..Yf..,...|.C.
00a0  8e 4e 30 6c 3b 3b d2 43 50 5d cf 3d 60 d3 48 64   .N0l;;.CP].=`.Hd
00b0  c8 0b 0b a6 91 ae 27 c3 6a 10 a7 58 81 b9 ff 4a   ......'.j..X...J
00c0  d8 bd 93 76 35 97 43 ea 10 6c c5 ae 3b 07 00 a6   ...v5.C..l..;...
00d0  36 72 77 1f 83 3d ca 1e b9 91 6a 97 73 75 ca 15   6rw..=....j.su..
00e0  bd 12 27 25 25 8b 73 ff 7f 6c e8 a4 54 07 3e 65   ..'%%.s..l..T.>e
00f0  40 bc 4c a7 be 60 68 e7 f6 26 c4 48 4b 39 98 1c   @.L..`h..&.HK9..
0100  f9 f5 d3 38 18 dd 64 cd e1 1b 78 89 da 16 32 88   ...8..d...x...2.
0110  af 72 60 9f 71 a2 13 9d 9f dd 91 98 bc 6b db f1   .r`.q........k..
0120  9e e1 50 9a 8c cd ac 7a 2d 3f 09 b3 23 7f 7c 59   ..P....z-?..#.|Y
0130  9d 18 bf b9 b8 24 33 71 29 89 f2 0f 77 ca 11 c7   .....$3q)...w...
0140  ae d3 fc fc 74 c9 8f 3c 66 27                     ....t..<f'

Frame 9 (106 bytes on wire, 106 bytes captured)
    Arrival Time: Nov 23, 2005 15:09:28.632079000
    Time delta from previous packet: 0.008971000 seconds
    Time since reference or first frame: 1.316625000 seconds
    Frame Number: 9
    Packet Length: 106 bytes
    Capture Length: 106 bytes
Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:ca:72:27
    Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90)
    Type: IP (0x0800)
    Frame check sequence: 0xc6608198 (correct)
Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.109 (165.227.249.109)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 88
    Identification: 0x008c (140)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x3b58 (correct)
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.109 (165.227.249.109)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 68
    Checksum: 0x2caf (correct)
Internet Security Association and Key Management Protocol
    Initiator cookie: 0x6D983E95ECF53917
    Responder cookie: 0x6A4A30E87599156A
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags
        .... ...1 = Encryption
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xBABBFD44
    Length: 60
    Encrypted payload (32 bytes)

0000  00 0f b5 ca 72 27 00 0c 29 f4 af 90 08 00 45 00   ....r'..).....E.
0010  00 58 00 8c 00 00 40 11 3b 58 a5 e3 f9 7c a5 e3   .X....@.;X...|..
0020  f9 6d 01 f4 01 f4 00 44 2c af 6d 98 3e 95 ec f5   .m.....D,.m.>...
0030  39 17 6a 4a 30 e8 75 99 15 6a 08 10 20 01 ba bb   9.jJ0.u..j.. ...
0040  fd 44 00 00 00 3c 2f ad 66 74 76 87 a9 e0 f6 bc   .D...</.ftv.....
0050  8b af c9 ce e5 6d d2 c2 ff 50 82 b4 7e 82 02 fd   .....m...P..~...
0060  88 e3 3d c0 32 40 c6 60 81 98                     ..=.2@.`..

Frame 10 (170 bytes on wire, 170 bytes captured)
    Arrival Time: Nov 23, 2005 15:09:28.931868000
    Time delta from previous packet: 0.299789000 seconds
    Time since reference or first frame: 1.616414000 seconds
    Frame Number: 10
    Packet Length: 170 bytes
    Capture Length: 170 bytes
Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:ca:72:27
    Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90)
    Type: IP (0x0800)
    Frame check sequence: 0xbc2ff46b (correct)
Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.109 (165.227.249.109)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 152
    Identification: 0x002d (45)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 240
    Protocol: ESP (0x32)
    Header checksum: 0x8b55 (correct)
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.109 (165.227.249.109)
Encapsulating Security Payload
    SPI: 0x9904ab6a
    Sequence: 2
    Data (124 bytes)

0000  00 0f b5 ca 72 27 00 0c 29 f4 af 90 08 00 45 00   ....r'..).....E.
0010  00 98 00 2d 00 00 f0 32 8b 55 a5 e3 f9 7c a5 e3   ...-...2.U...|..
0020  f9 6d 99 04 ab 6a 00 00 00 02 e9 31 c5 14 a5 75   .m...j.....1...u
0030  9c a6 f8 f5 c0 03 90 4a 9a a7 91 9b f7 fd 3c 3f   .......J......<?
0040  91 bd fc 22 29 2d b3 7c d6 cd d7 3d ba f7 e8 1d   ...")-.|...=....
0050  ce 35 11 3d d0 5e 06 da be 78 df 40 12 9a 38 9f   .5.=.^...x.@..8.
0060  c5 a1 19 de 04 44 79 c4 2c 9d d4 ca 11 d8 ca 01   .....Dy.,.......
0070  ef 18 fe 65 29 4e 9a bc a4 14 a5 d3 07 96 16 8d   ...e)N..........
0080  5b ee c0 78 5d 44 9c 68 e4 dc ff e5 fd 81 4f 41   [..x]D.h......OA
0090  73 1d 1c 1d 67 82 a8 41 a3 28 04 bc b7 a4 f5 d0   s...g..A.(......
00a0  26 ac 0a e4 ca 62 bc 2f f4 6b                     &....b./.k

Frame 11 (170 bytes on wire, 170 bytes captured)
    Arrival Time: Nov 23, 2005 15:09:28.963346000
    Time delta from previous packet: 0.031478000 seconds
    Time since reference or first frame: 1.647892000 seconds
    Frame Number: 11
    Packet Length: 170 bytes
    Capture Length: 170 bytes
Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:ca:72:27
    Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90)
    Type: IP (0x0800)
    Frame check sequence: 0xcae57834 (correct)
Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.109 (165.227.249.109)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 152
    Identification: 0x002e (46)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 240
    Protocol: ESP (0x32)
    Header checksum: 0x8b54 (correct)
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.109 (165.227.249.109)
Encapsulating Security Payload
    SPI: 0x9904ab6a
    Sequence: 3
    Data (124 bytes)

0000  00 0f b5 ca 72 27 00 0c 29 f4 af 90 08 00 45 00   ....r'..).....E.
0010  00 98 00 2e 00 00 f0 32 8b 54 a5 e3 f9 7c a5 e3   .......2.T...|..
0020  f9 6d 99 04 ab 6a 00 00 00 03 63 db 74 ec d9 0c   .m...j....c.t...
0030  85 6a 66 08 e3 4b 92 c3 e7 87 1f 68 f9 ab 28 26   .jf..K.....h..(&
0040  5e e7 2a ea f1 9a 5b e6 a6 de 20 ec d1 58 95 08   ^.*...[... ..X..
0050  db e3 47 63 ce 36 b8 c3 62 2d 59 bd ff 43 3a a8   ..Gc.6..b-Y..C:.
0060  a7 86 69 86 70 00 e3 8e 86 0f c4 b3 e7 87 87 a0   ..i.p...........
0070  5a d2 1e b0 a0 15 af b9 23 43 5f ea 3e 50 75 33   Z.......#C_.>Pu3
0080  53 b2 61 09 ed 71 14 5a 03 5f 64 f8 17 5c b9 82   S.a..q.Z._d..\..
0090  58 cb b4 20 76 e9 38 a9 20 23 ef f6 7a 7d 23 f6   X.. v.8. #..z}#.
00a0  f3 e5 cf 5f 49 ab ca e5 78 34                     ..._I...x4

Frame 12 (170 bytes on wire, 170 bytes captured)
    Arrival Time: Nov 23, 2005 15:09:29.748116000
    Time delta from previous packet: 0.784770000 seconds
    Time since reference or first frame: 2.432662000 seconds
    Frame Number: 12
    Packet Length: 170 bytes
    Capture Length: 170 bytes
Ethernet II, Src: 00:0c:29:f4:af:90, Dst: 00:0f:b5:ca:72:27
    Destination: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90)
    Type: IP (0x0800)
    Frame check sequence: 0x5a753eed (correct)
Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.109 (165.227.249.109)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 152
    Identification: 0x002f (47)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 240
    Protocol: ESP (0x32)
    Header checksum: 0x8b53 (correct)
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.109 (165.227.249.109)
Encapsulating Security Payload
    SPI: 0x9904ab6a
    Sequence: 4
    Data (124 bytes)

0000  00 0f b5 ca 72 27 00 0c 29 f4 af 90 08 00 45 00   ....r'..).....E.
0010  00 98 00 2f 00 00 f0 32 8b 53 a5 e3 f9 7c a5 e3   .../...2.S...|..
0020  f9 6d 99 04 ab 6a 00 00 00 04 ae ac 74 49 8a 1b   .m...j......tI..
0030  51 91 cb 85 b7 08 62 4b 2d e6 78 06 e7 88 ae 84   Q.....bK-.x.....
0040  93 ee cf b1 3f 38 64 4f ab ec a1 cd c0 d3 5b d9   ....?8dO......[.
0050  1b 69 42 e4 3e 55 e2 cf 80 72 d6 a1 d5 5e 45 5a   .iB.>U...r...^EZ
0060  7a 07 84 7d d9 f7 7c c6 24 eb 4a db a3 55 63 b9   z..}..|.$.J..Uc.
0070  6f 39 89 dc 5f 82 d0 26 50 d5 d8 8b a2 07 ab 2a   o9.._..&P......*
0080  57 c9 b0 a1 2c e3 b2 4f 66 f8 d4 27 94 1a 81 96   W...,..Of..'....
0090  40 08 c4 c1 4d 70 2c 2f b5 42 16 77 0c 6c 92 b7   @...Mp,/.B.w.l..
00a0  a3 96 93 c0 4e 64 5a 75 3e ed                     ....NdZu>.

Frame 13 (170 bytes on wire, 170 bytes captured)
    Arrival Time: Nov 23, 2005 15:09:29.762146000
    Time delta from previous packet: 0.014030000 seconds
    Time since reference or first frame: 2.446692000 seconds
    Frame Number: 13
    Packet Length: 170 bytes
    Capture Length: 170 bytes
Ethernet II, Src: 00:0f:b5:ca:72:27, Dst: 00:0c:29:f4:af:90
    Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90)
    Source: 00:0f:b5:ca:72:27 (00:0f:b5:ca:72:27)
    Type: IP (0x0800)
    Frame check sequence: 0xd20e0cc7 (correct)
Internet Protocol, Src Addr: 165.227.249.109 (165.227.249.109), Dst Addr: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 152
    Identification: 0x35ff (13823)
    Flags: 0x00
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 29
    Protocol: ESP (0x32)
    Header checksum: 0x2884 (correct)
    Source: 165.227.249.109 (165.227.249.109)
    Destination: 165.227.249.124 (165.227.249.124)
Encapsulating Security Payload
    SPI: 0xb1b9a935
    Sequence: 1
    Data (124 bytes)

0000  00 0c 29 f4 af 90 00 0f b5 ca 72 27 08 00 45 00   ..).......r'..E.
0010  00 98 35 ff 00 00 1d 32 28 84 a5 e3 f9 6d a5 e3   ..5....2(....m..
0020  f9 7c b1 b9 a9 35 00 00 00 01 41 2a 7a 37 93 d5   .|...5....A*z7..
0030  93 1d dd b9 dc 11 4a 70 c6 b4 c3 d7 9e 2a 23 c8   ......Jp.....*#.
0040  25 09 58 aa 63 94 4f 31 9b 5a a3 c2 38 67 9d a1   %.X.c.O1.Z..8g..
0050  e8 d9 8f 0c aa 93 5a 53 99 84 45 4b 25 b4 57 22   ......ZS..EK%.W"
0060  9a 2c 93 ea d9 57 2e 19 24 74 fd a0 29 e6 b2 8e   .,...W..$t..)...
0070  63 21 57 bd 87 93 93 e3 31 57 d9 f1 a9 bc 5f f9   c!W.....1W...._.
0080  be 62 90 26 b7 7b d0 17 d3 5c db 0c e8 2a ce d5   .b.&.{...\...*..
0090  8b 9e 11 b0 f9 f1 f1 61 c0 c8 34 28 24 40 96 62   .......a..4($@.b
00a0  60 75 b5 44 71 05 d2 0e 0c c7                     `u.Dq.....