Frame 1 (118 bytes on wire, 118 bytes captured) Arrival Time: Aug 9, 2010 14:48:02.352183000 [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc6 [correct] [Good: True] [Bad : False] Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x7544 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: CCEEE670E3134290 Responder cookie: 91592DC4B9087D66 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x403d5997 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 51 89 a7 00 0c 29 48 f8 2f 08 00 45 00 ..)Q....)H./..E. 0010 00 68 00 00 40 00 40 11 fb c6 a5 e3 f9 7c a5 e3 .h..@.@......|.. 0020 f9 7a 01 f4 01 f4 00 54 75 44 cc ee e6 70 e3 13 .z.....TuD...p.. 0030 42 90 91 59 2d c4 b9 08 7d 66 08 10 05 01 40 3d B..Y-...}f....@= 0040 59 97 00 00 00 4c be 69 17 9f 78 31 74 62 a2 c9 Y....L.i..x1tb.. 0050 fd bf 7a 66 08 e5 db ee 36 c0 dd 40 ed d8 37 8f ..zf....6..@..7. 0060 60 88 77 60 e5 f3 bd 67 fa 3f ea 37 26 04 2d 45 `.w`...g.?.7&.-E 0070 87 38 a4 5e f7 31 .8.^.1 Frame 2 (118 bytes on wire, 118 bytes captured) Arrival Time: Aug 9, 2010 14:48:02.352202000 [Time delta from previous captured frame: 0.000019000 seconds] [Time delta from previous displayed frame: 0.000019000 seconds] [Time since reference or first frame: 0.000019000 seconds] Frame Number: 2 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc6 [correct] [Good: True] [Bad : False] Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x7544 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: CCEEE670E3134290 Responder cookie: 91592DC4B9087D66 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x403d5997 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 51 89 a7 00 0c 29 48 f8 2f 08 00 45 00 ..)Q....)H./..E. 0010 00 68 00 00 40 00 40 11 fb c6 a5 e3 f9 7c a5 e3 .h..@.@......|.. 0020 f9 7a 01 f4 01 f4 00 54 75 44 cc ee e6 70 e3 13 .z.....TuD...p.. 0030 42 90 91 59 2d c4 b9 08 7d 66 08 10 05 01 40 3d B..Y-...}f....@= 0040 59 97 00 00 00 4c be 69 17 9f 78 31 74 62 a2 c9 Y....L.i..x1tb.. 0050 fd bf 7a 66 08 e5 db ee 36 c0 dd 40 ed d8 37 8f ..zf....6..@..7. 0060 60 88 77 60 e5 f3 bd 67 fa 3f ea 37 26 04 2d 45 `.w`...g.?.7&.-E 0070 87 38 a4 5e f7 31 .8.^.1 Frame 3 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 9, 2010 14:48:02.352537000 [Time delta from previous captured frame: 0.000335000 seconds] [Time delta from previous displayed frame: 0.000335000 seconds] [Time since reference or first frame: 0.000354000 seconds] Frame Number: 3 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbb6 [correct] [Good: True] [Bad : False] Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xb4f6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: CCEEE670E3134290 Responder cookie: 91592DC4B9087D66 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x10a03f95 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 51 89 a7 00 0c 29 48 f8 2f 08 00 45 00 ..)Q....)H./..E. 0010 00 78 00 00 40 00 40 11 fb b6 a5 e3 f9 7c a5 e3 .x..@.@......|.. 0020 f9 7a 01 f4 01 f4 00 64 b4 f6 cc ee e6 70 e3 13 .z.....d.....p.. 0030 42 90 91 59 2d c4 b9 08 7d 66 08 10 05 01 10 a0 B..Y-...}f...... 0040 3f 95 00 00 00 5c e0 0f 86 d8 04 49 ff 35 52 c6 ?....\.....I.5R. 0050 0c cc 78 04 b2 69 5c 58 fd 28 b0 ad 5c e1 b8 8b ..x..i\X.(..\... 0060 a1 f1 ed ef f1 20 24 e1 73 62 7b 67 59 1c 98 db ..... $.sb{gY... 0070 2a 7e c6 23 0c 87 38 10 ae 31 31 f7 27 d1 cd d3 *~.#..8..11.'... 0080 0e f8 d9 4d 4d 5f ...MM_ Frame 4 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 9, 2010 14:48:02.352551000 [Time delta from previous captured frame: 0.000014000 seconds] [Time delta from previous displayed frame: 0.000014000 seconds] [Time since reference or first frame: 0.000368000 seconds] Frame Number: 4 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbb6 [correct] [Good: True] [Bad : False] Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xb4f6 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: CCEEE670E3134290 Responder cookie: 91592DC4B9087D66 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x10a03f95 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 51 89 a7 00 0c 29 48 f8 2f 08 00 45 00 ..)Q....)H./..E. 0010 00 78 00 00 40 00 40 11 fb b6 a5 e3 f9 7c a5 e3 .x..@.@......|.. 0020 f9 7a 01 f4 01 f4 00 64 b4 f6 cc ee e6 70 e3 13 .z.....d.....p.. 0030 42 90 91 59 2d c4 b9 08 7d 66 08 10 05 01 10 a0 B..Y-...}f...... 0040 3f 95 00 00 00 5c e0 0f 86 d8 04 49 ff 35 52 c6 ?....\.....I.5R. 0050 0c cc 78 04 b2 69 5c 58 fd 28 b0 ad 5c e1 b8 8b ..x..i\X.(..\... 0060 a1 f1 ed ef f1 20 24 e1 73 62 7b 67 59 1c 98 db ..... $.sb{gY... 0070 2a 7e c6 23 0c 87 38 10 ae 31 31 f7 27 d1 cd d3 *~.#..8..11.'... 0080 0e f8 d9 4d 4d 5f ...MM_ Frame 5 (326 bytes on wire, 326 bytes captured) Arrival Time: Aug 9, 2010 14:48:15.197786000 [Time delta from previous captured frame: 12.845235000 seconds] [Time delta from previous displayed frame: 12.845235000 seconds] [Time since reference or first frame: 12.845603000 seconds] Frame Number: 5 Frame Length: 326 bytes Capture Length: 326 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfaf6 [correct] [Good: True] [Bad : False] Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x8c40 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 90FE5919B77AA193 Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 284 Security Association payload Next payload: Vendor ID (13) Payload length: 136 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Payload length: 124 Proposal number: 0 Protocol ID: ISAKMP (1) SPI Size: 8 Proposal transforms: 3 SPI: 0x90FE5919B77AA193 Transform payload # 0 Next payload: Transform (3) Payload length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Transform payload # 1 Next payload: Transform (3) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (192) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Transform payload # 2 Next payload: NONE (0) Payload length: 36 Transform number: 2 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (256) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID: F758F22668750F03B08DF6EBE1D00500 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: F758F22668750F03B08DF6EBE1D00500 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Next payload: Vendor ID (13) Payload length: 20 Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Next payload: NONE (0) Payload length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 0c 29 51 89 a7 00 0c 29 48 f8 2f 08 00 45 00 ..)Q....)H./..E. 0010 01 38 00 00 40 00 40 11 fa f6 a5 e3 f9 7c a5 e3 .8..@.@......|.. 0020 f9 7a 01 f4 01 f4 01 24 8c 40 90 fe 59 19 b7 7a .z.....$.@..Y..z 0030 a1 93 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 01 1c 0d 00 00 88 00 00 00 01 00 00 ................ 0050 00 01 00 00 00 7c 00 01 08 03 90 fe 59 19 b7 7a .....|......Y..z 0060 a1 93 03 00 00 24 00 01 00 00 80 01 00 07 80 0e .....$.......... 0070 00 80 80 02 00 02 80 03 00 01 80 04 00 02 80 0b ................ 0080 00 01 80 0c 70 80 03 00 00 24 01 01 00 00 80 01 ....p....$...... 0090 00 07 80 0e 00 c0 80 02 00 02 80 03 00 01 80 04 ................ 00a0 00 02 80 0b 00 01 80 0c 70 80 00 00 00 24 02 01 ........p....$.. 00b0 00 00 80 01 00 07 80 0e 01 00 80 02 00 02 80 03 ................ 00c0 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 00d0 00 14 f7 58 f2 26 68 75 0f 03 b0 8d f6 eb e1 d0 ...X.&hu........ 00e0 05 00 0d 00 00 14 cd 60 46 43 35 df 21 f8 7c fd .......`FC5.!.|. 00f0 b2 fc 68 b6 a4 48 0d 00 00 14 90 cb 80 91 3e bb ..h..H........>. 0100 69 6e 08 63 81 b5 ec 42 7b 1f 0d 00 00 14 7d 94 in.c...B{.....}. 0110 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 9d 56 0d 00 ..S..o,....R.V.. 0120 00 14 4a 13 1c 81 07 03 58 45 5c 57 28 f2 0e 95 ..J.....XE\W(... 0130 45 2f 00 00 00 14 af ca d7 13 68 a1 f1 c9 6b 86 E/........h...k. 0140 96 fc 77 57 01 00 ..wW.. Frame 6 (326 bytes on wire, 326 bytes captured) Arrival Time: Aug 9, 2010 14:48:15.197797000 [Time delta from previous captured frame: 0.000011000 seconds] [Time delta from previous displayed frame: 0.000011000 seconds] [Time since reference or first frame: 12.845614000 seconds] Frame Number: 6 Frame Length: 326 bytes Capture Length: 326 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 312 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfaf6 [correct] [Good: True] [Bad : False] Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 292 Checksum: 0x8c40 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 90FE5919B77AA193 Responder cookie: 0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 284 Security Association payload Next payload: Vendor ID (13) Payload length: 136 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Payload length: 124 Proposal number: 0 Protocol ID: ISAKMP (1) SPI Size: 8 Proposal transforms: 3 SPI: 0x90FE5919B77AA193 Transform payload # 0 Next payload: Transform (3) Payload length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Transform payload # 1 Next payload: Transform (3) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (192) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Transform payload # 2 Next payload: NONE (0) Payload length: 36 Transform number: 2 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (256) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID: F758F22668750F03B08DF6EBE1D00500 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: F758F22668750F03B08DF6EBE1D00500 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Next payload: Vendor ID (13) Payload length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Next payload: Vendor ID (13) Payload length: 20 Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) Next payload: NONE (0) Payload length: 20 Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD) 0000 00 0c 29 51 89 a7 00 0c 29 48 f8 2f 08 00 45 00 ..)Q....)H./..E. 0010 01 38 00 00 40 00 40 11 fa f6 a5 e3 f9 7c a5 e3 .8..@.@......|.. 0020 f9 7a 01 f4 01 f4 01 24 8c 40 90 fe 59 19 b7 7a .z.....$.@..Y..z 0030 a1 93 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 01 1c 0d 00 00 88 00 00 00 01 00 00 ................ 0050 00 01 00 00 00 7c 00 01 08 03 90 fe 59 19 b7 7a .....|......Y..z 0060 a1 93 03 00 00 24 00 01 00 00 80 01 00 07 80 0e .....$.......... 0070 00 80 80 02 00 02 80 03 00 01 80 04 00 02 80 0b ................ 0080 00 01 80 0c 70 80 03 00 00 24 01 01 00 00 80 01 ....p....$...... 0090 00 07 80 0e 00 c0 80 02 00 02 80 03 00 01 80 04 ................ 00a0 00 02 80 0b 00 01 80 0c 70 80 00 00 00 24 02 01 ........p....$.. 00b0 00 00 80 01 00 07 80 0e 01 00 80 02 00 02 80 03 ................ 00c0 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 00d0 00 14 f7 58 f2 26 68 75 0f 03 b0 8d f6 eb e1 d0 ...X.&hu........ 00e0 05 00 0d 00 00 14 cd 60 46 43 35 df 21 f8 7c fd .......`FC5.!.|. 00f0 b2 fc 68 b6 a4 48 0d 00 00 14 90 cb 80 91 3e bb ..h..H........>. 0100 69 6e 08 63 81 b5 ec 42 7b 1f 0d 00 00 14 7d 94 in.c...B{.....}. 0110 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 9d 56 0d 00 ..S..o,....R.V.. 0120 00 14 4a 13 1c 81 07 03 58 45 5c 57 28 f2 0e 95 ..J.....XE\W(... 0130 45 2f 00 00 00 14 af ca d7 13 68 a1 f1 c9 6b 86 E/........h...k. 0140 96 fc 77 57 01 00 ..wW.. Frame 7 (126 bytes on wire, 126 bytes captured) Arrival Time: Aug 9, 2010 14:48:15.199330000 [Time delta from previous captured frame: 0.001533000 seconds] [Time delta from previous displayed frame: 0.001533000 seconds] [Time since reference or first frame: 12.847147000 seconds] Frame Number: 7 Frame Length: 126 bytes Capture Length: 126 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xb175 (45429) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x8a49 [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0xe0f0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 90FE5919B77AA193 Responder cookie: DBA82E7CB448E2D9 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 48 f8 2f 00 0c 29 51 89 a7 08 00 45 00 ..)H./..)Q....E. 0010 00 70 b1 75 00 00 40 11 8a 49 a5 e3 f9 7a a5 e3 .p.u..@..I...z.. 0020 f9 7c 01 f4 01 f4 00 5c e0 f0 90 fe 59 19 b7 7a .|.....\....Y..z 0030 a1 93 db a8 2e 7c b4 48 e2 d9 01 10 02 00 00 00 .....|.H........ 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 ............p. Frame 8 (126 bytes on wire, 126 bytes captured) Arrival Time: Aug 9, 2010 14:48:15.199346000 [Time delta from previous captured frame: 0.000016000 seconds] [Time delta from previous displayed frame: 0.000016000 seconds] [Time since reference or first frame: 12.847163000 seconds] Frame Number: 8 Frame Length: 126 bytes Capture Length: 126 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xb175 (45429) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x8a49 [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0xe0f0 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 90FE5919B77AA193 Responder cookie: DBA82E7CB448E2D9 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Payload length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Payload length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI Size: 0 Proposal transforms: 1 Transform payload # 1 Next payload: NONE (0) Payload length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 48 f8 2f 00 0c 29 51 89 a7 08 00 45 00 ..)H./..)Q....E. 0010 00 70 b1 75 00 00 40 11 8a 49 a5 e3 f9 7a a5 e3 .p.u..@..I...z.. 0020 f9 7c 01 f4 01 f4 00 5c e0 f0 90 fe 59 19 b7 7a .|.....\....Y..z 0030 a1 93 db a8 2e 7c b4 48 e2 d9 01 10 02 00 00 00 .....|.H........ 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 ............p. Frame 9 (222 bytes on wire, 222 bytes captured) Arrival Time: Aug 9, 2010 14:48:15.202265000 [Time delta from previous captured frame: 0.002919000 seconds] [Time delta from previous displayed frame: 0.002919000 seconds] [Time since reference or first frame: 12.850082000 seconds] Frame Number: 9 Frame Length: 222 bytes Capture Length: 222 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb5e [correct] [Good: True] [Bad : False] Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xa283 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 90FE5919B77AA193 Responder cookie: DBA82E7CB448E2D9 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: NONE (0) Payload length: 20 Nonce Data 0000 00 0c 29 51 89 a7 00 0c 29 48 f8 2f 08 00 45 00 ..)Q....)H./..E. 0010 00 d0 00 00 40 00 40 11 fb 5e a5 e3 f9 7c a5 e3 ....@.@..^...|.. 0020 f9 7a 01 f4 01 f4 00 bc a2 83 90 fe 59 19 b7 7a .z..........Y..z 0030 a1 93 db a8 2e 7c b4 48 e2 d9 04 10 02 00 00 00 .....|.H........ 0040 00 00 00 00 00 b4 0a 00 00 84 66 62 a8 b3 f4 c9 ..........fb.... 0050 3f e9 a4 e6 31 ee 34 fc 04 93 6e 57 4f 64 ef 5a ?...1.4...nWOd.Z 0060 09 91 5d 16 37 1d 95 80 a3 65 1d 33 8b 3b 7c d0 ..].7....e.3.;|. 0070 2b 2c 99 4c 17 62 f1 56 c3 9b 35 95 f9 c6 c4 0a +,.L.b.V..5..... 0080 45 21 c1 b2 ed 4f 7a b4 d2 8f 3b 7d 17 39 9f 53 E!...Oz...;}.9.S 0090 94 54 fd 1f d5 51 08 1c 32 f3 f7 25 00 ed f3 18 .T...Q..2..%.... 00a0 c5 d8 31 62 e4 6b c3 7e 1d 40 6b 13 28 be 3a 40 ..1b.k.~.@k.(.:@ 00b0 c5 3c 3c 1b e6 f9 08 4b 0e 54 56 fe ca 8a 35 12 .<<....K.TV...5. 00c0 0b 2b 14 6f 24 9a 8a 7c fb 02 00 00 00 14 67 8a .+.o$..|......g. 00d0 25 34 15 6b 7d e1 eb 1c 9a 5c 81 17 11 58 %4.k}....\...X Frame 10 (222 bytes on wire, 222 bytes captured) Arrival Time: Aug 9, 2010 14:48:15.202275000 [Time delta from previous captured frame: 0.000010000 seconds] [Time delta from previous displayed frame: 0.000010000 seconds] [Time since reference or first frame: 12.850092000 seconds] Frame Number: 10 Frame Length: 222 bytes Capture Length: 222 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb5e [correct] [Good: True] [Bad : False] Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xa283 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 90FE5919B77AA193 Responder cookie: DBA82E7CB448E2D9 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: NONE (0) Payload length: 20 Nonce Data 0000 00 0c 29 51 89 a7 00 0c 29 48 f8 2f 08 00 45 00 ..)Q....)H./..E. 0010 00 d0 00 00 40 00 40 11 fb 5e a5 e3 f9 7c a5 e3 ....@.@..^...|.. 0020 f9 7a 01 f4 01 f4 00 bc a2 83 90 fe 59 19 b7 7a .z..........Y..z 0030 a1 93 db a8 2e 7c b4 48 e2 d9 04 10 02 00 00 00 .....|.H........ 0040 00 00 00 00 00 b4 0a 00 00 84 66 62 a8 b3 f4 c9 ..........fb.... 0050 3f e9 a4 e6 31 ee 34 fc 04 93 6e 57 4f 64 ef 5a ?...1.4...nWOd.Z 0060 09 91 5d 16 37 1d 95 80 a3 65 1d 33 8b 3b 7c d0 ..].7....e.3.;|. 0070 2b 2c 99 4c 17 62 f1 56 c3 9b 35 95 f9 c6 c4 0a +,.L.b.V..5..... 0080 45 21 c1 b2 ed 4f 7a b4 d2 8f 3b 7d 17 39 9f 53 E!...Oz...;}.9.S 0090 94 54 fd 1f d5 51 08 1c 32 f3 f7 25 00 ed f3 18 .T...Q..2..%.... 00a0 c5 d8 31 62 e4 6b c3 7e 1d 40 6b 13 28 be 3a 40 ..1b.k.~.@k.(.:@ 00b0 c5 3c 3c 1b e6 f9 08 4b 0e 54 56 fe ca 8a 35 12 .<<....K.TV...5. 00c0 0b 2b 14 6f 24 9a 8a 7c fb 02 00 00 00 14 67 8a .+.o$..|......g. 00d0 25 34 15 6b 7d e1 eb 1c 9a 5c 81 17 11 58 %4.k}....\...X Frame 11 (226 bytes on wire, 226 bytes captured) Arrival Time: Aug 9, 2010 14:48:15.203047000 [Time delta from previous captured frame: 0.000772000 seconds] [Time delta from previous displayed frame: 0.000772000 seconds] [Time since reference or first frame: 12.850864000 seconds] Frame Number: 11 Frame Length: 226 bytes Capture Length: 226 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0xb176 (45430) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x89e4 [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0xa040 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 90FE5919B77AA193 Responder cookie: DBA82E7CB448E2D9 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: NONE (0) Payload length: 24 Nonce Data 0000 00 0c 29 48 f8 2f 00 0c 29 51 89 a7 08 00 45 00 ..)H./..)Q....E. 0010 00 d4 b1 76 00 00 40 11 89 e4 a5 e3 f9 7a a5 e3 ...v..@......z.. 0020 f9 7c 01 f4 01 f4 00 c0 a0 40 90 fe 59 19 b7 7a .|.......@..Y..z 0030 a1 93 db a8 2e 7c b4 48 e2 d9 04 10 02 00 00 00 .....|.H........ 0040 00 00 00 00 00 b8 0a 00 00 84 af ac 6e 5b 22 1a ............n[". 0050 60 07 8e d3 41 0a 47 e0 ed 72 88 78 18 96 12 32 `...A.G..r.x...2 0060 f8 b1 c2 af 28 5c 7b 89 3d fc be b6 72 3a fd 7d ....(\{.=...r:.} 0070 9e 78 c4 3f 3c c2 29 f1 f5 e6 70 64 64 b1 8d 38 .x.?<.)...pdd..8 0080 f9 14 b0 ec db bc fb 4e 4f 0e af fb d7 1f 88 a4 .......NO....... 0090 33 96 b1 c1 8b c3 79 c4 cd ad ac 68 80 63 f0 60 3.....y....h.c.` 00a0 e0 72 e3 df cc 66 79 d2 5b a4 fb 44 10 17 2f c5 .r...fy.[..D../. 00b0 72 6b 1f 73 ab bb c4 3f 01 68 1a 2f 17 83 ed 4a rk.s...?.h./...J 00c0 cc 80 65 db dd 7b ce 5d ad be 00 00 00 18 44 71 ..e..{.]......Dq 00d0 8e 7a 63 0a 70 3a 18 00 41 72 04 f7 cf e5 e4 66 .zc.p:..Ar.....f 00e0 21 c3 !. Frame 12 (226 bytes on wire, 226 bytes captured) Arrival Time: Aug 9, 2010 14:48:15.203060000 [Time delta from previous captured frame: 0.000013000 seconds] [Time delta from previous displayed frame: 0.000013000 seconds] [Time since reference or first frame: 12.850877000 seconds] Frame Number: 12 Frame Length: 226 bytes Capture Length: 226 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0xb176 (45430) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x89e4 [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0xa040 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 90FE5919B77AA193 Responder cookie: DBA82E7CB448E2D9 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x00 .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Payload length: 132 Key Exchange Data (128 bytes / 1024 bits) Nonce payload Next payload: NONE (0) Payload length: 24 Nonce Data 0000 00 0c 29 48 f8 2f 00 0c 29 51 89 a7 08 00 45 00 ..)H./..)Q....E. 0010 00 d4 b1 76 00 00 40 11 89 e4 a5 e3 f9 7a a5 e3 ...v..@......z.. 0020 f9 7c 01 f4 01 f4 00 c0 a0 40 90 fe 59 19 b7 7a .|.......@..Y..z 0030 a1 93 db a8 2e 7c b4 48 e2 d9 04 10 02 00 00 00 .....|.H........ 0040 00 00 00 00 00 b8 0a 00 00 84 af ac 6e 5b 22 1a ............n[". 0050 60 07 8e d3 41 0a 47 e0 ed 72 88 78 18 96 12 32 `...A.G..r.x...2 0060 f8 b1 c2 af 28 5c 7b 89 3d fc be b6 72 3a fd 7d ....(\{.=...r:.} 0070 9e 78 c4 3f 3c c2 29 f1 f5 e6 70 64 64 b1 8d 38 .x.?<.)...pdd..8 0080 f9 14 b0 ec db bc fb 4e 4f 0e af fb d7 1f 88 a4 .......NO....... 0090 33 96 b1 c1 8b c3 79 c4 cd ad ac 68 80 63 f0 60 3.....y....h.c.` 00a0 e0 72 e3 df cc 66 79 d2 5b a4 fb 44 10 17 2f c5 .r...fy.[..D../. 00b0 72 6b 1f 73 ab bb c4 3f 01 68 1a 2f 17 83 ed 4a rk.s...?.h./...J 00c0 cc 80 65 db dd 7b ce 5d ad be 00 00 00 18 44 71 ..e..{.]......Dq 00d0 8e 7a 63 0a 70 3a 18 00 41 72 04 f7 cf e5 e4 66 .zc.p:..Ar.....f 00e0 21 c3 !. Frame 13 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 9, 2010 14:48:15.206531000 [Time delta from previous captured frame: 0.003471000 seconds] [Time delta from previous displayed frame: 0.003471000 seconds] [Time since reference or first frame: 12.854348000 seconds] Frame Number: 13 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbb6 [correct] [Good: True] [Bad : False] Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xd836 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 90FE5919B77AA193 Responder cookie: DBA82E7CB448E2D9 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 51 89 a7 00 0c 29 48 f8 2f 08 00 45 00 ..)Q....)H./..E. 0010 00 78 00 00 40 00 40 11 fb b6 a5 e3 f9 7c a5 e3 .x..@.@......|.. 0020 f9 7a 01 f4 01 f4 00 64 d8 36 90 fe 59 19 b7 7a .z.....d.6..Y..z 0030 a1 93 db a8 2e 7c b4 48 e2 d9 05 10 02 01 00 00 .....|.H........ 0040 00 00 00 00 00 5c b3 3e 45 87 02 5e 1c d4 a2 6a .....\.>E..^...j 0050 02 67 16 87 f2 7e 76 16 63 02 2d b9 dd bd 1e c1 .g...~v.c.-..... 0060 2e d0 9f d0 fd 00 34 78 1b 78 b4 78 5f 5c 3c a6 ......4x.x.x_\<. 0070 e9 21 5d 5d 86 87 bb c9 50 10 05 b8 c8 85 aa 6e .!]]....P......n 0080 bd ba cb 09 e8 ed ...... Frame 14 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 9, 2010 14:48:15.206547000 [Time delta from previous captured frame: 0.000016000 seconds] [Time delta from previous displayed frame: 0.000016000 seconds] [Time since reference or first frame: 12.854364000 seconds] Frame Number: 14 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbb6 [correct] [Good: True] [Bad : False] Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xd836 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 90FE5919B77AA193 Responder cookie: DBA82E7CB448E2D9 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 51 89 a7 00 0c 29 48 f8 2f 08 00 45 00 ..)Q....)H./..E. 0010 00 78 00 00 40 00 40 11 fb b6 a5 e3 f9 7c a5 e3 .x..@.@......|.. 0020 f9 7a 01 f4 01 f4 00 64 d8 36 90 fe 59 19 b7 7a .z.....d.6..Y..z 0030 a1 93 db a8 2e 7c b4 48 e2 d9 05 10 02 01 00 00 .....|.H........ 0040 00 00 00 00 00 5c b3 3e 45 87 02 5e 1c d4 a2 6a .....\.>E..^...j 0050 02 67 16 87 f2 7e 76 16 63 02 2d b9 dd bd 1e c1 .g...~v.c.-..... 0060 2e d0 9f d0 fd 00 34 78 1b 78 b4 78 5f 5c 3c a6 ......4x.x.x_\<. 0070 e9 21 5d 5d 86 87 bb c9 50 10 05 b8 c8 85 aa 6e .!]]....P......n 0080 bd ba cb 09 e8 ed ...... Frame 15 (118 bytes on wire, 118 bytes captured) Arrival Time: Aug 9, 2010 14:48:15.212143000 [Time delta from previous captured frame: 0.005596000 seconds] [Time delta from previous displayed frame: 0.005596000 seconds] [Time since reference or first frame: 12.859960000 seconds] Frame Number: 15 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0xb177 (45431) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x8a4f [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xfe49 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 90FE5919B77AA193 Responder cookie: DBA82E7CB448E2D9 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 48 f8 2f 00 0c 29 51 89 a7 08 00 45 00 ..)H./..)Q....E. 0010 00 68 b1 77 00 00 40 11 8a 4f a5 e3 f9 7a a5 e3 .h.w..@..O...z.. 0020 f9 7c 01 f4 01 f4 00 54 fe 49 90 fe 59 19 b7 7a .|.....T.I..Y..z 0030 a1 93 db a8 2e 7c b4 48 e2 d9 05 10 02 01 00 00 .....|.H........ 0040 00 00 00 00 00 4c 2a ee 92 a7 37 ea 53 6f c1 b1 .....L*...7.So.. 0050 e5 af 6f 82 e8 4f b7 2f e7 74 8b 4c bf 8d 59 2b ..o..O./.t.L..Y+ 0060 8d 1b 83 bf 75 c1 5b c9 56 6b d1 46 e7 b5 c1 e1 ....u.[.Vk.F.... 0070 39 57 9b 4c bf 69 9W.L.i Frame 16 (118 bytes on wire, 118 bytes captured) Arrival Time: Aug 9, 2010 14:48:15.212163000 [Time delta from previous captured frame: 0.000020000 seconds] [Time delta from previous displayed frame: 0.000020000 seconds] [Time since reference or first frame: 12.859980000 seconds] Frame Number: 16 Frame Length: 118 bytes Capture Length: 118 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0xb177 (45431) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x8a4f [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xfe49 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 90FE5919B77AA193 Responder cookie: DBA82E7CB448E2D9 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 48 f8 2f 00 0c 29 51 89 a7 08 00 45 00 ..)H./..)Q....E. 0010 00 68 b1 77 00 00 40 11 8a 4f a5 e3 f9 7a a5 e3 .h.w..@..O...z.. 0020 f9 7c 01 f4 01 f4 00 54 fe 49 90 fe 59 19 b7 7a .|.....T.I..Y..z 0030 a1 93 db a8 2e 7c b4 48 e2 d9 05 10 02 01 00 00 .....|.H........ 0040 00 00 00 00 00 4c 2a ee 92 a7 37 ea 53 6f c1 b1 .....L*...7.So.. 0050 e5 af 6f 82 e8 4f b7 2f e7 74 8b 4c bf 8d 59 2b ..o..O./.t.L..Y+ 0060 8d 1b 83 bf 75 c1 5b c9 56 6b d1 46 e7 b5 c1 e1 ....u.[.Vk.F.... 0070 39 57 9b 4c bf 69 9W.L.i Frame 17 (518 bytes on wire, 518 bytes captured) Arrival Time: Aug 9, 2010 14:48:15.220628000 [Time delta from previous captured frame: 0.008465000 seconds] [Time delta from previous displayed frame: 0.008465000 seconds] [Time since reference or first frame: 12.868445000 seconds] Frame Number: 17 Frame Length: 518 bytes Capture Length: 518 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 504 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa36 [correct] [Good: True] [Bad : False] Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 484 Checksum: 0x9e24 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 90FE5919B77AA193 Responder cookie: DBA82E7CB448E2D9 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x983507ef Length: 476 Encrypted payload (448 bytes) 0000 00 0c 29 51 89 a7 00 0c 29 48 f8 2f 08 00 45 00 ..)Q....)H./..E. 0010 01 f8 00 00 40 00 40 11 fa 36 a5 e3 f9 7c a5 e3 ....@.@..6...|.. 0020 f9 7a 01 f4 01 f4 01 e4 9e 24 90 fe 59 19 b7 7a .z.......$..Y..z 0030 a1 93 db a8 2e 7c b4 48 e2 d9 08 10 20 01 98 35 .....|.H.... ..5 0040 07 ef 00 00 01 dc 08 58 17 dd f5 6c a4 0b 7f eb .......X...l.... 0050 cc ab 6b be 33 6a da d6 0a 50 e3 be 4c 0a 66 b5 ..k.3j...P..L.f. 0060 08 11 d3 52 89 c7 6e e5 9c be f2 e6 31 9f 62 e9 ...R..n.....1.b. 0070 34 38 69 8e 7c a3 5b f2 ae 3c 79 89 e3 b2 5f a4 48i.|.[..]$.%.G5... 00a0 a4 98 24 7b b4 46 dd 83 da 68 aa 77 70 f5 1a d2 ..${.F...h.wp... 00b0 5e 4e 6d 9d 97 ef ef 44 a5 5b 8e 42 5c f1 1d 6c ^Nm....D.[.B\..l 00c0 0b 43 75 2b a0 de c7 38 67 d3 25 6b ed 63 8b e0 .Cu+...8g.%k.c.. 00d0 4a fc dd 21 a2 91 ed 12 ac 4c 95 d0 51 f6 e9 b3 J..!.....L..Q... 00e0 54 71 6e 07 d2 fd 8d 0e db 69 19 96 c8 9c f8 99 Tqn......i...... 00f0 90 13 b8 60 61 cf 33 1f ba 1c d3 23 69 3b 72 ed ...`a.3....#i;r. 0100 aa f3 09 ea f5 58 b3 44 0f f9 e9 2d 3e e0 d7 8c .....X.D...->... 0110 4f bf 6d 09 b4 37 a0 f0 7d 04 29 eb 6b d1 f7 e6 O.m..7..}.).k... 0120 b8 69 cb ae 8d 14 9e dc 96 48 be b2 a6 e0 e5 e7 .i.......H...... 0130 6f 76 e6 13 56 52 95 0f 6b 04 b1 8b ef 16 79 7c ov..VR..k.....y| 0140 3a 53 8f 36 0c 3c 40 cc 72 9d d6 7b 30 48 fc 20 :S.6.<@.r..{0H. 0150 ce 29 92 35 a5 aa 1f b3 87 d2 94 04 93 f2 35 2f .).5..........5/ 0160 4d 95 69 75 14 6e 0d 83 55 1f 37 9d 62 fa 9a a5 M.iu.n..U.7.b... 0170 3a 9f 13 b4 5e 4f 23 7f 99 62 34 64 60 e3 07 14 :...^O#..b4d`... 0180 4f 4f c5 77 81 1c ea 74 58 5c 6e 55 d4 dd 90 7d OO.w...tX\nU...} 0190 f9 7c 5f 44 b9 96 25 91 42 0d be 90 4f 31 ce ea .|_D..%.B...O1.. 01a0 45 95 67 4d 37 92 7f 78 a8 d5 d4 b8 3e ee 9a 47 E.gM7..x....>..G 01b0 21 8c e1 71 b6 3e e6 66 58 92 53 1f 9f 8a 05 94 !..q.>.fX.S..... 01c0 8b 35 48 d7 fe a1 9f d8 7a 1e b3 f8 c9 d7 aa 6e .5H.....z......n 01d0 f0 6d 12 30 6b 0d 0a 66 2e 57 56 24 ca 82 94 e5 .m.0k..f.WV$.... 01e0 d5 a3 81 76 d3 80 e0 90 6e ce 94 f0 23 2b 16 ec ...v....n...#+.. 01f0 e7 ee 77 75 41 b1 9d a4 04 58 09 05 c1 ab be 10 ..wuA....X...... 0200 ba 36 29 ff 86 66 .6)..f Frame 18 (518 bytes on wire, 518 bytes captured) Arrival Time: Aug 9, 2010 14:48:15.220643000 [Time delta from previous captured frame: 0.000015000 seconds] [Time delta from previous displayed frame: 0.000015000 seconds] [Time since reference or first frame: 12.868460000 seconds] Frame Number: 18 Frame Length: 518 bytes Capture Length: 518 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 504 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa36 [correct] [Good: True] [Bad : False] Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 484 Checksum: 0x9e24 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 90FE5919B77AA193 Responder cookie: DBA82E7CB448E2D9 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x983507ef Length: 476 Encrypted payload (448 bytes) 0000 00 0c 29 51 89 a7 00 0c 29 48 f8 2f 08 00 45 00 ..)Q....)H./..E. 0010 01 f8 00 00 40 00 40 11 fa 36 a5 e3 f9 7c a5 e3 ....@.@..6...|.. 0020 f9 7a 01 f4 01 f4 01 e4 9e 24 90 fe 59 19 b7 7a .z.......$..Y..z 0030 a1 93 db a8 2e 7c b4 48 e2 d9 08 10 20 01 98 35 .....|.H.... ..5 0040 07 ef 00 00 01 dc 08 58 17 dd f5 6c a4 0b 7f eb .......X...l.... 0050 cc ab 6b be 33 6a da d6 0a 50 e3 be 4c 0a 66 b5 ..k.3j...P..L.f. 0060 08 11 d3 52 89 c7 6e e5 9c be f2 e6 31 9f 62 e9 ...R..n.....1.b. 0070 34 38 69 8e 7c a3 5b f2 ae 3c 79 89 e3 b2 5f a4 48i.|.[..]$.%.G5... 00a0 a4 98 24 7b b4 46 dd 83 da 68 aa 77 70 f5 1a d2 ..${.F...h.wp... 00b0 5e 4e 6d 9d 97 ef ef 44 a5 5b 8e 42 5c f1 1d 6c ^Nm....D.[.B\..l 00c0 0b 43 75 2b a0 de c7 38 67 d3 25 6b ed 63 8b e0 .Cu+...8g.%k.c.. 00d0 4a fc dd 21 a2 91 ed 12 ac 4c 95 d0 51 f6 e9 b3 J..!.....L..Q... 00e0 54 71 6e 07 d2 fd 8d 0e db 69 19 96 c8 9c f8 99 Tqn......i...... 00f0 90 13 b8 60 61 cf 33 1f ba 1c d3 23 69 3b 72 ed ...`a.3....#i;r. 0100 aa f3 09 ea f5 58 b3 44 0f f9 e9 2d 3e e0 d7 8c .....X.D...->... 0110 4f bf 6d 09 b4 37 a0 f0 7d 04 29 eb 6b d1 f7 e6 O.m..7..}.).k... 0120 b8 69 cb ae 8d 14 9e dc 96 48 be b2 a6 e0 e5 e7 .i.......H...... 0130 6f 76 e6 13 56 52 95 0f 6b 04 b1 8b ef 16 79 7c ov..VR..k.....y| 0140 3a 53 8f 36 0c 3c 40 cc 72 9d d6 7b 30 48 fc 20 :S.6.<@.r..{0H. 0150 ce 29 92 35 a5 aa 1f b3 87 d2 94 04 93 f2 35 2f .).5..........5/ 0160 4d 95 69 75 14 6e 0d 83 55 1f 37 9d 62 fa 9a a5 M.iu.n..U.7.b... 0170 3a 9f 13 b4 5e 4f 23 7f 99 62 34 64 60 e3 07 14 :...^O#..b4d`... 0180 4f 4f c5 77 81 1c ea 74 58 5c 6e 55 d4 dd 90 7d OO.w...tX\nU...} 0190 f9 7c 5f 44 b9 96 25 91 42 0d be 90 4f 31 ce ea .|_D..%.B...O1.. 01a0 45 95 67 4d 37 92 7f 78 a8 d5 d4 b8 3e ee 9a 47 E.gM7..x....>..G 01b0 21 8c e1 71 b6 3e e6 66 58 92 53 1f 9f 8a 05 94 !..q.>.fX.S..... 01c0 8b 35 48 d7 fe a1 9f d8 7a 1e b3 f8 c9 d7 aa 6e .5H.....z......n 01d0 f0 6d 12 30 6b 0d 0a 66 2e 57 56 24 ca 82 94 e5 .m.0k..f.WV$.... 01e0 d5 a3 81 76 d3 80 e0 90 6e ce 94 f0 23 2b 16 ec ...v....n...#+.. 01f0 e7 ee 77 75 41 b1 9d a4 04 58 09 05 c1 ab be 10 ..wuA....X...... 0200 ba 36 29 ff 86 66 .6)..f Frame 19 (342 bytes on wire, 342 bytes captured) Arrival Time: Aug 9, 2010 14:48:15.222613000 [Time delta from previous captured frame: 0.001970000 seconds] [Time delta from previous displayed frame: 0.001970000 seconds] [Time since reference or first frame: 12.870430000 seconds] Frame Number: 19 Frame Length: 342 bytes Capture Length: 342 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0xb178 (45432) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x896e [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xe4d3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 90FE5919B77AA193 Responder cookie: DBA82E7CB448E2D9 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x983507ef Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 48 f8 2f 00 0c 29 51 89 a7 08 00 45 00 ..)H./..)Q....E. 0010 01 48 b1 78 00 00 40 11 89 6e a5 e3 f9 7a a5 e3 .H.x..@..n...z.. 0020 f9 7c 01 f4 01 f4 01 34 e4 d3 90 fe 59 19 b7 7a .|.....4....Y..z 0030 a1 93 db a8 2e 7c b4 48 e2 d9 08 10 20 01 98 35 .....|.H.... ..5 0040 07 ef 00 00 01 2c 7c 1d 55 57 44 1b 36 0d cc f5 .....,|.UWD.6... 0050 08 71 4f b4 8f 55 cd 24 04 c3 f2 d9 90 d4 07 ce .qO..U.$........ 0060 64 9b 37 5a 17 bd 2a 84 a7 97 d5 a1 a3 21 17 e4 d.7Z..*......!.. 0070 f3 31 ee 32 80 d9 33 40 91 05 8d ed 9e 7a 27 54 .1.2..3@.....z'T 0080 a1 cf c0 53 1a cf 9a ff 97 e2 13 e7 c6 b8 e6 d0 ...S............ 0090 b1 f9 be 89 bb 7f 62 7a 89 66 71 c6 16 94 c0 ca ......bz.fq..... 00a0 39 b2 ff 9a 05 35 66 23 be ea f3 1e 0d 30 29 f2 9....5f#.....0). 00b0 8f 90 6e 64 78 75 f8 5b 2d 8e cc 22 bd 81 bc a6 ..ndxu.[-..".... 00c0 d3 e0 43 37 84 21 8a df 5d b7 a5 4e a7 19 2c c0 ..C7.!..]..N..,. 00d0 30 08 01 2c 68 73 5d 07 1c 7b fe 03 e3 57 cb d4 0..,hs]..{...W.. 00e0 c9 a7 c9 0c 89 5e 1e 60 b6 c9 fa d0 25 a4 c7 a9 .....^.`....%... 00f0 bf f2 c1 f4 67 ca c2 f0 3b dd 66 9e b0 ae 9a 03 ....g...;.f..... 0100 fd d5 e2 64 e9 6a fb 75 c9 4d 9d 29 d7 03 93 93 ...d.j.u.M.).... 0110 5f 20 67 2a 6c 4e af b0 f3 6b 60 31 61 1a 04 34 _ g*lN...k`1a..4 0120 d7 7c 81 68 ef f3 53 bd a0 c7 d7 74 b7 b7 42 d7 .|.h..S....t..B. 0130 1c 77 a9 a5 fe 94 a0 ae 2a 9a 7d 06 08 8f b4 08 .w......*.}..... 0140 0f df ad c7 4a c0 31 76 92 8a da aa e8 6b e6 d4 ....J.1v.....k.. 0150 d0 28 65 a0 10 5b .(e..[ Frame 20 (342 bytes on wire, 342 bytes captured) Arrival Time: Aug 9, 2010 14:48:15.222632000 [Time delta from previous captured frame: 0.000019000 seconds] [Time delta from previous displayed frame: 0.000019000 seconds] [Time since reference or first frame: 12.870449000 seconds] Frame Number: 20 Frame Length: 342 bytes Capture Length: 342 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0xb178 (45432) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x896e [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0xe4d3 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 90FE5919B77AA193 Responder cookie: DBA82E7CB448E2D9 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x983507ef Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 48 f8 2f 00 0c 29 51 89 a7 08 00 45 00 ..)H./..)Q....E. 0010 01 48 b1 78 00 00 40 11 89 6e a5 e3 f9 7a a5 e3 .H.x..@..n...z.. 0020 f9 7c 01 f4 01 f4 01 34 e4 d3 90 fe 59 19 b7 7a .|.....4....Y..z 0030 a1 93 db a8 2e 7c b4 48 e2 d9 08 10 20 01 98 35 .....|.H.... ..5 0040 07 ef 00 00 01 2c 7c 1d 55 57 44 1b 36 0d cc f5 .....,|.UWD.6... 0050 08 71 4f b4 8f 55 cd 24 04 c3 f2 d9 90 d4 07 ce .qO..U.$........ 0060 64 9b 37 5a 17 bd 2a 84 a7 97 d5 a1 a3 21 17 e4 d.7Z..*......!.. 0070 f3 31 ee 32 80 d9 33 40 91 05 8d ed 9e 7a 27 54 .1.2..3@.....z'T 0080 a1 cf c0 53 1a cf 9a ff 97 e2 13 e7 c6 b8 e6 d0 ...S............ 0090 b1 f9 be 89 bb 7f 62 7a 89 66 71 c6 16 94 c0 ca ......bz.fq..... 00a0 39 b2 ff 9a 05 35 66 23 be ea f3 1e 0d 30 29 f2 9....5f#.....0). 00b0 8f 90 6e 64 78 75 f8 5b 2d 8e cc 22 bd 81 bc a6 ..ndxu.[-..".... 00c0 d3 e0 43 37 84 21 8a df 5d b7 a5 4e a7 19 2c c0 ..C7.!..]..N..,. 00d0 30 08 01 2c 68 73 5d 07 1c 7b fe 03 e3 57 cb d4 0..,hs]..{...W.. 00e0 c9 a7 c9 0c 89 5e 1e 60 b6 c9 fa d0 25 a4 c7 a9 .....^.`....%... 00f0 bf f2 c1 f4 67 ca c2 f0 3b dd 66 9e b0 ae 9a 03 ....g...;.f..... 0100 fd d5 e2 64 e9 6a fb 75 c9 4d 9d 29 d7 03 93 93 ...d.j.u.M.).... 0110 5f 20 67 2a 6c 4e af b0 f3 6b 60 31 61 1a 04 34 _ g*lN...k`1a..4 0120 d7 7c 81 68 ef f3 53 bd a0 c7 d7 74 b7 b7 42 d7 .|.h..S....t..B. 0130 1c 77 a9 a5 fe 94 a0 ae 2a 9a 7d 06 08 8f b4 08 .w......*.}..... 0140 0f df ad c7 4a c0 31 76 92 8a da aa e8 6b e6 d4 ....J.1v.....k.. 0150 d0 28 65 a0 10 5b .(e..[ Frame 21 (102 bytes on wire, 102 bytes captured) Arrival Time: Aug 9, 2010 14:48:15.243133000 [Time delta from previous captured frame: 0.020501000 seconds] [Time delta from previous displayed frame: 0.020501000 seconds] [Time since reference or first frame: 12.890950000 seconds] Frame Number: 21 Frame Length: 102 bytes Capture Length: 102 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbd6 [correct] [Good: True] [Bad : False] Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xb564 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 90FE5919B77AA193 Responder cookie: DBA82E7CB448E2D9 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x983507ef Length: 60 Encrypted payload (32 bytes) 0000 00 0c 29 51 89 a7 00 0c 29 48 f8 2f 08 00 45 00 ..)Q....)H./..E. 0010 00 58 00 00 40 00 40 11 fb d6 a5 e3 f9 7c a5 e3 .X..@.@......|.. 0020 f9 7a 01 f4 01 f4 00 44 b5 64 90 fe 59 19 b7 7a .z.....D.d..Y..z 0030 a1 93 db a8 2e 7c b4 48 e2 d9 08 10 20 01 98 35 .....|.H.... ..5 0040 07 ef 00 00 00 3c 83 f8 18 8a 37 2f f4 22 72 58 .....<....7/."rX 0050 7c 8f d6 1d 8e bb a6 cf d4 3a 81 28 23 6a b0 c5 |........:.(#j.. 0060 ad 8c dd 0f e3 e5 ...... Frame 22 (102 bytes on wire, 102 bytes captured) Arrival Time: Aug 9, 2010 14:48:15.243147000 [Time delta from previous captured frame: 0.000014000 seconds] [Time delta from previous displayed frame: 0.000014000 seconds] [Time since reference or first frame: 12.890964000 seconds] Frame Number: 22 Frame Length: 102 bytes Capture Length: 102 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:isakmp] Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) 0.. = Reserved bit: Not Set .1. = Don't fragment: Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbd6 [correct] [Good: True] [Bad : False] Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0xb564 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Internet Security Association and Key Management Protocol Initiator cookie: 90FE5919B77AA193 Responder cookie: DBA82E7CB448E2D9 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags: 0x01 .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x983507ef Length: 60 Encrypted payload (32 bytes) 0000 00 0c 29 51 89 a7 00 0c 29 48 f8 2f 08 00 45 00 ..)Q....)H./..E. 0010 00 58 00 00 40 00 40 11 fb d6 a5 e3 f9 7c a5 e3 .X..@.@......|.. 0020 f9 7a 01 f4 01 f4 00 44 b5 64 90 fe 59 19 b7 7a .z.....D.d..Y..z 0030 a1 93 db a8 2e 7c b4 48 e2 d9 08 10 20 01 98 35 .....|.H.... ..5 0040 07 ef 00 00 00 3c 83 f8 18 8a 37 2f f4 22 72 58 .....<....7/."rX 0050 7c 8f d6 1d 8e bb a6 cf d4 3a 81 28 23 6a b0 c5 |........:.(#j.. 0060 ad 8c dd 0f e3 e5 ...... Frame 23 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 9, 2010 14:48:15.500459000 [Time delta from previous captured frame: 0.257312000 seconds] [Time delta from previous displayed frame: 0.257312000 seconds] [Time since reference or first frame: 13.148276000 seconds] Frame Number: 23 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x002a (42) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b6b [correct] [Good: True] [Bad : False] Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload ESP SPI: 0x1b4e58ae ESP Sequence: 1 0000 00 0c 29 51 89 a7 00 0c 29 48 f8 2f 08 00 45 00 ..)Q....)H./..E. 0010 00 78 00 2a 00 00 f0 32 8b 6b a5 e3 f9 7c a5 e3 .x.*...2.k...|.. 0020 f9 7a 1b 4e 58 ae 00 00 00 01 a1 b1 65 df 9f b9 .z.NX.......e... 0030 18 8a a8 7e 90 ab 9b 72 ef f0 78 79 ef ac 91 44 ...~...r..xy...D 0040 9e 1e a9 eb 67 8b 91 ac ac 67 99 ec 00 71 bf 4e ....g....g...q.N 0050 24 c9 b0 b8 2e 30 8a e3 1e 59 9b a4 81 1b 2c e7 $....0...Y....,. 0060 49 8b 70 4c 35 e0 9a fc 43 6e 4b 82 ed 08 11 a4 I.pL5...CnK..... 0070 1f f7 a9 e4 06 1c c7 05 08 1e 1d 43 af c4 15 56 ...........C...V 0080 6c 85 ed d8 7c c7 l...|. Frame 24 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 9, 2010 14:48:15.500476000 [Time delta from previous captured frame: 0.000017000 seconds] [Time delta from previous displayed frame: 0.000017000 seconds] [Time since reference or first frame: 13.148293000 seconds] Frame Number: 24 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x002a (42) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b6b [correct] [Good: True] [Bad : False] Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload ESP SPI: 0x1b4e58ae ESP Sequence: 1 0000 00 0c 29 51 89 a7 00 0c 29 48 f8 2f 08 00 45 00 ..)Q....)H./..E. 0010 00 78 00 2a 00 00 f0 32 8b 6b a5 e3 f9 7c a5 e3 .x.*...2.k...|.. 0020 f9 7a 1b 4e 58 ae 00 00 00 01 a1 b1 65 df 9f b9 .z.NX.......e... 0030 18 8a a8 7e 90 ab 9b 72 ef f0 78 79 ef ac 91 44 ...~...r..xy...D 0040 9e 1e a9 eb 67 8b 91 ac ac 67 99 ec 00 71 bf 4e ....g....g...q.N 0050 24 c9 b0 b8 2e 30 8a e3 1e 59 9b a4 81 1b 2c e7 $....0...Y....,. 0060 49 8b 70 4c 35 e0 9a fc 43 6e 4b 82 ed 08 11 a4 I.pL5...CnK..... 0070 1f f7 a9 e4 06 1c c7 05 08 1e 1d 43 af c4 15 56 ...........C...V 0080 6c 85 ed d8 7c c7 l...|. Frame 25 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 9, 2010 14:48:15.517116000 [Time delta from previous captured frame: 0.016640000 seconds] [Time delta from previous displayed frame: 0.016640000 seconds] [Time since reference or first frame: 13.164933000 seconds] Frame Number: 25 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0004 (4) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c91 [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload ESP SPI: 0x839c9f6f ESP Sequence: 1 0000 00 0c 29 48 f8 2f 00 0c 29 51 89 a7 08 00 45 00 ..)H./..)Q....E. 0010 00 78 00 04 00 00 ff 32 7c 91 a5 e3 f9 7a a5 e3 .x.....2|....z.. 0020 f9 7c 83 9c 9f 6f 00 00 00 01 73 80 39 5d 1e a5 .|...o....s.9].. 0030 19 6f 9d 3f ea 11 e2 6d 56 12 0d 83 45 7a 08 ce .o.?...mV...Ez.. 0040 83 b6 49 b6 a5 c0 68 d0 fc ea ad 2f 15 85 6e c1 ..I...h..../..n. 0050 d5 a8 58 de 5a 20 d5 50 d1 18 2d 35 59 6b 0b d0 ..X.Z .P..-5Yk.. 0060 96 a8 d7 d3 ba 08 23 94 bd 4f d4 4f 19 54 d5 b7 ......#..O.O.T.. 0070 6d 66 24 a9 9e 8d 81 ae 5b 66 ac 59 d5 5e a8 18 mf$.....[f.Y.^.. 0080 7d 13 c1 ee 7d cd }...}. Frame 26 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 9, 2010 14:48:15.517136000 [Time delta from previous captured frame: 0.000020000 seconds] [Time delta from previous displayed frame: 0.000020000 seconds] [Time since reference or first frame: 13.164953000 seconds] Frame Number: 26 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0004 (4) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c91 [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload ESP SPI: 0x839c9f6f ESP Sequence: 1 0000 00 0c 29 48 f8 2f 00 0c 29 51 89 a7 08 00 45 00 ..)H./..)Q....E. 0010 00 78 00 04 00 00 ff 32 7c 91 a5 e3 f9 7a a5 e3 .x.....2|....z.. 0020 f9 7c 83 9c 9f 6f 00 00 00 01 73 80 39 5d 1e a5 .|...o....s.9].. 0030 19 6f 9d 3f ea 11 e2 6d 56 12 0d 83 45 7a 08 ce .o.?...mV...Ez.. 0040 83 b6 49 b6 a5 c0 68 d0 fc ea ad 2f 15 85 6e c1 ..I...h..../..n. 0050 d5 a8 58 de 5a 20 d5 50 d1 18 2d 35 59 6b 0b d0 ..X.Z .P..-5Yk.. 0060 96 a8 d7 d3 ba 08 23 94 bd 4f d4 4f 19 54 d5 b7 ......#..O.O.T.. 0070 6d 66 24 a9 9e 8d 81 ae 5b 66 ac 59 d5 5e a8 18 mf$.....[f.Y.^.. 0080 7d 13 c1 ee 7d cd }...}. Frame 27 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 9, 2010 14:48:16.206877000 [Time delta from previous captured frame: 0.689741000 seconds] [Time delta from previous displayed frame: 0.689741000 seconds] [Time since reference or first frame: 13.854694000 seconds] Frame Number: 27 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x002b (43) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b6a [correct] [Good: True] [Bad : False] Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload ESP SPI: 0x1b4e58ae ESP Sequence: 2 0000 00 0c 29 51 89 a7 00 0c 29 48 f8 2f 08 00 45 00 ..)Q....)H./..E. 0010 00 78 00 2b 00 00 f0 32 8b 6a a5 e3 f9 7c a5 e3 .x.+...2.j...|.. 0020 f9 7a 1b 4e 58 ae 00 00 00 02 c6 2b 4b 09 d3 bd .z.NX......+K... 0030 76 b8 b9 2d 0d a7 93 8a 25 da 5c 08 eb 7a 35 5f v..-....%.\..z5_ 0040 52 af 17 2b 2d b7 16 16 69 5e 5a 13 89 66 72 47 R..+-...i^Z..frG 0050 a1 64 6b 79 d6 5c 7e ec 9f 26 27 30 93 36 b2 95 .dky.\~..&'0.6.. 0060 7a c1 af b2 ed 11 e0 03 e6 a2 fc 28 be d7 5a e3 z..........(..Z. 0070 6f f2 9e c0 51 1c 65 61 7f c0 9a df 0b fd 42 b4 o...Q.ea......B. 0080 17 d5 7b 01 22 05 ..{.". Frame 28 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 9, 2010 14:48:16.206891000 [Time delta from previous captured frame: 0.000014000 seconds] [Time delta from previous displayed frame: 0.000014000 seconds] [Time since reference or first frame: 13.854708000 seconds] Frame Number: 28 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Destination: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x002b (43) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b6a [correct] [Good: True] [Bad : False] Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload ESP SPI: 0x1b4e58ae ESP Sequence: 2 0000 00 0c 29 51 89 a7 00 0c 29 48 f8 2f 08 00 45 00 ..)Q....)H./..E. 0010 00 78 00 2b 00 00 f0 32 8b 6a a5 e3 f9 7c a5 e3 .x.+...2.j...|.. 0020 f9 7a 1b 4e 58 ae 00 00 00 02 c6 2b 4b 09 d3 bd .z.NX......+K... 0030 76 b8 b9 2d 0d a7 93 8a 25 da 5c 08 eb 7a 35 5f v..-....%.\..z5_ 0040 52 af 17 2b 2d b7 16 16 69 5e 5a 13 89 66 72 47 R..+-...i^Z..frG 0050 a1 64 6b 79 d6 5c 7e ec 9f 26 27 30 93 36 b2 95 .dky.\~..&'0.6.. 0060 7a c1 af b2 ed 11 e0 03 e6 a2 fc 28 be d7 5a e3 z..........(..Z. 0070 6f f2 9e c0 51 1c 65 61 7f c0 9a df 0b fd 42 b4 o...Q.ea......B. 0080 17 d5 7b 01 22 05 ..{.". Frame 29 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 9, 2010 14:48:16.207869000 [Time delta from previous captured frame: 0.000978000 seconds] [Time delta from previous displayed frame: 0.000978000 seconds] [Time since reference or first frame: 13.855686000 seconds] Frame Number: 29 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0005 (5) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c90 [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload ESP SPI: 0x839c9f6f ESP Sequence: 2 0000 00 0c 29 48 f8 2f 00 0c 29 51 89 a7 08 00 45 00 ..)H./..)Q....E. 0010 00 78 00 05 00 00 ff 32 7c 90 a5 e3 f9 7a a5 e3 .x.....2|....z.. 0020 f9 7c 83 9c 9f 6f 00 00 00 02 72 35 a1 62 40 f7 .|...o....r5.b@. 0030 5f 72 f3 7d 45 91 9d 8f ff f2 df 71 bf c6 8b fe _r.}E......q.... 0040 b1 3b 05 c6 28 f5 84 cc e5 2c 46 a4 f5 a5 b7 8a .;..(....,F..... 0050 99 bc 04 91 42 9f 02 cf e8 42 9d 3d 63 43 dc e1 ....B....B.=cC.. 0060 c6 ef e7 57 76 1b 9d c0 7e 25 29 44 1b db 16 31 ...Wv...~%)D...1 0070 65 28 87 97 90 95 64 1a b6 ef 69 37 5d d0 fd b3 e(....d...i7]... 0080 83 3e ad 5d 27 08 .>.]'. Frame 30 (134 bytes on wire, 134 bytes captured) Arrival Time: Aug 9, 2010 14:48:16.207883000 [Time delta from previous captured frame: 0.000014000 seconds] [Time delta from previous displayed frame: 0.000014000 seconds] [Time since reference or first frame: 13.855700000 seconds] Frame Number: 30 Frame Length: 134 bytes Capture Length: 134 bytes [Frame is marked: False] [Protocols in frame: eth:ip:esp] Ethernet II, Src: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) Address: 00:0c:29:51:89:a7 (00:0c:29:51:89:a7) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.122 (165.227.249.122), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0005 (5) Flags: 0x00 0.. = Reserved bit: Not Set .0. = Don't fragment: Not Set ..0 = More fragments: Not Set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7c90 [correct] [Good: True] [Bad : False] Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload ESP SPI: 0x839c9f6f ESP Sequence: 2 0000 00 0c 29 48 f8 2f 00 0c 29 51 89 a7 08 00 45 00 ..)H./..)Q....E. 0010 00 78 00 05 00 00 ff 32 7c 90 a5 e3 f9 7a a5 e3 .x.....2|....z.. 0020 f9 7c 83 9c 9f 6f 00 00 00 02 72 35 a1 62 40 f7 .|...o....r5.b@. 0030 5f 72 f3 7d 45 91 9d 8f ff f2 df 71 bf c6 8b fe _r.}E......q.... 0040 b1 3b 05 c6 28 f5 84 cc e5 2c 46 a4 f5 a5 b7 8a .;..(....,F..... 0050 99 bc 04 91 42 9f 02 cf e8 42 9d 3d 63 43 dc e1 ....B....B.=cC.. 0060 c6 ef e7 57 76 1b 9d c0 7e 25 29 44 1b db 16 31 ...Wv...~%)D...1 0070 65 28 87 97 90 95 64 1a b6 ef 69 37 5d d0 fd b3 e(....d...i7]... 0080 83 3e ad 5d 27 08 .>.]'.