Frame 1 (270 bytes on wire, 270 bytes captured) Arrival Time: Aug 13, 2004 13:19:15.861986000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 270 bytes Capture Length: 270 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x54266808 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x002f (47) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3af5 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.137 (165.227.249.137) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0xe7dc (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1A2B36E9EC61A401 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 e0 13 00 2c 4a 00 0c 29 e6 ad b9 08 00 45 00 ....,J..).....E. 0010 00 fc 00 2f 00 00 40 11 3a f5 a5 e3 f9 7c a5 e3 .../..@.:....|.. 0020 f9 89 01 f4 01 f4 00 e8 e7 dc 1a 2b 36 e9 ec 61 ...........+6..a 0030 a4 01 00 00 00 00 00 00 00 00 01 10 02 00 00 00 ................ 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b .....N.$...GYL(K 0090 21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e !;....'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 54 26 68 08 .o,....R.VT&h. Frame 2 (150 bytes on wire, 150 bytes captured) Arrival Time: Aug 13, 2004 13:19:15.867711000 Time delta from previous packet: 0.005725000 seconds Time since reference or first frame: 0.005725000 seconds Frame Number: 2 Packet Length: 150 bytes Capture Length: 150 bytes Ethernet II, Src: 00:e0:13:00:2c:4a, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Type: IP (0x0800) Frame check sequence: 0xc92271b0 (correct) Internet Protocol, Src Addr: 165.227.249.137 (165.227.249.137), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 132 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb9b (correct) Source: 165.227.249.137 (165.227.249.137) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 112 Checksum: 0x283d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1A2B36E9EC61A401 Responder cookie: 0x839CFC285A518088 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 104 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 0000 00 0c 29 e6 ad b9 00 e0 13 00 2c 4a 08 00 45 00 ..).......,J..E. 0010 00 84 00 00 40 00 40 11 fb 9b a5 e3 f9 89 a5 e3 ....@.@......... 0020 f9 7c 01 f4 01 f4 00 70 28 3d 1a 2b 36 e9 ec 61 .|.....p(=.+6..a 0030 a4 01 83 9c fc 28 5a 51 80 88 01 10 02 00 00 00 .....(ZQ........ 0040 00 00 00 00 00 68 0d 00 00 38 00 00 00 01 00 00 .....h...8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 00 00 ............p... 0080 00 14 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 ..D..-.......F.y 0090 dd cc c9 22 71 b0 ..."q. Frame 3 (274 bytes on wire, 274 bytes captured) Arrival Time: Aug 13, 2004 13:19:15.878159000 Time delta from previous packet: 0.010448000 seconds Time since reference or first frame: 0.016173000 seconds Frame Number: 3 Packet Length: 274 bytes Capture Length: 274 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x485fd671 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x0030 (48) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3af0 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.137 (165.227.249.137) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0x2682 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1A2B36E9EC61A401 Responder cookie: 0x839CFC285A518088 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 e0 13 00 2c 4a 00 0c 29 e6 ad b9 08 00 45 00 ....,J..).....E. 0010 01 00 00 30 00 00 40 11 3a f0 a5 e3 f9 7c a5 e3 ...0..@.:....|.. 0020 f9 89 01 f4 01 f4 00 ec 26 82 1a 2b 36 e9 ec 61 ........&..+6..a 0030 a4 01 83 9c fc 28 5a 51 80 88 04 10 02 00 00 00 .....(ZQ........ 0040 00 00 00 00 00 e4 0a 00 00 84 14 90 e1 3c f2 10 .............<.. 0050 43 19 7b 13 89 7b bd b1 da be 53 02 5e 60 bc 0e C.{..{....S.^`.. 0060 f7 45 09 e7 18 ad d0 9c 0f a8 5c 6f e9 0e f8 ad .E........\o.... 0070 0f ee 60 43 ea b9 21 f4 2a f7 84 47 7c 63 73 6f ..`C..!.*..G|cso 0080 c7 5c c4 54 fe 47 83 e1 99 1f 84 fc af b3 cb 40 .\.T.G.........@ 0090 7e 74 3c f7 5d ca dc b1 f4 f1 fa eb 46 6e 42 a0 ~t<.].......FnB. 00a0 4d 4c e4 46 84 64 a6 10 3c 09 2e 81 45 bf d9 56 ML.F.d..<...E..V 00b0 e2 38 0c cd 00 4b 2e 74 8f 78 c8 69 b0 76 14 3b .8...K.t.x.i.v.; 00c0 79 1e 68 44 02 72 2a 51 39 70 82 00 00 14 28 44 y.hD.r*Q9p....(D 00d0 0f ac 7e 3e 7f 01 a9 74 02 9a 2f 7e b7 06 82 00 ..~>...t../~.... 00e0 00 18 5f 8a df 0d 07 60 de 44 20 1d e0 b7 0c 9c .._....`.D ..... 00f0 92 53 65 d8 6a 79 00 00 00 18 cd 5f 57 c2 7a f5 .Se.jy....._W.z. 0100 94 e0 cf 77 64 91 4d b9 f3 e5 37 c8 fd 8c 48 5f ...wd.M...7...H_ 0110 d6 71 .q Frame 4 (274 bytes on wire, 274 bytes captured) Arrival Time: Aug 13, 2004 13:19:15.895056000 Time delta from previous packet: 0.016897000 seconds Time since reference or first frame: 0.033070000 seconds Frame Number: 4 Packet Length: 274 bytes Capture Length: 274 bytes Ethernet II, Src: 00:e0:13:00:2c:4a, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Type: IP (0x0800) Frame check sequence: 0x7d4f6ddf (correct) Internet Protocol, Src Addr: 165.227.249.137 (165.227.249.137), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 256 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb1f (correct) Source: 165.227.249.137 (165.227.249.137) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 236 Checksum: 0xaa44 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1A2B36E9EC61A401 Responder cookie: 0x839CFC285A518088 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 228 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: Private USE (130) Length: 20 Nonce Data Unknown payload type payload Next payload: Private USE (130) Length: 24 Payload Unknown payload type payload Next payload: NONE (0) Length: 24 Payload 0000 00 0c 29 e6 ad b9 00 e0 13 00 2c 4a 08 00 45 00 ..).......,J..E. 0010 01 00 00 00 40 00 40 11 fb 1f a5 e3 f9 89 a5 e3 ....@.@......... 0020 f9 7c 01 f4 01 f4 00 ec aa 44 1a 2b 36 e9 ec 61 .|.......D.+6..a 0030 a4 01 83 9c fc 28 5a 51 80 88 04 10 02 00 00 00 .....(ZQ........ 0040 00 00 00 00 00 e4 0a 00 00 84 16 da 1f 43 29 0f .............C). 0050 5d 7b db fc af c2 75 ac b5 95 fd f6 9a 5c 9d 97 ]{....u......\.. 0060 19 8a f9 8f 91 0f 45 84 eb 8b be ee 95 56 9e 16 ......E......V.. 0070 4f 71 f6 ca 3a 8c 1a aa 86 a5 f3 7f da b5 fe fb Oq..:........... 0080 85 17 07 bf 43 4f ef 86 0a 29 9a 1e 60 9f a5 27 ....CO...)..`..' 0090 1d 29 87 02 3d 54 0b 66 91 e2 79 9a f0 51 50 51 .)..=T.f..y..QPQ 00a0 1b 86 96 37 f3 50 48 47 15 bc 21 32 b9 a3 6c 3c ...7.PHG..!2..l< 00b0 05 b1 e3 0e 6d 00 bb 6d 9a 49 76 51 a5 20 a0 bd ....m..m.IvQ. .. 00c0 f3 4d c3 55 0f 32 18 c5 66 d2 82 00 00 14 75 82 .M.U.2..f.....u. 00d0 50 42 98 32 db 77 9c 63 c9 a4 fc d0 b4 46 82 00 PB.2.w.c.....F.. 00e0 00 18 cd 5f 57 c2 7a f5 94 e0 cf 77 64 91 4d b9 ..._W.z....wd.M. 00f0 f3 e5 37 c8 fd 8c 00 00 00 18 5f 8a df 0d 07 60 ..7......._....` 0100 de 44 20 1d e0 b7 0c 9c 92 53 65 d8 6a 79 7d 4f .D ......Se.jy}O 0110 6d df m. Frame 5 (122 bytes on wire, 122 bytes captured) Arrival Time: Aug 13, 2004 13:19:15.916160000 Time delta from previous packet: 0.021104000 seconds Time since reference or first frame: 0.054174000 seconds Frame Number: 5 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xab781f98 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0031 (49) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b87 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.137 (165.227.249.137) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x6d64 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1A2B36E9EC61A401 Responder cookie: 0x839CFC285A518088 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 e0 13 00 2c 4a 00 0c 29 e6 ad b9 08 00 45 00 ....,J..).....E. 0010 00 68 00 31 00 00 40 11 3b 87 a5 e3 f9 7c a5 e3 .h.1..@.;....|.. 0020 f9 89 01 f4 01 f4 00 54 6d 64 1a 2b 36 e9 ec 61 .......Tmd.+6..a 0030 a4 01 83 9c fc 28 5a 51 80 88 05 10 02 01 00 00 .....(ZQ........ 0040 00 00 00 00 00 4c 4a 79 1c 3e 29 0b c5 ce 3a 9f .....LJy.>)...:. 0050 06 ea e4 df 0d 0d bb b5 26 64 df 2f ba e8 bc 15 ........&d./.... 0060 85 13 92 68 84 4c 9f 7a d8 2a 30 d4 3e f0 47 6e ...h.L.z.*0.>.Gn 0070 73 cd 7d 93 8e 66 ab 78 1f 98 s.}..f.x.. Frame 6 (122 bytes on wire, 122 bytes captured) Arrival Time: Aug 13, 2004 13:19:15.918539000 Time delta from previous packet: 0.002379000 seconds Time since reference or first frame: 0.056553000 seconds Frame Number: 6 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:e0:13:00:2c:4a, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Type: IP (0x0800) Frame check sequence: 0xe9db557a (correct) Internet Protocol, Src Addr: 165.227.249.137 (165.227.249.137), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbb7 (correct) Source: 165.227.249.137 (165.227.249.137) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xe90f (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1A2B36E9EC61A401 Responder cookie: 0x839CFC285A518088 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 e6 ad b9 00 e0 13 00 2c 4a 08 00 45 00 ..).......,J..E. 0010 00 68 00 00 40 00 40 11 fb b7 a5 e3 f9 89 a5 e3 .h..@.@......... 0020 f9 7c 01 f4 01 f4 00 54 e9 0f 1a 2b 36 e9 ec 61 .|.....T...+6..a 0030 a4 01 83 9c fc 28 5a 51 80 88 05 10 02 01 00 00 .....(ZQ........ 0040 00 00 00 00 00 4c 8d 56 de d6 66 f6 b9 93 8e 7e .....L.V..f....~ 0050 bf b8 9a 34 e8 a1 7f d9 22 59 12 ba 30 4e ce 2c ...4...."Y..0N., 0060 62 f7 a9 9e 59 16 3f 65 df be f5 96 eb 3e 00 c2 b...Y.?e.....>.. 0070 4c f8 2f 4d 9c 31 e9 db 55 7a L./M.1..Uz Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Aug 13, 2004 13:19:15.930353000 Time delta from previous packet: 0.011814000 seconds Time since reference or first frame: 0.068367000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x95f9a929 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0032 (50) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3aa6 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.137 (165.227.249.137) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x7672 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x1A2B36E9EC61A401 Responder cookie: 0x839CFC285A518088 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x3B632EC6 Length: 300 Encrypted payload (272 bytes) 0000 00 e0 13 00 2c 4a 00 0c 29 e6 ad b9 08 00 45 00 ....,J..).....E. 0010 01 48 00 32 00 00 40 11 3a a6 a5 e3 f9 7c a5 e3 .H.2..@.:....|.. 0020 f9 89 01 f4 01 f4 01 34 76 72 1a 2b 36 e9 ec 61 .......4vr.+6..a 0030 a4 01 83 9c fc 28 5a 51 80 88 08 10 20 01 3b 63 .....(ZQ.... .;c 0040 2e c6 00 00 01 2c fb 74 f6 d4 c6 57 5b a4 19 ca .....,.t...W[... 0050 4e 23 68 42 5a ac 67 69 4b 35 d6 09 4d 6d 16 32 N#hBZ.giK5..Mm.2 0060 a1 72 36 b9 0d 50 39 e8 eb bf 0a 1e 58 95 73 06 .r6..P9.....X.s. 0070 2b ec 18 e6 98 61 c7 6e a8 3a a0 0a 6a bd 3e b9 +....a.n.:..j.>. 0080 6b b6 c2 fe 60 46 9e 9e 3a d9 02 21 3b f2 6e 58 k...`F..:..!;.nX 0090 31 4b a6 54 bf cd 8f 69 74 85 b3 c0 a7 20 6f dd 1K.T...it.... o. 00a0 82 14 e6 98 3e ac 8f 3b 80 fc c9 8e 4a 3c 4d f2 ....>..;....J..n.*.Lmw. 0040 3e 1d 00 ce 90 a4 03 23 8b 73 19 12 c1 67 b8 30 >......#.s...g.0 0050 9c 46 9c 00 10 47 cd 43 eb 49 8f b7 72 01 eb d5 .F...G.C.I..r... 0060 0f 9a 67 9e 1f 39 33 fe 0c 3b d5 ba b8 2e 5d e3 ..g..93..;....]. 0070 36 0e 63 62 63 ab 1d 30 0a 61 33 a5 a7 36 82 87 6.cbc..0.a3..6.. 0080 f4 d2 57 b1 26 97 ec f9 f6 f0 6f 39 4f cd 5a 19 ..W.&.....o9O.Z. 0090 3a 40 6a ef dd 8c d6 a9 2f e9 f1 67 44 6e 2d c6 :@j...../..gDn-. 00a0 f5 01 5b ef da 4e 44 86 02 4e ..[..ND..N Frame 13 (170 bytes on wire, 170 bytes captured) Arrival Time: Aug 13, 2004 13:19:16.838027000 Time delta from previous packet: 0.001520000 seconds Time since reference or first frame: 0.976041000 seconds Frame Number: 13 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:e0:13:00:2c:4a, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Type: IP (0x0800) Frame check sequence: 0x78534794 (correct) Internet Protocol, Src Addr: 165.227.249.137 (165.227.249.137), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x4a02 (18946) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xf164 (correct) Source: 165.227.249.137 (165.227.249.137) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x5d899dae Sequence: 2 Data (124 bytes) 0000 00 0c 29 e6 ad b9 00 e0 13 00 2c 4a 08 00 45 00 ..).......,J..E. 0010 00 98 4a 02 00 00 40 32 f1 64 a5 e3 f9 89 a5 e3 ..J...@2.d...... 0020 f9 7c 5d 89 9d ae 00 00 00 02 8d 88 7b 2e 90 9d .|].........{... 0030 3b 41 ee 4f a0 39 fb 30 9f b5 71 5c f0 df 43 30 ;A.O.9.0..q\..C0 0040 62 fd 5a 0f 28 db c4 93 c4 0f bc 7d 2c fa 13 76 b.Z.(......},..v 0050 bb 5c b8 73 51 06 bb 0a b9 b5 cb d8 d4 ae 3a e2 .\.sQ.........:. 0060 3b f0 45 25 ae ea d8 d0 34 55 77 ff 7a 30 33 e7 ;.E%....4Uw.z03. 0070 c1 11 b1 94 34 93 32 85 5a 52 3e 7e 3f ee 0c 1d ....4.2.ZR>~?... 0080 8f 19 9e ca 65 49 14 81 3a 1c 9d b2 88 fc ee ed ....eI..:....... 0090 10 39 dd bd b6 92 76 6c 1a 76 d2 4d 60 ea 40 7d .9....vl.v.M`.@} 00a0 d8 b9 60 84 21 a8 78 53 47 94 ..`.!.xSG. Frame 14 (170 bytes on wire, 170 bytes captured) Arrival Time: Aug 13, 2004 13:19:17.866768000 Time delta from previous packet: 1.028741000 seconds Time since reference or first frame: 2.004782000 seconds Frame Number: 14 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x6a544284 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0009 (9) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b5d (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.137 (165.227.249.137) Encapsulating Security Payload SPI: 0xa77819cc Sequence: 4 Data (124 bytes) 0000 00 e0 13 00 2c 4a 00 0c 29 e6 ad b9 08 00 45 00 ....,J..).....E. 0010 00 98 00 09 00 00 f0 32 8b 5d a5 e3 f9 7c a5 e3 .......2.]...|.. 0020 f9 89 a7 78 19 cc 00 00 00 04 66 a1 f4 92 ff f6 ...x......f..... 0030 df 1b b1 1a 21 35 15 b1 ad 5a 6d d7 81 36 1d 40 ....!5...Zm..6.@ 0040 79 95 4e 05 5a 77 d0 8b 51 37 13 f1 7a 04 97 bc y.N.Zw..Q7..z... 0050 93 03 8f 7b b0 1d 8d 1f cb 50 7c 35 8e 41 10 4c ...{.....P|5.A.L 0060 2b 8a e3 d7 ac af 70 10 e7 b8 a2 ec 3e 97 b2 16 +.....p.....>... 0070 93 4d ba af dc 94 c7 8b 5c 6d f9 1e 13 1b 10 37 .M......\m.....7 0080 d9 e6 2d 58 1a cc b1 ae 46 36 93 c9 ea 50 97 be ..-X....F6...P.. 0090 23 73 df c7 90 e3 21 b6 e3 67 0d 78 18 37 8b 46 #s....!..g.x.7.F 00a0 f5 fc 50 35 33 3b 6a 54 42 84 ..P53;jTB. Frame 15 (170 bytes on wire, 170 bytes captured) Arrival Time: Aug 13, 2004 13:19:17.869374000 Time delta from previous packet: 0.002606000 seconds Time since reference or first frame: 2.007388000 seconds Frame Number: 15 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:e0:13:00:2c:4a, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Type: IP (0x0800) Frame check sequence: 0x307c609e (correct) Internet Protocol, Src Addr: 165.227.249.137 (165.227.249.137), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x4a03 (18947) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0xf163 (correct) Source: 165.227.249.137 (165.227.249.137) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0x5d899dae Sequence: 3 Data (124 bytes) 0000 00 0c 29 e6 ad b9 00 e0 13 00 2c 4a 08 00 45 00 ..).......,J..E. 0010 00 98 4a 03 00 00 40 32 f1 63 a5 e3 f9 89 a5 e3 ..J...@2.c...... 0020 f9 7c 5d 89 9d ae 00 00 00 03 9d b2 88 fc ee ed .|]............. 0030 10 39 dd bd b6 92 76 6c 1a 76 1c 72 c2 28 de 58 .9....vl.v.r.(.X 0040 1b ba 54 b3 f9 65 e3 2a f4 46 bb b0 1c b8 b9 66 ..T..e.*.F.....f 0050 b8 ec 21 de a9 ff 91 69 e2 85 b0 a5 72 94 6e 34 ..!....i....r.n4 0060 0c 3c 6e d5 a6 7e 2d 75 f9 72 0d bf ee b9 60 ca .