Frame 1 (270 bytes on wire, 270 bytes captured) Arrival Time: Nov 24, 2004 16:00:43.611842000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 270 bytes Capture Length: 270 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x4406ad55 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x005f (95) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3abe (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.144 (165.227.249.144) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0xf652 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x76115D8F7D078252 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 05 30 01 80 af 00 0c 29 e6 ad b9 08 00 45 00 ..0.....).....E. 0010 00 fc 00 5f 00 00 40 11 3a be a5 e3 f9 7c a5 e3 ..._..@.:....|.. 0020 f9 90 01 f4 01 f4 00 e8 f6 52 76 11 5d 8f 7d 07 .........Rv.].}. 0030 82 52 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .R.............. 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b .....N.$...GYL(K 0090 21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e !;....'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 44 06 ad 55 .o,....R.VD..U Frame 2 (270 bytes on wire, 270 bytes captured) Arrival Time: Nov 24, 2004 16:00:44.132649000 Time delta from previous packet: 0.520807000 seconds Time since reference or first frame: 0.520807000 seconds Frame Number: 2 Packet Length: 270 bytes Capture Length: 270 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xd6340b98 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 252 Identification: 0x0060 (96) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3abd (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.144 (165.227.249.144) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 232 Checksum: 0xf652 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x76115D8F7D078252 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 224 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: unknown vendor ID: 0x8F9CC94E01248ECDF147594C284B213B Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-01 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-stenberg-ipsec-nat-traversal-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: Vendor ID (13) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-nat-t-ike-03 0000 00 05 30 01 80 af 00 0c 29 e6 ad b9 08 00 45 00 ..0.....).....E. 0010 00 fc 00 60 00 00 40 11 3a bd a5 e3 f9 7c a5 e3 ...`..@.:....|.. 0020 f9 90 01 f4 01 f4 00 e8 f6 52 76 11 5d 8f 7d 07 .........Rv.].}. 0030 82 52 00 00 00 00 00 00 00 00 01 10 02 00 00 00 .R.............. 0040 00 00 00 00 00 e0 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 0d 00 ............p... 0080 00 14 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b .....N.$...GYL(K 0090 21 3b 0d 00 00 14 27 ba b5 dc 01 ea 07 60 ea 4e !;....'......`.N 00a0 31 90 ac 27 c0 d0 0d 00 00 14 61 05 c4 22 e7 68 1..'......a..".h 00b0 47 e4 3f 96 84 80 12 92 ae cd 0d 00 00 14 44 85 G.?...........D. 00c0 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc 0d 00 .-.......F.y.... 00d0 00 14 cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 ...`FC5.!.|...h. 00e0 a4 48 0d 00 00 14 90 cb 80 91 3e bb 69 6e 08 63 .H........>.in.c 00f0 81 b5 ec 42 7b 1f 00 00 00 14 7d 94 19 a6 53 10 ...B{.....}...S. 0100 ca 6f 2c 17 9d 92 15 52 9d 56 d6 34 0b 98 .o,....R.V.4.. Frame 3 (130 bytes on wire, 130 bytes captured) Arrival Time: Nov 24, 2004 16:00:44.133350000 Time delta from previous packet: 0.000701000 seconds Time since reference or first frame: 0.521508000 seconds Frame Number: 3 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0x9f6c04c2 (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ba9 (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 92 Checksum: 0x8472 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x76115D8F7D078252 Responder cookie: 0xED848707A89752B7 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 84 Security Association payload Next payload: NONE (0) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 0 Next payload: NONE (0) Length: 44 Proposal number: 0 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 0 Next payload: NONE (0) Length: 36 Transform number: 0 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): AES-CBC (7) Key-Length (14): Key-Length (128) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) 0000 00 0c 29 e6 ad b9 00 05 30 01 80 af 08 00 45 00 ..).....0.....E. 0010 00 70 00 00 00 00 40 11 3b a9 a5 e3 f9 90 a5 e3 .p....@.;....... 0020 f9 7c 01 f4 01 f4 00 5c 84 72 76 11 5d 8f 7d 07 .|.....\.rv.].}. 0030 82 52 ed 84 87 07 a8 97 52 b7 01 10 02 00 00 00 .R......R....... 0040 00 00 00 00 00 54 00 00 00 38 00 00 00 01 00 00 .....T...8...... 0050 00 01 00 00 00 2c 00 01 00 01 00 00 00 24 00 01 .....,.......$.. 0060 00 00 80 01 00 07 80 0e 00 80 80 02 00 02 80 03 ................ 0070 00 01 80 04 00 02 80 0b 00 01 80 0c 70 80 9f 6c ............p..l 0080 04 c2 .. Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Nov 24, 2004 16:00:44.143718000 Time delta from previous packet: 0.010368000 seconds Time since reference or first frame: 0.531876000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x57e2a203 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0061 (97) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ae8 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.144 (165.227.249.144) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x20e6 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x76115D8F7D078252 Responder cookie: 0xED848707A89752B7 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 05 30 01 80 af 00 0c 29 e6 ad b9 08 00 45 00 ..0.....).....E. 0010 00 d0 00 61 00 00 40 11 3a e8 a5 e3 f9 7c a5 e3 ...a..@.:....|.. 0020 f9 90 01 f4 01 f4 00 bc 20 e6 76 11 5d 8f 7d 07 ........ .v.].}. 0030 82 52 ed 84 87 07 a8 97 52 b7 04 10 02 00 00 00 .R......R....... 0040 00 00 00 00 00 b4 0a 00 00 84 46 67 ff 40 0b c7 ..........Fg.@.. 0050 93 9b d6 52 dc ee 5f 5c 7f f1 40 96 46 40 69 dd ...R.._\..@.F@i. 0060 45 28 aa 41 bc 54 94 8a 8f 10 eb b9 c7 88 1f bd E(.A.T.......... 0070 0b 88 ec 32 02 07 2c 8a ce fa b9 f2 16 72 43 b7 ...2..,......rC. 0080 9c 39 a7 42 c8 da 8d 82 b5 8b 72 22 17 c5 6e 16 .9.B......r"..n. 0090 70 67 45 18 30 94 67 ee 37 4c a7 50 31 63 53 03 pgE.0.g.7L.P1cS. 00a0 63 c2 86 c7 7e 82 a6 da 7f b5 e9 10 51 ac fb 2c c...~.......Q.., 00b0 1d 49 f3 39 77 e6 95 77 91 c0 fa 44 7e cb 90 51 .I.9w..w...D~..Q 00c0 ad 07 1a 89 4e d0 80 c4 fb 9a 00 00 00 14 11 d6 ....N........... 00d0 b2 5b 90 b3 08 f7 53 35 b6 a0 30 35 90 fa 57 e2 .[....S5..05..W. 00e0 a2 03 .. Frame 5 (226 bytes on wire, 226 bytes captured) Arrival Time: Nov 24, 2004 16:00:44.166574000 Time delta from previous packet: 0.022856000 seconds Time since reference or first frame: 0.554732000 seconds Frame Number: 5 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0x3b911949 (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b49 (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x5b6d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x76115D8F7D078252 Responder cookie: 0xED848707A89752B7 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 e6 ad b9 00 05 30 01 80 af 08 00 45 00 ..).....0.....E. 0010 00 d0 00 00 00 00 40 11 3b 49 a5 e3 f9 90 a5 e3 ......@.;I...... 0020 f9 7c 01 f4 01 f4 00 bc 5b 6d 76 11 5d 8f 7d 07 .|......[mv.].}. 0030 82 52 ed 84 87 07 a8 97 52 b7 04 10 02 00 00 00 .R......R....... 0040 00 00 00 00 00 b4 0a 00 00 84 44 62 c7 64 2c 23 ..........Db.d,# 0050 da 9e 3c 25 1d 43 f4 7b 31 ff 25 fe bd 02 8f a5 ..<%.C.{1.%..... 0060 a3 a8 62 e2 2c 1c 1d fd 6a 67 93 46 cc 70 c3 19 ..b.,...jg.F.p.. 0070 53 04 58 21 ad 08 fe c2 7c 23 d2 4d 93 1e be 19 S.X!....|#.M.... 0080 0a c9 76 be 13 a7 b9 da 42 4c 99 c4 c9 9b e1 25 ..v.....BL.....% 0090 55 6f fa d8 e4 b2 28 e9 9a eb c8 1c 61 11 65 90 Uo....(.....a.e. 00a0 83 26 d3 2c 20 44 ee a4 36 dc 77 de f3 f2 b3 8f .&., D..6.w..... 00b0 73 08 06 23 be 36 08 ae 6f 2e 70 ba b3 58 99 64 s..#.6..o.p..X.d 00c0 78 36 83 ee 63 bc 0f 28 f5 cd 00 00 00 14 d4 dd x6..c..(........ 00d0 71 52 d1 7a 62 03 7d 6f f5 bc f3 14 68 2d 3b 91 qR.zb.}o....h-;. 00e0 19 49 .I Frame 6 (122 bytes on wire, 122 bytes captured) Arrival Time: Nov 24, 2004 16:00:44.173724000 Time delta from previous packet: 0.007150000 seconds Time since reference or first frame: 0.561882000 seconds Frame Number: 6 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xee900748 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0062 (98) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b4f (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.144 (165.227.249.144) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0x415d (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x76115D8F7D078252 Responder cookie: 0xED848707A89752B7 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 05 30 01 80 af 00 0c 29 e6 ad b9 08 00 45 00 ..0.....).....E. 0010 00 68 00 62 00 00 40 11 3b 4f a5 e3 f9 7c a5 e3 .h.b..@.;O...|.. 0020 f9 90 01 f4 01 f4 00 54 41 5d 76 11 5d 8f 7d 07 .......TA]v.].}. 0030 82 52 ed 84 87 07 a8 97 52 b7 05 10 02 01 00 00 .R......R....... 0040 00 00 00 00 00 4c cc 65 0e 83 b6 9a 5d e4 18 00 .....L.e....]... 0050 49 e7 c4 44 c3 93 de f1 46 7f 7f d3 d6 ae 1f 20 I..D....F...... 0060 86 f7 f2 65 6c 01 7a 3e 0d e6 d7 0c 5a 58 7d d5 ...el.z>....ZX}. 0070 88 4c f6 1c 21 96 ee 90 07 48 .L..!....H Frame 7 (122 bytes on wire, 122 bytes captured) Arrival Time: Nov 24, 2004 16:00:44.197873000 Time delta from previous packet: 0.024149000 seconds Time since reference or first frame: 0.586031000 seconds Frame Number: 7 Packet Length: 122 bytes Capture Length: 122 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0x4dfaefbb (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 104 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3bb1 (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 84 Checksum: 0xe13a (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x76115D8F7D078252 Responder cookie: 0xED848707A89752B7 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 76 Encrypted payload (48 bytes) 0000 00 0c 29 e6 ad b9 00 05 30 01 80 af 08 00 45 00 ..).....0.....E. 0010 00 68 00 00 00 00 40 11 3b b1 a5 e3 f9 90 a5 e3 .h....@.;....... 0020 f9 7c 01 f4 01 f4 00 54 e1 3a 76 11 5d 8f 7d 07 .|.....T.:v.].}. 0030 82 52 ed 84 87 07 a8 97 52 b7 05 10 02 01 00 00 .R......R....... 0040 00 00 00 00 00 4c 31 aa cd e1 94 b9 47 42 5d 12 .....L1.....GB]. 0050 46 75 8c 32 ba 34 e3 30 9d 9b 7b 70 de 2b 13 65 Fu.2.4.0..{p.+.e 0060 5d ce 5f 95 37 31 64 b5 b0 30 b7 2e b3 25 ef 6e ]._.71d..0...%.n 0070 46 cc c7 78 6c 53 4d fa ef bb F..xlSM... Frame 8 (138 bytes on wire, 138 bytes captured) Arrival Time: Nov 24, 2004 16:00:44.199068000 Time delta from previous packet: 0.001195000 seconds Time since reference or first frame: 0.587226000 seconds Frame Number: 8 Packet Length: 138 bytes Capture Length: 138 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0xf8d4c7aa (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 120 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ba1 (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 100 Checksum: 0xae85 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x76115D8F7D078252 Responder cookie: 0xED848707A89752B7 Next payload: Hash (8) Version: 1.0 Exchange type: Informational (5) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x436B1546 Length: 92 Encrypted payload (64 bytes) 0000 00 0c 29 e6 ad b9 00 05 30 01 80 af 08 00 45 00 ..).....0.....E. 0010 00 78 00 00 00 00 40 11 3b a1 a5 e3 f9 90 a5 e3 .x....@.;....... 0020 f9 7c 01 f4 01 f4 00 64 ae 85 76 11 5d 8f 7d 07 .|.....d..v.].}. 0030 82 52 ed 84 87 07 a8 97 52 b7 08 10 05 01 43 6b .R......R.....Ck 0040 15 46 00 00 00 5c e1 51 c0 02 dc e1 61 f9 d5 31 .F...\.Q....a..1 0050 92 0c 87 95 68 ed 00 6d 44 4e ad 07 5b 88 0e d8 ....h..mDN..[... 0060 91 98 08 c8 3d 4b d0 a3 cf 54 7f 52 ea 2e 12 c2 ....=K...T.R.... 0070 7b a0 2d 03 59 89 65 eb 77 b9 7b 05 97 a7 56 b8 {.-.Y.e.w.{...V. 0080 82 f1 58 bc b8 0d f8 d4 c7 aa ..X....... Frame 9 (346 bytes on wire, 346 bytes captured) Arrival Time: Nov 24, 2004 16:00:44.207436000 Time delta from previous packet: 0.008368000 seconds Time since reference or first frame: 0.595594000 seconds Frame Number: 9 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x7434d925 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0063 (99) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3a6e (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.144 (165.227.249.144) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x6d8c (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x76115D8F7D078252 Responder cookie: 0xED848707A89752B7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xFF4AB553 Length: 300 Encrypted payload (272 bytes) 0000 00 05 30 01 80 af 00 0c 29 e6 ad b9 08 00 45 00 ..0.....).....E. 0010 01 48 00 63 00 00 40 11 3a 6e a5 e3 f9 7c a5 e3 .H.c..@.:n...|.. 0020 f9 90 01 f4 01 f4 01 34 6d 8c 76 11 5d 8f 7d 07 .......4m.v.].}. 0030 82 52 ed 84 87 07 a8 97 52 b7 08 10 20 01 ff 4a .R......R... ..J 0040 b5 53 00 00 01 2c 76 27 9c ee ca 63 41 6b 8e e6 .S...,v'...cAk.. 0050 50 06 54 e1 f1 46 96 74 92 6a 19 c2 0a 28 dc 4b P.T..F.t.j...(.K 0060 c2 70 cd 44 95 da e7 78 d5 92 d5 7e b7 99 58 77 .p.D...x...~..Xw 0070 00 e5 45 e9 8b a5 3b 30 d9 97 24 b8 a5 86 0e d3 ..E...;0..$..... 0080 b4 ba 7f 17 9f 3b 28 1e 5c 00 f6 46 ea f1 bb 75 .....;(.\..F...u 0090 77 cd 38 97 b8 dc b4 21 6f ce a8 69 9a fb 35 66 w.8....!o..i..5f 00a0 99 d5 4f 7b 58 23 02 93 cc 4b ed 9f f6 6f af ad ..O{X#...K...o.. 00b0 64 bd 65 50 e3 34 35 4b 04 cf f1 e4 08 35 f7 e4 d.eP.45K.....5.. 00c0 d4 cb c9 14 db 05 42 17 60 ae ce a4 8a eb f6 65 ......B.`......e 00d0 34 79 6c fc 90 1d 0e 88 47 17 24 13 42 ad c4 3c 4yl.....G.$.B..< 00e0 70 69 db 3e fa b1 20 9f 6f 16 f4 a0 c0 d2 53 91 pi.>.. .o.....S. 00f0 ad e6 f0 77 82 3e f8 ba e2 7f d7 74 d6 c8 b5 81 ...w.>.....t.... 0100 3e 45 62 01 28 e1 11 04 32 50 92 f6 78 db a1 33 >Eb.(...2P..x..3 0110 61 25 e3 bc f4 83 3f b8 c1 8a b4 98 b7 8b 4d 8e a%....?.......M. 0120 7c d6 a8 c5 42 0c de e8 48 39 bb 7f d6 70 b0 3d |...B...H9...p.= 0130 b9 fb c0 f7 99 47 a1 76 df 18 4e d5 c4 bc d4 f1 .....G.v..N..... 0140 50 df 30 22 06 1d ec c6 ae 2b df 50 93 64 90 4e P.0".....+.P.d.N 0150 b0 2d 76 eb 1a ec 74 34 d9 25 .-v...t4.% Frame 10 (346 bytes on wire, 346 bytes captured) Arrival Time: Nov 24, 2004 16:00:44.279904000 Time delta from previous packet: 0.072468000 seconds Time since reference or first frame: 0.668062000 seconds Frame Number: 10 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0x852972f0 (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3ad1 (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.124 (165.227.249.124) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x8743 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x76115D8F7D078252 Responder cookie: 0xED848707A89752B7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xFF4AB553 Length: 300 Encrypted payload (272 bytes) 0000 00 0c 29 e6 ad b9 00 05 30 01 80 af 08 00 45 00 ..).....0.....E. 0010 01 48 00 00 00 00 40 11 3a d1 a5 e3 f9 90 a5 e3 .H....@.:....... 0020 f9 7c 01 f4 01 f4 01 34 87 43 76 11 5d 8f 7d 07 .|.....4.Cv.].}. 0030 82 52 ed 84 87 07 a8 97 52 b7 08 10 20 01 ff 4a .R......R... ..J 0040 b5 53 00 00 01 2c 68 59 63 ce 67 94 31 49 a1 b9 .S...,hYc.g.1I.. 0050 1a 6b 6c 8b 83 ac b3 14 8c a0 fd da c5 09 c5 67 .kl............g 0060 23 24 6e 4e df 05 2f 78 3a a6 a4 30 27 5f 23 ba #$nN../x:..0'_#. 0070 17 6a cc d9 32 5a e2 62 ba c4 8a ed 6f 00 4f d7 .j..2Z.b....o.O. 0080 60 ae 2c 68 1c aa 2c 27 8b 78 25 cc 26 0f d1 9b `.,h..,'.x%.&... 0090 1f 7d e7 10 00 cb f8 5c c3 6d 94 d1 68 68 08 71 .}.....\.m..hh.q 00a0 f9 8a e0 16 d6 fd 6b 03 91 32 3b 32 1a fa 96 70 ......k..2;2...p 00b0 f6 5b 06 ed 18 af 3e 69 1c 61 d2 bc c9 87 69 9c .[....>i.a....i. 00c0 70 ed fc 1c fe 92 13 56 a5 a8 98 bc 4d 49 81 7c p......V....MI.| 00d0 f2 be 37 3f 98 3c cb 7c 76 0d ec ff 5e f5 71 1f ..7?.<.|v...^.q. 00e0 1f a3 ef 44 44 bc 26 a2 91 cb fd 1c 6f 9e ce 01 ...DD.&.....o... 00f0 22 fc e3 28 03 02 85 3c d4 d7 55 ad f2 bc 38 a3 "..(...<..U...8. 0100 30 b6 5f 7a 54 cc 39 d4 c8 a0 26 76 ef 12 3e 4f 0._zT.9...&v..>O 0110 6e dc 7c 3e 7b 8d 14 17 05 fa e5 9b bc dd 35 24 n.|>{.........5$ 0120 56 0c 07 22 6b 41 db 42 28 00 a6 e2 f7 73 0a 16 V.."kA.B(....s.. 0130 4b 2a 74 6b f6 e5 2c 54 ae 78 d7 37 7e f9 00 24 K*tk..,T.x.7~..$ 0140 8d a7 58 01 57 4b 7f 9e 88 f9 3e 44 23 c8 70 64 ..X.WK....>D#.pd 0150 43 59 77 5a e0 27 85 29 72 f0 CYwZ.'.)r. Frame 11 (106 bytes on wire, 106 bytes captured) Arrival Time: Nov 24, 2004 16:00:44.288579000 Time delta from previous packet: 0.008675000 seconds Time since reference or first frame: 0.676737000 seconds Frame Number: 11 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x5bb40a69 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0064 (100) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3b5d (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.144 (165.227.249.144) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x03ce (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0x76115D8F7D078252 Responder cookie: 0xED848707A89752B7 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0xFF4AB553 Length: 60 Encrypted payload (32 bytes) 0000 00 05 30 01 80 af 00 0c 29 e6 ad b9 08 00 45 00 ..0.....).....E. 0010 00 58 00 64 00 00 40 11 3b 5d a5 e3 f9 7c a5 e3 .X.d..@.;]...|.. 0020 f9 90 01 f4 01 f4 00 44 03 ce 76 11 5d 8f 7d 07 .......D..v.].}. 0030 82 52 ed 84 87 07 a8 97 52 b7 08 10 20 01 ff 4a .R......R... ..J 0040 b5 53 00 00 00 3c f2 fd 7b ba 3e d4 90 9b a6 fc .S...<..{.>..... 0050 8b 9d 7a 9d c4 b1 8c e5 ca 1f 8b e0 bc 55 0b e5 ..z..........U.. 0060 78 6f f9 ce cb a8 5b b4 0a 69 xo....[..i Frame 12 (170 bytes on wire, 170 bytes captured) Arrival Time: Nov 24, 2004 16:00:44.571976000 Time delta from previous packet: 0.283397000 seconds Time since reference or first frame: 0.960134000 seconds Frame Number: 12 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x2721d5cf (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0026 (38) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b39 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.144 (165.227.249.144) Encapsulating Security Payload SPI: 0x0826b20a Sequence: 2 Data (124 bytes) 0000 00 05 30 01 80 af 00 0c 29 e6 ad b9 08 00 45 00 ..0.....).....E. 0010 00 98 00 26 00 00 f0 32 8b 39 a5 e3 f9 7c a5 e3 ...&...2.9...|.. 0020 f9 90 08 26 b2 0a 00 00 00 02 26 0a 7e db 3c 96 ...&......&.~.<. 0030 d8 41 f1 01 71 a3 76 51 46 b6 61 4b 95 10 63 a5 .A..q.vQF.aK..c. 0040 db 09 96 22 c8 23 03 9b 9e 32 5b b0 e3 dc 1f cd ...".#...2[..... 0050 d3 7c da b2 e9 4d 2c 80 d2 b1 cc 79 c6 7a de 31 .|...M,....y.z.1 0060 46 27 20 5b d4 71 03 36 03 bb 54 6e 96 9c 7a 1c F' [.q.6..Tn..z. 0070 b5 82 17 98 d5 9e 8c 8c 95 45 bf cf 5c fe a1 23 .........E..\..# 0080 dd 4d e1 ee da e3 3c db ed d5 e3 a2 f7 8e 3c e0 .M....<.......<. 0090 dd 75 1d 23 ce 77 c5 24 5c f8 66 18 ca d4 90 3a .u.#.w.$\.f....: 00a0 74 6b 3d 92 e5 c7 27 21 d5 cf tk=...'!.. Frame 13 (170 bytes on wire, 170 bytes captured) Arrival Time: Nov 24, 2004 16:00:44.574433000 Time delta from previous packet: 0.002457000 seconds Time since reference or first frame: 0.962591000 seconds Frame Number: 13 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0xb50fcee0 (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0027 (39) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b38 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.144 (165.227.249.144) Encapsulating Security Payload SPI: 0x0826b20a Sequence: 3 Data (124 bytes) 0000 00 05 30 01 80 af 00 0c 29 e6 ad b9 08 00 45 00 ..0.....).....E. 0010 00 98 00 27 00 00 f0 32 8b 38 a5 e3 f9 7c a5 e3 ...'...2.8...|.. 0020 f9 90 08 26 b2 0a 00 00 00 03 8f 05 91 04 ce d2 ...&............ 0030 7e a6 88 a8 76 4d 30 47 44 13 ac d0 59 27 d3 fb ~...vM0GD...Y'.. 0040 67 93 5c d6 c4 5f 6b 03 4a 77 78 c8 2f c1 a4 d9 g.\.._k.Jwx./... 0050 a7 50 38 b2 c2 83 1e 89 a0 db c1 2c 95 b4 f7 9b .P8........,.... 0060 19 09 4f b3 5e 41 02 6c 8a 9c 5d 60 79 fa 52 6b ..O.^A.l..]`y.Rk 0070 50 ae 0f 58 b6 b9 23 8a a0 4d 34 1e 08 d0 b5 89 P..X..#..M4..... 0080 3e f1 ce 98 5c 5d ec 2f e5 56 28 fd 9d 64 41 59 >...\]./.V(..dAY 0090 5a 89 12 d5 02 9f be 44 30 d1 03 74 e0 2f 04 9c Z......D0..t./.. 00a0 77 7d d4 03 c1 5a b5 0f ce e0 w}...Z.... Frame 14 (170 bytes on wire, 170 bytes captured) Arrival Time: Nov 24, 2004 16:00:45.609476000 Time delta from previous packet: 1.035043000 seconds Time since reference or first frame: 1.997634000 seconds Frame Number: 14 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x709d767f (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0028 (40) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b37 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.144 (165.227.249.144) Encapsulating Security Payload SPI: 0x0826b20a Sequence: 4 Data (124 bytes) 0000 00 05 30 01 80 af 00 0c 29 e6 ad b9 08 00 45 00 ..0.....).....E. 0010 00 98 00 28 00 00 f0 32 8b 37 a5 e3 f9 7c a5 e3 ...(...2.7...|.. 0020 f9 90 08 26 b2 0a 00 00 00 04 56 8f 78 79 e0 9c ...&......V.xy.. 0030 b7 c0 74 63 20 26 fd ed 84 1e 2d 4a 5b 3b c6 85 ..tc &....-J[;.. 0040 d7 80 e4 34 0a f2 52 80 b3 2e 8b d0 9a 69 38 07 ...4..R......i8. 0050 85 08 e6 c1 1c 78 3e 02 48 f1 38 ce 68 f0 3a e1 .....x>.H.8.h.:. 0060 25 96 84 2e 8c e1 e1 5d 1f 2d c7 46 16 62 58 49 %......].-.F.bXI 0070 d7 24 8e a5 cc 2a b3 81 33 79 a6 6f 6f f3 81 a1 .$...*..3y.oo... 0080 9b 43 d5 99 c3 09 c8 21 b3 48 12 f3 7b 75 40 80 .C.....!.H..{u@. 0090 6c 81 13 f4 ff 22 ca 2d e3 b6 a5 7b 62 32 b4 77 l....".-...{b2.w 00a0 14 80 44 93 43 02 70 9d 76 7f ..D.C.p.v. Frame 15 (170 bytes on wire, 170 bytes captured) Arrival Time: Nov 24, 2004 16:00:45.609588000 Time delta from previous packet: 0.000112000 seconds Time since reference or first frame: 1.997746000 seconds Frame Number: 15 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0xd0710826 (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0016 (22) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3b4a (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xbc45fe62 Sequence: 2 Data (124 bytes) 0000 00 0c 29 e6 ad b9 00 05 30 01 80 af 08 00 45 00 ..).....0.....E. 0010 00 98 00 16 00 00 40 32 3b 4a a5 e3 f9 90 a5 e3 ......@2;J...... 0020 f9 7c bc 45 fe 62 00 00 00 02 ac 2d 39 81 54 2c .|.E.b.....-9.T, 0030 30 44 b0 b4 e6 02 50 b0 c1 12 50 94 cf 32 5a 77 0D....P...P..2Zw 0040 aa 76 b2 c0 71 0f 31 9f 30 ab 24 24 a2 ed c0 19 .v..q.1.0.$$.... 0050 a9 eb 6f e7 d7 e2 ab 6f d5 7b 7e b0 22 f9 a2 c2 ..o....o.{~."... 0060 c0 e2 87 50 03 41 e0 2a d8 62 d2 88 bd 9b f5 c8 ...P.A.*.b...... 0070 58 a0 36 fb da 45 40 4b 2c 34 6e 28 e1 e5 3d ba X.6..E@K,4n(..=. 0080 87 5d 15 b5 ad 3c 0b 01 7b fe 6c bd 3b da 02 f8 .]...<..{.l.;... 0090 b5 f7 7a 8d a8 0f 5f 57 c1 a1 38 64 ae 95 c5 35 ..z..._W..8d...5 00a0 e8 8b c8 41 b9 11 d0 71 08 26 ...A...q.& Frame 16 (170 bytes on wire, 170 bytes captured) Arrival Time: Nov 24, 2004 16:00:46.593568000 Time delta from previous packet: 0.983980000 seconds Time since reference or first frame: 2.981726000 seconds Frame Number: 16 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:0c:29:e6:ad:b9, Dst: 00:05:30:01:80:af Destination: 00:05:30:01:80:af (00:05:30:01:80:af) Source: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Type: IP (0x0800) Frame check sequence: 0x34cce03b (correct) Internet Protocol, Src Addr: 165.227.249.124 (165.227.249.124), Dst Addr: 165.227.249.144 (165.227.249.144) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0029 (41) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 240 Protocol: ESP (0x32) Header checksum: 0x8b36 (correct) Source: 165.227.249.124 (165.227.249.124) Destination: 165.227.249.144 (165.227.249.144) Encapsulating Security Payload SPI: 0x0826b20a Sequence: 5 Data (124 bytes) 0000 00 05 30 01 80 af 00 0c 29 e6 ad b9 08 00 45 00 ..0.....).....E. 0010 00 98 00 29 00 00 f0 32 8b 36 a5 e3 f9 7c a5 e3 ...)...2.6...|.. 0020 f9 90 08 26 b2 0a 00 00 00 05 b5 0f 22 1f 47 e8 ...&........".G. 0030 99 d1 59 df 0d e8 b2 58 48 a3 cc bf d2 89 b6 fe ..Y....XH....... 0040 36 a0 1b 65 95 32 cd 74 4e a8 2c 08 48 81 ed d8 6..e.2.tN.,.H... 0050 f5 35 98 f5 00 07 09 f5 e3 58 01 76 10 c9 27 f7 .5.......X.v..'. 0060 10 b1 16 d7 42 6c d7 00 93 62 10 a6 39 43 1a 35 ....Bl...b..9C.5 0070 2f 69 8a 90 73 0d 6e 32 cd 96 39 3b 54 a9 e2 12 /i..s.n2..9;T... 0080 dc aa bc ef c6 78 dd 3d 26 ac 0b ef 79 4b 8e 6b .....x.=&...yK.k 0090 06 50 9b 0b 4a 1e cb 2b 4b 6b 44 b3 52 36 87 c4 .P..J..+KkD.R6.. 00a0 76 92 fc b2 dd e6 34 cc e0 3b v.....4..; Frame 17 (170 bytes on wire, 170 bytes captured) Arrival Time: Nov 24, 2004 16:00:46.593697000 Time delta from previous packet: 0.000129000 seconds Time since reference or first frame: 2.981855000 seconds Frame Number: 17 Packet Length: 170 bytes Capture Length: 170 bytes Ethernet II, Src: 00:05:30:01:80:af, Dst: 00:0c:29:e6:ad:b9 Destination: 00:0c:29:e6:ad:b9 (00:0c:29:e6:ad:b9) Source: 00:05:30:01:80:af (00:05:30:01:80:af) Type: IP (0x0800) Frame check sequence: 0xf9b92981 (correct) Internet Protocol, Src Addr: 165.227.249.144 (165.227.249.144), Dst Addr: 165.227.249.124 (165.227.249.124) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 152 Identification: 0x0017 (23) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x3b49 (correct) Source: 165.227.249.144 (165.227.249.144) Destination: 165.227.249.124 (165.227.249.124) Encapsulating Security Payload SPI: 0xbc45fe62 Sequence: 3 Data (124 bytes) 0000 00 0c 29 e6 ad b9 00 05 30 01 80 af 08 00 45 00 ..).....0.....E. 0010 00 98 00 17 00 00 40 32 3b 49 a5 e3 f9 90 a5 e3 ......@2;I...... 0020 f9 7c bc 45 fe 62 00 00 00 03 01 5b 52 f9 1e d3 .|.E.b.....[R... 0030 6d 48 05 6d 4b e4 7b 4d b5 20 a6 de 3b 11 d4 4e mH.mK.{M. ..;..N 0040 64 d4 9c 0d ce a4 a3 cc 0b 1d c9 14 5d 6a 92 84 d...........]j.. 0050 06 74 ee 6e 39 ae fd 96 62 b2 b9 a6 15 e7 74 4a .t.n9...b.....tJ 0060 64 48 15 94 51 29 77 88 e2 5a 53 f5 6b bb 0d 4c dH..Q)w..ZS.k..L 0070 6f 3c 42 a7 4a 00 4d ff aa 10 ff fb ab 98 8b 3c o