Frame 1 (326 bytes on wire, 326 bytes captured)
    Arrival Time: Aug 29, 2009 12:01:26.516854000
    [Time delta from previous captured frame: 0.000000000 seconds]
    [Time delta from previous displayed frame: 0.000000000 seconds]
    [Time since reference or first frame: 0.000000000 seconds]
    Frame Number: 1
    Frame Length: 326 bytes
    Capture Length: 326 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
    Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.131 (165.227.249.131)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 312
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfaed [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.131 (165.227.249.131)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 292
    Checksum: 0xb057 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 9290A63FB921BFA2
    Responder cookie: 0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 284
    Security Association payload
        Next payload: Vendor ID (13)
        Payload length: 136
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 0
            Next payload: NONE (0)
            Payload length: 124
            Proposal number: 0
            Protocol ID: ISAKMP (1)
            SPI Size: 8
            Proposal transforms: 3
            SPI: 0x9290A63FB921BFA2
            Transform payload # 0
                Next payload: Transform (3)
                Payload length: 36
                Transform number: 0
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
            Transform payload # 1
                Next payload: Transform (3)
                Payload length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (192)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
            Transform payload # 2
                Next payload: NONE (0)
                Payload length: 36
                Transform number: 2
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (256)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
    Vendor ID: F758F22668750F03B08DF6EBE1D00403
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: F758F22668750F03B08DF6EBE1D00403
    Vendor ID: draft-ietf-ipsec-nat-t-ike-02
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02
    Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n
    Vendor ID: draft-ietf-ipsec-nat-t-ike-03
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-03
    Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE
    Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)
        Next payload: NONE (0)
        Payload length: 20
        Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)

0000  00 1e 2a d4 6e b1 00 0c 29 48 f8 2f 08 00 45 00   ..*.n...)H./..E.
0010  01 38 00 00 40 00 40 11 fa ed a5 e3 f9 7c a5 e3   .8..@.@......|..
0020  f9 83 01 f4 01 f4 01 24 b0 57 92 90 a6 3f b9 21   .......$.W...?.!
0030  bf a2 00 00 00 00 00 00 00 00 01 10 02 00 00 00   ................
0040  00 00 00 00 01 1c 0d 00 00 88 00 00 00 01 00 00   ................
0050  00 01 00 00 00 7c 00 01 08 03 92 90 a6 3f b9 21   .....|.......?.!
0060  bf a2 03 00 00 24 00 01 00 00 80 01 00 07 80 0e   .....$..........
0070  00 80 80 02 00 02 80 03 00 01 80 04 00 02 80 0b   ................
0080  00 01 80 0c 70 80 03 00 00 24 01 01 00 00 80 01   ....p....$......
0090  00 07 80 0e 00 c0 80 02 00 02 80 03 00 01 80 04   ................
00a0  00 02 80 0b 00 01 80 0c 70 80 00 00 00 24 02 01   ........p....$..
00b0  00 00 80 01 00 07 80 0e 01 00 80 02 00 02 80 03   ................
00c0  00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00   ............p...
00d0  00 14 f7 58 f2 26 68 75 0f 03 b0 8d f6 eb e1 d0   ...X.&hu........
00e0  04 03 0d 00 00 14 cd 60 46 43 35 df 21 f8 7c fd   .......`FC5.!.|.
00f0  b2 fc 68 b6 a4 48 0d 00 00 14 90 cb 80 91 3e bb   ..h..H........>.
0100  69 6e 08 63 81 b5 ec 42 7b 1f 0d 00 00 14 7d 94   in.c...B{.....}.
0110  19 a6 53 10 ca 6f 2c 17 9d 92 15 52 9d 56 0d 00   ..S..o,....R.V..
0120  00 14 4a 13 1c 81 07 03 58 45 5c 57 28 f2 0e 95   ..J.....XE\W(...
0130  45 2f 00 00 00 14 af ca d7 13 68 a1 f1 c9 6b 86   E/........h...k.
0140  96 fc 77 57 01 00                                 ..wW..

Frame 2 (326 bytes on wire, 326 bytes captured)
    Arrival Time: Aug 29, 2009 12:01:26.516861000
    [Time delta from previous captured frame: 0.000007000 seconds]
    [Time delta from previous displayed frame: 0.000007000 seconds]
    [Time since reference or first frame: 0.000007000 seconds]
    Frame Number: 2
    Frame Length: 326 bytes
    Capture Length: 326 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
    Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.131 (165.227.249.131)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 312
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfaed [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.131 (165.227.249.131)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 292
    Checksum: 0xb057 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 9290A63FB921BFA2
    Responder cookie: 0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 284
    Security Association payload
        Next payload: Vendor ID (13)
        Payload length: 136
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 0
            Next payload: NONE (0)
            Payload length: 124
            Proposal number: 0
            Protocol ID: ISAKMP (1)
            SPI Size: 8
            Proposal transforms: 3
            SPI: 0x9290A63FB921BFA2
            Transform payload # 0
                Next payload: Transform (3)
                Payload length: 36
                Transform number: 0
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
            Transform payload # 1
                Next payload: Transform (3)
                Payload length: 36
                Transform number: 1
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (192)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
            Transform payload # 2
                Next payload: NONE (0)
                Payload length: 36
                Transform number: 2
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (256)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
    Vendor ID: F758F22668750F03B08DF6EBE1D00403
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: F758F22668750F03B08DF6EBE1D00403
    Vendor ID: draft-ietf-ipsec-nat-t-ike-02
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02
    Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n
    Vendor ID: draft-ietf-ipsec-nat-t-ike-03
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-03
    Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE
    Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)
        Next payload: NONE (0)
        Payload length: 20
        Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)

0000  00 1e 2a d4 6e b1 00 0c 29 48 f8 2f 08 00 45 00   ..*.n...)H./..E.
0010  01 38 00 00 40 00 40 11 fa ed a5 e3 f9 7c a5 e3   .8..@.@......|..
0020  f9 83 01 f4 01 f4 01 24 b0 57 92 90 a6 3f b9 21   .......$.W...?.!
0030  bf a2 00 00 00 00 00 00 00 00 01 10 02 00 00 00   ................
0040  00 00 00 00 01 1c 0d 00 00 88 00 00 00 01 00 00   ................
0050  00 01 00 00 00 7c 00 01 08 03 92 90 a6 3f b9 21   .....|.......?.!
0060  bf a2 03 00 00 24 00 01 00 00 80 01 00 07 80 0e   .....$..........
0070  00 80 80 02 00 02 80 03 00 01 80 04 00 02 80 0b   ................
0080  00 01 80 0c 70 80 03 00 00 24 01 01 00 00 80 01   ....p....$......
0090  00 07 80 0e 00 c0 80 02 00 02 80 03 00 01 80 04   ................
00a0  00 02 80 0b 00 01 80 0c 70 80 00 00 00 24 02 01   ........p....$..
00b0  00 00 80 01 00 07 80 0e 01 00 80 02 00 02 80 03   ................
00c0  00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00   ............p...
00d0  00 14 f7 58 f2 26 68 75 0f 03 b0 8d f6 eb e1 d0   ...X.&hu........
00e0  04 03 0d 00 00 14 cd 60 46 43 35 df 21 f8 7c fd   .......`FC5.!.|.
00f0  b2 fc 68 b6 a4 48 0d 00 00 14 90 cb 80 91 3e bb   ..h..H........>.
0100  69 6e 08 63 81 b5 ec 42 7b 1f 0d 00 00 14 7d 94   in.c...B{.....}.
0110  19 a6 53 10 ca 6f 2c 17 9d 92 15 52 9d 56 0d 00   ..S..o,....R.V..
0120  00 14 4a 13 1c 81 07 03 58 45 5c 57 28 f2 0e 95   ..J.....XE\W(...
0130  45 2f 00 00 00 14 af ca d7 13 68 a1 f1 c9 6b 86   E/........h...k.
0140  96 fc 77 57 01 00                                 ..wW..

Frame 3 (174 bytes on wire, 174 bytes captured)
    Arrival Time: Aug 29, 2009 12:01:26.572750000
    [Time delta from previous captured frame: 0.055889000 seconds]
    [Time delta from previous displayed frame: 0.055889000 seconds]
    [Time since reference or first frame: 0.055896000 seconds]
    Frame Number: 3
    Frame Length: 174 bytes
    Capture Length: 174 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
    Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 160
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb85 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.131 (165.227.249.131)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 140
    Checksum: 0x2b4f [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 9290A63FB921BFA2
    Responder cookie: 6F2BCC6906E0FC09
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 132
    Security Association payload
        Next payload: Vendor ID (13)
        Payload length: 64
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 0
            Next payload: NONE (0)
            Payload length: 52
            Proposal number: 0
            Protocol ID: ISAKMP (1)
            SPI Size: 8
            Proposal transforms: 1
            SPI: 0x0000000000000000
            Transform payload # 0
                Next payload: NONE (0)
                Payload length: 36
                Transform number: 0
                Transform ID: KEY_IKE (1)
                Encryption-Algorithm (1): AES-CBC (7)
                Key-Length (14): Key-Length (128)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
    Vendor ID: 3B9031DCE4FCF88B489A923963DD0C49
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: 3B9031DCE4FCF88B489A923963DD0C49
    Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35
        Next payload: NONE (0)
        Payload length: 20
        Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35

0000  00 0c 29 48 f8 2f 00 1e 2a d4 6e b1 08 00 45 00   ..)H./..*.n...E.
0010  00 a0 00 00 40 00 40 11 fb 85 a5 e3 f9 83 a5 e3   ....@.@.........
0020  f9 7c 01 f4 01 f4 00 8c 2b 4f 92 90 a6 3f b9 21   .|......+O...?.!
0030  bf a2 6f 2b cc 69 06 e0 fc 09 01 10 02 00 00 00   ..o+.i..........
0040  00 00 00 00 00 84 0d 00 00 40 00 00 00 01 00 00   .........@......
0050  00 01 00 00 00 34 00 01 08 01 00 00 00 00 00 00   .....4..........
0060  00 00 00 00 00 24 00 01 00 00 80 01 00 07 80 0e   .....$..........
0070  00 80 80 02 00 02 80 03 00 01 80 04 00 02 80 0b   ................
0080  00 01 80 0c 70 80 0d 00 00 14 3b 90 31 dc e4 fc   ....p.....;.1...
0090  f8 8b 48 9a 92 39 63 dd 0c 49 00 00 00 14 70 03   ..H..9c..I....p.
00a0  cb c1 09 7d be 9c 26 00 ba 69 83 bc 8b 35         ...}..&..i...5

Frame 4 (222 bytes on wire, 222 bytes captured)
    Arrival Time: Aug 29, 2009 12:01:26.577021000
    [Time delta from previous captured frame: 0.004271000 seconds]
    [Time delta from previous displayed frame: 0.004271000 seconds]
    [Time since reference or first frame: 0.060167000 seconds]
    Frame Number: 4
    Frame Length: 222 bytes
    Capture Length: 222 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
    Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.131 (165.227.249.131)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 208
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb55 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.131 (165.227.249.131)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 188
    Checksum: 0x317e [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 9290A63FB921BFA2
    Responder cookie: 6F2BCC6906E0FC09
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 180
    Key Exchange payload
        Next payload: Nonce (10)
        Payload length: 132
        Key Exchange Data (128 bytes / 1024 bits)
    Nonce payload
        Next payload: NONE (0)
        Payload length: 20
        Nonce Data

0000  00 1e 2a d4 6e b1 00 0c 29 48 f8 2f 08 00 45 00   ..*.n...)H./..E.
0010  00 d0 00 00 40 00 40 11 fb 55 a5 e3 f9 7c a5 e3   ....@.@..U...|..
0020  f9 83 01 f4 01 f4 00 bc 31 7e 92 90 a6 3f b9 21   ........1~...?.!
0030  bf a2 6f 2b cc 69 06 e0 fc 09 04 10 02 00 00 00   ..o+.i..........
0040  00 00 00 00 00 b4 0a 00 00 84 b8 91 71 bd 07 1f   ............q...
0050  a1 9d b7 af e0 98 e0 e2 7c f7 ad b2 bf 69 95 04   ........|....i..
0060  a0 c9 e7 fb 1d f0 ba ce 3c b3 e9 ab 5a d3 4c 45   ........<...Z.LE
0070  48 45 7a a8 f9 5c 7c 40 0e e6 36 66 16 e5 98 12   HEz..\|@..6f....
0080  88 56 5b d9 5e c8 56 ea 72 07 45 42 d1 59 5f c5   .V[.^.V.r.EB.Y_.
0090  f5 08 b5 5b a1 bc 51 29 22 3f 74 f4 3c d5 0b c0   ...[..Q)"?t.<...
00a0  48 39 26 0f 79 75 a6 78 cb 98 b9 7e 7a ef f2 d5   H9&.yu.x...~z...
00b0  14 f3 66 71 0c 19 bb cd 93 c1 a9 5e 20 6d ec 83   ..fq.......^ m..
00c0  37 4f d3 de b5 43 92 35 e3 51 00 00 00 14 4d ca   7O...C.5.Q....M.
00d0  50 d1 a6 53 09 1d b5 bd 18 68 8e 75 73 4d         P..S.....h.usM

Frame 5 (222 bytes on wire, 222 bytes captured)
    Arrival Time: Aug 29, 2009 12:01:26.577034000
    [Time delta from previous captured frame: 0.000013000 seconds]
    [Time delta from previous displayed frame: 0.000013000 seconds]
    [Time since reference or first frame: 0.060180000 seconds]
    Frame Number: 5
    Frame Length: 222 bytes
    Capture Length: 222 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
    Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.131 (165.227.249.131)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 208
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb55 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.131 (165.227.249.131)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 188
    Checksum: 0x317e [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 9290A63FB921BFA2
    Responder cookie: 6F2BCC6906E0FC09
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 180
    Key Exchange payload
        Next payload: Nonce (10)
        Payload length: 132
        Key Exchange Data (128 bytes / 1024 bits)
    Nonce payload
        Next payload: NONE (0)
        Payload length: 20
        Nonce Data

0000  00 1e 2a d4 6e b1 00 0c 29 48 f8 2f 08 00 45 00   ..*.n...)H./..E.
0010  00 d0 00 00 40 00 40 11 fb 55 a5 e3 f9 7c a5 e3   ....@.@..U...|..
0020  f9 83 01 f4 01 f4 00 bc 31 7e 92 90 a6 3f b9 21   ........1~...?.!
0030  bf a2 6f 2b cc 69 06 e0 fc 09 04 10 02 00 00 00   ..o+.i..........
0040  00 00 00 00 00 b4 0a 00 00 84 b8 91 71 bd 07 1f   ............q...
0050  a1 9d b7 af e0 98 e0 e2 7c f7 ad b2 bf 69 95 04   ........|....i..
0060  a0 c9 e7 fb 1d f0 ba ce 3c b3 e9 ab 5a d3 4c 45   ........<...Z.LE
0070  48 45 7a a8 f9 5c 7c 40 0e e6 36 66 16 e5 98 12   HEz..\|@..6f....
0080  88 56 5b d9 5e c8 56 ea 72 07 45 42 d1 59 5f c5   .V[.^.V.r.EB.Y_.
0090  f5 08 b5 5b a1 bc 51 29 22 3f 74 f4 3c d5 0b c0   ...[..Q)"?t.<...
00a0  48 39 26 0f 79 75 a6 78 cb 98 b9 7e 7a ef f2 d5   H9&.yu.x...~z...
00b0  14 f3 66 71 0c 19 bb cd 93 c1 a9 5e 20 6d ec 83   ..fq.......^ m..
00c0  37 4f d3 de b5 43 92 35 e3 51 00 00 00 14 4d ca   7O...C.5.Q....M.
00d0  50 d1 a6 53 09 1d b5 bd 18 68 8e 75 73 4d         P..S.....h.usM

Frame 6 (242 bytes on wire, 242 bytes captured)
    Arrival Time: Aug 29, 2009 12:01:26.644141000
    [Time delta from previous captured frame: 0.067107000 seconds]
    [Time delta from previous displayed frame: 0.067107000 seconds]
    [Time since reference or first frame: 0.127287000 seconds]
    Frame Number: 6
    Frame Length: 242 bytes
    Capture Length: 242 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
    Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 228
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb41 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.131 (165.227.249.131)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 208
    Checksum: 0x656c [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 9290A63FB921BFA2
    Responder cookie: 6F2BCC6906E0FC09
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 200
    Key Exchange payload
        Next payload: Nonce (10)
        Payload length: 132
        Key Exchange Data (128 bytes / 1024 bits)
    Nonce payload
        Next payload: Vendor ID (13)
        Payload length: 20
        Nonce Data
    Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35
        Next payload: NONE (0)
        Payload length: 20
        Vendor ID: 7003CBC1097DBE9C2600BA6983BC8B35

0000  00 0c 29 48 f8 2f 00 1e 2a d4 6e b1 08 00 45 00   ..)H./..*.n...E.
0010  00 e4 00 00 40 00 40 11 fb 41 a5 e3 f9 83 a5 e3   ....@.@..A......
0020  f9 7c 01 f4 01 f4 00 d0 65 6c 92 90 a6 3f b9 21   .|......el...?.!
0030  bf a2 6f 2b cc 69 06 e0 fc 09 04 10 02 00 00 00   ..o+.i..........
0040  00 00 00 00 00 c8 0a 00 00 84 43 3b 8b 4a 04 aa   ..........C;.J..
0050  0e f3 a7 1c f7 9a 38 ed 9b 43 54 18 a5 0d ed a1   ......8..CT.....
0060  b0 e6 f0 85 fb fb 14 d6 9b 3d b3 47 5e 9c ee e0   .........=.G^...
0070  b1 8d 1f 88 6d 16 09 32 90 a9 d6 44 4b ff 76 be   ....m..2...DK.v.
0080  0d 3c 34 a7 24 e0 37 69 82 c0 a1 c5 be 78 e5 11   .<4.$.7i.....x..
0090  ba db 66 77 39 3f 9d ab c4 41 d3 5e d1 c9 9f 89   ..fw9?...A.^....
00a0  33 23 1c d2 4a b4 f5 b7 b3 0d 47 7a 54 d2 c1 ae   3#..J.....GzT...
00b0  50 ce 06 98 90 a9 50 be 3a 45 28 38 35 80 bf ef   P.....P.:E(85...
00c0  e7 33 42 4d 15 40 1a ee 6a 14 0d 00 00 14 f7 eb   .3BM.@..j.......
00d0  8c cc 2e fa fb 78 38 77 6a 8e 74 d9 34 dc 00 00   .....x8wj.t.4...
00e0  00 14 70 03 cb c1 09 7d be 9c 26 00 ba 69 83 bc   ..p....}..&..i..
00f0  8b 35                                             .5

Frame 7 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Aug 29, 2009 12:01:26.647293000
    [Time delta from previous captured frame: 0.003152000 seconds]
    [Time delta from previous displayed frame: 0.003152000 seconds]
    [Time since reference or first frame: 0.130439000 seconds]
    Frame Number: 7
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
    Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.131 (165.227.249.131)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbad [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.131 (165.227.249.131)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 100
    Checksum: 0xbe16 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 9290A63FB921BFA2
    Responder cookie: 6F2BCC6906E0FC09
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 92
    Encrypted payload (64 bytes)

0000  00 1e 2a d4 6e b1 00 0c 29 48 f8 2f 08 00 45 00   ..*.n...)H./..E.
0010  00 78 00 00 40 00 40 11 fb ad a5 e3 f9 7c a5 e3   .x..@.@......|..
0020  f9 83 01 f4 01 f4 00 64 be 16 92 90 a6 3f b9 21   .......d.....?.!
0030  bf a2 6f 2b cc 69 06 e0 fc 09 05 10 02 01 00 00   ..o+.i..........
0040  00 00 00 00 00 5c 05 33 e1 eb c3 3c e7 35 fa 4c   .....\.3...<.5.L
0050  a8 c1 d8 12 a9 2f 5e 42 4b a9 23 17 de de 10 e3   ...../^BK.#.....
0060  a2 5e 6f 8f 77 23 ce ba e8 dd d2 b1 8e 2a 08 d9   .^o.w#.......*..
0070  92 c1 89 18 ef 41 50 10 9d 30 08 7f 91 0f 78 b2   .....AP..0....x.
0080  d5 e0 26 88 e2 d0                                 ..&...

Frame 8 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Aug 29, 2009 12:01:26.647302000
    [Time delta from previous captured frame: 0.000009000 seconds]
    [Time delta from previous displayed frame: 0.000009000 seconds]
    [Time since reference or first frame: 0.130448000 seconds]
    Frame Number: 8
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
    Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.131 (165.227.249.131)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbad [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.131 (165.227.249.131)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 100
    Checksum: 0xbe16 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 9290A63FB921BFA2
    Responder cookie: 6F2BCC6906E0FC09
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 92
    Encrypted payload (64 bytes)

0000  00 1e 2a d4 6e b1 00 0c 29 48 f8 2f 08 00 45 00   ..*.n...)H./..E.
0010  00 78 00 00 40 00 40 11 fb ad a5 e3 f9 7c a5 e3   .x..@.@......|..
0020  f9 83 01 f4 01 f4 00 64 be 16 92 90 a6 3f b9 21   .......d.....?.!
0030  bf a2 6f 2b cc 69 06 e0 fc 09 05 10 02 01 00 00   ..o+.i..........
0040  00 00 00 00 00 5c 05 33 e1 eb c3 3c e7 35 fa 4c   .....\.3...<.5.L
0050  a8 c1 d8 12 a9 2f 5e 42 4b a9 23 17 de de 10 e3   ...../^BK.#.....
0060  a2 5e 6f 8f 77 23 ce ba e8 dd d2 b1 8e 2a 08 d9   .^o.w#.......*..
0070  92 c1 89 18 ef 41 50 10 9d 30 08 7f 91 0f 78 b2   .....AP..0....x.
0080  d5 e0 26 88 e2 d0                                 ..&...

Frame 9 (118 bytes on wire, 118 bytes captured)
    Arrival Time: Aug 29, 2009 12:01:26.743309000
    [Time delta from previous captured frame: 0.096007000 seconds]
    [Time delta from previous displayed frame: 0.096007000 seconds]
    [Time since reference or first frame: 0.226455000 seconds]
    Frame Number: 9
    Frame Length: 118 bytes
    Capture Length: 118 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
    Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbbd [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.131 (165.227.249.131)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 84
    Checksum: 0x4cd3 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 9290A63FB921BFA2
    Responder cookie: 6F2BCC6906E0FC09
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 76
    Encrypted payload (48 bytes)

0000  00 0c 29 48 f8 2f 00 1e 2a d4 6e b1 08 00 45 00   ..)H./..*.n...E.
0010  00 68 00 00 40 00 40 11 fb bd a5 e3 f9 83 a5 e3   .h..@.@.........
0020  f9 7c 01 f4 01 f4 00 54 4c d3 92 90 a6 3f b9 21   .|.....TL....?.!
0030  bf a2 6f 2b cc 69 06 e0 fc 09 05 10 02 01 00 00   ..o+.i..........
0040  00 00 00 00 00 4c 32 d5 83 1d 7b e6 3c b9 a7 fb   .....L2...{.<...
0050  1f 33 c3 b4 42 12 7b a4 48 26 a4 68 7c bf c1 b7   .3..B.{.H&.h|...
0060  0a 36 2c e3 c4 d2 d0 a1 f6 10 ac c8 18 dc 27 33   .6,...........'3
0070  c9 11 5c 2a c1 6c                                 ..\*.l

Frame 10 (406 bytes on wire, 406 bytes captured)
    Arrival Time: Aug 29, 2009 12:01:26.751940000
    [Time delta from previous captured frame: 0.008631000 seconds]
    [Time delta from previous displayed frame: 0.008631000 seconds]
    [Time since reference or first frame: 0.235086000 seconds]
    Frame Number: 10
    Frame Length: 406 bytes
    Capture Length: 406 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
    Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.131 (165.227.249.131)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 392
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfa9d [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.131 (165.227.249.131)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 372
    Checksum: 0x1c14 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 9290A63FB921BFA2
    Responder cookie: 6F2BCC6906E0FC09
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xa1e27943
    Length: 364
    Encrypted payload (336 bytes)

0000  00 1e 2a d4 6e b1 00 0c 29 48 f8 2f 08 00 45 00   ..*.n...)H./..E.
0010  01 88 00 00 40 00 40 11 fa 9d a5 e3 f9 7c a5 e3   ....@.@......|..
0020  f9 83 01 f4 01 f4 01 74 1c 14 92 90 a6 3f b9 21   .......t.....?.!
0030  bf a2 6f 2b cc 69 06 e0 fc 09 08 10 20 01 a1 e2   ..o+.i...... ...
0040  79 43 00 00 01 6c 98 a3 eb 06 15 3c 3f 7e 2d ec   yC...l.....<?~-.
0050  cb 86 3c 1f 09 b6 57 0b f5 d2 11 2d 10 fb cd cb   ..<...W....-....
0060  bf 0e 07 59 5e c4 7b e3 83 e7 ea f8 1d bc bb 79   ...Y^.{........y
0070  a8 d6 73 5a f5 23 0d 8c 2d c9 86 21 01 58 a3 c8   ..sZ.#..-..!.X..
0080  ee f8 5d 1d 8b 76 d3 ba 89 5a 33 71 cb ca 40 70   ..]..v...Z3q..@p
0090  a4 1f dc 33 ba ab 7a 2f ca e4 0a 90 09 f9 0a 47   ...3..z/.......G
00a0  4a 69 15 f9 67 6a 85 d6 14 e7 1a 69 1f 16 b0 b0   Ji..gj.....i....
00b0  b2 5e bb a8 c3 d6 df 8f b5 ee 79 74 9e f7 80 51   .^........yt...Q
00c0  30 06 69 04 39 b8 5e a9 7a 74 60 d6 46 43 2f a2   0.i.9.^.zt`.FC/.
00d0  f8 db c4 13 47 e2 ee b3 65 8e 24 79 db 89 bf 4b   ....G...e.$y...K
00e0  ac 52 50 11 28 1f d8 4e 87 58 1f 1b 13 ef 2a 83   .RP.(..N.X....*.
00f0  1f ce 24 ac e5 fe fd 68 41 f0 71 7c 86 a5 f9 89   ..$....hA.q|....
0100  d7 05 8b af 64 05 60 77 2f ed 0f af a3 6f 48 03   ....d.`w/....oH.
0110  39 c6 b0 15 10 7c a4 e0 24 6e 52 59 50 a5 e9 99   9....|..$nRYP...
0120  ca ac b2 e8 65 11 30 ea 06 e0 d0 fb 22 81 9d a0   ....e.0....."...
0130  3c 93 45 f6 99 da 70 76 0f 04 86 6d ae 44 35 a2   <.E...pv...m.D5.
0140  ef 02 ae e5 b4 4c fc 19 4f 8d 84 e8 07 2a 60 4b   .....L..O....*`K
0150  a1 3d b2 75 db 19 dd a3 d4 75 ed f6 41 c6 c1 d3   .=.u.....u..A...
0160  36 52 f5 2f c6 72 a6 b1 35 03 e0 ab e7 20 5e 2a   6R./.r..5.... ^*
0170  44 27 1b d6 73 7b d3 90 e4 6e 25 ab 35 50 44 95   D'..s{...n%.5PD.
0180  1f dc 45 1f 7f fd 00 5d b3 00 10 7a fe 4d b8 ef   ..E....]...z.M..
0190  83 a7 35 e4 32 84                                 ..5.2.

Frame 11 (406 bytes on wire, 406 bytes captured)
    Arrival Time: Aug 29, 2009 12:01:26.751954000
    [Time delta from previous captured frame: 0.000014000 seconds]
    [Time delta from previous displayed frame: 0.000014000 seconds]
    [Time since reference or first frame: 0.235100000 seconds]
    Frame Number: 11
    Frame Length: 406 bytes
    Capture Length: 406 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
    Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.131 (165.227.249.131)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 392
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfa9d [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.131 (165.227.249.131)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 372
    Checksum: 0x1c14 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 9290A63FB921BFA2
    Responder cookie: 6F2BCC6906E0FC09
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xa1e27943
    Length: 364
    Encrypted payload (336 bytes)

0000  00 1e 2a d4 6e b1 00 0c 29 48 f8 2f 08 00 45 00   ..*.n...)H./..E.
0010  01 88 00 00 40 00 40 11 fa 9d a5 e3 f9 7c a5 e3   ....@.@......|..
0020  f9 83 01 f4 01 f4 01 74 1c 14 92 90 a6 3f b9 21   .......t.....?.!
0030  bf a2 6f 2b cc 69 06 e0 fc 09 08 10 20 01 a1 e2   ..o+.i...... ...
0040  79 43 00 00 01 6c 98 a3 eb 06 15 3c 3f 7e 2d ec   yC...l.....<?~-.
0050  cb 86 3c 1f 09 b6 57 0b f5 d2 11 2d 10 fb cd cb   ..<...W....-....
0060  bf 0e 07 59 5e c4 7b e3 83 e7 ea f8 1d bc bb 79   ...Y^.{........y
0070  a8 d6 73 5a f5 23 0d 8c 2d c9 86 21 01 58 a3 c8   ..sZ.#..-..!.X..
0080  ee f8 5d 1d 8b 76 d3 ba 89 5a 33 71 cb ca 40 70   ..]..v...Z3q..@p
0090  a4 1f dc 33 ba ab 7a 2f ca e4 0a 90 09 f9 0a 47   ...3..z/.......G
00a0  4a 69 15 f9 67 6a 85 d6 14 e7 1a 69 1f 16 b0 b0   Ji..gj.....i....
00b0  b2 5e bb a8 c3 d6 df 8f b5 ee 79 74 9e f7 80 51   .^........yt...Q
00c0  30 06 69 04 39 b8 5e a9 7a 74 60 d6 46 43 2f a2   0.i.9.^.zt`.FC/.
00d0  f8 db c4 13 47 e2 ee b3 65 8e 24 79 db 89 bf 4b   ....G...e.$y...K
00e0  ac 52 50 11 28 1f d8 4e 87 58 1f 1b 13 ef 2a 83   .RP.(..N.X....*.
00f0  1f ce 24 ac e5 fe fd 68 41 f0 71 7c 86 a5 f9 89   ..$....hA.q|....
0100  d7 05 8b af 64 05 60 77 2f ed 0f af a3 6f 48 03   ....d.`w/....oH.
0110  39 c6 b0 15 10 7c a4 e0 24 6e 52 59 50 a5 e9 99   9....|..$nRYP...
0120  ca ac b2 e8 65 11 30 ea 06 e0 d0 fb 22 81 9d a0   ....e.0....."...
0130  3c 93 45 f6 99 da 70 76 0f 04 86 6d ae 44 35 a2   <.E...pv...m.D5.
0140  ef 02 ae e5 b4 4c fc 19 4f 8d 84 e8 07 2a 60 4b   .....L..O....*`K
0150  a1 3d b2 75 db 19 dd a3 d4 75 ed f6 41 c6 c1 d3   .=.u.....u..A...
0160  36 52 f5 2f c6 72 a6 b1 35 03 e0 ab e7 20 5e 2a   6R./.r..5.... ^*
0170  44 27 1b d6 73 7b d3 90 e4 6e 25 ab 35 50 44 95   D'..s{...n%.5PD.
0180  1f dc 45 1f 7f fd 00 5d b3 00 10 7a fe 4d b8 ef   ..E....]...z.M..
0190  83 a7 35 e4 32 84                                 ..5.2.

Frame 12 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Aug 29, 2009 12:01:26.756041000
    [Time delta from previous captured frame: 0.004087000 seconds]
    [Time delta from previous displayed frame: 0.004087000 seconds]
    [Time since reference or first frame: 0.239187000 seconds]
    Frame Number: 12
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
    Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbad [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.131 (165.227.249.131)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 100
    Checksum: 0x5f24 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 9290A63FB921BFA2
    Responder cookie: 6F2BCC6906E0FC09
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Informational (5)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xb3467b1f
    Length: 92
    Encrypted payload (64 bytes)

0000  00 0c 29 48 f8 2f 00 1e 2a d4 6e b1 08 00 45 00   ..)H./..*.n...E.
0010  00 78 00 00 40 00 40 11 fb ad a5 e3 f9 83 a5 e3   .x..@.@.........
0020  f9 7c 01 f4 01 f4 00 64 5f 24 92 90 a6 3f b9 21   .|.....d_$...?.!
0030  bf a2 6f 2b cc 69 06 e0 fc 09 08 10 05 01 b3 46   ..o+.i.........F
0040  7b 1f 00 00 00 5c 72 9b 11 9d 98 84 f2 52 01 98   {....\r......R..
0050  15 32 45 2e 60 cf dd da d4 cd b5 28 53 04 ec 9e   .2E.`......(S...
0060  18 40 83 a0 46 a6 36 fc 80 f8 9a 47 80 3f dd ee   .@..F.6....G.?..
0070  be 2f 64 af b8 97 62 dd 47 87 36 e0 1c 9e 18 97   ./d...b.G.6.....
0080  ba 2a fb be 83 52                                 .*...R

Frame 13 (342 bytes on wire, 342 bytes captured)
    Arrival Time: Aug 29, 2009 12:01:26.917393000
    [Time delta from previous captured frame: 0.161352000 seconds]
    [Time delta from previous displayed frame: 0.161352000 seconds]
    [Time since reference or first frame: 0.400539000 seconds]
    Frame Number: 13
    Frame Length: 342 bytes
    Capture Length: 342 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
    Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 328
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfadd [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.131 (165.227.249.131)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 308
    Checksum: 0x8aba [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 9290A63FB921BFA2
    Responder cookie: 6F2BCC6906E0FC09
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xa1e27943
    Length: 300
    Encrypted payload (272 bytes)

0000  00 0c 29 48 f8 2f 00 1e 2a d4 6e b1 08 00 45 00   ..)H./..*.n...E.
0010  01 48 00 00 40 00 40 11 fa dd a5 e3 f9 83 a5 e3   .H..@.@.........
0020  f9 7c 01 f4 01 f4 01 34 8a ba 92 90 a6 3f b9 21   .|.....4.....?.!
0030  bf a2 6f 2b cc 69 06 e0 fc 09 08 10 20 01 a1 e2   ..o+.i...... ...
0040  79 43 00 00 01 2c 5b 98 d2 8a aa 33 5b 5a c5 18   yC...,[....3[Z..
0050  c4 1c 34 a1 5d 23 8a c4 39 e2 ae c2 3b bf d0 85   ..4.]#..9...;...
0060  67 93 1c 98 bb 2b 99 fa f8 1c 1f 3e f4 8e ca 33   g....+.....>...3
0070  d1 98 5c 10 19 38 3a da db fd da 96 bd 3c 4f eb   ..\..8:......<O.
0080  e6 49 00 72 d7 c9 99 84 ed 02 58 8b c6 84 96 44   .I.r......X....D
0090  c7 18 0d aa d9 a5 d6 a6 41 c8 df 29 3e 01 e3 e4   ........A..)>...
00a0  1b 53 a7 ba bd 0e 1d f6 f7 e2 ce 7a da e2 06 11   .S.........z....
00b0  ee f1 b6 06 d5 f9 b8 5a ef d4 d2 3c e7 32 80 36   .......Z...<.2.6
00c0  73 0e cc d5 c2 72 53 3f 27 a2 65 a0 56 7f 9a 33   s....rS?'.e.V..3
00d0  35 e3 c6 d6 3c ef e0 36 e2 73 1b ea 8c fd b9 de   5...<..6.s......
00e0  91 50 ae 13 2c 67 69 f5 5d 4a a3 4a 03 32 66 1e   .P..,gi.]J.J.2f.
00f0  fd fc b9 ea 92 b8 3b a4 ad 74 9a 82 ec dc db 84   ......;..t......
0100  3e ae e5 04 3c 92 f5 04 d1 25 39 66 16 1a 00 a8   >...<....%9f....
0110  90 43 9b 10 9c 7b 53 d5 7c 00 7c ff 68 74 ab be   .C...{S.|.|.ht..
0120  2b 02 05 29 95 42 dc 0c 48 b7 32 4d 9a 0c 9c fd   +..).B..H.2M....
0130  11 88 70 1e ea 99 13 2e ea 38 81 de 96 54 84 de   ..p......8...T..
0140  a0 c2 15 ac 2b 19 d5 bf 11 7f ba 44 52 cf ff a1   ....+......DR...
0150  f1 62 fa 24 10 4b                                 .b.$.K

Frame 14 (102 bytes on wire, 102 bytes captured)
    Arrival Time: Aug 29, 2009 12:01:26.921959000
    [Time delta from previous captured frame: 0.004566000 seconds]
    [Time delta from previous displayed frame: 0.004566000 seconds]
    [Time since reference or first frame: 0.405105000 seconds]
    Frame Number: 14
    Frame Length: 102 bytes
    Capture Length: 102 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
    Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.131 (165.227.249.131)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 88
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbcd [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.131 (165.227.249.131)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 68
    Checksum: 0x8fda [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 9290A63FB921BFA2
    Responder cookie: 6F2BCC6906E0FC09
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xa1e27943
    Length: 60
    Encrypted payload (32 bytes)

0000  00 1e 2a d4 6e b1 00 0c 29 48 f8 2f 08 00 45 00   ..*.n...)H./..E.
0010  00 58 00 00 40 00 40 11 fb cd a5 e3 f9 7c a5 e3   .X..@.@......|..
0020  f9 83 01 f4 01 f4 00 44 8f da 92 90 a6 3f b9 21   .......D.....?.!
0030  bf a2 6f 2b cc 69 06 e0 fc 09 08 10 20 01 a1 e2   ..o+.i...... ...
0040  79 43 00 00 00 3c 12 df 82 62 04 bb 68 c4 73 69   yC...<...b..h.si
0050  ee 51 36 e4 7e ee 7b 21 2d 97 d4 95 49 4a 9c 6e   .Q6.~.{!-...IJ.n
0060  77 f9 66 b5 9d 4f                                 w.f..O

Frame 15 (102 bytes on wire, 102 bytes captured)
    Arrival Time: Aug 29, 2009 12:01:26.921975000
    [Time delta from previous captured frame: 0.000016000 seconds]
    [Time delta from previous displayed frame: 0.000016000 seconds]
    [Time since reference or first frame: 0.405121000 seconds]
    Frame Number: 15
    Frame Length: 102 bytes
    Capture Length: 102 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
    Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.131 (165.227.249.131)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 88
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbcd [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.131 (165.227.249.131)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 68
    Checksum: 0x8fda [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 9290A63FB921BFA2
    Responder cookie: 6F2BCC6906E0FC09
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xa1e27943
    Length: 60
    Encrypted payload (32 bytes)

0000  00 1e 2a d4 6e b1 00 0c 29 48 f8 2f 08 00 45 00   ..*.n...)H./..E.
0010  00 58 00 00 40 00 40 11 fb cd a5 e3 f9 7c a5 e3   .X..@.@......|..
0020  f9 83 01 f4 01 f4 00 44 8f da 92 90 a6 3f b9 21   .......D.....?.!
0030  bf a2 6f 2b cc 69 06 e0 fc 09 08 10 20 01 a1 e2   ..o+.i...... ...
0040  79 43 00 00 00 3c 12 df 82 62 04 bb 68 c4 73 69   yC...<...b..h.si
0050  ee 51 36 e4 7e ee 7b 21 2d 97 d4 95 49 4a 9c 6e   .Q6.~.{!-...IJ.n
0060  77 f9 66 b5 9d 4f                                 w.f..O

Frame 16 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Aug 29, 2009 12:01:27.201084000
    [Time delta from previous captured frame: 0.279109000 seconds]
    [Time delta from previous displayed frame: 0.279109000 seconds]
    [Time since reference or first frame: 0.684230000 seconds]
    Frame Number: 16
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
    Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.131 (165.227.249.131)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0004 (4)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 240
    Protocol: ESP (0x32)
    Header checksum: 0x8b88 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.131 (165.227.249.131)
Encapsulating Security Payload
    ESP SPI: 0x0d8e80bb
    ESP Sequence: 1

0000  00 1e 2a d4 6e b1 00 0c 29 48 f8 2f 08 00 45 00   ..*.n...)H./..E.
0010  00 78 00 04 00 00 f0 32 8b 88 a5 e3 f9 7c a5 e3   .x.....2.....|..
0020  f9 83 0d 8e 80 bb 00 00 00 01 e2 42 60 37 d8 c5   ...........B`7..
0030  42 7c 7d e8 63 4b d6 c4 f3 2e 82 05 a8 fe 18 fe   B|}.cK..........
0040  b4 e5 40 71 26 fa 68 5d e7 f4 43 4f a1 32 80 6b   ..@q&.h]..CO.2.k
0050  b1 b5 68 04 28 85 08 23 33 6a 9d f6 92 c1 7b b2   ..h.(..#3j....{.
0060  70 ee 0b 90 2d 19 a9 8c fe 44 70 43 c9 29 ad 7d   p...-....DpC.).}
0070  94 b7 72 46 02 75 13 54 9a 42 30 cc e9 e3 2f 6c   ..rF.u.T.B0.../l
0080  d5 1a b0 cc 6d 02                                 ....m.

Frame 17 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Aug 29, 2009 12:01:27.201097000
    [Time delta from previous captured frame: 0.000013000 seconds]
    [Time delta from previous displayed frame: 0.000013000 seconds]
    [Time since reference or first frame: 0.684243000 seconds]
    Frame Number: 17
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
    Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.131 (165.227.249.131)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0004 (4)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 240
    Protocol: ESP (0x32)
    Header checksum: 0x8b88 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.131 (165.227.249.131)
Encapsulating Security Payload
    ESP SPI: 0x0d8e80bb
    ESP Sequence: 1

0000  00 1e 2a d4 6e b1 00 0c 29 48 f8 2f 08 00 45 00   ..*.n...)H./..E.
0010  00 78 00 04 00 00 f0 32 8b 88 a5 e3 f9 7c a5 e3   .x.....2.....|..
0020  f9 83 0d 8e 80 bb 00 00 00 01 e2 42 60 37 d8 c5   ...........B`7..
0030  42 7c 7d e8 63 4b d6 c4 f3 2e 82 05 a8 fe 18 fe   B|}.cK..........
0040  b4 e5 40 71 26 fa 68 5d e7 f4 43 4f a1 32 80 6b   ..@q&.h]..CO.2.k
0050  b1 b5 68 04 28 85 08 23 33 6a 9d f6 92 c1 7b b2   ..h.(..#3j....{.
0060  70 ee 0b 90 2d 19 a9 8c fe 44 70 43 c9 29 ad 7d   p...-....DpC.).}
0070  94 b7 72 46 02 75 13 54 9a 42 30 cc e9 e3 2f 6c   ..rF.u.T.B0.../l
0080  d5 1a b0 cc 6d 02                                 ....m.

Frame 18 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Aug 29, 2009 12:01:27.202457000
    [Time delta from previous captured frame: 0.001360000 seconds]
    [Time delta from previous displayed frame: 0.001360000 seconds]
    [Time since reference or first frame: 0.685603000 seconds]
    Frame Number: 18
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
    Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x4ce4 (19684)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xeea8 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.131 (165.227.249.131)
    Destination: 165.227.249.124 (165.227.249.124)
Encapsulating Security Payload
    ESP SPI: 0x3ed66adb
    ESP Sequence: 1

0000  00 0c 29 48 f8 2f 00 1e 2a d4 6e b1 08 00 45 00   ..)H./..*.n...E.
0010  00 78 4c e4 00 00 40 32 ee a8 a5 e3 f9 83 a5 e3   .xL...@2........
0020  f9 7c 3e d6 6a db 00 00 00 01 86 5d 20 f1 ff d4   .|>.j......] ...
0030  d5 d1 0b 46 85 8b 11 96 c6 a0 62 16 8c 7c ad 9d   ...F......b..|..
0040  c6 14 c6 19 8c 10 07 10 b0 6d 40 b3 d3 a9 5d a9   .........m@...].
0050  ea ae 00 86 89 47 49 97 90 fc 41 9f 57 24 3e b7   .....GI...A.W$>.
0060  85 a9 21 5c f5 15 1c 51 2d c2 ec bb 43 45 43 ee   ..!\...Q-...CEC.
0070  b6 c5 72 25 6e 45 e7 6f 9e 1e 12 b0 ae 81 96 29   ..r%nE.o.......)
0080  45 d0 a4 d7 01 af                                 E.....

Frame 19 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Aug 29, 2009 12:01:27.515368000
    [Time delta from previous captured frame: 0.312911000 seconds]
    [Time delta from previous displayed frame: 0.312911000 seconds]
    [Time since reference or first frame: 0.998514000 seconds]
    Frame Number: 19
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
    Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.131 (165.227.249.131)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0005 (5)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 240
    Protocol: ESP (0x32)
    Header checksum: 0x8b87 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.131 (165.227.249.131)
Encapsulating Security Payload
    ESP SPI: 0x0d8e80bb
    ESP Sequence: 2

0000  00 1e 2a d4 6e b1 00 0c 29 48 f8 2f 08 00 45 00   ..*.n...)H./..E.
0010  00 78 00 05 00 00 f0 32 8b 87 a5 e3 f9 7c a5 e3   .x.....2.....|..
0020  f9 83 0d 8e 80 bb 00 00 00 02 61 77 74 e6 67 c8   ..........awt.g.
0030  95 39 2b b6 21 c0 75 33 2e cd 99 dc 4f aa d0 f4   .9+.!.u3....O...
0040  49 41 9e c2 cb b9 42 5b 73 4d 12 90 58 1e 22 3b   IA....B[sM..X.";
0050  e5 33 fc 65 f7 18 c8 bb df 3e 73 0a 9c 68 1b 6b   .3.e.....>s..h.k
0060  e9 7c ce 0a fe 91 b7 69 5f f4 ae bc f1 ea 20 79   .|.....i_..... y
0070  5f 47 c3 f9 3e c2 d8 03 64 16 54 0f 6f 1f 96 64   _G..>...d.T.o..d
0080  42 01 9c 73 97 ce                                 B..s..

Frame 20 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Aug 29, 2009 12:01:27.515383000
    [Time delta from previous captured frame: 0.000015000 seconds]
    [Time delta from previous displayed frame: 0.000015000 seconds]
    [Time since reference or first frame: 0.998529000 seconds]
    Frame Number: 20
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
    Destination: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.131 (165.227.249.131)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0005 (5)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 240
    Protocol: ESP (0x32)
    Header checksum: 0x8b87 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.131 (165.227.249.131)
Encapsulating Security Payload
    ESP SPI: 0x0d8e80bb
    ESP Sequence: 2

0000  00 1e 2a d4 6e b1 00 0c 29 48 f8 2f 08 00 45 00   ..*.n...)H./..E.
0010  00 78 00 05 00 00 f0 32 8b 87 a5 e3 f9 7c a5 e3   .x.....2.....|..
0020  f9 83 0d 8e 80 bb 00 00 00 02 61 77 74 e6 67 c8   ..........awt.g.
0030  95 39 2b b6 21 c0 75 33 2e cd 99 dc 4f aa d0 f4   .9+.!.u3....O...
0040  49 41 9e c2 cb b9 42 5b 73 4d 12 90 58 1e 22 3b   IA....B[sM..X.";
0050  e5 33 fc 65 f7 18 c8 bb df 3e 73 0a 9c 68 1b 6b   .3.e.....>s..h.k
0060  e9 7c ce 0a fe 91 b7 69 5f f4 ae bc f1 ea 20 79   .|.....i_..... y
0070  5f 47 c3 f9 3e c2 d8 03 64 16 54 0f 6f 1f 96 64   _G..>...d.T.o..d
0080  42 01 9c 73 97 ce                                 B..s..

Frame 21 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Aug 29, 2009 12:01:27.516487000
    [Time delta from previous captured frame: 0.001104000 seconds]
    [Time delta from previous displayed frame: 0.001104000 seconds]
    [Time since reference or first frame: 0.999633000 seconds]
    Frame Number: 21
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
    Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        Address: 00:1e:2a:d4:6e:b1 (00:1e:2a:d4:6e:b1)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.131 (165.227.249.131), Dst: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x3c5b (15451)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xff31 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.131 (165.227.249.131)
    Destination: 165.227.249.124 (165.227.249.124)
Encapsulating Security Payload
    ESP SPI: 0x3ed66adb
    ESP Sequence: 2

0000  00 0c 29 48 f8 2f 00 1e 2a d4 6e b1 08 00 45 00   ..)H./..*.n...E.
0010  00 78 3c 5b 00 00 40 32 ff 31 a5 e3 f9 83 a5 e3   .x<[..@2.1......
0020  f9 7c 3e d6 6a db 00 00 00 02 ec bb 43 45 43 ee   .|>.j.......CEC.
0030  b6 c5 72 25 6e 45 e7 6f 9e 1e 78 a3 74 fb ad 07   ..r%nE.o..x.t...
0040  68 66 a1 02 ae 3c 5a 21 37 6b 02 d7 5f f2 e6 20   hf...<Z!7k.._.. 
0050  17 a9 1d 3d 06 d5 91 38 19 e7 06 6e 56 3a 1c 39   ...=...8...nV:.9
0060  da a2 96 a0 38 9e ac b9 87 f7 69 43 02 62 62 39   ....8.....iC.bb9
0070  ee 87 74 03 7a 3b 4f b3 98 f3 54 e7 88 1f e5 5e   ..t.z;O...T....^
0080  f8 ca 14 7b 10 ac                                 ...{..