Frame 1 (266 bytes on wire, 266 bytes captured) Arrival Time: Dec 13, 2006 12:05:03.300695000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 266 bytes Capture Length: 266 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Destination: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.123 (165.227.249.123) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x010b (267) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a27 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.123 (165.227.249.123) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0x56ab [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9004FDBE7356719D Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 14 6c 8c 6d 16 00 0c 29 f4 af 90 08 00 45 00 ..l.m...).....E. 0010 00 fc 01 0b 00 00 40 11 3a 27 a5 e3 f9 7c a5 e3 ......@.:'...|.. 0020 f9 7b 01 f4 01 f4 00 e8 56 ab 90 04 fd be 73 56 .{......V.....sV 0030 71 9d 00 00 00 00 00 00 00 00 01 10 02 00 00 00 q............... 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b .....N.$...GYL(K 0090 21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e !;....'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 .o,....R.V Frame 2 (146 bytes on wire, 146 bytes captured) Arrival Time: Dec 13, 2006 12:05:03.514013000 Time delta from previous packet: 0.213318000 seconds Time since reference or first frame: 0.213318000 seconds Frame Number: 2 Packet Length: 146 bytes Capture Length: 146 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.123 (165.227.249.123), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 132 Identification: 0x006b (107) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb3e [correct] Good: True Bad : False Source: 165.227.249.123 (165.227.249.123) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 112 Checksum: 0x0c09 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9004FDBE7356719D Responder cookie: 0x1CA5005D69DBC134 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 104 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 f4 af 90 00 14 6c 8c 6d 16 08 00 45 00 ..).....l.m...E. 0010 00 84 00 6b 40 00 40 11 fb 3e a5 e3 f9 7b a5 e3 ...k@.@..>...{.. 0020 f9 7c 01 f4 01 f4 00 70 0c 09 90 04 fd be 73 56 .|.....p......sV 0030 71 9d 1c a5 00 5d 69 db c1 34 01 10 02 00 00 00 q....]i..4...... 0040 00 00 00 00 00 68 0d 00 00 38 00 00 00 01 00 00 .....h...8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 00 00 ............p... 0080 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 0090 8b 35 .5 Frame 3 (222 bytes on wire, 222 bytes captured) Arrival Time: Dec 13, 2006 12:05:03.514015000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.213320000 seconds Frame Number: 3 Packet Length: 222 bytes Capture Length: 222 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Destination: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.123 (165.227.249.123) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x010c (268) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a52 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.123 (165.227.249.123) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0xdf9c [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9004FDBE7356719D Responder cookie: 0x1CA5005D69DBC134 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 14 6c 8c 6d 16 00 0c 29 f4 af 90 08 00 45 00 ..l.m...).....E. 0010 00 d0 01 0c 00 00 40 11 3a 52 a5 e3 f9 7c a5 e3 ......@.:R...|.. 0020 f9 7b 01 f4 01 f4 00 bc df 9c 90 04 fd be 73 56 .{............sV 0030 71 9d 1c a5 00 5d 69 db c1 34 04 10 02 00 00 00 q....]i..4...... 0040 00 00 00 00 00 b4 0a 00 00 84 8d a8 8f a7 84 b6 ................ 0050 ef 24 f1 cc 71 2f 69 77 4d ae 33 e3 00 d6 ef f5 .$..q/iwM.3..... 0060 c7 79 f2 cf 2e 89 51 ac 32 0e 64 f5 1a 12 ad 1b .y....Q.2.d..... 0070 89 89 f2 6d 02 d8 64 18 38 43 6c 82 57 f6 ce ca ...m..d.8Cl.W... 0080 e1 ae b0 54 b8 bf cd f0 a1 d1 d6 cd e0 bb dc cd ...T............ 0090 8c a6 2c ab 10 8b 61 33 6e 96 95 66 8f e9 85 37 ..,...a3n..f...7 00a0 51 6e ad ba ba e6 57 48 b7 11 c1 d6 c8 3c 1b 5b Qn....WH.....<.[ 00b0 15 e0 42 7c c9 c9 50 8a 82 57 6c 02 32 4c cc 81 ..B|..P..Wl.2L.. 00c0 90 4f 4b 0d 6b 88 13 9d 01 6a 00 00 00 14 86 15 .OK.k....j...... 00d0 f7 d7 fc 05 6d 28 a5 ff 4c cb 00 fb 61 65 ....m(..L...ae Frame 4 (242 bytes on wire, 242 bytes captured) Arrival Time: Dec 13, 2006 12:05:03.733336000 Time delta from previous packet: 0.219321000 seconds Time since reference or first frame: 0.432641000 seconds Frame Number: 4 Packet Length: 242 bytes Capture Length: 242 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.123 (165.227.249.123), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 228 Identification: 0x006c (108) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfadd [correct] Good: True Bad : False Source: 165.227.249.123 (165.227.249.123) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 208 Checksum: 0xf2d2 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9004FDBE7356719D Responder cookie: 0x1CA5005D69DBC134 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 200 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Vendor ID (13) Length: 20 Nonce Data Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: unknown vendor ID: 0x7003CBC1097DBE9C2600BA6983BC8B35 0000 00 0c 29 f4 af 90 00 14 6c 8c 6d 16 08 00 45 00 ..).....l.m...E. 0010 00 e4 00 6c 40 00 40 11 fa dd a5 e3 f9 7b a5 e3 ...l@.@......{.. 0020 f9 7c 01 f4 01 f4 00 d0 f2 d2 90 04 fd be 73 56 .|............sV 0030 71 9d 1c a5 00 5d 69 db c1 34 04 10 02 00 00 00 q....]i..4...... 0040 00 00 00 00 00 c8 0a 00 00 84 cf 1c f5 8a cb d2 ................ 0050 b7 0e 8a e8 08 ce 96 52 ca 41 a2 db 1e 65 7e 1f .......R.A...e~. 0060 56 40 4a 56 1a c2 f3 40 03 6b 9a 65 9d 0a a3 18 V@JV...@.k.e.... 0070 1e 66 ce 8a 13 08 16 4f 32 dc 8a f7 10 2b 2b 50 .f.....O2....++P 0080 c2 86 ef 35 dd 6c 81 bf 3f 47 05 75 53 32 20 97 ...5.l..?G.uS2 . 0090 8c 7e 97 e1 96 4c 23 1b c3 5e 91 a4 5e c9 a9 f0 .~...L#..^..^... 00a0 df b4 44 bc 27 56 97 c2 08 21 f2 df c1 44 e8 99 ..D.'V...!...D.. 00b0 72 a5 7f 59 d6 82 ef 85 02 f4 e3 9a d0 58 29 e8 r..Y.........X). 00c0 46 48 fc 34 d0 17 4c 0e 38 89 0d 00 00 14 d6 de FH.4..L.8....... 00d0 89 b8 0a a1 49 72 8a 70 bb 3d 98 74 94 c2 00 00 ....Ir.p.=.t.... 00e0 00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc ..p....}..&..i.. 00f0 8b 35 .5 Frame 5 (118 bytes on wire, 118 bytes captured) Arrival Time: Dec 13, 2006 12:05:03.733338000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 0.432643000 seconds Frame Number: 5 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Destination: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.123 (165.227.249.123) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x010d (269) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ab9 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.123 (165.227.249.123) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x1879 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9004FDBE7356719D Responder cookie: 0x1CA5005D69DBC134 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 14 6c 8c 6d 16 00 0c 29 f4 af 90 08 00 45 00 ..l.m...).....E. 0010 00 68 01 0d 00 00 40 11 3a b9 a5 e3 f9 7c a5 e3 .h....@.:....|.. 0020 f9 7b 01 f4 01 f4 00 54 18 79 90 04 fd be 73 56 .{.....T.y....sV 0030 71 9d 1c a5 00 5d 69 db c1 34 05 10 02 01 00 00 q....]i..4...... 0040 00 00 00 00 00 4c 45 fd 90 9d f1 b8 0a 39 ba d1 .....LE......9.. 0050 8d 28 f9 80 0d d6 38 1e 9e e2 4b e9 19 c0 ca 06 .(....8...K..... 0060 a5 10 f0 99 1a a7 a5 10 24 9a 18 e8 05 54 9b 22 ........$....T." 0070 cb 27 06 76 b4 76 .'.v.v Frame 6 (118 bytes on wire, 118 bytes captured) Arrival Time: Dec 13, 2006 12:05:04.079251000 Time delta from previous packet: 0.345913000 seconds Time since reference or first frame: 0.778556000 seconds Frame Number: 6 Packet Length: 118 bytes Capture Length: 118 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.123 (165.227.249.123), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x006d (109) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb58 [correct] Good: True Bad : False Source: 165.227.249.123 (165.227.249.123) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x842f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9004FDBE7356719D Responder cookie: 0x1CA5005D69DBC134 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 f4 af 90 00 14 6c 8c 6d 16 08 00 45 00 ..).....l.m...E. 0010 00 68 00 6d 40 00 40 11 fb 58 a5 e3 f9 7b a5 e3 .h.m@.@..X...{.. 0020 f9 7c 01 f4 01 f4 00 54 84 2f 90 04 fd be 73 56 .|.....T./....sV 0030 71 9d 1c a5 00 5d 69 db c1 34 05 10 02 01 00 00 q....]i..4...... 0040 00 00 00 00 00 4c a2 ff 02 ab 06 de 1b fc 01 b3 .....L.......... 0050 49 7c 85 ef a4 7b 48 9c 3c 78 cd 1a d4 16 e8 86 I|...{H.... 0140 34 4b f9 b3 73 e3 3d 1a 5c 7a a3 88 b0 71 e3 35 4K..s.=.\z...q.5 0150 14 cf 03 2c 88 22 ...,." Frame 8 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 13, 2006 12:05:04.121114000 Time delta from previous packet: 0.041861000 seconds Time since reference or first frame: 0.820419000 seconds Frame Number: 8 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.123 (165.227.249.123), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x006e (110) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb47 [correct] Good: True Bad : False Source: 165.227.249.123 (165.227.249.123) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0x2397 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9004FDBE7356719D Responder cookie: 0x1CA5005D69DBC134 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xCFFCC053 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 f4 af 90 00 14 6c 8c 6d 16 08 00 45 00 ..).....l.m...E. 0010 00 78 00 6e 40 00 40 11 fb 47 a5 e3 f9 7b a5 e3 .x.n@.@..G...{.. 0020 f9 7c 01 f4 01 f4 00 64 23 97 90 04 fd be 73 56 .|.....d#.....sV 0030 71 9d 1c a5 00 5d 69 db c1 34 08 10 05 01 cf fc q....]i..4...... 0040 c0 53 00 00 00 5c 29 28 25 c5 3f ae d6 3e d2 7e .S...\)(%.?..>.~ 0050 c0 06 d2 c0 98 97 83 fa 75 86 e1 39 a6 b7 3d 3b ........u..9..=; 0060 68 58 b8 84 64 d9 f2 e8 82 24 88 c7 e7 eb 48 df hX..d....$....H. 0070 8f 44 da 57 55 ac d1 14 7c 1f a9 50 d1 a2 ad b5 .D.WU...|..P.... 0080 d7 83 d2 96 8b 62 .....b Frame 9 (342 bytes on wire, 342 bytes captured) Arrival Time: Dec 13, 2006 12:05:04.575623000 Time delta from previous packet: 0.454509000 seconds Time since reference or first frame: 1.274928000 seconds Frame Number: 9 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Destination: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.123 (165.227.249.123) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x010f (271) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x39d7 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.123 (165.227.249.123) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x49d1 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9004FDBE7356719D Responder cookie: 0x1CA5005D69DBC134 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xA8F1B1CE Length: 300 Encrypted payload (272 bytes) 0000 00 14 6c 8c 6d 16 00 0c 29 f4 af 90 08 00 45 00 ..l.m...).....E. 0010 01 48 01 0f 00 00 40 11 39 d7 a5 e3 f9 7c a5 e3 .H....@.9....|.. 0020 f9 7b 01 f4 01 f4 01 34 49 d1 90 04 fd be 73 56 .{.....4I.....sV 0030 71 9d 1c a5 00 5d 69 db c1 34 08 10 20 01 a8 f1 q....]i..4.. ... 0040 b1 ce 00 00 01 2c f3 7b ab 0c 12 e2 ae 25 38 84 .....,.{.....%8. 0050 4d 33 05 57 a6 9e 57 63 58 bb 5d 78 ac 16 5d d7 M3.W..WcX.]x..]. 0060 5e 29 57 18 da e8 4c 34 5a 75 d0 84 cf 45 ba 24 ^)W...L4Zu...E.$ 0070 a8 a3 cb 53 0f 28 f9 13 a6 73 99 5b 57 65 d2 63 ...S.(...s.[We.c 0080 64 d2 e3 fa 94 66 b4 d3 0d 68 c3 9c 75 de 85 31 d....f...h..u..1 0090 27 64 84 3a 9d a6 c1 2b d6 a0 80 ef b3 84 74 4e 'd.:...+......tN 00a0 49 cd 5f 39 3c 21 cc 9e 39 b0 44 1b f8 2a 6a 21 I._9... 0140 34 4b f9 b3 73 e3 3d 1a 5c 7a a3 88 b0 71 e3 35 4K..s.=.\z...q.5 0150 14 cf 03 2c 88 22 ...,." Frame 10 (342 bytes on wire, 342 bytes captured) Arrival Time: Dec 13, 2006 12:05:04.618345000 Time delta from previous packet: 0.042722000 seconds Time since reference or first frame: 1.317650000 seconds Frame Number: 10 Packet Length: 342 bytes Capture Length: 342 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.123 (165.227.249.123), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x006f (111) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa76 [correct] Good: True Bad : False Source: 165.227.249.123 (165.227.249.123) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x4597 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9004FDBE7356719D Responder cookie: 0x1CA5005D69DBC134 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xA8F1B1CE Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 f4 af 90 00 14 6c 8c 6d 16 08 00 45 00 ..).....l.m...E. 0010 01 48 00 6f 40 00 40 11 fa 76 a5 e3 f9 7b a5 e3 .H.o@.@..v...{.. 0020 f9 7c 01 f4 01 f4 01 34 45 97 90 04 fd be 73 56 .|.....4E.....sV 0030 71 9d 1c a5 00 5d 69 db c1 34 08 10 20 01 a8 f1 q....]i..4.. ... 0040 b1 ce 00 00 01 2c c5 03 8b 19 1d 22 97 dc 77 74 .....,....."..wt 0050 7c a1 b8 57 15 22 98 0a a2 02 c3 1e bb d2 a2 a9 |..W.".......... 0060 4e 15 8e 52 6d aa 7d 73 c1 f4 97 5a 57 11 68 36 N..Rm.}s...ZW.h6 0070 7c 03 34 38 f1 18 23 6a dc fa 46 bd b8 a6 c8 a7 |.48..#j..F..... 0080 cd 60 e2 2c 77 35 2c 69 e2 89 a1 a3 f1 e0 71 66 .`.,w5,i......qf 0090 f5 0c f6 8e b7 6d e1 aa e0 7a 65 ab c8 1e c6 c5 .....m...ze..... 00a0 43 16 1f dd 40 aa 68 f4 06 80 8e 66 7e 4a b3 80 C...@.h....f~J.. 00b0 b9 7e d4 dd 1e 1b eb 47 d5 f5 8f 89 60 78 4a 98 .~.....G....`xJ. 00c0 af ba 86 3b 99 13 01 0a f4 3b 1a 26 c9 98 7a 46 ...;.....;.&..zF 00d0 23 f9 b6 0b 62 49 fe 6d ae bd e8 8c 98 26 25 8b #...bI.m.....&%. 00e0 50 99 87 0d 5d b1 00 8d 7a 5e 41 22 7d 3b ea 83 P...]...z^A"};.. 00f0 ea 72 02 d2 14 41 ec 1e b3 b7 0d da e7 b3 0d 0b .r...A.......... 0100 fc 11 58 a7 62 15 26 67 71 a4 3c 31 c3 aa dc 6a ..X.b.&gq.<1...j 0110 9a 4e 1b 02 f9 0f d3 35 e4 a0 9c d2 4c 40 e7 2a .N.....5....L@.* 0120 ea 9d c5 32 cd b9 6b d5 b8 49 bb d2 92 6a 87 b2 ...2..k..I...j.. 0130 ac 3c 26 93 e1 1e 2f 1f cd 0d ee 40 c2 ce bd 96 .<&.../....@.... 0140 61 fb 7c fd b3 f8 0e 71 74 9d 10 ed e9 98 ff d3 a.|....qt....... 0150 84 87 7a 15 04 44 ..z..D Frame 11 (102 bytes on wire, 102 bytes captured) Arrival Time: Dec 13, 2006 12:05:04.618347000 Time delta from previous packet: 0.000002000 seconds Time since reference or first frame: 1.317652000 seconds Frame Number: 11 Packet Length: 102 bytes Capture Length: 102 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Destination: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.123 (165.227.249.123) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0110 (272) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ac6 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.123 (165.227.249.123) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x42ff [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0x9004FDBE7356719D Responder cookie: 0x1CA5005D69DBC134 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0xA8F1B1CE Length: 60 Encrypted payload (32 bytes) 0000 00 14 6c 8c 6d 16 00 0c 29 f4 af 90 08 00 45 00 ..l.m...).....E. 0010 00 58 01 10 00 00 40 11 3a c6 a5 e3 f9 7c a5 e3 .X....@.:....|.. 0020 f9 7b 01 f4 01 f4 00 44 42 ff 90 04 fd be 73 56 .{.....DB.....sV 0030 71 9d 1c a5 00 5d 69 db c1 34 08 10 20 01 a8 f1 q....]i..4.. ... 0040 b1 ce 00 00 00 3c 61 81 46 22 43 97 67 63 76 df ..... 0080 0a 08 6e df a5 4f ..n..O Frame 17 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 13, 2006 12:05:09.744341000 Time delta from previous packet: 0.003107000 seconds Time since reference or first frame: 6.443646000 seconds Frame Number: 17 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.123 (165.227.249.123), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0xb492 (46226) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x8702 [correct] Good: True Bad : False Source: 165.227.249.123 (165.227.249.123) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x889ea4f3 Sequence: 2 Data (92 bytes) 0000 00 0c 29 f4 af 90 00 14 6c 8c 6d 16 08 00 45 00 ..).....l.m...E. 0010 00 78 b4 92 00 00 40 32 87 02 a5 e3 f9 7b a5 e3 .x....@2.....{.. 0020 f9 7c 88 9e a4 f3 00 00 00 02 dc 56 22 ba 6f ed .|.........V".o. 0030 90 5c 5f 4b 50 62 f8 61 52 2d 7f db 78 e7 3a 44 .\_KPb.aR-..x.:D 0040 29 42 a1 ac eb bd 01 60 1f ef 3b 3f e3 10 51 b9 )B.....`..;?..Q. 0050 34 0f 4e 1d c0 c6 f3 9a 7c 7a 22 33 07 84 88 c2 4.N.....|z"3.... 0060 75 cf 66 f8 bb c9 37 14 2f 38 84 5a 05 f3 80 f5 u.f...7./8.Z.... 0070 98 fc 48 11 e8 30 c6 94 eb 45 3f 1b 03 6f 6e 90 ..H..0...E?..on. 0080 57 41 58 40 82 f3 WAX@.. Frame 18 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 13, 2006 12:05:10.740120000 Time delta from previous packet: 0.995779000 seconds Time since reference or first frame: 7.439425000 seconds Frame Number: 18 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Destination: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.123 (165.227.249.123) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x002d (45) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b67 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.123 (165.227.249.123) Encapsulating Security Payload SPI: 0x097a7b6c Sequence: 5 Data (92 bytes) 0000 00 14 6c 8c 6d 16 00 0c 29 f4 af 90 08 00 45 00 ..l.m...).....E. 0010 00 78 00 2d 00 00 f0 32 8b 67 a5 e3 f9 7c a5 e3 .x.-...2.g...|.. 0020 f9 7b 09 7a 7b 6c 00 00 00 05 20 b8 64 d3 ce 0c .{.z{l.... .d... 0030 8a f1 a8 89 04 7d 04 50 8f a3 c2 fb 0e 8c 1a 42 .....}.P.......B 0040 60 d7 05 c8 a0 9d e9 10 d0 86 1d 3f c4 32 8e 6b `..........?.2.k 0050 7f be c3 54 2f 58 7a 38 38 00 c8 21 bd 55 ce bb ...T/Xz88..!.U.. 0060 30 99 76 ca a8 86 5d ed 88 ef 21 5a d2 36 6e 76 0.v...]...!Z.6nv 0070 0c 2a 8b 98 1b 93 88 2d 9a 4f fe 2b 1e 5c d8 cf .*.....-.O.+.\.. 0080 3e be 91 ea f1 c4 >..... Frame 19 (134 bytes on wire, 134 bytes captured) Arrival Time: Dec 13, 2006 12:05:10.741690000 Time delta from previous packet: 0.001570000 seconds Time since reference or first frame: 7.440995000 seconds Frame Number: 19 Packet Length: 134 bytes Capture Length: 134 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:14:6c:8c:6d:16 (00:14:6c:8c:6d:16) Type: IP (0x0800) Internet Protocol, Src: 165.227.249.123 (165.227.249.123), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0f48 (3912) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x2c4d [correct] Good: True Bad : False Source: 165.227.249.123 (165.227.249.123) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x889ea4f3 Sequence: 3 Data (92 bytes) 0000 00 0c 29 f4 af 90 00 14 6c 8c 6d 16 08 00 45 00 ..).....l.m...E. 0010 00 78 0f 48 00 00 40 32 2c 4d a5 e3 f9 7b a5 e3 .x.H..@2,M...{.. 0020 f9 7c 88 9e a4 f3 00 00 00 03 dc 56 22 ba 6f ed .|.........V".o. 0030 90 5c 5f 4b 50 62 f8 61 52 2d ed 47 c4 aa a4 8b .\_KPb.aR-.G.... 0040 9a dd bf 96 26 51 bf 68 61 09 a8 a2 6e 97 24 27 ....&Q.ha...n.$' 0050 ff f6 be 89 23 e3 2f 1d a0 5c d2 c9 0f ab 7f 05 ....#./..\...... 0060 c2 82 4a 55 68 20 51 4b 4b 5e f2 cf 80 df 9c 37 ..JUh QKK^.....7 0070 22 5c aa 71 0a 1a d6 bf c2 e6 12 f9 95 32 5a 8d "\.q.........2Z. 0080 ee 92 1b 8f b1 dc ......