Frame 1 (270 bytes on wire, 270 bytes captured) Arrival Time: Jun 6, 2006 12:31:06.843105000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 270 bytes Capture Length: 270 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x57c771df [correct] Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.133 (165.227.249.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x00ec (236) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a3c [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.133 (165.227.249.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0x62f3 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBED716D4C427CC91 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 0c 41 90 f1 c1 00 0c 29 f4 af 90 08 00 45 00 ..A.....).....E. 0010 00 fc 00 ec 00 00 40 11 3a 3c a5 e3 f9 7c a5 e3 ......@.:<...|.. 0020 f9 85 01 f4 01 f4 00 e8 62 f3 be d7 16 d4 c4 27 ........b......' 0030 cc 91 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b .....N.$...GYL(K 0090 21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e !;....'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 57 c7 71 df .o,....R.VW.q. Frame 2 (130 bytes on wire, 130 bytes captured) Arrival Time: Jun 6, 2006 12:31:06.848784000 Time delta from previous packet: 0.005679000 seconds Time since reference or first frame: 0.005679000 seconds Frame Number: 2 Packet Length: 130 bytes Capture Length: 130 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Type: IP (0x0800) Frame check sequence: 0x33a88537 [correct] Internet Protocol, Src: 165.227.249.133 (165.227.249.133), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbb3 [correct] Good: True Bad : False Source: 165.227.249.133 (165.227.249.133) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x415f [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBED716D4C427CC91 Responder cookie: 0xD573D5E567B10C84 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 f4 af 90 00 0c 41 90 f1 c1 08 00 45 00 ..).....A.....E. 0010 00 70 00 00 40 00 40 11 fb b3 a5 e3 f9 85 a5 e3 .p..@.@......... 0020 f9 7c 01 f4 01 f4 00 5c 41 5f be d7 16 d4 c4 27 .|.....\A_.....' 0030 cc 91 d5 73 d5 e5 67 b1 0c 84 01 10 02 00 00 00 ...s..g......... 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 33 a8 ............p.3. 0080 85 37 .7 Frame 3 (226 bytes on wire, 226 bytes captured) Arrival Time: Jun 6, 2006 12:31:06.852644000 Time delta from previous packet: 0.003860000 seconds Time since reference or first frame: 0.009539000 seconds Frame Number: 3 Packet Length: 226 bytes Capture Length: 226 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xfcbaab3e [correct] Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.133 (165.227.249.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x00ed (237) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a67 [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.133 (165.227.249.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x061e [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBED716D4C427CC91 Responder cookie: 0xD573D5E567B10C84 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 41 90 f1 c1 00 0c 29 f4 af 90 08 00 45 00 ..A.....).....E. 0010 00 d0 00 ed 00 00 40 11 3a 67 a5 e3 f9 7c a5 e3 ......@.:g...|.. 0020 f9 85 01 f4 01 f4 00 bc 06 1e be d7 16 d4 c4 27 ...............' 0030 cc 91 d5 73 d5 e5 67 b1 0c 84 04 10 02 00 00 00 ...s..g......... 0040 00 00 00 00 00 b4 0a 00 00 84 4b 2a fd 3b c7 84 ..........K*.;.. 0050 62 e5 f2 71 65 ef 1a a9 22 78 30 8c 99 15 8d 9c b..qe..."x0..... 0060 73 53 59 7a 46 35 b8 a2 33 ad 31 07 eb a1 5b e8 sSYzF5..3.1...[. 0070 d4 a2 f0 a8 09 9a 17 54 ca fd c3 a6 10 18 67 8c .......T......g. 0080 40 91 ad 04 c3 3e 64 61 fd f1 48 f2 00 0a ff 72 @....>da..H....r 0090 5b 10 6b fc db 93 69 90 1b 8e 2f 67 18 89 42 6c [.k...i.../g..Bl 00a0 13 46 62 68 f6 5b a4 9d 07 45 58 e1 b4 88 1d b2 .Fbh.[...EX..... 00b0 d8 82 8f 26 02 bc 31 27 e4 3a 8f 9c e8 5a 0a 36 ...&..1'.:...Z.6 00c0 c7 d3 9c 26 2b 56 17 c2 84 00 00 00 00 14 1a 09 ...&+V.......... 00d0 c3 42 92 f8 83 21 0d c9 7a 77 83 18 dd d9 fc ba .B...!..zw...... 00e0 ab 3e .> Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Jun 6, 2006 12:31:06.969789000 Time delta from previous packet: 0.117145000 seconds Time since reference or first frame: 0.126684000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Type: IP (0x0800) Frame check sequence: 0x935727b0 [correct] Internet Protocol, Src: 165.227.249.133 (165.227.249.133), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb53 [correct] Good: True Bad : False Source: 165.227.249.133 (165.227.249.133) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x4f02 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBED716D4C427CC91 Responder cookie: 0xD573D5E567B10C84 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = Not encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 f4 af 90 00 0c 41 90 f1 c1 08 00 45 00 ..).....A.....E. 0010 00 d0 00 00 40 00 40 11 fb 53 a5 e3 f9 85 a5 e3 ....@.@..S...... 0020 f9 7c 01 f4 01 f4 00 bc 4f 02 be d7 16 d4 c4 27 .|......O......' 0030 cc 91 d5 73 d5 e5 67 b1 0c 84 04 10 02 00 00 00 ...s..g......... 0040 00 00 00 00 00 b4 0a 00 00 84 77 b2 37 c4 33 02 ..........w.7.3. 0050 cb 17 9b 50 e4 bc 58 49 44 68 ff 03 37 98 a8 b6 ...P..XIDh..7... 0060 c6 96 8d ee fa 3b da f7 b0 74 c9 82 58 d7 1b 69 .....;...t..X..i 0070 cf e4 08 3a 21 24 70 75 99 40 e7 7d ec 21 6d 34 ...:!$pu.@.}.!m4 0080 c1 ab 1b 00 87 d2 e3 fb ee 9c 44 56 72 6a f4 fc ..........DVrj.. 0090 16 95 b1 a1 22 0b e9 4e b2 56 e2 07 ba 94 86 33 ...."..N.V.....3 00a0 b8 a7 fc 04 d3 b5 48 06 30 ed 9d 6e b0 16 06 d0 ......H.0..n.... 00b0 2d 3c 38 39 5e 16 39 b3 13 8d de 33 9c e9 eb 77 -<89^.9....3...w 00c0 71 1a 63 f0 85 35 13 d8 6c 12 00 00 00 14 2f bd q.c..5..l...../. 00d0 f0 22 9b 37 84 5b 7c 0b 99 1d 12 a8 36 08 93 57 .".7.[|.....6..W 00e0 27 b0 '. Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Jun 6, 2006 12:31:06.972464000 Time delta from previous packet: 0.002675000 seconds Time since reference or first frame: 0.129359000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xeb7f9514 [correct] Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.133 (165.227.249.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x00ee (238) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ace [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.133 (165.227.249.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xce93 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBED716D4C427CC91 Responder cookie: 0xD573D5E567B10C84 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 41 90 f1 c1 00 0c 29 f4 af 90 08 00 45 00 ..A.....).....E. 0010 00 68 00 ee 00 00 40 11 3a ce a5 e3 f9 7c a5 e3 .h....@.:....|.. 0020 f9 85 01 f4 01 f4 00 54 ce 93 be d7 16 d4 c4 27 .......T.......' 0030 cc 91 d5 73 d5 e5 67 b1 0c 84 05 10 02 01 00 00 ...s..g......... 0040 00 00 00 00 00 4c 9f a7 ee d9 b6 50 71 bd f5 b7 .....L.....Pq... 0050 49 89 b0 22 18 74 bb 5b db a6 3d 95 d6 d5 ae bc I..".t.[..=..... 0060 08 9c b4 2b c0 3e 71 15 06 9e ae 56 6d 63 d4 7d ...+.>q....Vmc.} 0070 ef 8e 22 fd 50 9f eb 7f 95 14 ..".P..... Frame 6 (122 bytes on wire, 122 bytes captured) Arrival Time: Jun 6, 2006 12:31:06.981642000 Time delta from previous packet: 0.009178000 seconds Time since reference or first frame: 0.138537000 seconds Frame Number: 6 Packet Length: 122 bytes Capture Length: 122 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Type: IP (0x0800) Frame check sequence: 0x4cfc23d4 [correct] Internet Protocol, Src: 165.227.249.133 (165.227.249.133), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbbb [correct] Good: True Bad : False Source: 165.227.249.133 (165.227.249.133) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xbc25 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBED716D4C427CC91 Responder cookie: 0xD573D5E567B10C84 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 f4 af 90 00 0c 41 90 f1 c1 08 00 45 00 ..).....A.....E. 0010 00 68 00 00 40 00 40 11 fb bb a5 e3 f9 85 a5 e3 .h..@.@......... 0020 f9 7c 01 f4 01 f4 00 54 bc 25 be d7 16 d4 c4 27 .|.....T.%.....' 0030 cc 91 d5 73 d5 e5 67 b1 0c 84 05 10 02 01 00 00 ...s..g......... 0040 00 00 00 00 00 4c 41 b5 ec 18 8e 6e bd db c1 c5 .....LA....n.... 0050 26 69 4c 16 16 03 ba 21 fb 79 89 20 8e 4c 42 db &iL....!.y. .LB. 0060 ca 0a 35 82 dd 7c 9e 95 55 87 da 73 64 fb 2f 99 ..5..|..U..sd./. 0070 b3 03 cd d7 dd cd 4c fc 23 d4 ......L.#. Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Jun 6, 2006 12:31:06.985053000 Time delta from previous packet: 0.003411000 seconds Time since reference or first frame: 0.141948000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xc95bdbcf [correct] Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.133 (165.227.249.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x00ef (239) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x39ed [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.133 (165.227.249.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x523b [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBED716D4C427CC91 Responder cookie: 0xD573D5E567B10C84 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x0D57DD76 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 41 90 f1 c1 00 0c 29 f4 af 90 08 00 45 00 ..A.....).....E. 0010 01 48 00 ef 00 00 40 11 39 ed a5 e3 f9 7c a5 e3 .H....@.9....|.. 0020 f9 85 01 f4 01 f4 01 34 52 3b be d7 16 d4 c4 27 .......4R;.....' 0030 cc 91 d5 73 d5 e5 67 b1 0c 84 08 10 20 01 0d 57 ...s..g..... ..W 0040 dd 76 00 00 01 2c a8 8e 58 40 fc 4c 8d 84 a6 56 .v...,..X@.L...V 0050 c9 d0 a0 af 1d 26 16 4e 6f 27 d7 17 ab 44 b5 84 .....&.No'...D.. 0060 13 39 90 15 9f ba dd ad 1e e4 9f 4b dd 23 5f f4 .9.........K.#_. 0070 08 0a 20 0a cd 92 86 84 53 fd 41 6f e9 72 c8 e9 .. .....S.Ao.r.. 0080 a2 63 18 51 26 bf bc ab 13 8c 58 08 a7 d7 35 03 .c.Q&.....X...5. 0090 c0 98 a6 f8 80 3a 89 9c 3c 9e c0 c6 73 89 c6 75 .....:..<...s..u 00a0 6a 36 fc 90 5b e4 f8 ea 18 a3 19 5a 53 61 00 8f j6..[......ZSa.. 00b0 49 e7 e3 00 0f cb 15 25 ba 78 35 93 f9 e8 e8 60 I......%.x5....` 00c0 e0 bf 29 c3 c9 56 53 67 bd 2a 6c a6 17 38 fc ad ..)..VSg.*l..8.. 00d0 84 52 19 e0 7c 7e b0 e0 36 40 ee 20 6b 5d c8 30 .R..|~..6@. k].0 00e0 88 af 65 52 ab 7c 50 55 a2 44 7b fc c4 e0 6b e4 ..eR.|PU.D{...k. 00f0 e2 ba 97 1f 60 81 4a 9d 65 55 b3 83 b1 72 36 e0 ....`.J.eU...r6. 0100 37 36 26 ef 7a 73 8a 4f 75 b7 dc 82 9f 65 b5 ee 76&.zs.Ou....e.. 0110 27 8c f5 c3 66 4f 44 4d 79 ee 90 81 3e d2 63 bd '...fODMy...>.c. 0120 85 bd c3 0e 4c ef da dc 8d 6e e3 4c 9e eb 99 0a ....L....n.L.... 0130 42 6c cf 0e 3e a6 a8 45 6b 98 90 c2 ce 66 b0 a1 Bl..>..Ek....f.. 0140 44 46 b1 4b d6 28 3b 79 7a 22 de bf 03 ab 41 2d DF.K.(;yz"....A- 0150 6a d7 90 bb ef 30 c9 5b db cf j....0.[.. Frame 8 (346 bytes on wire, 346 bytes captured) Arrival Time: Jun 6, 2006 12:31:07.107841000 Time delta from previous packet: 0.122788000 seconds Time since reference or first frame: 0.264736000 seconds Frame Number: 8 Packet Length: 346 bytes Capture Length: 346 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Type: IP (0x0800) Frame check sequence: 0xcac512ac [correct] Internet Protocol, Src: 165.227.249.133 (165.227.249.133), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfadb [correct] Good: True Bad : False Source: 165.227.249.133 (165.227.249.133) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x3594 [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBED716D4C427CC91 Responder cookie: 0xD573D5E567B10C84 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x0D57DD76 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 f4 af 90 00 0c 41 90 f1 c1 08 00 45 00 ..).....A.....E. 0010 01 48 00 00 40 00 40 11 fa db a5 e3 f9 85 a5 e3 .H..@.@......... 0020 f9 7c 01 f4 01 f4 01 34 35 94 be d7 16 d4 c4 27 .|.....45......' 0030 cc 91 d5 73 d5 e5 67 b1 0c 84 08 10 20 01 0d 57 ...s..g..... ..W 0040 dd 76 00 00 01 2c 9b 09 e2 b2 a8 ec 90 c4 ab 04 .v...,.......... 0050 06 3b 65 48 62 d6 0f 84 b4 45 d4 b4 98 5f 76 ba .;eHb....E..._v. 0060 da a3 c8 0f fe 89 36 85 86 54 8b bf f6 98 30 8a ......6..T....0. 0070 d2 cb 63 e7 95 37 0a 35 3e 74 32 ec d1 84 1c 7f ..c..7.5>t2..... 0080 bf 96 ee e2 04 58 b3 7f 72 b1 2c 29 cf e4 ce b6 .....X..r.,).... 0090 f6 87 30 bb 37 c9 f2 40 a3 b4 6f 64 e9 1b 2f e5 ..0.7..@..od../. 00a0 aa f1 8e 61 01 ec 48 d5 11 bb 50 2f a6 f8 da 88 ...a..H...P/.... 00b0 a0 8b 2e 71 aa 57 f5 f4 3e 04 43 d3 dd 6d c0 00 ...q.W..>.C..m.. 00c0 53 9a 5e c6 8f 89 fa f4 b0 ab ad 46 33 c5 bd 9a S.^........F3... 00d0 ae 9e 29 d4 34 7a d8 3b 98 46 fb 5d 27 3d 3a b1 ..).4z.;.F.]'=:. 00e0 dd 00 39 f2 d6 36 dd e7 24 b6 2c 38 7f f9 ba 2a ..9..6..$.,8...* 00f0 f7 34 5f 40 f4 07 32 2b 6a db 94 02 4a 54 34 8f .4_@..2+j...JT4. 0100 d0 de b3 ef 3f 3d 34 d7 2e 13 9e 97 b6 6c 74 87 ....?=4......lt. 0110 b4 d0 e5 ae 50 5a 9a 67 08 2e 8e 5c d0 2b 4b ab ....PZ.g...\.+K. 0120 2e ad 55 7b e3 4c 73 8a c0 d5 5e 20 01 fc b5 03 ..U{.Ls...^ .... 0130 cc aa 9a 1d 7d b6 3d f7 e3 d1 f2 65 aa c6 0b 79 ....}.=....e...y 0140 ef 25 bc a6 f7 c1 a1 ca 0e b1 c2 e2 6e c4 b8 30 .%..........n..0 0150 6f 8d 60 b1 67 79 ca c5 12 ac o.`.gy.... Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Jun 6, 2006 12:31:07.111199000 Time delta from previous packet: 0.003358000 seconds Time since reference or first frame: 0.268094000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Protocols in frame: eth:ip:udp:isakmp Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x5900a28d [correct] Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.133 (165.227.249.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x00f0 (240) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3adc [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.133 (165.227.249.133) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x3d0c [correct] Internet Security Association and Key Management Protocol Initiator cookie: 0xBED716D4C427CC91 Responder cookie: 0xD573D5E567B10C84 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encrypted .... ..0. = No commit .... .0.. = No authentication Message ID: 0x0D57DD76 Length: 60 Encrypted payload (32 bytes) 0000 00 0c 41 90 f1 c1 00 0c 29 f4 af 90 08 00 45 00 ..A.....).....E. 0010 00 58 00 f0 00 00 40 11 3a dc a5 e3 f9 7c a5 e3 .X....@.:....|.. 0020 f9 85 01 f4 01 f4 00 44 3d 0c be d7 16 d4 c4 27 .......D=......' 0030 cc 91 d5 73 d5 e5 67 b1 0c 84 08 10 20 01 0d 57 ...s..g..... ..W 0040 dd 76 00 00 00 3c a8 1c 28 70 cc c4 ee ae 3d 9c .v...<..(p....=. 0050 be 4d 91 90 14 07 93 b0 1b 9e e7 d3 90 a7 62 0c .M............b. 0060 a2 63 67 55 25 87 59 00 a2 8d .cgU%.Y... Frame 10 (170 bytes on wire, 170 bytes captured) Arrival Time: Jun 6, 2006 12:31:07.381658000 Time delta from previous packet: 0.270459000 seconds Time since reference or first frame: 0.538553000 seconds Frame Number: 10 Packet Length: 170 bytes Capture Length: 170 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0xece5520e [correct] Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.133 (165.227.249.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x001d (29) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b4d [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.133 (165.227.249.133) Encapsulating Security Payload SPI: 0x93a468e6 Sequence: 2 Data (124 bytes) 0000 00 0c 41 90 f1 c1 00 0c 29 f4 af 90 08 00 45 00 ..A.....).....E. 0010 00 98 00 1d 00 00 f0 32 8b 4d a5 e3 f9 7c a5 e3 .......2.M...|.. 0020 f9 85 93 a4 68 e6 00 00 00 02 2c b3 a1 dd c2 f5 ....h.....,..... 0030 5f 70 38 7d 50 ce ca e9 8a 4d d0 fe 4c a1 be 0e _p8}P....M..L... 0040 3f 6e 50 98 6f 01 36 08 1e ea 3e ff 14 14 e8 ce ?nP.o.6...>..... 0050 e1 a5 63 55 90 51 66 d1 9c e2 97 e7 dc 8e 52 1f ..cU.Qf.......R. 0060 2b 11 cf e9 10 01 15 21 09 ee 5a be 18 f6 9b 47 +......!..Z....G 0070 9b 72 92 68 4b 69 d2 4f ae ad dc b8 47 07 12 bb .r.hKi.O....G... 0080 d6 14 f2 6d 69 c2 f4 6f 09 56 96 45 de 9d 11 95 ...mi..o.V.E.... 0090 f9 4f a7 29 89 0b 53 8e 5a b1 95 56 65 44 11 aa .O.)..S.Z..VeD.. 00a0 56 d1 be 28 d2 20 ec e5 52 0e V..(. ..R. Frame 11 (170 bytes on wire, 170 bytes captured) Arrival Time: Jun 6, 2006 12:31:07.383412000 Time delta from previous packet: 0.001754000 seconds Time since reference or first frame: 0.540307000 seconds Frame Number: 11 Packet Length: 170 bytes Capture Length: 170 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Type: IP (0x0800) Frame check sequence: 0x15213d1d [correct] Internet Protocol, Src: 165.227.249.133 (165.227.249.133), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0xb117 (45335) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x8a53 [correct] Good: True Bad : False Source: 165.227.249.133 (165.227.249.133) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xd0ee2eda Sequence: 1 Data (124 bytes) 0000 00 0c 29 f4 af 90 00 0c 41 90 f1 c1 08 00 45 00 ..).....A.....E. 0010 00 98 b1 17 00 00 40 32 8a 53 a5 e3 f9 85 a5 e3 ......@2.S...... 0020 f9 7c d0 ee 2e da 00 00 00 01 73 74 75 76 77 78 .|........stuvwx 0030 79 7a 7b 7c 7d 7e 7f 80 81 82 fe ef 48 94 19 ee yz{|}~......H... 0040 2c 08 b2 23 d0 28 4b 4f a6 11 d2 78 f1 23 4a 0c ,..#.(KO...x.#J. 0050 af 9e c7 18 25 ab a2 48 ca a3 b4 09 b7 34 47 e7 ....%..H.....4G. 0060 0b b1 7f 93 a1 b0 da ea 14 16 7b 70 3c e5 7e e3 ..........{p<.~. 0070 41 45 28 b0 f9 41 fe 10 a6 90 02 87 51 84 98 c2 AE(..A......Q... 0080 17 ce 8d bf e6 74 c9 e2 7d 88 5f cc 54 d4 70 94 .....t..}._.T.p. 0090 e9 7f 6c 0f dc 3d 7d 4c 07 3b 2e 75 44 ef 60 a7 ..l..=}L.;.uD.`. 00a0 be 58 3c 80 b3 35 15 21 3d 1d .X<..5.!=. Frame 12 (170 bytes on wire, 170 bytes captured) Arrival Time: Jun 6, 2006 12:31:07.826040000 Time delta from previous packet: 0.442628000 seconds Time since reference or first frame: 0.982935000 seconds Frame Number: 12 Packet Length: 170 bytes Capture Length: 170 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x025e28d9 [correct] Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.133 (165.227.249.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x001e (30) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b4c [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.133 (165.227.249.133) Encapsulating Security Payload SPI: 0x93a468e6 Sequence: 3 Data (124 bytes) 0000 00 0c 41 90 f1 c1 00 0c 29 f4 af 90 08 00 45 00 ..A.....).....E. 0010 00 98 00 1e 00 00 f0 32 8b 4c a5 e3 f9 7c a5 e3 .......2.L...|.. 0020 f9 85 93 a4 68 e6 00 00 00 03 5c 1d 28 f0 62 1c ....h.....\.(.b. 0030 8e 4a 5a ca 1f e0 17 ef 95 8c df da 9b ef 6a 98 .JZ...........j. 0040 84 43 2e 13 3a 90 23 3f 12 43 fa ff f3 db da 60 .C..:.#?.C.....` 0050 fe 28 97 0a 56 66 bb 14 fb fb 35 a4 4d 99 99 8e .(..Vf....5.M... 0060 5a 1b a5 ab 63 b9 f8 f8 12 cc 38 85 14 eb e8 d6 Z...c.....8..... 0070 ff 36 ed b4 d7 5a 3f d6 99 ae a1 5b e8 ec 5e da .6...Z?....[..^. 0080 59 11 94 32 b2 05 a7 19 8e 0a 80 91 6e 04 22 14 Y..2........n.". 0090 6a 1b c8 f8 ba f8 5a 56 7f 14 77 80 3d b2 99 d7 j.....ZV..w.=... 00a0 8a 42 86 c3 62 2d 02 5e 28 d9 .B..b-.^(. Frame 13 (170 bytes on wire, 170 bytes captured) Arrival Time: Jun 6, 2006 12:31:07.826048000 Time delta from previous packet: 0.000008000 seconds Time since reference or first frame: 0.982943000 seconds Frame Number: 13 Packet Length: 170 bytes Capture Length: 170 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Type: IP (0x0800) Frame check sequence: 0x1dc82e07 [correct] Internet Protocol, Src: 165.227.249.133 (165.227.249.133), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0xb118 (45336) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x8a52 [correct] Good: True Bad : False Source: 165.227.249.133 (165.227.249.133) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xd0ee2eda Sequence: 2 Data (124 bytes) 0000 00 0c 29 f4 af 90 00 0c 41 90 f1 c1 08 00 45 00 ..).....A.....E. 0010 00 98 b1 18 00 00 40 32 8a 52 a5 e3 f9 85 a5 e3 ......@2.R...... 0020 f9 7c d0 ee 2e da 00 00 00 02 9f a0 a1 a2 a3 a4 .|.............. 0030 a5 a6 a7 a8 a9 aa ab ac ad ae f2 c9 a1 0c 10 54 ...............T 0040 a5 9c 49 50 68 00 80 a6 81 5f 4d 5d fd 32 e2 f5 ..IPh...._M].2.. 0050 31 ee ac 2f f7 47 be 11 7a 53 9c d8 c7 eb 2a 5a 1../.G..zS....*Z 0060 49 bd 01 6d 5a 0f 74 a0 94 31 e8 49 21 ca de 66 I..mZ.t..1.I!..f 0070 a8 4b 13 10 da 3e ce c2 ab 27 24 fe db 5e 92 d9 .K...>...'$..^.. 0080 a4 ae 0b 50 6c d5 94 cf 69 34 4b 30 fe 33 b9 11 ...Pl...i4K0.3.. 0090 e3 5f 19 6f 58 07 9b 80 af b9 c9 26 cf 6f 15 65 ._.oX......&.o.e 00a0 ad 00 20 25 c7 af 1d c8 2e 07 .. %...... Frame 14 (170 bytes on wire, 170 bytes captured) Arrival Time: Jun 6, 2006 12:31:08.794317000 Time delta from previous packet: 0.968269000 seconds Time since reference or first frame: 1.951212000 seconds Frame Number: 14 Packet Length: 170 bytes Capture Length: 170 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x6cc89a1d [correct] Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.133 (165.227.249.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x001f (31) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b4b [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.133 (165.227.249.133) Encapsulating Security Payload SPI: 0x93a468e6 Sequence: 4 Data (124 bytes) 0000 00 0c 41 90 f1 c1 00 0c 29 f4 af 90 08 00 45 00 ..A.....).....E. 0010 00 98 00 1f 00 00 f0 32 8b 4b a5 e3 f9 7c a5 e3 .......2.K...|.. 0020 f9 85 93 a4 68 e6 00 00 00 04 1c 90 96 38 a3 ae ....h........8.. 0030 a5 b2 2f 8b b5 92 da bb 92 40 4c f2 3b a1 1a fa ../......@L.;... 0040 a5 16 ef ad 80 6f 7f 19 33 c3 5e e0 24 63 bd 9d .....o..3.^.$c.. 0050 af 11 85 b1 be 71 f3 45 7c d5 9a f5 02 18 9c 44 .....q.E|......D 0060 5d 99 b0 87 6b 3b 29 95 b5 35 1b 7b 79 e4 b1 db ]...k;)..5.{y... 0070 07 1c 54 d1 99 bd fb 2b 11 4b 66 7c c1 d0 b4 10 ..T....+.Kf|.... 0080 04 9e 60 01 13 8b 85 6e 93 32 5c 33 1e 46 c4 25 ..`....n.2\3.F.% 0090 41 82 53 44 97 c3 7b 34 c5 a2 a4 34 35 13 d8 97 A.SD..{4...45... 00a0 cb c2 2f d0 1b de 6c c8 9a 1d ../...l... Frame 15 (170 bytes on wire, 170 bytes captured) Arrival Time: Jun 6, 2006 12:31:08.795146000 Time delta from previous packet: 0.000829000 seconds Time since reference or first frame: 1.952041000 seconds Frame Number: 15 Packet Length: 170 bytes Capture Length: 170 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Type: IP (0x0800) Frame check sequence: 0xf1bb4531 [correct] Internet Protocol, Src: 165.227.249.133 (165.227.249.133), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0xb119 (45337) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x8a51 [correct] Good: True Bad : False Source: 165.227.249.133 (165.227.249.133) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xd0ee2eda Sequence: 3 Data (124 bytes) 0000 00 0c 29 f4 af 90 00 0c 41 90 f1 c1 08 00 45 00 ..).....A.....E. 0010 00 98 b1 19 00 00 40 32 8a 51 a5 e3 f9 85 a5 e3 ......@2.Q...... 0020 f9 7c d0 ee 2e da 00 00 00 03 01 02 03 04 05 06 .|.............. 0030 07 08 09 0a 0b 0c 0d 0e 0f 10 d7 c6 ab 68 83 e3 .............h.. 0040 67 03 39 90 e3 20 f4 66 af 97 92 56 64 33 b0 0b g.9.. .f...Vd3.. 0050 5b f2 5f 3e 6e 05 5a 5e f7 99 bf 6b aa 2b 9e 64 [._>n.Z^...k.+.d 0060 77 53 7d 92 2b 0c 51 be 41 a3 1e 4d 20 f1 a8 3f wS}.+.Q.A..M ..? 0070 6c 63 27 99 4a f4 85 c3 69 1a 32 f1 6a 32 ee 7d lc'.J...i.2.j2.} 0080 7e 21 3d 6c cd c7 81 9c 88 bd cd a7 74 f2 f8 ae ~!=l........t... 0090 27 b8 96 73 9e 07 12 52 74 13 67 c9 40 8c a3 1f '..s...Rt.g.@... 00a0 3d 11 ac ab 8f 41 f1 bb 45 31 =....A..E1 Frame 16 (170 bytes on wire, 170 bytes captured) Arrival Time: Jun 6, 2006 12:31:09.864703000 Time delta from previous packet: 1.069557000 seconds Time since reference or first frame: 3.021598000 seconds Frame Number: 16 Packet Length: 170 bytes Capture Length: 170 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90), Dst: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Destination: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Source: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Type: IP (0x0800) Frame check sequence: 0x03bbb685 [correct] Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.133 (165.227.249.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0020 (32) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b4a [correct] Good: True Bad : False Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.133 (165.227.249.133) Encapsulating Security Payload SPI: 0x93a468e6 Sequence: 5 Data (124 bytes) 0000 00 0c 41 90 f1 c1 00 0c 29 f4 af 90 08 00 45 00 ..A.....).....E. 0010 00 98 00 20 00 00 f0 32 8b 4a a5 e3 f9 7c a5 e3 ... ...2.J...|.. 0020 f9 85 93 a4 68 e6 00 00 00 05 f9 95 66 0b b4 a4 ....h.......f... 0030 f2 40 ec 8c 76 a2 c3 15 73 fb f8 09 5e b2 a0 44 .@..v...s...^..D 0040 a7 f4 ea 5c a1 0b 09 20 56 ea 08 1e 3d 42 b0 c3 ...\... V...=B.. 0050 d4 64 5a 3f 5c 8e 49 44 1a 85 cd cd 36 f6 c3 f5 .dZ?\.ID....6... 0060 99 99 6b c2 9d 8b 15 f3 cf bc c0 0b 0d 31 a3 f1 ..k..........1.. 0070 d5 ff 09 43 b3 dd a3 ab f5 2c 8f e7 9e 17 92 12 ...C.....,...... 0080 2b 96 3e 17 19 db 38 50 50 d9 cf 40 2a 64 fb fd +.>...8PP..@*d.. 0090 56 a8 14 54 34 28 71 c6 d4 f9 dd 44 a4 9b bf 94 V..T4(q....D.... 00a0 fe a1 fe ff 5f fe 03 bb b6 85 ...._..... Frame 17 (170 bytes on wire, 170 bytes captured) Arrival Time: Jun 6, 2006 12:31:09.865558000 Time delta from previous packet: 0.000855000 seconds Time since reference or first frame: 3.022453000 seconds Frame Number: 17 Packet Length: 170 bytes Capture Length: 170 bytes Protocols in frame: eth:ip:esp:data Ethernet II, Src: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1), Dst: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Destination: 00:0c:29:f4:af:90 (00:0c:29:f4:af:90) Source: 00:0c:41:90:f1:c1 (00:0c:41:90:f1:c1) Type: IP (0x0800) Frame check sequence: 0xd6ec5a6b [correct] Internet Protocol, Src: 165.227.249.133 (165.227.249.133), Dst: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0xb11a (45338) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x8a50 [correct] Good: True Bad : False Source: 165.227.249.133 (165.227.249.133) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xd0ee2eda Sequence: 4 Data (124 bytes) 0000 00 0c 29 f4 af 90 00 0c 41 90 f1 c1 08 00 45 00 ..).....A.....E. 0010 00 98 b1 1a 00 00 40 32 8a 50 a5 e3 f9 85 a5 e3 ......@2.P...... 0020 f9 7c d0 ee 2e da 00 00 00 04 6c 6d 6e 6f 70 71 .|........lmnopq 0030 72 73 74 75 76 77 78 79 7a 7b 70 e6 17 37 6a 45 rstuvwxyz{p..7jE 0040 57 1e 05 84 f6 4e 57 9b 63 0b 46 21 22 d0 e8 3d W....NW.c.F!"..= 0050 eb e4 57 08 61 fd 7e 18 39 db 64 02 9b 04 e8 61 ..W.a.~.9.d....a 0060 a4 61 59 c1 65 57 ed db 35 ed 2f 6d 84 fb 29 af .aY.eW..5./m..). 0070 6e d1 5e eb 9e 90 c6 e5 31 a1 f2 4e da 16 33 7a n.^.....1..N..3z 0080 91 91 5f e5 7b 16 d0 10 51 a9 d8 5e 7e 8b 13 ab .._.{...Q..^~... 0090 a4 66 b6 fb 39 bd b3 e6 32 5a 6d c6 70 0e 6c ba .f..9...2Zm.p.l. 00a0 6d ba f8 60 d0 e6 d6 ec 5a 6b m..`....Zk