Frame 1 (262 bytes on wire, 262 bytes captured)
    Arrival Time: Jan  5, 2009 17:01:45.060322000
    [Time delta from previous captured frame: 0.000000000 seconds]
    [Time delta from previous displayed frame: 0.000000000 seconds]
    [Time since reference or first frame: 0.000000000 seconds]
    Frame Number: 1
    Frame Length: 262 bytes
    Capture Length: 262 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
    Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        Address: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.141 (165.227.249.141), Dst: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 248
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb23 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.141 (165.227.249.141)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 228
    Checksum: 0x33d7 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 5E5F3B5DAE5F0AC7
    Responder cookie: 0000000000000000
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 220
    Security Association payload
        Next payload: Vendor ID (13)
        Payload length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 0
            Next payload: NONE (0)
            Payload length: 44
            Proposal number: 0
            Protocol ID: ISAKMP (1)
            SPI Size: 0
            Proposal transforms: 1
            Transform payload # 0
                Next payload: NONE (0)
                Payload length: 36
                Transform number: 0
                Transform ID: KEY_IKE (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
                Encryption-Algorithm (1): AES-CBC (7)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Key-Length (14): Key-Length (128)
    Vendor ID: 4F454766754A5B59657B4168
        Next payload: Vendor ID (13)
        Payload length: 16
        Vendor ID: 4F454766754A5B59657B4168
    Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)
    Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE
    Vendor ID: draft-ietf-ipsec-nat-t-ike-03
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-03
    Vendor ID: draft-ietf-ipsec-nat-t-ike-02
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02
    Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n
    Vendor ID: draft-ietf-ipsec-nat-t-ike-00
        Next payload: NONE (0)
        Payload length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-00

0000  00 0c 29 48 f8 2f 00 10 f3 0e 66 68 08 00 45 00   ..)H./....fh..E.
0010  00 f8 00 00 40 00 40 11 fb 23 a5 e3 f9 8d a5 e3   ....@.@..#......
0020  f9 7c 01 f4 01 f4 00 e4 33 d7 5e 5f 3b 5d ae 5f   .|......3.^_;]._
0030  0a c7 00 00 00 00 00 00 00 00 01 10 02 00 00 00   ................
0040  00 00 00 00 00 dc 0d 00 00 38 00 00 00 01 00 00   .........8......
0050  00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01   .....,.......$..
0060  00 00 80 0b 00 01 80 0c 70 80 80 01 00 07 80 02   ........p.......
0070  00 02 80 03 00 01 80 04 00 02 80 0e 00 80 0d 00   ................
0080  00 10 4f 45 47 66 75 4a 5b 59 65 7b 41 68 0d 00   ..OEGfuJ[Ye{Ah..
0090  00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57   ......h...k...wW
00a0  01 00 0d 00 00 14 4a 13 1c 81 07 03 58 45 5c 57   ......J.....XE\W
00b0  28 f2 0e 95 45 2f 0d 00 00 14 7d 94 19 a6 53 10   (...E/....}...S.
00c0  ca 6f 2c 17 9d 92 15 52 9d 56 0d 00 00 14 cd 60   .o,....R.V.....`
00d0  46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48 0d 00   FC5.!.|...h..H..
00e0  00 14 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42   ......>.in.c...B
00f0  7b 1f 00 00 00 14 44 85 15 2d 18 b6 bb cd 0b e8   {.....D..-......
0100  a8 46 95 79 dd cc                                 .F.y..

Frame 2 (246 bytes on wire, 246 bytes captured)
    Arrival Time: Jan  5, 2009 17:01:45.060324000
    [Time delta from previous captured frame: 0.000002000 seconds]
    [Time delta from previous displayed frame: 0.000002000 seconds]
    [Time since reference or first frame: 0.000002000 seconds]
    Frame Number: 2
    Frame Length: 246 bytes
    Capture Length: 246 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
    Destination: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        Address: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.141 (165.227.249.141)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 232
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb33 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.141 (165.227.249.141)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 212
    Checksum: 0x7bff [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 5E5F3B5DAE5F0AC7
    Responder cookie: CBD3E2001EE46DF7
    Next payload: Security Association (1)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 204
    Security Association payload
        Next payload: Vendor ID (13)
        Payload length: 56
        Domain of interpretation: IPSEC (1)
        Situation: IDENTITY (1)
        Proposal payload # 0
            Next payload: NONE (0)
            Payload length: 44
            Proposal number: 0
            Protocol ID: ISAKMP (1)
            SPI Size: 0
            Proposal transforms: 1
            Transform payload # 0
                Next payload: NONE (0)
                Payload length: 36
                Transform number: 0
                Transform ID: KEY_IKE (1)
                Life-Type (11): Seconds (1)
                Life-Duration (12): Duration-Value (28800)
                Encryption-Algorithm (1): AES-CBC (7)
                Hash-Algorithm (2): SHA (2)
                Authentication-Method (3): PSK (1)
                Group-Description (4): Alternate 1024-bit MODP group (2)
                Key-Length (14): Key-Length (128)
    Vendor ID: F758F22668750F03B08DF6EBE1D00403
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: F758F22668750F03B08DF6EBE1D00403
    Vendor ID: draft-ietf-ipsec-nat-t-ike-02
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02
    Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-02\n
    Vendor ID: draft-ietf-ipsec-nat-t-ike-03
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: draft-ietf-ipsec-nat-t-ike-03
    Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE
        Next payload: Vendor ID (13)
        Payload length: 20
        Vendor ID: RFC 3947 Negotiation of NAT-Traversal in the IKE
    Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)
        Next payload: NONE (0)
        Payload length: 20
        Vendor ID: RFC 3706 Detecting Dead IKE Peers (DPD)

0000  00 10 f3 0e 66 68 00 0c 29 48 f8 2f 08 00 45 00   ....fh..)H./..E.
0010  00 e8 00 00 40 00 40 11 fb 33 a5 e3 f9 7c a5 e3   ....@.@..3...|..
0020  f9 8d 01 f4 01 f4 00 d4 7b ff 5e 5f 3b 5d ae 5f   ........{.^_;]._
0030  0a c7 cb d3 e2 00 1e e4 6d f7 01 10 02 00 00 00   ........m.......
0040  00 00 00 00 00 cc 0d 00 00 38 00 00 00 01 00 00   .........8......
0050  00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01   .....,.......$..
0060  00 00 80 0b 00 01 80 0c 70 80 80 01 00 07 80 02   ........p.......
0070  00 02 80 03 00 01 80 04 00 02 80 0e 00 80 0d 00   ................
0080  00 14 f7 58 f2 26 68 75 0f 03 b0 8d f6 eb e1 d0   ...X.&hu........
0090  04 03 0d 00 00 14 cd 60 46 43 35 df 21 f8 7c fd   .......`FC5.!.|.
00a0  b2 fc 68 b6 a4 48 0d 00 00 14 90 cb 80 91 3e bb   ..h..H........>.
00b0  69 6e 08 63 81 b5 ec 42 7b 1f 0d 00 00 14 7d 94   in.c...B{.....}.
00c0  19 a6 53 10 ca 6f 2c 17 9d 92 15 52 9d 56 0d 00   ..S..o,....R.V..
00d0  00 14 4a 13 1c 81 07 03 58 45 5c 57 28 f2 0e 95   ..J.....XE\W(...
00e0  45 2f 00 00 00 14 af ca d7 13 68 a1 f1 c9 6b 86   E/........h...k.
00f0  96 fc 77 57 01 00                                 ..wW..

Frame 3 (270 bytes on wire, 270 bytes captured)
    Arrival Time: Jan  5, 2009 17:01:45.065590000
    [Time delta from previous captured frame: 0.005266000 seconds]
    [Time delta from previous displayed frame: 0.005266000 seconds]
    [Time since reference or first frame: 0.005268000 seconds]
    Frame Number: 3
    Frame Length: 270 bytes
    Capture Length: 270 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
    Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        Address: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.141 (165.227.249.141), Dst: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 256
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb1b [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.141 (165.227.249.141)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 236
    Checksum: 0x0f96 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 5E5F3B5DAE5F0AC7
    Responder cookie: CBD3E2001EE46DF7
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 228
    Key Exchange payload
        Next payload: Nonce (10)
        Payload length: 132
        Key Exchange Data (128 bytes / 1024 bits)
    Nonce payload
        Next payload: NAT-D (RFC 3947) (20)
        Payload length: 20
        Nonce Data
    NAT-D (RFC 3947) payload
        Next payload: NAT-D (RFC 3947) (20)
        Payload length: 24
        Hash of address and port: 25B1722D398FFA113FA82ED518FE9E69CD0F0EBE
    NAT-D (RFC 3947) payload
        Next payload: NONE (0)
        Payload length: 24
        Hash of address and port: 0EC5929B833CA8596B12852E4A4982F9A4CD3380

0000  00 0c 29 48 f8 2f 00 10 f3 0e 66 68 08 00 45 00   ..)H./....fh..E.
0010  01 00 00 00 40 00 40 11 fb 1b a5 e3 f9 8d a5 e3   ....@.@.........
0020  f9 7c 01 f4 01 f4 00 ec 0f 96 5e 5f 3b 5d ae 5f   .|........^_;]._
0030  0a c7 cb d3 e2 00 1e e4 6d f7 04 10 02 00 00 00   ........m.......
0040  00 00 00 00 00 e4 0a 00 00 84 fe 1a a6 a7 b6 47   ...............G
0050  85 58 2a f3 f8 cc df ab 18 58 99 c8 1c c6 da 41   .X*......X.....A
0060  6e a4 08 e4 5b 82 a9 cd ef d0 93 75 59 54 27 1b   n...[......uYT'.
0070  e7 bf 05 bf e1 19 1c 2e f9 16 ba 1b b7 36 67 85   .............6g.
0080  1f 57 e4 5a 48 51 7b ef ec 97 e6 4d f9 95 1c b6   .W.ZHQ{....M....
0090  c1 87 67 f9 c5 e9 57 7a b1 f9 15 b3 e9 f0 3d be   ..g...Wz......=.
00a0  d9 b5 08 a8 e5 df f0 0e 03 cf 89 61 6d a5 07 0e   ...........am...
00b0  74 53 48 a5 cc e8 51 9c d8 41 e1 33 a1 ed 52 88   tSH...Q..A.3..R.
00c0  94 34 11 fc d9 20 5b 39 8e 24 14 00 00 14 74 ea   .4... [9.$....t.
00d0  34 9b d8 84 d6 67 68 47 c1 06 32 3a a2 95 14 00   4....ghG..2:....
00e0  00 18 25 b1 72 2d 39 8f fa 11 3f a8 2e d5 18 fe   ..%.r-9...?.....
00f0  9e 69 cd 0f 0e be 00 00 00 18 0e c5 92 9b 83 3c   .i.............<
0100  a8 59 6b 12 85 2e 4a 49 82 f9 a4 cd 33 80         .Yk...JI....3.

Frame 4 (270 bytes on wire, 270 bytes captured)
    Arrival Time: Jan  5, 2009 17:01:45.076779000
    [Time delta from previous captured frame: 0.011189000 seconds]
    [Time delta from previous displayed frame: 0.011189000 seconds]
    [Time since reference or first frame: 0.016457000 seconds]
    Frame Number: 4
    Frame Length: 270 bytes
    Capture Length: 270 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
    Destination: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        Address: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.141 (165.227.249.141)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 256
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfb1b [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.141 (165.227.249.141)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 236
    Checksum: 0xcdf7 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 5E5F3B5DAE5F0AC7
    Responder cookie: CBD3E2001EE46DF7
    Next payload: Key Exchange (4)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x00
        .... ...0 = Not encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 228
    Key Exchange payload
        Next payload: Nonce (10)
        Payload length: 132
        Key Exchange Data (128 bytes / 1024 bits)
    Nonce payload
        Next payload: NAT-D (RFC 3947) (20)
        Payload length: 20
        Nonce Data
    NAT-D (RFC 3947) payload
        Next payload: NAT-D (RFC 3947) (20)
        Payload length: 24
        Hash of address and port: 0EC5929B833CA8596B12852E4A4982F9A4CD3380
    NAT-D (RFC 3947) payload
        Next payload: NONE (0)
        Payload length: 24
        Hash of address and port: 25B1722D398FFA113FA82ED518FE9E69CD0F0EBE

0000  00 10 f3 0e 66 68 00 0c 29 48 f8 2f 08 00 45 00   ....fh..)H./..E.
0010  01 00 00 00 40 00 40 11 fb 1b a5 e3 f9 7c a5 e3   ....@.@......|..
0020  f9 8d 01 f4 01 f4 00 ec cd f7 5e 5f 3b 5d ae 5f   ..........^_;]._
0030  0a c7 cb d3 e2 00 1e e4 6d f7 04 10 02 00 00 00   ........m.......
0040  00 00 00 00 00 e4 0a 00 00 84 62 a7 15 ef 68 95   ..........b...h.
0050  06 70 be fa b4 f2 20 05 a7 a1 1d 1e 4f 59 1c e4   .p.... .....OY..
0060  0f 7d d5 de 94 36 19 30 5d bc 4c f9 09 cc 83 54   .}...6.0].L....T
0070  8b ff b4 17 eb d0 a4 ff 36 05 6d c8 be fa 4e f0   ........6.m...N.
0080  dd 64 1f cb 32 2f 49 7f 3a 2d 2f 05 2e 41 c4 ab   .d..2/I.:-/..A..
0090  0b a3 08 44 85 ee 79 e0 a8 ee be 8c bc 17 03 1d   ...D..y.........
00a0  18 33 74 d9 ec 1e 71 5c 8f 76 ae 59 32 38 0f ca   .3t...q\.v.Y28..
00b0  8e 63 a0 27 c5 ba aa 6a 2e b1 cb 7b 94 5e b7 a7   .c.'...j...{.^..
00c0  19 b7 cd 86 49 29 29 47 d9 11 14 00 00 14 25 bd   ....I))G......%.
00d0  c2 13 13 85 85 5c 95 d8 f8 f8 14 fc 46 72 14 00   .....\......Fr..
00e0  00 18 0e c5 92 9b 83 3c a8 59 6b 12 85 2e 4a 49   .......<.Yk...JI
00f0  82 f9 a4 cd 33 80 00 00 00 18 25 b1 72 2d 39 8f   ....3.....%.r-9.
0100  fa 11 3f a8 2e d5 18 fe 9e 69 cd 0f 0e be         ..?......i....

Frame 5 (118 bytes on wire, 118 bytes captured)
    Arrival Time: Jan  5, 2009 17:01:45.090854000
    [Time delta from previous captured frame: 0.014075000 seconds]
    [Time delta from previous displayed frame: 0.014075000 seconds]
    [Time since reference or first frame: 0.030532000 seconds]
    Frame Number: 5
    Frame Length: 118 bytes
    Capture Length: 118 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
    Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        Address: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.141 (165.227.249.141), Dst: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbb3 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.141 (165.227.249.141)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 84
    Checksum: 0xfda9 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 5E5F3B5DAE5F0AC7
    Responder cookie: CBD3E2001EE46DF7
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 76
    Encrypted payload (48 bytes)

0000  00 0c 29 48 f8 2f 00 10 f3 0e 66 68 08 00 45 00   ..)H./....fh..E.
0010  00 68 00 00 40 00 40 11 fb b3 a5 e3 f9 8d a5 e3   .h..@.@.........
0020  f9 7c 01 f4 01 f4 00 54 fd a9 5e 5f 3b 5d ae 5f   .|.....T..^_;]._
0030  0a c7 cb d3 e2 00 1e e4 6d f7 05 10 02 01 00 00   ........m.......
0040  00 00 00 00 00 4c dc 63 a5 01 13 56 57 7a ed a9   .....L.c...VWz..
0050  1f 6b b2 a5 1b f3 a0 06 61 44 2f 5b 0c c6 ab 7d   .k......aD/[...}
0060  7e 6a 82 a8 89 a6 a8 10 13 39 7d 0b 38 fb ce f3   ~j.......9}.8...
0070  2d 4b 6b 9a 15 41                                 -Kk..A

Frame 6 (118 bytes on wire, 118 bytes captured)
    Arrival Time: Jan  5, 2009 17:01:45.091473000
    [Time delta from previous captured frame: 0.000619000 seconds]
    [Time delta from previous displayed frame: 0.000619000 seconds]
    [Time since reference or first frame: 0.031151000 seconds]
    Frame Number: 6
    Frame Length: 118 bytes
    Capture Length: 118 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
    Destination: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        Address: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.141 (165.227.249.141)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 104
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbb3 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.141 (165.227.249.141)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 84
    Checksum: 0xdc4a [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 5E5F3B5DAE5F0AC7
    Responder cookie: CBD3E2001EE46DF7
    Next payload: Identification (5)
    Version: 1.0
    Exchange type: Identity Protection (Main Mode) (2)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0x00000000
    Length: 76
    Encrypted payload (48 bytes)

0000  00 10 f3 0e 66 68 00 0c 29 48 f8 2f 08 00 45 00   ....fh..)H./..E.
0010  00 68 00 00 40 00 40 11 fb b3 a5 e3 f9 7c a5 e3   .h..@.@......|..
0020  f9 8d 01 f4 01 f4 00 54 dc 4a 5e 5f 3b 5d ae 5f   .......T.J^_;]._
0030  0a c7 cb d3 e2 00 1e e4 6d f7 05 10 02 01 00 00   ........m.......
0040  00 00 00 00 00 4c 8c 0b 47 02 47 dc f3 41 bd 64   .....L..G.G..A.d
0050  c3 f8 41 61 61 fb 17 73 b5 7c 60 1d 1d 01 1b 0a   ..Aaa..s.|`.....
0060  13 9b ba 7a 8d 67 78 b9 5e 96 c9 27 9b 10 9d 97   ...z.gx.^..'....
0070  d1 d2 bd e5 ee fc                                 ......

Frame 7 (342 bytes on wire, 342 bytes captured)
    Arrival Time: Jan  5, 2009 17:01:45.108302000
    [Time delta from previous captured frame: 0.016829000 seconds]
    [Time delta from previous displayed frame: 0.016829000 seconds]
    [Time since reference or first frame: 0.047980000 seconds]
    Frame Number: 7
    Frame Length: 342 bytes
    Capture Length: 342 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
    Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        Address: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.141 (165.227.249.141), Dst: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 328
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfad3 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.141 (165.227.249.141)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 308
    Checksum: 0x92fe [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 5E5F3B5DAE5F0AC7
    Responder cookie: CBD3E2001EE46DF7
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xec79dac4
    Length: 300
    Encrypted payload (272 bytes)

0000  00 0c 29 48 f8 2f 00 10 f3 0e 66 68 08 00 45 00   ..)H./....fh..E.
0010  01 48 00 00 40 00 40 11 fa d3 a5 e3 f9 8d a5 e3   .H..@.@.........
0020  f9 7c 01 f4 01 f4 01 34 92 fe 5e 5f 3b 5d ae 5f   .|.....4..^_;]._
0030  0a c7 cb d3 e2 00 1e e4 6d f7 08 10 20 01 ec 79   ........m... ..y
0040  da c4 00 00 01 2c 6a 29 3d aa b1 0a 16 ba bb 89   .....,j)=.......
0050  0c 3e 73 34 72 cb fa 3d ce 86 bd 20 26 d9 16 75   .>s4r..=... &..u
0060  af 29 97 9f 94 ef 5d cf 8e ee 13 c9 4e 2e 95 fa   .)....].....N...
0070  5f 85 20 86 23 b3 ef 83 a2 7d b8 67 e8 c1 fd 66   _. .#....}.g...f
0080  23 17 76 36 6f 55 e5 1e c5 ed c1 50 33 c6 12 be   #.v6oU.....P3...
0090  54 cb b5 f3 b6 fc 10 9a 0b 87 5f 9b c8 fb ac 9e   T........._.....
00a0  6e 80 2b 48 55 25 d9 3e fc 33 d2 e9 63 de 34 3b   n.+HU%.>.3..c.4;
00b0  6b 81 a8 e4 0b 5d 2e ef ff 3b 8c 44 c5 98 2b 2d   k....]...;.D..+-
00c0  a1 3c 62 4e 0b e3 76 ab b7 38 d1 6e c7 e0 a0 6d   .<bN..v..8.n...m
00d0  b8 71 db fe 0b 15 f0 55 01 57 3d e3 0f e2 64 98   .q.....U.W=...d.
00e0  ab ec 23 8e 3c 86 aa 21 8d 56 0e ee bb 65 ac a5   ..#.<..!.V...e..
00f0  09 89 2f 64 2c 5f 5c 0c de d2 04 b0 42 d1 d8 51   ../d,_\.....B..Q
0100  b5 50 3a a9 06 a0 9c d1 29 64 e9 cc 32 76 7e fa   .P:.....)d..2v~.
0110  7e a4 7b 9c 76 1d 38 53 d3 cf 3a 38 e2 a3 32 fb   ~.{.v.8S..:8..2.
0120  2f b3 6f 62 29 ea 99 e9 7b 1f 20 57 77 1f 5e b3   /.ob)...{. Ww.^.
0130  37 82 89 ac 20 24 31 64 f9 6a 22 fe 86 ac d4 2f   7... $1d.j"..../
0140  9c 07 95 10 69 c6 dd e7 a6 97 79 e0 c4 c8 b1 1d   ....i.....y.....
0150  71 01 2d c3 65 ec                                 q.-.e.

Frame 8 (342 bytes on wire, 342 bytes captured)
    Arrival Time: Jan  5, 2009 17:01:45.108304000
    [Time delta from previous captured frame: 0.000002000 seconds]
    [Time delta from previous displayed frame: 0.000002000 seconds]
    [Time since reference or first frame: 0.047982000 seconds]
    Frame Number: 8
    Frame Length: 342 bytes
    Capture Length: 342 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
    Destination: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        Address: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.141 (165.227.249.141)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 328
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfad3 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.141 (165.227.249.141)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 308
    Checksum: 0xe0ab [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 5E5F3B5DAE5F0AC7
    Responder cookie: CBD3E2001EE46DF7
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xec79dac4
    Length: 300
    Encrypted payload (272 bytes)

0000  00 10 f3 0e 66 68 00 0c 29 48 f8 2f 08 00 45 00   ....fh..)H./..E.
0010  01 48 00 00 40 00 40 11 fa d3 a5 e3 f9 7c a5 e3   .H..@.@......|..
0020  f9 8d 01 f4 01 f4 01 34 e0 ab 5e 5f 3b 5d ae 5f   .......4..^_;]._
0030  0a c7 cb d3 e2 00 1e e4 6d f7 08 10 20 01 ec 79   ........m... ..y
0040  da c4 00 00 01 2c 6b 94 df 03 7c 5f ae e3 11 45   .....,k...|_...E
0050  10 25 c4 9b 66 e8 d5 99 85 35 96 96 c4 ee b4 6e   .%..f....5.....n
0060  24 79 4c 64 bf c0 28 1c 68 8e 5d 70 ee 82 6e 78   $yLd..(.h.]p..nx
0070  70 7f aa a6 26 48 f2 55 0f ed d8 da 77 c9 e4 d2   p...&H.U....w...
0080  75 05 24 6a 90 89 ff 9e c6 06 5b 64 18 d3 bb e2   u.$j......[d....
0090  91 99 2c dc e1 d2 9e dd a8 60 fe 5a 88 d7 df 06   ..,......`.Z....
00a0  0e 22 59 f0 db 72 36 3f 4e cf 10 9e 5e 88 94 15   ."Y..r6?N...^...
00b0  f0 5a 6c 8e 75 cc 5a 74 c8 a2 96 43 9b f8 25 a7   .Zl.u.Zt...C..%.
00c0  85 7e 1b 5d e3 99 4e c1 39 dd ca c3 3c d5 cb 8a   .~.]..N.9...<...
00d0  05 a0 12 ed 16 dd 2f 3e 4e 2d 4d d0 4c e5 92 db   ....../>N-M.L...
00e0  0c c7 34 1a 3c e4 6f c3 8a 02 c6 3c 35 92 81 ba   ..4.<.o....<5...
00f0  ab c5 6f 49 b3 fa d6 8a bb 52 c8 49 e4 c1 13 d1   ..oI.....R.I....
0100  52 c0 97 c6 f2 38 45 df e1 51 da 17 2e d9 f8 ab   R....8E..Q......
0110  15 9b 26 60 8d 17 56 5b 34 a0 c0 2b 7a 22 e9 1b   ..&`..V[4..+z"..
0120  4f a9 c7 0a 24 91 c3 76 38 01 eb 8c eb da 54 97   O...$..v8.....T.
0130  ee d7 69 12 ea 89 f0 56 c7 a2 f9 25 26 fd ee dd   ..i....V...%&...
0140  e0 f8 e3 e3 e0 b1 60 66 49 3d ea 17 a0 3b 85 88   ......`fI=...;..
0150  58 5e b6 ab 89 eb                                 X^....

Frame 9 (102 bytes on wire, 102 bytes captured)
    Arrival Time: Jan  5, 2009 17:01:45.118667000
    [Time delta from previous captured frame: 0.010363000 seconds]
    [Time delta from previous displayed frame: 0.010363000 seconds]
    [Time since reference or first frame: 0.058345000 seconds]
    Frame Number: 9
    Frame Length: 102 bytes
    Capture Length: 102 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:isakmp]
Ethernet II, Src: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
    Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        Address: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.141 (165.227.249.141), Dst: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 88
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xfbc3 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.141 (165.227.249.141)
    Destination: 165.227.249.124 (165.227.249.124)
User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500)
    Source port: 500 (500)
    Destination port: 500 (500)
    Length: 68
    Checksum: 0xeb69 [correct]
        [Good Checksum: True]
        [Bad Checksum: False]
Internet Security Association and Key Management Protocol
    Initiator cookie: 5E5F3B5DAE5F0AC7
    Responder cookie: CBD3E2001EE46DF7
    Next payload: Hash (8)
    Version: 1.0
    Exchange type: Quick Mode (32)
    Flags: 0x01
        .... ...1 = Encrypted
        .... ..0. = No commit
        .... .0.. = No authentication
    Message ID: 0xec79dac4
    Length: 60
    Encrypted payload (32 bytes)

0000  00 0c 29 48 f8 2f 00 10 f3 0e 66 68 08 00 45 00   ..)H./....fh..E.
0010  00 58 00 00 40 00 40 11 fb c3 a5 e3 f9 8d a5 e3   .X..@.@.........
0020  f9 7c 01 f4 01 f4 00 44 eb 69 5e 5f 3b 5d ae 5f   .|.....D.i^_;]._
0030  0a c7 cb d3 e2 00 1e e4 6d f7 08 10 20 01 ec 79   ........m... ..y
0040  da c4 00 00 00 3c 62 c7 30 b2 e2 c1 14 27 cd 6d   .....<b.0....'.m
0050  ce 3d f0 a4 79 32 8b 46 f3 a0 40 32 9d fb 16 f4   .=..y2.F..@2....
0060  ff fd 47 27 09 0f                                 ..G'..

Frame 10 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Jan  5, 2009 17:01:46.724144000
    [Time delta from previous captured frame: 1.605477000 seconds]
    [Time delta from previous displayed frame: 1.605477000 seconds]
    [Time since reference or first frame: 1.663822000 seconds]
    Frame Number: 10
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
    Destination: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        Address: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.141 (165.227.249.141)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0015 (21)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 240
    Protocol: ESP (0x32)
    Header checksum: 0x8b6d [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.141 (165.227.249.141)
Encapsulating Security Payload
    ESP SPI: 0x8f709816
    ESP Sequence: 1

0000  00 10 f3 0e 66 68 00 0c 29 48 f8 2f 08 00 45 00   ....fh..)H./..E.
0010  00 78 00 15 00 00 f0 32 8b 6d a5 e3 f9 7c a5 e3   .x.....2.m...|..
0020  f9 8d 8f 70 98 16 00 00 00 01 3b 9c 71 63 40 ff   ...p......;.qc@.
0030  64 9b 77 a5 3d 75 18 c8 5c 7c 8d cb 7e 6f 30 48   d.w.=u..\|..~o0H
0040  eb b7 1d a0 06 4f 34 8a 2f 49 04 bf 8d ef 3d 70   .....O4./I....=p
0050  12 58 b5 b6 3c d6 ff 39 03 35 66 de 36 a7 4c 65   .X..<..9.5f.6.Le
0060  f8 2b 37 12 a4 66 54 bc 6a 98 6c 9e 79 67 d1 d5   .+7..fT.j.l.yg..
0070  c9 24 43 94 fd 65 8a be 1d 2e 58 f7 13 06 c4 82   .$C..e....X.....
0080  73 21 56 22 7f fa                                 s!V"..

Frame 11 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Jan  5, 2009 17:01:46.725606000
    [Time delta from previous captured frame: 0.001462000 seconds]
    [Time delta from previous displayed frame: 0.001462000 seconds]
    [Time since reference or first frame: 1.665284000 seconds]
    Frame Number: 11
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
    Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        Address: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.141 (165.227.249.141), Dst: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x4acc (19148)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xf0b6 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.141 (165.227.249.141)
    Destination: 165.227.249.124 (165.227.249.124)
Encapsulating Security Payload
    ESP SPI: 0x57c55c34
    ESP Sequence: 1

0000  00 0c 29 48 f8 2f 00 10 f3 0e 66 68 08 00 45 00   ..)H./....fh..E.
0010  00 78 4a cc 00 00 40 32 f0 b6 a5 e3 f9 8d a5 e3   .xJ...@2........
0020  f9 7c 57 c5 5c 34 00 00 00 01 ff 77 24 b9 93 2f   .|W.\4.....w$../
0030  63 d8 70 7d 92 d6 ed 61 c5 9e 99 d8 d8 d9 e9 b4   c.p}...a........
0040  90 44 0b 36 87 ec 05 b8 cc aa cc de 94 7b 05 5d   .D.6.........{.]
0050  3f 66 15 71 3c 57 a8 e9 9d 66 18 79 f4 d4 0b 1a   ?f.q<W...f.y....
0060  35 60 3a ff 71 c9 8e 96 ae bd a9 4d 45 8f 88 a4   5`:.q......ME...
0070  2b 68 7a 05 d8 a0 ac 66 39 61 88 7b 90 73 80 31   +hz....f9a.{.s.1
0080  e6 ba f2 f2 27 36                                 ....'6

Frame 12 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Jan  5, 2009 17:01:47.748108000
    [Time delta from previous captured frame: 1.022502000 seconds]
    [Time delta from previous displayed frame: 1.022502000 seconds]
    [Time since reference or first frame: 2.687786000 seconds]
    Frame Number: 12
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f), Dst: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
    Destination: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        Address: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.124 (165.227.249.124), Dst: 165.227.249.141 (165.227.249.141)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x0016 (22)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 240
    Protocol: ESP (0x32)
    Header checksum: 0x8b6c [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.124 (165.227.249.124)
    Destination: 165.227.249.141 (165.227.249.141)
Encapsulating Security Payload
    ESP SPI: 0x8f709816
    ESP Sequence: 2

0000  00 10 f3 0e 66 68 00 0c 29 48 f8 2f 08 00 45 00   ....fh..)H./..E.
0010  00 78 00 16 00 00 f0 32 8b 6c a5 e3 f9 7c a5 e3   .x.....2.l...|..
0020  f9 8d 8f 70 98 16 00 00 00 02 70 ef 99 fc 47 0d   ...p......p...G.
0030  0e 14 96 e9 5f 21 4e 33 ba b7 e7 94 7f bb 54 0c   ...._!N3......T.
0040  05 37 62 e4 24 d8 16 69 4b 40 f3 25 f5 15 eb 05   .7b.$..iK@.%....
0050  1c 0d cc 13 01 28 3a d4 4c 04 98 a8 e2 9e f3 ae   .....(:.L.......
0060  59 2d 19 f5 f1 cc ad 50 db f9 ca 81 78 c5 db 21   Y-.....P....x..!
0070  ef b5 b2 ca df 6f ce a1 ed 81 1d df 36 58 78 cd   .....o......6Xx.
0080  e8 7c 03 ee 99 8d                                 .|....

Frame 13 (134 bytes on wire, 134 bytes captured)
    Arrival Time: Jan  5, 2009 17:01:47.750054000
    [Time delta from previous captured frame: 0.001946000 seconds]
    [Time delta from previous displayed frame: 0.001946000 seconds]
    [Time since reference or first frame: 2.689732000 seconds]
    Frame Number: 13
    Frame Length: 134 bytes
    Capture Length: 134 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:esp]
Ethernet II, Src: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68), Dst: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
    Destination: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        Address: 00:0c:29:48:f8:2f (00:0c:29:48:f8:2f)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        Address: 00:10:f3:0e:66:68 (00:10:f3:0e:66:68)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 165.227.249.141 (165.227.249.141), Dst: 165.227.249.124 (165.227.249.124)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 120
    Identification: 0x4acd (19149)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: ESP (0x32)
    Header checksum: 0xf0b5 [correct]
        [Good: True]
        [Bad : False]
    Source: 165.227.249.141 (165.227.249.141)
    Destination: 165.227.249.124 (165.227.249.124)
Encapsulating Security Payload
    ESP SPI: 0x57c55c34
    ESP Sequence: 2

0000  00 0c 29 48 f8 2f 00 10 f3 0e 66 68 08 00 45 00   ..)H./....fh..E.
0010  00 78 4a cd 00 00 40 32 f0 b5 a5 e3 f9 8d a5 e3   .xJ...@2........
0020  f9 7c 57 c5 5c 34 00 00 00 02 d2 05 9e 5b 8e 9f   .|W.\4.......[..
0030  04 e8 b2 39 7f f2 56 0c 9c d9 ff 1d cc ef e2 a3   ...9..V.........
0040  4c 61 df 91 e8 71 f0 9c d3 52 fc 2f 93 b1 95 cc   La...q...R./....
0050  7e 65 ff 74 58 0f 92 c1 20 46 d4 23 fd 6c b3 1b   ~e.tX... F.#.l..
0060  2f d3 82 ca db 4a 98 e0 58 85 39 4a 6b 82 56 76   /....J..X.9Jk.Vv
0070  fa 2d 63 8b 15 1d a5 03 af 58 72 7f 0c 6e a6 b5   .-c......Xr..n..
0080  a1 62 ed 63 78 a6                                 .b.cx.